JP3928006B2 - Customer information management system - Google Patents

Description

  The present invention relates to a technique for searching and managing customer information that can identify a specific customer. In particular, for example, customer information that is distributed and stored in a plurality of clients (such as personal computers) in a company. The present invention relates to a technology that can automatically search and put a server under management.

  In recent years, with an increase in awareness of protection of personal information, it has been desired to reliably prevent inadvertent leakage and leakage of personal information and unauthorized use of personal information. In addition, along with the enforcement of the Personal Information Protection Law, a business operator handling personal information receives a request for disclosure or correction of personal information from each individual while preventing the leakage, leakage or unauthorized use of personal information. It is obliged to disclose and correct personal information.

  Here, the personal information is information that can identify a specific individual by itself or in combination, and includes, for example, a name, date of birth, contact information (address, address, telephone number) and the like. In many cases, customer information stored and handled in various companies corresponds to personal information, and in the future, companies that handle a lot of such customer information will have to fulfill the above obligations as a personal information handling company. .

  In order to fulfill the above obligations, it is indispensable to centralize customer information by introducing a central management system for personal information. In reality, however, customer information is often scattered and distributed in a personal computer of an employee (hereinafter sometimes abbreviated as a PC) or a server of each department in a company. More specifically, individual employees store customer information on their own PCs for their own business reasons, or a central database or a subset of customer information collected independently by each employee varies across multiple PCs. Exist.

  For this reason, in either case of constructing the centralized management system or attempting to fulfill the above obligations in a distributed state, the administrator must first provide customer information that is scattered within the company. It is necessary to identify what kind of customer information is present in the company. It will be carried out with the cooperation of the department.

For example, in Patent Document 1 below, in accordance with the enforcement of the Personal Information Protection Law, a technology for providing a personal information protection service that prevents personal information from being leaked or leaked or being used illegally is “processing of a personal information protection service business. Method and apparatus "have been proposed and disclosed. However, the following Patent Document 1 does not disclose any technique related to the identification of personal information as described above.
JP 2002-183367 A

However, when customer information is identified with human cooperation such as reporting from each employee, it is not only troublesome, but it is difficult to reliably identify all customer information without omission. In particular, as customer information is increasingly distributed, it becomes extremely difficult to identify customer information.
In addition, if there is a leak in identifying customer information, not only the above obligations will not be fulfilled, but the status of the customer information may not be managed, leading to inadvertent leakage or leakage of customer information or unauthorized use of customer information. is there.

Therefore, it is desired to ensure that all customer information distributed in the company is searched and managed.
The present invention was devised in view of such circumstances, and is a collection of customer information that exists in a distributed manner, for example, within a company without obtaining human cooperation and without placing a special load on the person in charge. By ensuring that the body can be searched and managed, it is possible to respond to requests for disclosure and correction of customer information, and inadvertent disclosure and leakage of customer information and unauthorized use of customer information. The purpose is to reliably prevent this.

In order to achieve the above object, the customer information management system of the present invention includes a plurality of clients, are communicably connected to each other via a local area network and the client of the plurality of customer information in the client the plurality of A customer information management server that manages the aggregate, and the customer information management server installs a customer information search program that causes each client to perform self-search for customer information via the local area network, and A collection means for receiving a result of self-search performed by each client via a local area network and storing the result in a database, and each of the plurality of clients from the customer information management server Installed customer information retrieval program By row, a customer information searching means for searching to identify a high data file Potentially customer information file from the data in the storage unit of each client, the customer information searching means via said local area network And a transmission means for transmitting the result of the self-search by the customer information search server. The customer information management server determines that each client information search means is likely to be a customer information file by the customer information search means. It is characterized by further comprising customer information management means for managing the recorded data file and forcibly collecting the data file from the client storing the data file .

In this customer information management system, the customer information search means calculates a determination value indicating the degree to which the data file is a customer information file, as a result of the self search, and the customer information management means determines the result of the self search as a result of the self search. The data file having the determination value of not less than a predetermined value may be forcibly collected from the client storing the data file, and the customer information management means may determine the determination value as a result of the self-search. The notice information or the warning information may be notified to the owner of the data file or the system administrator whose value is less than a predetermined value.

According to the present invention described above, it is determined whether or not the data file in the storage unit is a data file that is likely to be a customer information file, and the data file that is likely to be a customer information file is automatically identified. For example, it is possible to search and manage customer information files that exist in a distributed manner within a company, etc., without obtaining human cooperation and without placing a special burden on the person in charge. Can be put in a possible state. Accordingly, it is possible to reliably respond to customer information disclosure requests and correction requests, and to reliably prevent inadvertent outflow and leakage of customer information and unauthorized use of customer information.

At this time, a data file that is likely to be a customer information file is managed by the customer information management means, and notice / warning information is notified to the owner of the data file or the system administrator, or the data file is forced from the client It is possible to capture and collect data in an automated manner, and more reliably prevent inadvertent outflow / leakage of customer information and unauthorized use of customer information .

Embodiments of the present invention will be described below with reference to the drawings.
[1] Configuration of Customer Information Management System of this Embodiment FIG. 1 is a block diagram showing a functional configuration of a customer information management system as a first embodiment of the present invention. The customer information management system 1 shown in FIG. A plurality of clients (information processing devices with a customer information management function; terminal devices such as personal computers) 10 and these clients 10 are connected to each other via a network (for example, a LAN (Local Area Network)) 30 so as to be able to communicate with each other. The customer information management server 20 that manages the customer information file in the client 10 is configured.

  In the present embodiment, the customer information file (aggregate of customer information) holds a predetermined number or more of records including customer information. As described above, customer information includes a specific customer by a single unit or a combination. Information that can be identified includes, for example, name, date of birth, contact information (address, address, telephone number, e-mail address). In addition to these, customer information (personal information) includes titles, basic resident register numbers, account numbers, credit card numbers, license numbers, passport numbers, and the like.

[1-1] Configuration of Client of this Embodiment FIG. 2 is a block diagram showing the functional configuration of each client 10 of this embodiment. The client 10 shown in FIG. 2 is a CPU (arithmetic processing unit) that executes various processes. ) 10a and a storage unit 10b that can hold a data aggregate (file) of customer information, etc., and a quarantine table 10c provided from the customer information management server 20 and a data aggregate held in the storage unit 10b (Data file) P mark table 10d that holds a P mark (privacy level mark; a level indicating the high possibility of being a customer information file and a level determined by a determination value described later). ing.

Here, the storage unit 10b is a hard disk built in the client 10, or a storage device connected to or external to the client 10, such as a flexible disk, CD-ROM, CD-R, CD-RW, DVD, magnetic disk, In addition to optical disks and magneto-optical disks, this is a storage device that uses recording media such as IC cards, ROM cartridges, and magnetic tapes.
Further, the quarantine table 10c and the P mark table 10d are held in a RAM (Random Access Memory), a hard disk or the like constituting the client 10.

  The CPU 10a functions as a customer information search unit 11, a CPU usage rate monitoring unit 12, an input / output monitoring unit 13, an activation control unit 14, an access monitoring unit 15 and a transmission / reception unit 16, and these functions are performed by the CPU 10a. As will be described later, this is realized by executing a customer information retrieval program installed from the customer information management server 20.

  The customer information search means 11 operates as described later with reference to FIG. 6 by executing a customer information search program installed from the customer information management server 20, and a data file (stored in the storage unit 10b ( It functions as a text extraction engine that converts a target file) into a text file, and also functions as a search engine that specifies and searches for customer information files from data in the storage unit 10b using the quarantine table 10c. That is, the customer information search unit 11 searches for various files (data aggregates) existing in the storage unit 10b of the client 10 in accordance with the condition (quarantine table 10c) instructed from the customer information management server 20, and sets the target file ( A file determined to be a customer information file) is written to a log (local cache database). The P mark determined based on the search result (determination value) obtained by the customer information search means 11 is registered in the P mark table 10d. Details of the function of the customer information search means 11 will be described later.

The CPU usage rate monitoring unit 12 monitors the usage rate of the CPU 10a that executes various processes in the client 10, and the input / output monitoring unit 13 is a data input / output operation (I / O operation) in the storage unit 10b. Is to monitor.
The activation control unit 14 operates as described later with reference to FIGS. 7 and 8 by executing a customer information search program installed from the customer information management server 20, and is monitored by the CPU usage rate monitoring unit 12. When the usage rate of the CPU 10a is less than or equal to a predetermined threshold value, the customer information search unit 11 is activated. On the other hand, when the usage rate exceeds the predetermined threshold value, the operation of the customer information search unit 11 is stopped. The customer information retrieval unit 11 is activated when the monitoring unit 13 detects the occurrence of an input / output operation. In other words, the activation control means 14 basically activates the customer information search means 11 with the lowest threshold value and puts the customer information search means 11 in the idle state (search hold) with the highest usage rate. 11 is operated like a screen saver.

  The access monitoring means 15 monitors the data file (data file to which the P mark is assigned) determined to be the customer information file by the customer information search means 11, and accesses (for example, rename, copy, delete) to the data file. , Data change due to movement, etc.) is written as log information and transmitted to the customer information management server 20 by the transmission / reception means 16.

  The transmission / reception means 16 transmits / receives various information to / from the customer information management server 20 via the network 30 and functions as a transmission means for transmitting the result of self-search by the customer information search means 11 to the customer information search server 20. To do. When the transmission / reception unit 16 functions as the transmission unit, a difference between the search result (link destination information and determination value of the customer information file) and the search result transmitted last time is obtained, and the difference is sent to the customer information management server 20. In addition to sending, the information to be sent is encrypted.

[1-2] Configuration of Customer Information Management Server of this Embodiment FIG. 3 is a block diagram showing the functional configuration of the customer information management server 20 of this embodiment. The customer information management server 20 shown in FIG. CPU 20a, a database (RDB: Relational DataBase) 20b for storing / saving log information and customer information files from each client 10, and various information including log information and customer information stored in the database 20b. The display unit 20c is configured to be displayed.

The CPU 20a functions as the client information collection means 21, the installation means 22, the collection means 23, the management console 24, the customer information management means 25, the display control means 26, and the transmission / reception means 27. This is realized by executing a customer information management server program.
The client information collection unit 21 collects client information (host information) from a plurality of clients 10 connected to be communicable via the network 30 when searching and managing customer information. The client 10 to be managed is recognized.

The installation unit 22 installs a customer information search program that causes each client 10 to perform a self-search of customer information via the network 30.
The collection unit 23 receives and collects the results of self-searches performed by each client 10 via the network 30 and the transmission / reception unit 27 (such as link destination information and determination values of the customer information file), and stores them in the database 20b. Is.

  The management console 24 sets and manages search conditions (such as the quarantine table 10c, a predetermined threshold required for determining a customer information file and a P mark) to be instructed to each client 10. The quarantine table 10c is for designating a character or character string that is a character or character string that appears characteristically in the customer information, and details thereof will be described later with reference to FIG.

  The customer information management means 25 manages the customer information file in each client 10 based on the search result collected by the collection means 23 and stored in the database 20b. The customer information search means 11 of each client 10 uses the customer information search means 11 to manage customer information. A data file (a data file to which a P mark is assigned) determined to be a file is a management target. Specifically, as will be described later, the customer information management means 25 notifies the user (holder) of the data file of the caution information / warning information according to the determination value (or P mark) of each data file. The data file is forcibly captured and collected from the client 10 storing the data file. Further, the customer information management means 25 has a function of searching the customer information file stored in each client 10 or the database 20b with various accuracy, and a function of causing the display control means 26 to display the search result on the display unit 20c. Have.

The display control means 26 controls the display state of the display unit 20c so that various types of information are displayed on the display unit 20c.
The transmission / reception means 27 transmits / receives various information to / from each client 10 via the network 30.

[2] Operation of Customer Information Management System of the Present Embodiment Next, the operation of the customer information management system 1 (client & server) of the present embodiment configured as described above will be described with reference to FIGS. To do.
First, a customer information file search method by the customer information search means 11 (customer information search program) of the present embodiment will be described with reference to FIGS. 4 is a diagram showing an example of the quarantine table 10c of this embodiment, FIG. 5 is a diagram showing a specific example of the title header, and FIG. 6 is an operation of the customer information search means 11 in each client 10 of this embodiment. It is a flowchart for demonstrating.

In the customer information search means 11 of this embodiment, the appearance frequency of an address, a telephone number, an e-mail address, and a name is quantified and the customer information file is specified as follows.
More specifically, in the counting step executed by the customer information search means 11, first, a character or character string included in the data file and a characteristic character preset as a character / character string characteristically appearing in the customer information / Characteristic character strings are collated, and the number of times the characteristic character / characteristic character string appears in the data file is counted. However, in the present embodiment, when collation / recognition using character strings is performed, the load on the CPU 10a becomes extremely large. Therefore, collation / recognition for each character is performed. Accordingly, one character character is set in the quarantine table 10c, as will be described later with reference to FIG. In addition, when the arithmetic processing capability of the CPU 10a is sufficiently high, collation / recognition by a character string may be performed.

  Then, characters extracted from the target file (text file) are collated one by one with the characteristic characters in the quarantine table 10c, and if they match, it is determined that the characteristic characters have appeared, The count value of the characteristic character is incremented by “1”. After counting the number of appearances of characteristic characters in all characters included in the target file in this way, the customer information file is identified based on the count result (determining whether the target file is a customer information file) ).

Here, the characteristic characters preset in the quarantine table 10c will be specifically described.
In general customer information, an address is usually required. Therefore, as shown in FIG. 4, characters that characteristically appear at addresses in Japan are set and registered in the quarantine table 10c as characteristic characters. For example, the address information may include “city”, “road”, “fu”, “prefecture”, “city”, “ward”, “town”, “village”, “county”, etc. In the case of “Tokyo”, the characters “East” and “Kyo” appear in ordinary documents, but in the case of address information, they will appear in combination with “City”. It becomes possible to regard the number of appearances as the number of addresses. Similarly, “prefecture”, “prefecture”, and “road” are considered as address information, and “@” can be used as e-mail address information.

In the quarantine table 10c shown in FIG. 4, the following characteristic characters and points are set.
(1) “East”, “Kyo”, “Metro”, “Large”, “Osaka”, “Fu”, “North”, “Sea”, “Road” are set as address information (characters). The total of the count values of these characteristic characters is counted / calculated as the address point 1.
(2) As presumed address information (characteristics), prefecture names other than address point 1, that is, “mountain”, “form”, “god”, “na”, “river”, “saki”, “tama”, ..., "Fuku", "Oka", "Prefecture", etc. are set, and the total of the count values of these characteristic characters is counted and calculated as address point 2.
(3) “City”, “District”, “Town”, “Village” and “County” are set as address disregard information (characteristic characters), and the total of the count values of these characteristic characters is calculated as address point 3 Is done.

(4) “@” is set as the mail address deemed information (characteristic character), and the count value of “@” is used as the mail address point.
(5) “N” (numeric string with a predetermined number of digits consisting of numerals and hyphens) is set as the telephone number deemed information (characteristic character string), and the counted value is used as the telephone number point. More specifically, the phone number is a specific number string corresponding to the mobile phone area code or area code, such as “090-XXXX-XXXX”, “03-XXXX-XXXX”, “048-XXX-XXXX”. It consists of “090”, “03”, “048” followed by an 8-digit or 7-digit numeric string. When such a numeric string appears, the telephone number point is incremented by “1”. . At this time, the count-up is performed regardless of the presence or absence of a hyphen in the numeric string.

(6) As name disregarding information (characteristic characters), for example, the characters “sa”, “wisteria”, “da”, “middle”, “high”, “bridge”, etc. included in the best 50 surnames in Japan. , “Mountain”, and “field” are set, and the sum of the count values of these characteristic characters is calculated as a name point.
(7) As the quarantine total points, the total value of each point of the items (1) to (6) described above is counted and calculated.
Here, in FIG. 4, a count value indicating the number of appearances of each characteristic character or each point (total value of the number of appearances) is written in “”, and can be counted up to, for example, about 10 million. It has become.

  Moreover, when calculating the appearance rate of each prefecture name based on the counting result (number of appearances) obtained using the quarantine table 10c as described above, handling in the case where duplicate characters exist will be described. For example, if “Tokyo” and “Kyoto Prefecture” are mixed in a text file, “Metropolitan” is duplicated. Therefore, the “Metropolitan” count is the same as the “Tokyo” count. It will be mixed. Since “Fu” in “Kyoto” overlaps with “Fu” in “Osaka”, first calculate the appearance rate of “Osaka” and subtract that appearance rate from the appearance rate of “Fu”. It is possible to predict the appearance rate of “fu”. The appearance rate of “Tokyo” can be obtained by subtracting the appearance rate of “Kyoto Prefecture” predicted in this manner from the appearance rate of “Miyako”. If the prefecture name and city name overlap (for example, Osaka City, Osaka Prefecture), the appearance rate of “Osaka” will double, but based on the Japanese address book published by the Ministry of Posts and Telecommunications. It is possible to estimate the actual appearance rate by calculating the duplication rate for each prefecture name and adjusting the appearance rate based on the calculated duplication rate.

  Furthermore, the handling when there is no state display will be described. In the data file, when the title header as shown in FIG. 5 is used for the prefecture name, or in the address display using the decree-designated city or the postal code, “city”, “road”, “prefecture”, “ The appearance rate of “prefecture” will be extremely reduced. Instead, since the name appearance rate such as the prefecture name becomes high, it is possible to specify that the data file is a customer information file including address information from the name appearance rate.

  In the quarantine table 10c described above, characters / character strings that appear characteristically in addresses, e-mail addresses, telephone numbers, and names are set as feature characters / character strings, but the present invention is not limited to these. Characters / character strings that appear characteristically in the date of birth, title, personal identification information (for example, Basic Resident Register Number, Account Number, Credit Card Number, License Number, Passport Number, etc.) It may be set as a character / characteristic character string.

  Then, in the calculation step executed by the customer information search means 11, a determination value indicating the degree to which the target file is the customer information file is calculated based on the counting result obtained using the quarantine table 10c described above. As the determination value, (a) the value of the quarantine total point (see item (7) above) of the quarantine table 10c may be used as it is, or (b) the larger the appearance rate of feature characters / feature character strings, the larger the value. The determination point may be calculated as the determination value, or (c) the appearance pattern of the characteristic character / characteristic character string in the target file is obtained based on the count result obtained for each characteristic character / characteristic character string. The degree of coincidence indicating the degree of coincidence between the appearance pattern and the characteristic appearance pattern preset as the appearance pattern of the characteristic character / characteristic character string may be calculated as the determination value, or (d) these three types Two or more of the determination values may be combined and a value calculated by substituting two or more determination values into a predetermined function may be used as the determination value.

  At this time, when there are characteristic characters / characteristic character strings related to plural types of information (for example, four types of address, e-mail address, telephone number, and name) in the target file, the target file relates to one type of information. The count result is weighted so that the determination value is larger than when a characteristic character / characteristic character string exists. In other words, if a data file includes a plurality of types of information that can identify a customer, the possibility that the data file is a customer information file includes only one type of information that can identify the customer. Therefore, weighting is performed so that the determination value (importance) for the data file becomes large. Further, weighting may be performed so that the determination value increases as the number of types of information increases. This makes it possible to specify the customer information file more reliably.

  When the determination value as described above is calculated, in a determination step executed by the customer information search means 11, it is determined whether or not the target file is a customer information file based on the determination value. For example, when the determination value exceeds a predetermined threshold, it is determined that the target file is a customer information file. When making such a determination, in this embodiment, a P mark (private level mark) corresponding to the size of the determination value is added to the target file, set and registered in the P mark table 10d, and ranked. Is doing. As described above, the P mark is a level indicating a high possibility that the target file is a customer information file. The larger the determination value, the higher the P mark is set.

  For example, when the determination value is 10 or more, it is determined that the target file is a customer information file. When the determination value is 10 or more and less than 100, “P1” is assigned as the P mark, and when the determination value is 100 or more and less than 1000, “P2” is assigned as the P mark. When it is 1000 or more and less than 10,000, “P3” is assigned as the P mark, and when the determination value is 10000 or more, “P4” is assigned as the P mark. The predetermined threshold for determining the customer information file and the reference value for determining the P mark are set as appropriate by the management console 24 of the customer information management server 20. In addition, although the P mark is ranked into four “P1” to “P4” here, the number of ranks is not limited to this.

  The P mark (P mark table 10d) assigned to the target file as described above is transmitted to the customer information management server 20 via the transmission / reception means 16 and the network 30, and is stored in the database 20b by the collection means 23. The data file to which the P mark is assigned is managed as a customer information file by the customer information management server 20 (customer information management means 25) as follows according to the rank of the P mark.

  For example, when the rank of the P mark is “P1”, the recommendation based on the warning information is not performed, but the fact that the data file of “P1” exists is recorded as a log. When the rank of the P mark is “P2”, notice information in a pop-up display is sent to alert the user of the data file. When the rank of the P mark is “P3”, the system administrator is notified by e-mail as warning information that there is a user storing the data file, and the return of the data file is instructed. To do. When the rank of the P mark is “P4”, the data file is forcibly captured and collected from the client 10. Even if the rank of the P mark is not “P4”, if the data file of “P3” is left for a predetermined number of days, the data file is forcibly captured and collected from the client 10.

A series of procedures for customer information search (customer information file specification) executed by the customer information search means 11 will be described with reference to the flowchart (steps S11 to S18) shown in FIG.
When constructing the customer information management system 1 of the present embodiment, first, a customer information management program is installed in a computer that should function as the customer information management server 20, and the computer executes the customer information management program. Thus, the client information management server 20 functions (client information collection means 21, installation means 22, collection means 23, management console 24, customer information management means 25, display control means 26, and transmission / reception means 27). When client information search / management is started, client information is collected from a plurality of clients 10 that are communicably connected via the network 30 by the client information collection unit 21, and customer information search / management targets are collected. The client information search program is installed on the client 10 recognized as the customer information search / management target by the installation means 22 via the network 30. By executing this customer information search program on the CPU 10a of the client 10, the CPU 10a causes the customer information search means 11, the CPU usage rate monitoring means 12, the input / output monitoring means 13, the activation control means 14, the access monitoring means 15 and the transmission / reception means 16. Serves as a function. When installing the customer information retrieval program, the quarantine table 10c is also transmitted. The customer information search program is included in advance in the customer information management program.

  In the client 10, when the customer information retrieval unit 11 is activated at a timing described later with reference to FIGS. 7 and 8, the P mark table 10d and the storage unit 10b are referred to, and the P mark is not set in the storage unit 10b. The presence or absence of the data file is determined (step S11). When there is a data file with no P mark set (YES route in step S11), one data file with no P mark set is selected and read from the storage unit 10b as a target file (step S12). Is converted into a text file by the text extraction engine (step S13).

  Then, the characters extracted from the text file are collated one by one with the characteristic characters in the quarantine table 10c, and if they match, it is determined that the characteristic characters have appeared, and the characteristic characters are counted. The value is incremented by “1” (step S14; counting step). After counting the number of appearances of characteristic characters in all characters included in the target file in this way, a determination value indicating the degree of the target file being a customer information file based on the count result (for example, the above item ( a) to (d)) is calculated (step S15; calculation step).

  Based on the determination value calculated in step S15, as described above, it is determined whether or not the target file is a customer information file and ranks the P mark (step S16; determination step). The determination result of the customer information file and the ranking result of the P mark are registered in the P mark table 10d and also transmitted to the customer information management server 20 via the transmission / reception means 16 and the network 30 (step S17). In the customer information management server 20, the data is stored in the database 20b by the collecting means 23.

  Thereafter, it is determined again whether or not there is a data file in which the P mark is not set in the storage unit 10b (step S18). Returning, the same processing as described above is executed. On the other hand, if there is no data file with no P mark set (NO route in step S18), the customer information search operation is terminated.

Next, the activation timing of the customer information search means 11 (customer information search program) will be described with reference to FIGS. Here, FIG. 7 and FIG. 8 are flowcharts for explaining the operation of the activation control unit 14 in each client 10 of the present embodiment.
The activation control means 14 of the present embodiment includes activation control based on the CPU usage rate according to the flowchart (steps S21 to S27) shown in FIG. 7, and input / output operation (I / O operation) according to the flowchart (steps S31 to S33) shown in FIG. ) Start control.

  In the activation control based on the CPU usage rate, the CPU usage rate monitoring means 12 monitors the usage rate of the CPU 10a (step S21), determines whether the usage rate is equal to or lower than a predetermined threshold (step S22), and the usage rate is If it is equal to or less than the predetermined threshold value (YES route in step S22), the customer information search means 11 is activated (step S23). After the activation, it is determined whether or not the search is finished (step S24). If not finished (NO route of step S24), the process returns to step S21. If it is determined in step S24 that the search is completed (YES route), after the search result is notified (step S25), the process returns to step S21.

  If it is determined in step S22 that the usage rate is greater than the predetermined threshold (NO route), it is determined whether or not the customer information retrieval unit 11 is activated (step S26), and if not activated (NO in step S26). (Route), while returning to Step S21, if it is being activated (YES route in Step S26), after the search operation by the customer information search means 11 is interrupted (Step S27), the process returns to Step S21. In this way, the customer information search means 11 can be operated like a screen saver.

In the start control by the input / output operation, the input / output monitoring means 13 monitors the data input / output operation (I / O operation) in the storage unit 10b (step S31), and detects the occurrence of the input / output operation (step S31). YES route), the customer information search means 11 is immediately activated (step S32), and after the search result is notified (step S33), the process returns to step S31.
It should be noted that the activation control based on the two types of timings described above may be adopted and executed simultaneously in parallel, or only one of them may be adopted and executed.

  In each client 10, the access monitoring means 15 monitors the data file to which the P mark is assigned (the data file determined to be a customer information file by the customer information search means 11), and accesses the data file. When (for example, data change by renaming, copying, erasing, moving, etc.) occurs, the fact is written out as log information and transmitted to the customer information management server 20 via the transmission / reception means 16 and the network 30. In the customer information management server 20, the data is stored in the database 20b by the collecting means 23.

[3] Effect of Customer Information Management System of this Embodiment As described above, according to the customer information management system 1 (client 10 and customer information management server 20) as one embodiment of the present invention, the storage unit of each client 10 For each data file in 10b, whether or not the data file is a customer information file is determined based on a determination value based on the number of appearances of characteristic characters and characteristic character strings, and the customer information file is automatically identified and searched. For example, customer information files (data files that are likely to be customer information files) that exist in a distributed manner, for example, within a company, without obtaining human cooperation and without placing a special burden on the person in charge. ) Can be reliably searched and found and managed. Accordingly, it is possible to reliably respond to customer information disclosure requests and correction requests, and to reliably prevent inadvertent outflow and leakage of customer information and unauthorized use of customer information.

  At this time, the usage rate (usage load) of the CPU 10a is monitored in each client 10, and when the usage rate is equal to or less than a predetermined threshold, the customer information search means (search engine) 11 is activated to apply a load to the CPU 10a. The customer information file can be identified without any problems.

  Each client 10 monitors the data input / output operation (I / O operation) with respect to the storage unit 10b, and activates the customer information search means (search engine) 11 when the input / output operation occurs, thereby storing the data in the client 10. When new data is input to the unit 10b or when data is output from the storage unit 10b in the client 10 (for example, not only when data is output from the storage unit 10b to attach data to an email, Data file included in the input / output data is a customer information file in the case of outputting from the storage unit 10b to write to an external recording medium such as a CD-R, CD-RW, DVD, magnetic disk, optical disk, magneto-optical disk). Since it is possible to monitor the movement of the customer information file by determining whether or not there is customer information It is possible to prevent the inadvertent outflow, leakage more reliably.

  Further, a data file determined to be a customer information file (a file given a P mark in this embodiment) is monitored, and access to the data file (for example, data change by rename, copy, erase, move, etc.) If this occurs, the fact is transmitted to the customer information management server 20 as log information so that access (operation / change history) to a data file that is likely to be a customer information file is accessed by the customer information management server 20. Tracking management (tracking) is performed, and unauthorized use of customer information can be prevented more reliably.

  In addition, by managing each data file according to the P mark given to each data file, for example, depending on the rank of the P mark (the size of the judgment value), the user of the data file or the system administrator It is possible to notify caution information / warning information, and forcibly capture and collect the data file from the client 10 (storage unit 10b). Use and the like can be prevented more reliably.

[4] Others The present invention is not limited to the above-described embodiments, and various modifications can be made without departing from the spirit of the present invention.
For example, in the above-described embodiment, the case of searching / managing customer information has been described. However, the present invention also applies to the case of searching / managing confidential information (information with confidentiality obligation) in a company or the like. It can be applied to obtain the same operational effects as in the above-described embodiment, and can reliably prevent inadvertent outflow / leakage of confidential information and unauthorized use of confidential information. In that case, a character or character string that appears characteristically in the confidential information is set as the characteristic character or characteristic character string (keyword), and a characteristic character or characteristic character string in the confidential information is set as the characteristic appearance pattern. An appearance pattern will be set.

  Further, while the search by the customer information search means 11 of each client 10 (search for all data files stored in the storage unit 10b) is not completed, access to the data file in the storage unit 10b of the client 10 (for example, Data change by renaming, copying, erasing, moving, etc .; more specifically, output to an external recording medium, mail attachment, etc.) may be prohibited. In this case, until the data file that is determined to be a customer information file is confirmed and the data file that is likely to be a customer information file is placed under the management of the customer information management server 20, the storage unit of the client 10 Since access to the data file in 10b is prohibited, it is possible to more reliably prevent the outflow / leakage of customer information.

  Further, the functions as the above-described customer information search means 11, CPU usage rate monitoring means 12, input / output monitoring means 13, activation control means 14, access monitoring means 15 and transmission / reception means 16 in each client 10 (all or As described above, some of the functions) are performed by a computer (including a CPU, an information processing device, and various terminals) executing a predetermined application program (customer information search program) installed from the customer information management server 20. Realized.

  In addition, the client information collection unit 21, the installation unit 22, the collection unit 23, the management console 24, the customer information management unit 25, the display control unit 26, and the transmission / reception unit 27 in the customer information management server 20 (the functions of each unit). All or some of the functions) are realized by a computer (including a CPU, an information processing device, and various terminals) executing a predetermined application program (customer information management server program) as described above.

  The customer information management server program including the customer information search program is provided in a form recorded on a computer-readable recording medium such as a flexible disk, CD-ROM, CD-R, CD-RW, or DVD. In this case, the computer reads the customer information management server program from the recording medium, transfers it to the internal storage device or the external storage device, and uses it. Further, the program may be recorded in a storage device (recording medium) such as a magnetic disk, an optical disk, or a magneto-optical disk, and provided from the storage device to a computer via a communication line.

  Here, the computer is a concept including hardware and an OS (operating system), and means hardware operating under the control of the OS. Further, when the OS is unnecessary and the hardware is operated by the application program alone, the hardware itself corresponds to the computer. The hardware includes at least a microprocessor such as a CPU and means for reading a computer program recorded on a recording medium. The customer information search program and the application program as the customer information management server program are stored in the computer as described above on the customer information search means 11, the CPU usage rate monitoring means 12, the input / output monitoring means 13, the activation control means 14, Program codes for realizing the functions as the access monitoring means 15, transmission / reception means 16, client information collection means 21, installation means 22, collection means 23, management console 24, customer information management means 25, display control means 26 and transmission / reception means 27. Contains. Also, some of the functions may be realized by the OS instead of the application program.

  Further, the recording medium in the present embodiment includes the above-mentioned flexible disk, CD-ROM, CD-R, CD-RW, DVD, magnetic disk, optical disk, magneto-optical disk, IC card, ROM cartridge, magnetic tape, Various computer-readable media such as punch cards, computer internal storage devices (memory such as RAM and ROM), external storage devices, and printed matter on which codes such as bar codes are printed can also be used.

It is a block diagram which shows the function structure of the customer information management system as one Embodiment of this invention. It is a block diagram which shows the function structure of the client (information processing apparatus with a customer information management function) of this embodiment. It is a block diagram which shows the function structure of the customer information management server of this embodiment. It is a figure which shows the example of the quarantine table of this embodiment. It is a figure which shows the specific example of a title header. It is a flowchart for demonstrating operation | movement of the starting control means in each client of this embodiment. It is a flowchart for demonstrating operation | movement of the customer information search means in each client of this embodiment. It is a flowchart for demonstrating operation | movement of the starting control means in each client of this embodiment.

Explanation of symbols

1 customer information management system 10 client (information processing device with customer information management function)
10a CPU (arithmetic processing unit)
10b Storage unit 10c Quarantine table 10d P mark table 11 Customer information search means (search engine, text extraction engine)
12 CPU usage rate monitoring means 13 Input / output monitoring means 14 Startup control means 15 Access monitoring means 16 Transmission / reception means (transmission means)
20 Customer information management server 20a CPU
20b database 20c display unit 21 client information collection unit 22 installation unit 23 collection unit 24 management console 25 customer information management unit 26 display control unit 27 transmission / reception unit 30 network (LAN)

Claims (3)

Multiple clients,
A customer information management server connected to the plurality of clients via a local area network so as to be able to communicate with each other and managing a collection of customer information in the plurality of clients;
The customer information management server is
Installation means for installing a customer information search program for causing each client to perform a self-search of customer information via the local area network;
It comprises a collection means for receiving the result of the self-search performed by each client via the local area network and storing it in a database,
Each of the plurality of clients
By executing the customer information search program installed from the customer information management server, a customer information search for specifying and searching a data file that is likely to be a customer information file from the data in the storage unit of each client Means,
A transmission unit configured to transmit a result of self-search by the customer information search unit to the customer information management server via the local area network ;
The customer information management server is
Customers who forcibly collect data files that are determined to be highly likely to be customer information files by the customer information search means in each client, and forcibly collect the data files from the client storing the data files characterized in that it is configured to further includes an information management unit, the customer information management system. The customer information search means calculates a determination value indicating the degree to which the data file is a customer information file as a result of the self-search,
The customer information management means forcibly collects a data file having a determination value equal to or greater than a predetermined value as a result of the self-search from a client storing the data file. The customer information management system described.   3. The customer information management means notifies the owner of the data file or the system administrator of the data file whose judgment value as a result of the self-search is less than a predetermined value, or warning information, according to claim 2. Customer information management system.

Images