JPH11143871A - Document disclosure device and medium for storing document disclosure program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To make it possible to generate a document that can substantially perform a role as a sample while restricting contents to be communicated to a referring person with the small number of manpower loading. SOLUTION: A blur rule decision means 2 receives a disclosure request for specifying a document in a document storage means 1, analyzes profile information regarding a requester of the disclosure request and decides a blur point detection method and a blur method in accordance with the profile information. A blur point detection means 3 detects a blur point by the blur point detection method decided by the blur rule decision means 2 out of a disclosure object document 1a specified by the disclosure request. A blur document generating means 4 performs a blur processing to the blur point detected by the blur point detection means 3 in the disclosure document 1a and generates a blur document 5.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a document disclosing apparatus and a medium storing a document disclosing program for disclosing an electronic document in response to a request from a user, and particularly to a document disclosing a part of the contents. The present invention relates to a document disclosure device that discloses a document and a medium that stores a document disclosure program.

[0002]

2. Description of the Related Art When creating a document, it is very helpful to see the same type of document created by another person. For example,
To increase group productivity, it is useful to disclose sample documents within the group so that group members can refer to it as needed.

However, even in the same group, it is sometimes inappropriate to disclose the full text of a certain document as a sample document due to differences in subgroups and differences in member rights. For example, a product proposal specifically describes the problems that the proposal has, but it is inappropriate to disclose the content to other departments in order to comply with the confidentiality of the proposal. is there. Also, the product offer price describes the product offer price concretely, but the proposer and the proposal approver have the discretionary power of discount, as a member of another authority (for example, a lower rank in the workplace, It is necessary to keep the information confidential to the sales representative of the agency contractor), and in this case, it is inappropriate to disclose the entire description of the proposal.

[0004] Therefore, the disclosure content of the sample document is:
It must be appropriate for the person who wants to see the document. As a conventional technique related to disclosure of a document according to a referrer, for example, as described in JP-A-7-98708, an access right is set for each element constituting a document, and Depending on the profile, some of the elements may be disclosed or not disclosed.

Further, as described in Japanese Patent Application Laid-Open No. 9-153912, a plurality of different contents for a certain matter are prepared in advance, and the contents to be referred to are switched in accordance with the selection or profile of the side referring to the document. There is something.

[0006]

However, Japanese Patent Laid-Open No. 7-9 / 1995
In the technique described in Japanese Patent No. 8708, a part of the contents of a document is completely invisible, so that a referrer cannot know what was written in a non-disclosed part. In order for a disclosed document to serve as a sample, it is required that a referrer can grasp the topic of each part of the document as well as the structure of the entire document. That is, the technique described in Japanese Patent Application Laid-Open No. 7-98708 does not satisfy the demand for use as a sample. In addition, the access right must be set for each part of the content. In particular, as the number of documents to be disclosed increases, the burden on the person who discloses the information becomes extremely large.

In the technique described in Japanese Patent Application Laid-Open No. 9-153912, the contents must be prepared in advance in accordance with the reference partner. As for disclosure of sample documents, it is desirable that many documents be disclosed because it is easy for a referrer to find one that is close to their own situation, and that they can get tips by comparing multiple documents. In the technology described in Japanese Patent Application Laid-Open No. 9-153912,
In order to disclose many documents, a large number of documents having to restrict the contents of those documents must be added, and the man-hour burden on the information disclosing person is very large.

[0008] The present invention has been made in view of such a point, and it is possible to generate a document which can sufficiently fulfill the role of a sample while restricting the content transmitted to a referrer with a small man-hour burden. It is an object to provide a document disclosure device.

Another object of the present invention is to cause a computer to perform a process of generating a document that can sufficiently fulfill a role as a sample while restricting the content transmitted to a referrer with a small man-hour burden. It is an object of the present invention to provide a medium on which a document disclosure program is recorded.

[0010]

According to the present invention, in order to solve the above-mentioned problems, in a document disclosing apparatus for disclosing an electronic document, a document storage means for storing an electronic document, and When receiving a disclosure request that specifies the document of, a blur rule analysis unit that analyzes profile information related to the request source of the disclosure request and determines a blur location detection method and a blur method according to the profile information,
From among the disclosure target documents specified in the disclosure request, a blur location detection unit that detects a blur location by the blur location detection method determined by the blur rule determination unit, and the blur location detection unit in the disclosure target document. A blur document generating unit for executing a blur process on the blur position detected by the blur method determined by the blur rule determining unit to generate a blur document. Provided.

According to this document disclosure device, when a disclosure request designating a document in the document storage unit is input, the blur rule determining unit analyzes profile information relating to the request source of the disclosure request, and converts the profile information into profile information. The corresponding blurring point detection method and blurring method are determined. Then
The blurred portion is detected from the disclosure target document specified by the disclosure request by the blurred portion detection means. Then, the blurring document generation unit performs a blurring process on the blurred portion detected by the blurring point detection unit by the blurring method determined by the blurring rule determination unit, and generates a blurred document.

[0012] This makes it possible for a person who discloses the document to disclose the document whose content has been blurred to a third party without changing the content of the original document. Also, in a medium storing a document disclosure program for disclosing an electronic document, a document storage unit for storing an electronic document, and upon receiving a disclosure request designating a document in the document storage unit, receiving the disclosure request A blur rule determining unit that analyzes profile information related to a request source of a request and determines a blur location detection method and a blur method according to the profile information, the blur rule from among the disclosure target documents specified in the disclosure request. A blur point detection means for detecting a blur point by the blur point detection method determined by the determination means, a blur point detected by the blur point detection means in the disclosure target document, determined by the blur rule determination means. Functioning a computer as a blurred document generating means for executing a blurring process by a blurring method and generating a blurred document Medium recording a document disclosure program for causing is provided.

[0013] By causing a computer to execute the document disclosure program recorded on this medium, it is possible to cause the computer to execute the processing that the document disclosure device according to the present invention should have.

[0014]

Embodiments of the present invention will be described below with reference to the drawings. FIG. 1 is a diagram illustrating the principle of the present invention. The document storage means 1 stores a large number of electronic documents.

The blurring rule determining means 2 includes a document storing means 1
Receiving the disclosure request designating the document in, analyzing the profile information relating to the request source of the disclosure request, and determining a blurring point detection method and a blurring method according to the profile information. Here, the document specified by the disclosure request becomes the disclosure target document 1a. A plurality of blurring rules 2a are stored in advance in the blurring rule determining means 2 in order to determine a blurred portion detection method and a blurring method. Each blur rule 2a
Consists of a set of a blurring point detection method and a blurring method.
By selecting which blurring rule to apply from among these, it is possible to determine a blurring point detection method and a blurring method according to the profile information.

The blur spot detecting means 3 detects a blur spot from the disclosure target document 1a specified in the disclosure request by the blur spot detecting method determined by the blur rule determining means 2.

[0017] The blurred document generating means 4 outputs the document 1 to be disclosed.
A blur processing is performed on the blur position detected by the blur position detection unit 3 in the “a” by the blur method determined by the blur rule determination unit 2, and a blur document 5 is generated.

According to such a document disclosure apparatus, when a disclosure request is input, a blur document 5 whose contents are automatically blurred in accordance with the profile information of the requester of the disclosure request is created. You. For example, the company name is replaced with “「 ”, and the numerical value is replaced with a black line. In such a blurred document 5, contents belonging to personal privacy and trade secrets are hidden, but other document formats are not changed. Therefore, the blurred document 5 is effectively used as a sample when creating a similar document. Can be used. Moreover, there is no extra burden on the person who discloses the document.

Hereinafter, embodiments of the present invention will be described in detail. FIG. 2 is a diagram showing a system configuration according to the embodiment of the present invention. In the present embodiment, the document creation device 2
0, a plurality of requesting subsystems 30 and 30a, and a disclosure subsystem 100 are connected to a network 10, and exchange various data via the network 10. As the network 10, the Internet, an intranet, or the like can be used. The document creation device 20 is a user of the disclosure-side subsystem 100 (hereinafter, referred to as a user).
Is a device for creating a document. Among the documents created by the document creation device 20, a document to be disclosed to another person is sent to the disclosure-side subsystem 100. In addition,
In the present embodiment, it is assumed that HTML (HyperText Mark-up Language) is used as a format of a document to be disclosed.

The requesting subsystems 30 and 30a are devices for outputting a document disclosure request and displaying the contents of the received document on a screen of a display device. Disclosing subsystem 10
Reference numeral 0 denotes an apparatus that creates a new document in which the content of the requested document is blurred according to the profile of the request source of the disclosure request, and transmits the new document to the request source.

Hereinafter, the relationship between the functions of the functional units constituting each subsystem and other functional units will be described for each functional unit. First, the functional units of the requesting subsystem 30 will be described. The functional units described below have the other requesting subsystems 30a as well.

The disclosure target document designation section 31 has a function of designating a document requested to be disclosed by a user of the requesting subsystem (hereinafter, referred to as a requester). The designation of the document is performed by the requester using the present functional unit to input an identifier given to the document stored by the document storage unit 101 of the disclosure-side subsystem 100 described later. When the input of the identifier is completed, the disclosure target document designation unit 31 notifies the disclosure request transmission unit 33 of the identifier, which will be described later.

The profile management section 32 has a function of managing the profile of the requester and the profile of the requesting subsystem 30. Here, the requester's profile describes information about the individual requester. In addition, the profile of the requesting subsystem 30 describes information unique to each requesting subsystem. Therefore, when a certain requesting subsystem is used by a plurality of persons, profiles corresponding to a plurality of requesters are managed in one requesting subsystem. Also, the profile of the requesting subsystem differs for each subsystem. These various profiles are stored in the profile management unit 32 in advance.

One profile is expressed as a set having a plurality of pairs of attribute names and attribute values. An example of a profile managed by the profile management unit 32 will be described below.

FIG. 3 is a diagram showing an example of a profile of a requester. In this profile, an attribute name and an attribute value that can be taken in the attribute are registered. In the example of FIG. 3, the attribute value that can be taken for the attribute name “name” is “last name”.
Name. An attribute value that can be taken for the attribute name “mail address” is “SMTP mail address”. The attribute value that can be taken for the attribute name “affiliated organization” is “name of affiliated organization”. The attribute value that can be taken for the attribute name “affiliated establishment” is “name of the affiliated office”. The attribute value that can be taken for the attribute name “affiliated department” is “name of the department to which it belongs”. The attribute value that can be taken for the attribute name “position” is “current position”. The attribute value that can be taken for the attribute name “class” is “current class”.

FIG. 4 is a diagram showing an example of the profile of the requesting subsystem. In this profile, an attribute name and an attribute value that can be taken in the attribute are registered. In the example of FIG. 4, the attribute value that can be taken for the attribute name “machine name” is “character string”. An attribute value that can be taken for the attribute name “machine address” is “TCP / IP address”. The attribute value that can be taken for the attribute name “domain” is “Internet domain”. An attribute value that can be taken for the attribute name “administrative organization” is “name of organization to manage”. An attribute value that can be taken for the attribute name “managed office” is “name of the office to be managed”. The attribute value that can be taken for the attribute name “management section” is “name of the section to be managed”.

The profile managed by the profile management unit 32 is used for data transmitted by a disclosure request transmission unit 33 described later. Returning to FIG. 2, the disclosure request transmission unit 33
It has a function of transmitting a document disclosure request to the disclosure-side subsystem 100. When the disclosure request transmitting unit 33 is notified of the identifier from the disclosure target document specifying unit 31, the disclosure request transmitting unit 33 acquires the requester's profile and the requester's subsystem profile from the profile management unit 32. Then, the data including the profile and the identifier is transmitted to the disclosure-side subsystem 100 via the network 10 as a disclosure request.

The document receiving section 34 has a function of receiving a document transmitted by a document transmitting section 116 of the disclosing subsystem 100 described later. The document display unit 35 includes a document reception unit 34
Has the function of displaying the received document on the screen of the display device.

The functions of the components of the requesting subsystem 30 have been described above. Next, the disclosure subsystem 100
The functional units that constitute are described. Document storage unit 101
Has a function of storing a plurality of documents permitted to be disclosed to others. Of the documents created by the document creation device 20, the documents permitted to be disclosed to others are the network 10
To the disclosure-side subsystem 100 via The document storage unit 101 receives the sent document, assigns a unique identifier to the document, and stores the document in association with the identifier. In this embodiment, a URL (Uniform Resource Locator) is used as a notation of an identifier for a document. The document storage unit 101 transfers a document to be disclosed to a disclosure target document storage unit 102, which will be described later, in accordance with a notification from a disclosure request receiving unit 103, which will be described later.

The disclosure target document storage unit 102 has a function of temporarily storing a document to be disclosed for replacement processing of contents described later. The document to be disclosed is transcribed into the disclosure target document storage unit 102 by the document storage unit 101.

The disclosure request receiving unit 103 includes the document storage unit 10
1 has a function of receiving a disclosure request sent via the network 10 from the disclosure request transmission unit 33 of the requesting subsystem 30 to the document stored by the requesting subsystem 30. In the present embodiment, processing is not started by another disclosure request until a series of disclosure processing started by one disclosure request ends. That is, a plurality of disclosure processes are not executed in parallel. The disclosure request receiving unit 103 determines whether or not the disclosure processing has been completed, according to the disclosure target document storage unit 1.
02 is performed by checking whether a document is stored. If a document is stored in the disclosure target document storage unit 102, it is determined that the document is being processed.

When the disclosure request receiving unit 103 receives a new disclosure request and no document is stored in the disclosure target document storage unit 102, the disclosure request receiving unit 103 stores the identifier included in the disclosure request in the document storage unit. The disclosure target document is notified to 101 and the disclosure target document is stored in the disclosure target document storage unit 102.
At the same time, the profile of the requester and the requesting subsystem 30 included in the disclosure request are stored in a profile storage unit 1 described later.
04 is notified. If a document is stored in the disclosure target document storage unit 102, this functional unit does not perform any subsequent processing.

The profile storage unit 104 has a function of storing the profile of the requester and the profile of the requesting subsystem included in the disclosure request received by the disclosure request receiving unit 103. When a profile is sent from the disclosure request receiving unit 103, the profile storage unit 10
4 erases the profile stored up to that point and stores the newly sent profile. The profile stored in the profile storage unit 104 is
It is used at the time of selection processing by the replacement rule selection unit 112 described later. It is also used when a document transmission unit 116 described later specifies a transmission destination.

The content replacement method storage unit 105 has a function of storing a method of replacing the content of a document with a blurred one. The method stored in the content replacement method storage unit 105 is described as a series of procedures executed by the content replacement unit 115 described later. In the present embodiment, a plurality of replacement methods are stored in advance, and an identifier for uniquely identifying each replacement method is assigned. The identifier is used to configure a specific rule stored in the replacement rule storage unit 107 described later. In the present embodiment, a comment on the replacement method indicated by the identifier is stored in association with the identifier of the replacement method.
The stored comment is a replacement rule setting unit 1 described later.
It is used to help the discloser understand the contents of the replacement method during the operation by the discloser using 08.

The replacement methods used in the present embodiment are roughly classified into four types. The four types are called semantic abstraction, modeling abstraction, meaninglessness, and noise addition. Hereinafter, the features of each replacement method will be described.

The semantic abstraction is, for example, 12345 → “5
It replaces specific data with a semantically more abstract expression, such as “digit positive number” → “numerical value”.
This type of replacement method defines a plurality of abstraction levels and their hierarchical relationship (eg, “positive number” → “numeric value”) in advance, and also converts specific data features (eg, 12345 → This can be realized by defining “five digits”) and describing a procedure for calculating by combining these. As a data structure for defining a plurality of abstraction levels and their upper and lower relationships, for example, the following can be considered.

FIG. 5 is a diagram showing an example of hierarchical structure information defining a plurality of abstraction levels and their upper and lower relationships. The hierarchical structure information 41 indicates that a certain abstraction level is a node,
The hierarchical relationship is represented by a link, and forms a tree structure as a whole. In the notation of the lowest order node, actual data or a data type definition (for example, a definition such as “the first bit of 16-bit data is 1”) according to the hardware architecture of the system is described.

As data types to which this type of replacement method can be applied, there are words and images in addition to the numerical values described above.
Examples of the abstraction of a phrase include, for example, Nakai-cho, Kanagawa Ashigara-gun → “business location” → “place name”. Also, as an abstraction of an image, for example, by defining an expression for converting a distribution tendency of lightness or hue into an impression word for an image, a specific image can be referred to as “bright photograph” or “warm illustration”. .

The modeling abstraction is to replace concrete data with an expression having a high level of modeling abstraction. FIG.
It is a figure showing an example of modeling abstraction. In this example, document 4
By replacing the character string in 2 with a black line, the modeling of data is abstracted. Therefore, in the converted document 42a, the character strings for four lines are represented by four parallel lines.

The modeling abstraction uses a data type replacement relationship (for example, a character string → line) and a feature conversion formula (for example,
(The number of rows → the number of rows) is defined in advance, and a procedure for calculating by combining these can be described. Examples of data types to which the modeling abstraction can be applied include an image (for example, replacing an area occupied by the image with a graphic such as a rectangle) in addition to the above-described character string.

To make the meaning meaningless, for example, “12345” → “*
**** replaces specific data with meaningless data that does not depend on the data. This type of replacement method is realized by describing a procedure for uniformly replacing specific data or a procedure for replacing random data.

The types of data to which the meaning can be applied include character strings, images (for example, masking and mosaics), and voices (for example, silence and replacement with dial tone) in addition to the above-mentioned numerical values. Can be

The noise addition is to replace specific data with data of the same type as the data, for example, to deteriorate the image to a rough image quality. This type of replacement method is realized by defining a creation method (for example, a function or a probability) of data to be added, and describing a procedure for adding data obtained from the creation method to replacement data.

As a type of data to which the noise addition can be applied, in addition to the above-mentioned image, there is a sound (for example, a shift in the frequency of an uttered sound). Returning to FIG.
The replacement location designation method storage unit 106 has a function for storing a method of designating a location where the content is to be replaced. The replacement location designation method stored in the replacement location designation method storage unit 106 is described as a series of procedures executed by the replacement location detection unit 114 described later. In the present embodiment, a plurality of methods are stored in advance, and an identifier for uniquely identifying each replacement portion specifying method is assigned. The identifier is used to compose a specific rule stored in the replacement rule storage unit 113 described later. Further, in the present embodiment, a comment on the method indicated by the identifier is stored in association with the identifier of the replacement location designating method. This comment is used to assist the disclosing person in understanding the method of designating the replacement part when performing the operation by the disclosing person using the replacement rule setting unit 108 described later.

The replacement part designation method used in the present embodiment is roughly classified into two types. One uses the semantic classification of the contents, and the other uses the layout.

Examples of the semantic classification include notation of people, notation of things, notation of places, notation of time, notation of quality, notation of quantity, and the like. The specification method based on semantic classification defines the possible values for each data type, or defines the level of abstraction and its relationship for each data type, as in the semantic abstraction described above, and conforms to the definition. This is realized by describing a procedure for searching the contents of the document to be executed.

In the present embodiment, dictionary information defining items of semantic classification consisting of a plurality of layers and data belonging to each item is held. For example, the notation “Kagami Ashigara Shokai” belongs to the item “thing” as a large classification, and belongs to the item “company name” as a middle classification. In the present embodiment, by specifying an item of a certain hierarchy, a location where data belonging to the item exists in the document is detected as a location to be replaced.

Examples of the use of the layout include a heading and a subheading, a table cell, an underlined part, a bulleted part, a boxed part, a part where the coloration differs from the default setting, a link to another document, and the like. Can be
This type of designation method is realized by defining possible values of data defining the layout of a document and describing a procedure for searching for the contents of a document that conforms to the definition. In the present embodiment, since the document format of the document to be disclosed is HTML, it is used as a definition of a value that an HTML tag can take.

The replacement rule storage unit 107 has a function for storing rules for replacing contents, which are set by using a replacement rule setting unit 108 described later. Replacement rule storage unit 10
One rule stored in 7 is a set of one or more method identifiers stored in the replacement location designation method storage unit 106 and one method identifier stored in the content replacement method storage unit 105. Things. Here, when a certain rule has a plurality of identifiers of the replacement part designating method, the part corresponding to the logical product thereof is the part whose content is replaced by the content replacement method defined in the rule. This replacement rule storage unit 1
07 assigns an identifier to each of the stored rules to uniquely identify them. This identifier is used as data stored in the disclosure condition storage unit 109 described below.

The replacement rule setting unit 108 has a function for the disclosing party to set a rule for replacing the content. In the present embodiment, the replacement rule setting unit 108 controls the GUI (Graphical U
serInterface). The output of the replacement rule setting unit 108 is data stored in the content replacement method storage unit 105, the replacement location designation method storage unit 106, and the replacement rule storage unit 107. Also,
The input of the replacement rule setting unit 108 is
And an instruction for calling an output on a screen.

Using the replacement rule setting unit 108, the disclosing party creates a set of the identifier of the method stored in the replacement location designation method storage unit 106 and the identifier of the method stored in the content replacement method storage unit 105. Perform operations interactively. To assist the operation, by specifying the identifier, a comment on the method stored in association with the identifier is displayed. The results of the operation of creating the set of identifiers and the operation of creating the permutation are immediately reflected in the data stored in the replacement rule storage unit 107.

The disclosure condition storage unit 109 stores a plurality of disclosure conditions set by using a disclosure condition setting unit 111 described later.
It has a function to store the information together with the priority order. In the present embodiment, the disclosure condition is the disclosure request receiving unit 1
03 in response to the disclosure request received by the replacement rule storage unit 10
7 shows which one of the replacement rules stored in No. 7 is used. Specifically, one disclosure condition is described as a set of an identifier of one replacement rule and a logical expression having a plurality of profile allowable ranges as terms. Here, one profile allowable range describes an attribute name that can exist as an attribute of a requester's profile or a profile of a requesting subsystem, and a range that can be taken as an attribute value of the attribute name.

When a value indicating “arbitrary” (defined by the system) is defined as a range that the attribute value can take, the attribute name in the profile allowable range is the profile of the requester or the profile of the requesting subsystem. Means that it is a condition. Also, when a negative operator (NOT) is applied to the profile allowable range having a value indicating “arbitrary”, the attribute name in the profile allowable range does not exist in the requester's profile or the requesting subsystem profile. Means a condition. The disclosure condition storage unit 109 stores permutations composed of pairs. The disclosure condition earlier in the permutation is
It is prioritized in the content replacement process described later.

The logical expression list storage unit 110 has a function of storing a list in which a logical expression having a profile allowable range as a term is associated with a name defined by the discloser. The discloser has, for example, a name described in an expression that can be understood by himself / herself, such as “acquaintance”, “trusted party”, “contact person”, “business partner”, “task team”, and a profile allowable range The logical expression can be stored in the logical expression list storage unit 110 in association with the logical expression. The list stored in the logical expression list storage unit 110 is used when a discloser sets a disclosure condition using a disclosure condition setting unit 111 described later.

The disclosure condition setting unit 111 has a function for the disclosure person to set the disclosure condition. In the present embodiment,
The disclosure condition setting unit 111 is realized by an input / output device having a GUI. The output of the disclosure condition setting unit 111 is data stored in the disclosure condition storage unit 109 and the logical expression list storage unit 110. Also, the disclosure condition setting unit 111
Is an operation on data stored in the disclosure condition storage unit 109 and the logical expression list storage unit 110.

The discloser uses the disclosure condition setting unit 111 to 1) input a profile allowable range, 2) create a logical expression having the input profile allowable range as a term, and 3) list a logical expression of the created logical expression. 4) a list of names registered in the logical expression list, 5) a set of the created logical expression or the logical expression registered in the logical expression list and the identifier of the replacement rule stored in the replacement rule storage unit And 6) creating a permutation composed of the created sets. The result of the operation is stored in the disclosure condition storage unit 109 and the logical expression list storage unit 1
10 is immediately reflected in the data stored in the memory.

In the operation 5), the name stored in the logical expression list storage unit 110 can be used without directly inputting the logical expression. When the disclosing person inputs the name, the logical formula associated with the name in the logical formula list storage unit 110 is transcribed to the data stored in the disclosure condition storage unit 109.

The replacement rule selection unit 112 changes the rules stored in the replacement rule storage unit 107 to disclosure according to the profile stored in the profile storage unit 104 and the disclosure conditions stored in the disclosure condition storage unit 109. It has a function to select the rule to be applied. The replacement rule selection unit 112 determines whether the profile stored in the profile storage unit 104 satisfies the logical formula of the disclosure condition in order from the top of the disclosure conditions arranged in a permutation stored in the disclosure condition storage unit 109. Find out. If so, the identifier of the replacement rule of the disclosure condition is notified to the application rule storage unit 113 described later. When all the disclosure conditions stored in the disclosure condition storage unit 109 have been checked, the replacement rule selection unit 112 notifies the replacement location detection unit 114 of the start of the replacement process.

The application rule storage unit 113 has a function of storing the identifier of the replacement rule notified from the replacement rule selection unit 112. The application rule storage unit 113 stores the plurality of notified identifiers in a permutation according to the order of notification. However, if a plurality of replacement rules having the same content replacement part are notified, only the one notified earlier is stored. That is, when a certain identifier is notified, if the replacement rule indicated by the identifier stored up to that point contains the same value as the identifier of the replacement part designation method included in the replacement rule indicated by the identifier, The identifier notified later is not stored. The data stored in the application rule storage unit 113 is used for a detection process of the replacement location detection unit 114 described later.

Using the replacement rule stored in the application rule storage unit 113, the replacement location detection unit 114 detects a location where the content is to be replaced from the contents of the document stored in the disclosure target document storage unit 102. Has functions. Upon receiving the notification of the start of the replacement process from the replacement rule selection unit 112, the replacement location detection unit 114 executes a series of processes described below.

The application rule storage unit 113 stores zero or more replacement rule identifiers in a permutation. Therefore, the replacement part detection unit 114 first stores the replacement rule associated with the identifier at the head of the permutation in the replacement rule storage unit 107.
Find out from. Next, an operation of the designation method indicated by the identifier of the replacement place designation method included in the found replacement rule is executed, and the place where the content is replaced in the document stored in the disclosure target document storage unit 102 is specified. Then, the information indicating the specified replacement part and the identifier of the content replacement method included in the replacement rule are notified to the content replacement unit 115 described later. next,
Upon receiving the return value for the notification from the content replacement unit 115,
For the second replacement rule from the head of the permutation, the replacement part is specified and notified to the content replacement unit 115, and a return value is received. Hereinafter, this process is repeated until the end of the permutation of the identifier of the replacement rule. Lastly, the end of the replacement process is notified to a document transmission unit 116 described later.

The content replacement section 115 has a function of replacing the content of the document stored in the disclosure target document storage section 102 according to the selected replacement rule. The content replacement unit 115
When the information indicating the replacement location and the identifier of the replacement method are notified from the replacement location detection unit 114, the disclosure target document storage unit 10
2 replaces the content existing at the location indicated by the notified information of the document with the result of calculating the replacement method stored in the content replacement method storage unit 105 indicated by the notified identifier. After the replacement of the content is completed, a return value indicating the completion is notified to the replacement location detecting unit 114.

After the content replacing process is completed, the document transmitting unit 116 sends the disclosure target document storage unit 102 to the requester who has transmitted the disclosure request accepted by the disclosure request receiving unit 103.
Has a function of transmitting a document stored by the user. Document sending unit 1
16 receives the notification of the end of the replacement process from the replacement location detection unit 114, determines the transmission destination of the document based on the requester's profile stored in the profile storage unit 104 and the profile of the requesting system, and The document stored in the document storage unit 102 is transmitted. After sending the document,
The document is deleted from the disclosure target document storage unit 102.

The functional units constituting the disclosure-side subsystem 100 have been described above. Here, the correspondence between the function of each component of the principle configuration of the present invention shown in FIG. 1 and the functional unit of the system of the embodiment shown in FIG. 2 will be described. The function of the document storage unit 1 is realized by the document storage unit 101. The function of the blurring rule determining means 2 is realized by the replacement rule selection unit 112 and various storage units around it. The function of the blurred portion detecting means 3 is as follows.
14 and various peripheral storage units. The function of the blurred document generation unit 4 is realized by the content replacement unit 115 and various storage units around it.

Next, the flow of processing of the disclosure-side subsystem 100 from reception of a disclosure request to transmission of a document will be described. FIG. 7 is a flowchart showing the flow of processing from reception of a disclosure request to transmission of a document. [S1] The disclosure request receiving unit 103 receives a document disclosure request. [S2] The disclosure request receiving unit 103 determines whether a disclosure target document is stored in the disclosure target document storage unit 102. If the disclosure target document is stored, the process returns to step S1, and if not, the process proceeds to step S3. [S3] The disclosure request receiving unit 103 notifies the document storage unit 101 of the identifier included in the disclosure request, and causes the disclosure target document storage unit 102 to store the document to be disclosed. [S4] The disclosure request receiving unit 103 causes the profile storage unit 104 to store the profile of the requester and the requesting subsystem 30 included in the disclosure request. [S5] The replacement rule selection unit 112 checks the profile stored in the profile storage unit 104 with the disclosure condition storage unit 1
In accordance with the disclosure condition stored in step 09, a replacement rule to be applied to disclosure is selected from the rules stored in the replacement rule storage unit 107. Then, the identifier of the selected replacement rule is notified to the application rule storage unit 113. The identifier is stored in the application rule storage unit 113. [S6] The replacement location detection unit 114 sequentially extracts replacement rules associated with the identifier from the head of the permutation in the application rule storage unit 113, and determines whether the identifier of the replacement location designation method included in the extracted replacement rule is included. Execute the processing of the specified method shown
A place to be replaced is detected from the document stored in the disclosure target document storage unit 102. [S7] The replacement location detection unit 114 determines whether or not there is a location detected in the process of step S6. If there is a detected portion, the process proceeds to step S8. If there is no detected portion, the process proceeds to step S9. [S8] The content replacement unit 115 replaces the content of the document stored in the disclosure target document storage unit 102 according to the selected replacement rule. [S9] The replacement location detection unit 114 determines whether or not processing has been performed for all replacement rules that meet the disclosure conditions. If the processing for all the replacement rules has been completed, the process proceeds to step S10; otherwise, the process returns to step S6. [S10] The document transmission unit 116 sets the disclosure target document storage unit 1
02 is transmitted to the request source of the disclosure request. [S11] The document transmission unit 116 sets the disclosure target document storage unit 1
02 is deleted. [S12] The application rule storage unit 113 deletes the stored replacement rule, and returns to step S1.

In this manner, every time a document disclosure request is made, the contents of the disclosure target document are replaced as necessary and transmitted to the request source. Next, an example of replacing the contents of a document according to the present embodiment will be specifically described. In this replacement example, it is assumed that the discloser is a sales clerk in the sales department, and a plurality of sales proposals are stored in the document storage unit 101 as documents that may be disclosed. The disclosure condition storage unit 109, the replacement rule storage unit 107, the replacement location designating method storage unit 106, and the content replacement method storage unit 105 are stored in FIG.
It is assumed that data as shown in FIG.

FIG. 8 is a diagram showing an example of the permuted data 43 stored in the disclosure condition storage unit 109. here,"
Items enclosed by {} indicate one disclosure condition, and "" indicates a permutation starting from the left.
“1” to “# rule4” indicate identifiers of replacement rules, and “external”, “outside department”, “other than sales staff”, and “other than superior” indicate the respective names stored in the logical expression list storage unit 110. The logical expression to be pointed is stored.

Here, “outside” means that the attribute “affiliation” of the requester's profile is not the same as the disclosing person, or
Requesting subsystem profile attribute "administrative body"
Is not the same as the disclosing party. For example, when a person from the same company requests disclosure from a requesting subsystem of another company to which he / she is traveling, the condition is “outside the company”. Similarly, a logical expression indicating “outside the department” is defined. "Other than sales clerk" is a name indicating a logical expression indicating that the attribute "job system" of the requester's profile is not a sales clerk. “Other than advanced” is a name indicating a logical expression indicating that the attribute “class” of the requester's profile is not higher than the class of the discloser.

FIG. 9 is a diagram showing an example of the data 44 stored in the replacement rule storage unit 107. here,{ }
Enclosed items indicate a set of a method of designating a replacement part and a replacement method. “# Loc1”, “# loc2”, “# loc3” indicate the identifier of the replacement location designation method, and “# rep1”,
“# Rep3” indicates an identifier of a replacement method.

FIG. 10 shows a replacement location designation method storage section 106.
FIG. 7 is a diagram showing an example of data 45 stored in the storage device. In this example, the replacement location designation method with the identifier "# loc1" specifies the contents in the table cell as the replacement location. In the method of designating the replacement location with the identifier “# loc2”, a numerical value is specified as the replacement location. In the method of designating the replacement part with the identifier “# loc3”, the company name is specified as the replacement part.

FIG. 11 is a diagram showing an example of the data 46 stored in the content replacement method storage unit 105. In this example, the replacement method with the identifier “# rep1” is a semantic abstraction indicating the number of digits. The replacement method with the identifier “# rep2” is a modeling abstraction using lines. The replacement method with the identifier “# rep3” is meaningless by ○.

Here, a case is considered where the contents of the document to be disclosed as described below are replaced. FIG. 12 is a diagram illustrating an example of the contents of the disclosure target document 50. This disclosure target document 50 is a proposal when a PC (personal computer) and a printer are sold to Kamigashigara Shokai. This proposal shows the list price and the actual offer price for each item.
Here, most of the characters in the table use small fonts, but the prices offered for the PC and printer for the Ashigara firm ($ 210,000 and $ 60,000) are slightly larger fonts. Is used. In addition, the column of “Price for Kamigashigara Shokai” in “Total” (“¥ 270,000”)
Uses larger fonts.

When the contents to be disclosed include the contents as shown in FIG. 12, if the disclosure request is made by a person outside the company from the viewpoint of the disclosing person or a requesting subsystem outside the company, "# rule1 ”is applied first.

FIG. 13 is a diagram showing an application result 51 of # rule1. # rule1 replaces the contents of the table cell (#loc
1), to perform a line-based abstraction (# rep2). Therefore, all characters in the table cells have been replaced with black lines. At this time, the larger the font size of the original character, the thicker the line is replaced.

When a person other than a department and not a sales person or a person other than a sales person requests disclosure from a requesting subsystem outside the department, “# rule2” and “# rule3” are applied. You.

FIG. 14 shows the result 52 of applying # rule2 and # rule3.
FIG. # rule2 replaces the company name (#l
oc3), meaning is deactivated (# rep3) by ○,
In # rule3, the numerical value in the cell in the table is replaced (the logical product of # loc1 and # loc2), and the line is shaped and abstracted (# rep2). Therefore, the “offer price for Kamigashira Shokai” in FIG. 12 is replaced with the “offer price for OO” (# rule2), and the price portion is replaced with a black line (# rule3). .

When a person outside the department and a sales person or a person from the sales person outside the department requests a disclosure, # rule2 and # rule4 are applied. FIG.
Is a diagram showing an application result 53 of # rule2 and # rule4. #r
The contents of ule2 are as described above, and # rule4 replaces the numerical value in the table cell (the logical product of # loc1 and # loc2)
It performs semantic abstraction (# rep1) indicating the number of digits. Therefore, the “offer price for Kamigashira Shokai” in FIG. 12 is replaced with the “offer price for Mr. XX” (# rule2), and the portion indicating the price is a positive number indicating that it is a positive number. It has been replaced with the contents indicating the number of digits (# rule4). # Rule4
Is replaced with a font of the same size.

When a person in the same department as the disclosing person, a sales clerk, and a person who is not higher than the disclosing person requests disclosure from a subsystem in the same department, # rule4 is applied. FIG.
14 is a diagram showing an application result 54 of # rule4. FIG. The contents of # rule4 are as described above. Therefore, the part indicating the price is replaced with a content indicating that it is a positive number and the number of digits of the positive number.

If the superior of the discloser (ie, the same department as the discloser and a sales clerk higher than the discloser) requests disclosure from the requesting subsystem of the same department, the contents of FIG. 12 are replaced. Disclosed without notice.

The above is the description of the embodiment of the present invention.
In the present embodiment, the requesting subsystem sends the specification of the disclosure target and the profile of the requester together as a document disclosure request, and sends the request to the disclosure subsystem. First, only the specification of the disclosure target is sent from the requesting subsystem to the disclosure subsystem, and after the disclosure subsystem receives the request, the profile is acquired by accessing the profile management unit of the requesting subsystem. May be configured. In this configuration,
The disclosing subsystem can acquire only the profile attributes necessary for selecting the replacement rule.

In the present embodiment, the profile included in the document disclosure request sends all the attributes of the profile managed by the requesting subsystem. This may be configured so that the requester selects and sends only a part. In this case, the selection of the replacement rule may be disadvantageous, but the requester can avoid sending an attribute that he does not want to inform the discloser.

In this embodiment, the profile of the request source is managed by the requesting subsystem. The requesting profile may be managed by the disclosing subsystem or a subsystem managed by a third party, and the disclosing subsystem may acquire the profile and use it for selecting a replacement rule. In this case, it becomes possible for a disclosure side or a third party to assign a unique attribute such as a rating to a profile.

The above processing functions can be realized by a computer. In this case, the processing contents of the functions that the requesting subsystem and the disclosing subsystem should have are described in a program recorded on a computer-readable recording medium, and the program is executed by the computer. The above processing is realized by a computer. Examples of the computer-readable recording medium include a magnetic recording device and a semiconductor memory.
When distributing in the market, CD-ROM (Compact Dis
(k Read Only Memory) or store the program in a portable recording medium such as a floppy disk and distribute it, or store it in a storage device of a computer connected via a network and transfer it to another computer via the network. Can also. When the program is executed by the computer, the program is stored in an auxiliary storage device such as a hard disk device in the computer, and is loaded into the main memory and executed.

According to the document disclosure device described above,
According to the profile of the requester of the disclosure request, a document in which the content of the document requested to be disclosed is blurred is disclosed. As a result, there are the following advantages.

First, since the contents of a document are replaced based on a replacement method prepared in the document disclosure apparatus that blurs the contents of the document, there is no need for the disclosure side to prepare the content adapted to the requesting side.

Further, as a method of blurring the contents of the document, the requesting side can increase the semantic abstraction of the contents, increase the abstraction of modeling, replace with meaningless ones, or add noise. I don't know the specific value, but I can grasp what kind of thing is written there, or I don't know what is written there, but I can get an overview of the whole document. Can be

Further, since the document disclosure apparatus detects the replacement part of the content by using the semantic characteristic or layout characteristic of the content, the disclosure side searches the document for the part where the disclosure is to be restricted, and sets the access right one by one. You don't have to.

As described above, the effect that the disclosed document plays a role as a sample, the content transmitted to the reference person is restricted, and the man-hours involved in the disclosure is reduced as compared with the conventional technology. There is.

As another effect, a document whose contents have been replaced and disclosed is newly generated, and the original document is not changed at all. Therefore, the revision history of the original document depends on the disclosure. This has the effect of being properly retained.

[0090]

As described above, in the document disclosure apparatus of the present invention, a blur location detection method and a blur method are determined in accordance with profile information relating to a request source of a disclosure request, and a blur document is determined using those methods. By generating the document, it is possible to disclose to a third party a document that can be used as a sample while a part of the information is hidden, without imposing a great burden on the discloser.

Further, in the medium on which the document disclosure program of the present invention is recorded, a blur location detection method and a blur method are determined according to profile information relating to a request source of a disclosure request, and a blur document is generated using those methods. It is possible to cause a computer to execute a document that can be used as a sample while concealing some information without using a computer. To the public.

[Brief description of the drawings]

FIG. 1 is a principle configuration diagram of the present invention.

FIG. 2 is a diagram illustrating a system configuration according to an embodiment of the present invention.

FIG. 3 is a diagram illustrating an example of a profile of a requester.

FIG. 4 is a diagram illustrating an example of a profile of a requesting subsystem.

FIG. 5 is a diagram showing an example of hierarchical structure information that defines a plurality of abstraction levels and their upper and lower relationships.

FIG. 6 is a diagram illustrating an example of a modeling abstraction.

FIG. 7 is a flowchart showing a flow of processing from reception of a disclosure request to transmission of a document.

FIG. 8 is a diagram illustrating an example of permuted data stored in a disclosure condition storage unit;

FIG. 9 is a diagram illustrating an example of data stored in a replacement rule storage unit.

FIG. 10 is a diagram illustrating an example of data stored in a replacement location designation method storage unit.

FIG. 11 is a diagram illustrating an example of data stored in a content replacement method storage unit.

FIG. 12 is a diagram illustrating an example of the content of a disclosure target document.

FIG. 13 is a diagram showing an application result of # rule1.

FIG. 14 is a diagram showing an application result of # rule2 and # rule3.

FIG. 15 is a diagram showing an application result of # rule2 and # rule4.

FIG. 16 is a diagram showing a result of applying # rule4.

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 1 Document storage means 1a Disclosure target document 2 Blur rule determining means 2a Blur rule 3 Blur spot detecting means 4 Blur document generating means

Claims (13)

[Claims] 1. A document disclosing apparatus for disclosing an electronic document, comprising: a document storage unit for storing an electronic document; and a disclosure request that designates a document in the document storage unit. A blur rule determining unit that analyzes profile information relating to a request source and determines a blur location detection method and a blur method according to the profile information; and determining the blur rule from a disclosure target document specified in the disclosure request. A blur point detecting means for detecting a blur point by the blur point detecting method determined by the means, and a blur point detected by the blur point detecting means in the document to be disclosed, which is determined by the blur rule determining means. Document disclosure characterized by comprising: a blur document generating means for executing a blur process by a blur method and generating a blur document. Location. 2. The blur rule determining means stores in advance a plurality of blur rules including a blur point detection method and a blur method, and selects a blur rule in accordance with the profile information to obtain a blur point condition. 2. The document disclosure apparatus according to claim 1, wherein a blurring method is determined. 3. The blurring method according to claim 1, wherein said blurring rule determining means includes a blurring method by replacing a blurred portion with another notation in a determinable blurring method.
Document disclosure device according to the above. 4. The blurring rule determining means switches from a notation method showing specific contents to a notation method with a high degree of abstraction,
A plurality of notation methods hold hierarchical structure information arranged hierarchically, and a blurring method by replacing the notation method of a blurred portion with an abstract notation using the hierarchical structure information,
2. The document disclosure apparatus according to claim 1, wherein the apparatus is included in a decidable blurring method. 5. The blurring rule determining means holds hierarchical structure information in which a plurality of drawing methods are hierarchically arranged from a drawing method in which a specific image appears to a drawing method with a high abstraction level. 2. The document disclosing apparatus according to claim 1, wherein a blurring method by replacing a drawing method of a blurred portion with a drawing method having a high degree of abstraction using structure information is included in the determinable blurring method. 6. The blurring method according to claim 1, wherein the blurring rule determining means includes a blurring method by replacing the content of the blurred portion with content that does not depend on the original content. Document disclosure device according to the above. 7. The document disclosing apparatus according to claim 1, wherein said blurring rule determining means includes a blurring method based on adding noise to the content of the blurred portion in a determinable blurring method. 8. The blurring point determining method according to claim 1, wherein said blurring rule determining means includes a blurring point designating method using a semantic content of a character.
Document disclosure device according to the above. 9. The document disclosure according to claim 1, wherein the blurring rule determining means includes a blurring point designating method using layout information of the contents of the document in a determinable blurring point designating method. apparatus. 10. The document disclosure apparatus according to claim 1, wherein the blurring rule determination unit acquires profile information on a request source of the disclosure request from a requesting apparatus that has output the disclosure request. 11. A blurring point detecting method according to the profile information, wherein the blurring rule determining means analyzes profile information including information on a requester who has input a command to output the disclosure request. 2. The document disclosure apparatus according to claim 1, wherein a blurring method is determined. 12. The blurring rule determining means analyzes profile information including information on a device that has output the disclosure request, and determines a blurring point detecting method and a blurring method according to the profile information. The document disclosure apparatus according to claim 1, wherein: 13. A medium storing a document disclosure program for disclosing an electronic document, a document storage means for storing an electronic document, and a disclosure request specifying a document in the document storage means is received. Analyzing the profile information about the request source of the disclosure request, blur rule determination means to determine a blur location detection method and a blur method according to the profile information, from among the disclosure target documents specified in the disclosure request, A blur point detecting means for detecting a blur point by the blur point detecting method determined by the blur rule determining means; and a blur rule determining means for the blur point detected by the blur point detecting means in the disclosure target document. Executes the blurring process according to the blurring method determined in the above, and generates a blurred document. Medium recording a document disclosure program for causing to function over data.