Abstract: A management apparatus (4000) detects that an upload file (30) has been uploaded to a file server apparatus (3000). The management apparatus (4000) acquires the upload file (30) and access right information (12) indicating an access right for the upload file (30) from the file server apparatus (3000). The management apparatus (4000) encrypts the upload file (30) and associates the access right information (12) with the encrypted upload file (30). The management apparatus (4000) transmits, to the file server apparatus 3000, the upload file (30) with which the access right information (12) has been associated and which has been encrypted.

Abstract: According to an example embodiment, a management server includes a monitoring means that monitors whether a file before encryption has been saved in a storage area managed by a file server, and an encryption instruction means that instructs, when the monitoring means detects that the file before encryption has been saved in the storage area, an encryption terminal to encrypt the file.

Abstract: A user apparatus (2000) acquires an access right information (20) from a first server apparatus (3000) and determines whether or not a target user (40) has an access right for a target file (10). The user apparatus (2000) acquires key information (30) for the target file (10) from a second server apparatus (4000) when the target user (40) has the access right for the target file (10). The user apparatus (2000) decrypts the target file (10) by using the key information (30).

Abstract: According to an example embodiment, a management server includes a monitoring means for monitoring whether a file has been saved in a storage area managed by a file server, a determination means for determining, when the monitoring means detects that a file has been saved in the storage area, whether identification information on a user who has saved the file matches identification information on a specific user, and a privilege change means for changing, when the determination means determines that the identification information on the user who has saved the file matches the identification information on the specific user, an access privilege of the file.

Abstract: Access right information (20) indicating an access right of a user for a target file (10) is stored in a storage device (3100) accessible from a server apparatus (3000). A management apparatus (4000) acquires the access right information (20) from the server apparatus (3000) and puts it in a storage device (4100). The management apparatus (4000) acquires a request for key information that is used to decrypt a target file (10) from a user apparatus (2000) operated by a target user (40). The management apparatus (4000) determines, upon the acquisition of the request, whether or not the target user (10) has an access right for the target file (40) by using the access right information (20) stored in the storage device (4100). The management apparatus (4000) outputs the key information to the user apparatus (2000) when it is determined that the target user (40) has the access right for the target file (10).