Abstract: Security measures taking into consideration significance of handled information is made applicable and prevents security requirement to be set in the system from missing, in system security design. In supporting requirement defining and measures planning, the system as the target of design is indicated divided in a plurality of zones and is classified into a path 420 communicably coupling the zones, a zone boundary 419 being a coupling part between the path 420 and each zone, and an in-zone 418, and has associated and registered to each a security requirement 403 and security measures 413 having measures to be taken divided into levels. The path 420 has also associated a level of transmitted data and the level 409 of the corresponding zone boundary 419 is determined according to the transmitted data level of the path.

Abstract: An information asset management system in a network environment includes a monitoring program 11 that monitors operation events performed by users and creates terminal logs 12, a terminal log collection program 21 that stores an integrated log 22 created by collecting the terminal logs 12, and a correlation analysis program 31 that analyzes the whereabouts of information assets using the integrated log 22. When the user exports an information asset from the network environment and when the user imports the information asset into the network environment, the monitoring program 11 monitors these export and import events including feature values of the information assets. The correlation analysis program 31 compares a pre-export feature value of each information asset with a post-import feature value of each information asset to determine whether the information assets are identical and reports a list of information assets in the organization.

Abstract: In an information control flow system, when a process reads a file with a second attribute after being through for reading of a file with a first attribute, when the second attribute is higher in level than the first attribute, a user is allowed to select first control with which the file with the second attribute is not made open, second control with which the file with the second attribute is made open after the file with the first attribute is closed, or third control with which the file with the second attribute is made open after the file with the first attribute is opened again for read-only purpose. When the user selects the first control, the first attribute is provided to a file to be written, and when the user selects the second or third control, the second attribute is provided to a file to be written.

Abstract: To identify a storage medium storing an electronic file, as a location of the electronic file, and to detect a location move of a file stemming from a replacement of a storage medium, a file management system 100 includes a log acquisition unit 110: detecting an event having occurred on a file stored in a storage medium; checking, with a table, pieces of information of logical paths of locations of the file before and after the event; identifying pieces of medium identification information of storage media in which the file is located before and after the event are identified; and then storing the pieces of medium identification information in a terminal log database as location information of the file.

Abstract: An information asset management system in a network environment includes a monitoring program 11 that monitors operation events performed by users and creates terminal logs 12, a terminal log collection program 21 that stores an integrated log 22 created by collecting the terminal logs 12, and a correlation analysis program 31 that analyzes the whereabouts of information assets using the integrated log 22. When the user exports an information asset from the network environment and when the user imports the information asset into the network environment, the monitoring program 11 monitors these export and import events including feature values of the information assets. The correlation analysis program 31 compares a pre-export feature value of each information asset with a post-import feature value of each information asset to determine whether the information assets are identical and reports a list of information assets in the organization.

Abstract: In using log lists of chain signatures to assure validity of an original, work of opening log lists to the public is reduced. A first signature server 2 generates a first chain signature to an original as an object of assurance, adds the generated first chain signature to a first log list, associating the first chain signature with the original, and sends a first certificate of custody including the first chain signature, to the sender of the original. Further, the first signature server 2 sends an arbitrary first chain signature in the log list to a second signature server 3, to receive a second certificate of custody.

Abstract: A digitized document archiving system for saving a digitized document created from a receipt or a application form scanned by a scanner and related information created by registration device in a digitized document management device, wherein the digitized document management device performs a double scanning check with reference to a double scanning check verification and registration data for a double scanning check when it receives a double scanning check request including a characteristic quantity from the registration device, and sends the check result to the registration device, and the registration device deletes the created digitized document and the corresponding related information, if it is determined as double scanning.

Abstract: A character recognition process is executed for image data written with text information, and a digital signature is given to the character recognition results and image data. The digital signature is given to data coupling both digest values of the character recognition results and image data. The digital signature is verified, a character recognition process is executed for the image data, and further a digest value of the character recognition results is calculated and compared with the digest value of the stored character recognition results. The location where both the digest values are incoincident is identified as an alteration position.

Abstract: In using log lists of chain signatures to assure validity of an original, work of opening log lists to the public is reduced. A first signature server 2 generates a first chain signature to an original as an object of assurance, adds the generated first chain signature to a first log list, associating the first chain signature with the original, and sends a first certificate of custody including the first chain signature, to the sender of the original. Further, the first signature server 2 sends an arbitrary first chain signature in the log list to a second signature server 3, to receive a second certificate of custody.

Abstract: A shared window of the same content is displayed on each display device of a plurality of computers connected through a communication network for use in a collaborative work and objects are displayed on the window. Each object is displayed based on object management data having a plurality of types of attributes set therein and the shared windows on which the objects are displayed are limited by the attribute values of the attributes. Further, participants of the collaborative work who are permitted to erase the objects are limited by the settings of the attribute values of the attributes.

Abstract: A joint work support system includes a plurality of terminals mutually connected to one another through a network. Each terminal includes a first data communication means and an operation means. The operation means performs operations to support joint work in both a joint work state, when the terminal is connected to another terminal through the network, and a local state, when the terminal is not connected to another terminal through the network. To operate in the local state, each of the terminals includes recording data creating means, second data communication means and reproduction means.

Abstract: A conference support system includes a plurality of computers provided with a graphical user interface (GUI) system and connected by a communication network. Each computer includes a storage section having an area in which a drawing object, such as graphics, characters or the like drawn on a partial screen area shared through the communication network by access by user to the shared partial screen area and comment data concerning the drawing object are stored in association with each other, and a display control module by which the drawing object and the comment data associated with each other and stored in the storage section are displayed on a display section in association with each other, whereby a conference by users with each other can be conducted in such a manner that an individual intention for the drawing object is clearly given to participants in real time while accessing the shared partial screen area such as a shared window.