Information management system and information management method
The objective of the present invention is to achieve both information security and user convenience in an information management system that manages information related to an automated analyzer, even if conditions of unauthorized use from a remote terminal occur. An information management system according to the present invention, upon detecting a communication disconnection or conditions of unauthorized use from a remote terminal, performs one or both of issuing a warning to an administrator or lowering the level of access rights, and enables access to at least a portion of the information even if the level of access rights is lowered.
1 . An information management system that provides data describing information regarding an automated analyzer analyzing a sample to a remote terminal, the information management system comprising:
a server configured to manage an access right of a user accessing the information using the remote terminal, wherein
the server includes an access management unit that detects occurrence of communication disconnection between the remote terminal and the server or a situation of unauthorized use of the remote terminal,
when the communication disconnection or the situation of the unauthorized use is detected, the access management unit performs at least one of operations of
issuing a warning to an administrator of the information management system, and
lowering an access right of the remote terminal to the information from a first access right level before the communication disconnection or the situation of the unauthorized use to a second access right level lower than the first access right level,
wherein in the second access right level, a range accessible to the information is narrower than a range of the first access right level,
the second access right level is configured to be accessible to at least part of the information,
the server includes a storage unit that stores access right data defining a first range of the information accessible at the first access right level and a second range of the information accessible at the second access right level,
the access management unit lowers an access right of the remote terminal from the first access right level to the second access right level when the communication disconnection is detected, and
the access management unit denies access to the first range and permits access to the second range when access to the information is requested without re-login of the remote terminal to the server after the communication disconnection is detected.
2 . The information management system according to claim 1 , wherein
the access management unit permits the access to the first range when the remote terminal re-logs in and requests the server to access the information after the communication disconnection is detected.
3 . The information management system according to claim 2 , wherein
the access right data defines an access right in a combination of a role of the user and classification of the information provided by the server, and
the access management unit grants an access right corresponding to the role of the user for each combination when the user logs in the server using the remote terminal.
4 . The information management system according to claim 1 , wherein
the server further includes an input reception unit that receives a designation input of designating a check rule describing a determination criterion for detecting that the situation of the unauthorized use occurs,
the input reception unit provides a check rule input screen used to input the designation input, and
the check rule input screen is configured to input, as a determination condition configuring the check rule, at least one of
whether connection between the remote terminal and the server is established,
a duration time passing without access of the remote terminal accessing the information,
whether the remote terminal accessed the server from one of areas formed in a space where the automated analyzer is installed,
an identifier (ID) for individually identifying the remote terminal,
an identifier (ID) for individually identifying the user,
a work schedule of the user, and
classification of the information provided by the server.
5 . The information management system according to claim 4 , wherein
the check rule input screen is configured to input the designation input of designating to perform at least one of operations of issuing the warning or lowering the access right for each combination of the determination condition, and
the access management unit performs at least one of the operations of issuing the warning or lowering the access right according to the designation by the designation input.
6 . The information management system according to claim 1 , wherein the access management unit determines that the situation of the unauthorized use occurs when the same user simultaneously logs in the server using first and second remote terminals and a distance between positions of the first and second remote terminals exceeds a threshold.
7 . The information management system according to claim 1 , wherein
the access management unit presents the user who is logging in the server using the remote terminal and a list indicating whether the communication disconnection or the situation of the unauthorized use occurs for each user on the server,
the access management unit provides a countermeasure input screen for inputting a countermeasure taken by designating a user on the list for whom the communication disconnection or the situation of the unauthorized use occurs among the users on the list, and
the access management unit takes the countermeasure input on the countermeasure input screen for the user designated on the list.
8 . The information management system according to claim 1 , wherein
the access management unit acquires, as a state of the remote terminal from the remote terminal, at least one of
a connection source area of the remote terminal when the remote terminal accesses the server through wireless communication,
a communication state between the remote terminal and the server, and
an operation history in the remote terminal, and
the access management unit detects the situation of the unauthorized use according to the acquired state of the remote terminal.
9 . The information management system according to claim 1 , wherein
the remote terminal downloads the information from the server and stores the information in the remote terminal, and
the remote terminal presents the information downloaded from the server on the remote terminal even while communication between the remote terminal and the server is disconnected.
10 . The information management system according to claim 9 , wherein
the remote terminal includes a terminal access management unit that detects the situation of the unauthorized use, and
the terminal access management unit lowers the access right of the remote terminal to the information to a level equal to the second access right level by deleting at least part of the information downloaded from the server from the remote terminal when the situation of the unauthorized use is detected while communication between the remote terminal and the server is disconnected.
11 . The information management system according to claim 10 , wherein
the terminal access management unit acquires a check rule for detecting occurrence of the situation of the unauthorized use from the server, and
the terminal access management unit detects the situation of the unauthorized use according to the check rule.
12 . The information management system according to claim 9 , wherein
the remote terminal includes a terminal access management unit that detects the situation of the unauthorized use,
the terminal access management unit lowers the access right of the remote terminal to the information downloaded from the server to the remote terminal to a level equal to the second access right level when the situation of the unauthorized use is detected during the disconnection of the communication between the remote terminal and the server,
the terminal access management unit notifies the server of the lowered access right level when the communication between the remote terminal and the server is recovered, and
the access management unit controls the access right of the remote terminal to the information according to the access right level received through the notification.
13 . The information management system according to claim 9 , wherein
the remote terminal includes a terminal access management unit that detects the situation of the unauthorized use,
the terminal access management unit maintains an access right to the information downloaded from the server to the remote terminal to a level equal to the level before disconnection of the communication when the situation of the unauthorized use is not detected while communication between the remote terminal and the server is disconnected,
the terminal access management unit notifies the server of the maintained access right level when the communication between the remote terminal and the server is recovered, and
the access management unit controls the access right of the remote terminal to the information according to the access right level received through the notification.
14 . An information management method of managing information regarding an automated analyzer analyzing a sample to a remote terminal using an information management system that provides data describing the information, the information management method comprising:
a step of managing an access right of a user accessing the information using the remote terminal, wherein
the step of managing the access right includes a step of detecting occurrence of communication disconnection between the remote terminal and the information management system or a situation of unauthorized use of the remote terminal,
when the communication disconnection or the situation of the unauthorized use is detected in the step of detecting the occurrence, at least one of operations of
issuing a warning to an administrator of the information, and
lowering an access right of the remote terminal to the information from a first access right level before the communication disconnection or the situation of the unauthorized use to a second access right level lower than the first access right level, is performed,
wherein in the second access right level, a range accessible to the information is narrower than a range of the first access right level, and
the second access right level is configured to be accessible to at least part of the information,
the information management system includes a storage unit that stores access right data defining a first range of the information accessible at the first access right level and a second range of the information accessible at the second access right level,
in the step of managing the access right, an access right of the remote terminal is lowered from the first access right level to the second access right level when the communication disconnection is detected, and
in the step of managing the access right, access to the first range is denied and access to the second range is permitted when access to the information is requested without re-login of the remote terminal to the information management system after the communication disconnection is detected.