JP2008197788A - Electronic document transmission system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an electronic document transmitting system capable of preventing approval omission and an destination error, and appropriately encrypting electronic data being a secret document so as to transmit it to a destination party. <P>SOLUTION: In the electronic document transmitting system, a transmission information registration processing part 24 registers transmission information (an electronic mail document, an electronic document, the destination party, an approver, and a transmitter name) designated by a transmitter in a transmission information storage part 23, and requests the approver to perform approval. An approval processing part 25 updates the transmission information when the approver corrects the transmission information, and approves the status of the transmission information approved by the approver. A transmission processing part 26 generates an encrypted electronic document which is obtained by encrypting or safety-protecting the electronic document of the transmission information with the status approved therein, and then, selects whether the electronic document is transmitted by attachment to electronic mail or via a data exchange server according to the amount of data of the generated and encrypted electronic document. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to an electronic document transmission system that transmits secret information via a network, and more particularly, an electronic document transmission system that selects and transmits a transmission method according to the amount of secret information after approving the secret information. It is about.

  Due to the widespread use of the Internet, not only in-house but also external materials are often sent using e-mail. It can be included in the body of an e-mail if it is simple, but in order to prevent leakage of information on the Internet, important documents such as sales quotes, requests, and product development The secret document such as related information is not described in the body of the e-mail, but the electronic data of the secret document is encrypted as an attached file, and the encrypted attached file is attached to the e-mail and transmitted.

  However, in many cases, the amount of data attached to an e-mail is limited in consideration of the load on the e-mail server. Therefore, when the amount of data in the attached file is large, the sender divides the attached file into data amounts according to the limit value of the e-mail server, encrypts each divided attached file, and creates e-mails for the number of divisions. Each encrypted attachment must be attached and transmitted. In addition, the recipient must receive a plurality of e-mails and decrypt and assemble each attached file. These tasks are not only troublesome for the sender and receiver, but the more the number of divisions, the more likely it is that mistakes such as attaching the same file or missing files occur more easily. Arise.

  For example, Patent Document 1 and Patent Document 2 are known as conventional techniques for improving such a problem. Japanese Patent Application Laid-Open No. 2004-151561 discloses a technique related to mail encryption / decryption using an electronic mail server. Patent Document 2 discloses a technique of automatically using a data exchange server when an attached file having a large amount of data is transmitted.

JP-A-11-266279 JP-A-2005-78278

  If the prior art of the above-mentioned patent document 1 is used, it is possible to prevent leakage of a secret document transmitted via the Internet without the sender and receiver being aware of encryption / decryption. Further, when the conventional technique is used in Patent Document 2, it is not necessary for the sender and the receiver to divide the secret document according to the amount of data, and the same file is attached or a missing file appears. Mistakes can be prevented.

  However, in the prior arts described in Patent Document 1 and Patent Document 2, since the sender inputs and sends the e-mail address, only the sender confirms the address. For this reason, there is a possibility that the secret document may be input by mistake and transmitted to another destination, and there is a problem that leakage of the secret document cannot be completely prevented.

  In addition, many secret documents and e-mails require approval. For this reason, even if the conventional techniques described in Patent Document 1 and Patent Document 2 are used, the contents of the secret document and the e-mail cannot be approved, and the destination partner cannot be approved. There was also a problem that could occur.

  The present invention has been made in view of the above, and when transmitting a confidential document as electronic data, prevents an omission of authorization or a destination error, and performs an appropriate encryption process on the confidential document and transmits it to a transmission partner. It is an object of the present invention to obtain an electronic document transmission system that can do this.

  In order to solve the above-described problems and achieve the object, the present invention provides an electronic mail server that distributes electronic mail, a data exchange server that temporarily stores electronic documents, registered electronic mail documents, electronic documents, and In an electronic document transmission system having a workflow server that approves a destination partner, the workflow server sends the electronic document to a destination partner via the electronic mail server or the data exchange server according to the data amount of the approved electronic document. It is characterized by comprising transmitting.

  According to the present invention, after the workflow server approves the registered electronic mail document, electronic document, and destination, the electronic mail server that distributes the electronic document according to the data amount of the electronic document, or the electronic Since the document is sent to the destination via a data exchange server that temporarily stores the document, when sending a confidential document as electronic data, it is possible to prevent omission of approval or a destination error, and to convert the confidential document into electronic data. There is an effect that it is possible to obtain an electronic document transmission system capable of performing appropriate encryption processing and transmitting it to a destination partner.

  Embodiments of an electronic document transmission system according to the present invention will be described below in detail with reference to the drawings. In this embodiment, a case where a confidential business document (trade secret document) is transmitted as an electronic document will be described as an example. However, the electronic document to be transmitted is not limited to this. The present invention is not limited by the form.

  An embodiment of the present invention will be described with reference to FIGS. FIG. 1 is a schematic diagram showing the configuration of an electronic document transmission system according to the present invention. In FIG. 1, an electronic document transmission system includes a plurality of (in this case, three) personal computers (hereinafter referred to as PCs) 1-1 to 1-3, a workflow server 2, an e-mail server 3, and a data exchange server 5. Is connected to the network 4 to which the electronic mail server 9 and the PC 10 are connected. For example, the networks 4 and 8 are networks such as a local area network (LAN), the network 4 is an in-house network on the transmission side of trade secret information, and the network 8 is a network on the reception side of trade secret information.

  The PCs 1-1 to 1-3 are used for accessing the workflow server 2, the PC 1-1 is used for a sender who transmits trade secret information (e-mail document and trade secret document), and the PC 1-2 is trade secret information. PC 1-3 is a personal computer used by an in-house recipient who receives trade secret information. The PC 10 is a personal computer used by a recipient outside the company. In FIG. 1, in order to simplify the following description, the PCs 1-1 to 1-3 connected to the network 4 that is an in-house network are used for the sender, the approver, and the in-house receiver. The sender, the approver, and the in-house recipient may use any PC as long as they log in with their respective accounts.

  The workflow server 2 notifies the approver when the trade secret information, destination partner, approver, and sender name are registered by the sender, and based on the data amount of the trade secret document approved by the approver. The workflow server transmits the trade secret information, the destination information indicating the addressee, and the sender information indicating the sender to the data exchange servers 5 and 7 or the e-mail servers 3 and 9. The data exchange servers 5 and 7 hold the trade secret document of the trade secret information received from the workflow server 2 and notify the recipient (destination partner) of the trade secret information that the trade secret document is held. In addition, the workflow server 2 downloads the trade secret document in response to a request from the recipient (in this case, access from the PCs 1-3 and 10). The e-mail servers 3 and 9 are general e-mail servers, and distribute e-mails.

  Next, the operation of the trade secret information transmission system according to the present invention will be described. The sender accesses the workflow server 2 using the PC 1-1, and sends an e-mail document, a trade secret document (electronic data such as a quotation and attached file of an e-mail), a destination of the e-mail document, and trade secret information. The approver is registered in the workflow server 2. The workflow server 2 stores an email document, an attached file, a destination, and an approver, generates an email (approval request notification) requesting the approver to approve transmission information, and generates the generated approval request notification It is transmitted to the approver via the mail server 3.

  The approver receives an approval request notification from the electronic mail server 3 using the PC 1-2. Accordingly, the approver recognizes that there is transmission information to be approved, and accesses the workflow server 2 using the PC 1-2. The approver uses the PC 1-2 to confirm whether the contents of the e-mail document and attached file registered in the workflow server 2 and the destination partner are appropriate, the confidentiality agreement with the destination partner, and the destination includes overseas. If it is, the approval process for confirming and approving whether or not the transport manager is included in the approver is performed. When the contents of the e-mail document and attachment file stored by the approval process and the recipient are approved, the workflow server 2 encrypts or attaches the encrypted attachment to the attachment file based on a predetermined condition. Generate a file. The workflow server 2 compares the data amount of the encrypted attached file with a predetermined data amount threshold.

  When the data amount of the encrypted attached file is larger than the data amount threshold value, the workflow server 2 sends the e-mail document, the encrypted attached file, information indicating the destination partner (destination address), and transmission to the data exchange servers 5 and 7. Information indicating the sender (source address) is transmitted. Here, when the destination address is an in-house address, the workflow server 2 transmits the e-mail document, the encrypted attached file, the destination address, and the source address to the in-house data exchange server 5 via the network 4. If the destination address of the e-mail document is an external address, the e-mail document, the encrypted attached file, the destination address, and the data exchange server 7 connected to the Internet 6 via the network 4 and the Internet 6 Send the source address.

  When receiving the e-mail document, the encrypted attachment file, the destination address, and the transmission source address, the data exchange servers 5 and 7 temporarily store the received encrypted attachment file and store the encrypted attachment file. Is added to the e-mail document (for example, URL: Uniform Resource Locator). The data exchange servers 5 and 7 transmit the e-mail document with the URL added thereto to the destination address.

  The recipient receives the e-mail document from the data exchange servers 5 and 7 using the PCs 1 and 3 and recognizes that the encrypted attached file is held in the data exchange servers 5 and 7. The recipient accesses the data exchange servers 5 and 7 using the PCs 1 to 3 and downloads the encrypted attached file held in the URL in the e-mail document.

  On the other hand, when the data amount of the encrypted attachment file is equal to or smaller than the data amount threshold, the workflow server 2 transmits the e-mail document, the encrypted attachment file, the destination address, and the transmission source address to the e-mail servers 3 and 9. . The electronic mail servers 3 and 9 transmit the electronic mail document and the encrypted attached file to the destination address by a general electronic mail transmission process. In FIG. 1, when the destination address indicates an external address, the e-mail document and the encrypted attached file are transmitted to the e-mail server 9 via the network 4, the Internet 6, and the network 8, and the e-mail server 9, when the destination address indicates an internal address, the e-mail document and the encrypted attached file are transmitted to the e-mail server 3 via the network 4 and sent to the e-mail server. 3 to the recipient in the company.

  The recipient performs a predetermined decryption process on the encrypted attached file attached to the e-mail document or the encrypted attached file downloaded from the data exchange servers 5 and 7 using the PCs 1-3 and 10. Recognize the contents of attached files.

  Next, details of the workflow server 2 will be described. FIG. 2 is a block diagram showing the configuration of the workflow server 2 shown in FIG. In FIG. 2, the workflow server 2 includes an external address management DB 21, an in-house address management DB 22, a transmission information storage unit 23, an approval processing unit 25, a transmission processing unit 26, and an approval transmission recording unit 27.

  External mail address related information is registered in the external address management DB 21. FIG. 3 shows registration items of external mail address related information registered in the external address management DB 21 shown in FIG. In FIG. 3, as registration items of external mail address related information, destination information 211 in which a destination partner such as a company name, affiliation, and name is registered, and a destination in which a destination partner's mail address registered in the destination information 211 is registered. Address information 212, confidentiality contract information 213 in which the presence or absence of a confidentiality contract with the destination partner registered in the destination information 211 is registered, country of residence information 214 in which the country of residence of the destination partner registered in the destination information is registered, Encryption restriction information 215 for registering whether there is encryption restriction with the destination partner registered in the destination information 211, and approval of the export manager is required when sending a document to the destination partner registered in the destination information 211 The infusion approval information 216 in which whether or not is registered is listed.

  Returning to FIG. 2, in-house mail address related information is registered in the in-house address management DB 22. FIG. 4 shows registration items of in-house mail address related information registered in the in-house address management DB 22 shown in FIG. In FIG. 4, as registration items of in-house mail address related information, destination information 221 in which a destination partner such as affiliation and name is registered, and destination address information 222 in which a destination partner's mail address registered in the destination information 221 is registered. The country of residence information 224 in which the country of residence of the destination partner registered in the destination information 221 is registered, the encryption regulation information 225 in which the presence or absence of encryption regulation with the destination partner registered in the destination information 221 is registered, and the destination This example includes infusion approval information 226 for registering whether or not the approval of the export manager is necessary when transmitting a document to the destination registered in the information 221.

  Returning to FIG. 2, the transmission information storage unit 23 stores an electronic mail document to be transmitted, an attached file, a destination partner, an approver, and a sender name. The transmission information registration processing unit 24 includes a mail document registration unit 241, a file attachment unit 242, a destination setting unit 243, an approver setting unit 244, and an approval request unit 245.

  The mail document registration unit 241 stores the electronic mail document received from the PC 1-1 in the transmission information storage unit 23. The file attachment unit 242 stores the trade secret document received from the PC 1-1 in the transmission information storage unit 23 as an attached file in association with the electronic mail document. The destination setting unit 243 stores the destination partner received from the PC 1-1 in the transmission information storage unit 23 in association with the electronic mail document.

  The approver setting unit 244 stores the approver received from the PC 1-1 in the transmission information storage unit 23 in association with the electronic mail document. The approval request unit 245 generates an approval request mail for requesting approval of transmission information, and transmits the generated approval request mail to the approver via the e-mail server 3.

  The approval processing unit 25 includes a mail document registration unit 251, a file attachment unit 252, a destination setting unit 253, an approver setting unit 254, an approval registration processing unit 255, and a denial processing unit 256. The mail document registration unit 251 transmits the electronic mail document registered in the transmission information storage unit 23 to the PC 1-2 for display. In addition, when the e-mail document is corrected by the approver, the e-mail document registration unit 251 updates the e-mail document stored in the transmission information storage unit 23 with the corrected e-mail document.

  The file attachment unit 252 transmits the attached file registered in the transmission information storage unit 23 to the PC 1-2 for display. Further, when the attached file is corrected by the approver, the file attaching unit 252 updates the attached file stored in the transmission information storage unit 23 with the corrected attached file.

  The destination setting unit 253 transmits the destination partner registered in the transmission information storage unit 23 to the PC 1-2 for display. In addition, when the destination partner is corrected by the approver, the destination setting unit 253 updates the destination partner stored in the transmission information storage unit 23 with the corrected destination partner.

  The approver setting unit 254 stores the new approver received from the PC 1-2 in the transmission information storage unit 23. Upon receiving an approval notification from the PC 1-2, the approval registration processing unit 255 performs approval registration processing for the e-mail document, the attached file, and the destination partner. When the rejection processing unit 256 receives a rejection notification from the PC 1-2, the rejection processing unit 256 performs rejection processing of the electronic mail document, the attached file, and the destination partner.

  The transmission processing unit 26 includes an encryption processing unit 261, a transmission method determination unit 262, a mail transmission unit 263, and a data exchange server transmission unit 264. The encryption processing unit 261 encrypts the attached file approved based on the encryption regulation information 215 and 225 registered in the external address management DB 21 and the internal address management DB 22 and encrypts the attached file. Is generated.

  Based on the data amount of the encrypted attachment file, the transmission method determination unit 262 determines whether to transmit the encrypted attachment file attached to the e-mail document or upload it to the data exchange servers 5 and 7. When the data amount of the encrypted attachment file is larger than the data amount threshold, the transmission method determination unit 262 transmits the email document name registered in the transmission information storage unit 23 in association with the encrypted attachment file. The notification is sent to the data exchange server transmission unit 264, and when the data amount of the encrypted attachment file is equal to or smaller than the data amount threshold, the email registered in the transmission information storage unit 23 in association with the encrypted attachment file A transmission notification including the document name is notified to the mail transmission unit 263.

  The mail transmission unit 263 receives the notification from the transmission method determination unit 262, the electronic mail document indicated by the notified electronic mail document name, and the encrypted data registered in the transmission information storage unit 23 in association with the electronic mail document The attached file, the destination address indicating the destination, and the transmission source address indicating the sender are transmitted to the electronic mail servers 3 and 9 based on the destination address. In addition, the mail transmission unit 263 registers in the approval transmission recording unit 27 that the electronic mail document, the encrypted attached file, the destination address, and the transmission source address have been transmitted to the electronic mail servers 3 and 9.

  The data exchange server transmission unit 264 receives the notification from the transmission method determination unit 262, the e-mail document indicated by the e-mail document name notified, and the encryption registered in the transmission information storage unit 23 in association with the e-mail document. The converted attachment file, the destination address indicating the destination, and the transmission source address indicating the sender are transmitted to the data exchange servers 5 and 7 based on the destination address. Further, the data exchange server transmission unit 264 registers in the approval transmission recording unit 27 that the encrypted attachment file, the destination address, the transmission source address, and the transmission to the data exchange servers 5 and 7 are associated with the e-mail document. To do.

  Next, detailed operations of the workflow server 2 will be described with reference to the flowcharts of FIGS. 1 to 4 and FIG. 5. When there is an access from the sender (in this case, there is an access from the PC 1-1), the transmission information registration processing unit 24 sends the e-mail document, the trade secret document (attached file), the destination partner, and the sender. A transmission information registration process for storing the name in the transmission information storage unit 23 is executed (steps S100 and S101).

  A detailed operation of the transmission information registration process will be described with reference to the flowchart of FIG. The mail document registration unit 241 of the workflow server 2 displays an e-mail document creation screen on the PC 1-1. The sender of trade secret information creates an e-mail document using the PC 1-1. When the completion of creation of the e-mail document is input from the sender, the PC 1-1 transmits the e-mail document to the workflow server 2. When the e-mail document is received from the PC 1-1, the e-mail document registration unit 241 of the workflow server 2 registers the received e-mail document in the transmission information storage unit 23 (step S200). The mail document registration unit 241 notifies the file attachment unit 242 that the electronic mail document has been registered.

  The file attachment unit 242 of the workflow server 2 requests the attached file from the PC 1-1. The sender inputs an attached file name to be attached to the electronic mail document to the PC 1-1, and the PC 1-1 transmits the attached file indicated by the input attached file name to the workflow server 2. When the attachment file is received from the PC 1-1, the file attachment unit 242 of the workflow server 2 registers the attachment file received in association with the e-mail document in the transmission information storage unit 23 (step S201). The file attachment unit 242 notifies the destination setting unit 243 that the attached file has been registered.

  The destination setting unit 243 of the workflow server 2 transmits the destination partner registered in the destination information 211 of the external address management DB 21 and the destination information 221 of the internal address management DB 22 to the PC 1-1 for display. The sender selects at least one destination partner from the destination partners displayed on the PC 1-1. The PC 1-1 transmits the selected destination partner to the workflow server 2. When the destination partner is received from the PC 1-1, the destination setting unit 243 of the workflow server 2 registers the received destination partner in the transmission information storage unit 23 in association with the electronic mail document (step 202). The destination setting unit 243 notifies the approver setting unit 244 that the destination partner has been registered.

  The approver setting unit 244 of the workflow server 2 displays the destination partner registered in the destination information 221 of the in-house address management DB 22 on the PC 1-1 and requests setting of the approver name. The sender selects at least one approver from the destinations displayed on the PC 1-1. The PC 1-1 transmits the approver name of the selected approver to the workflow server 2. When the approver name is received from the PC 1-1, the approver setting unit 244 of the workflow server 2 registers the received approver name in the transmission information storage unit 23 in association with the e-mail document (step S203). The approver setting unit 244 registers the sender in the transmission information storage unit 23 in association with the e-mail document. The approver setting unit 244 notifies the approval request unit 245 that the name of the approver has been registered.

  The approval request unit 245 of the workflow server 2 transmits the transmission information registered in the transmission information storage unit 23 (e-mail document and attached file associated with the e-mail document, destination partner, approver name, and sender name). The status is waited for approval (step S204). As a result, the transmission information can be changed only by the approval process executed by the approval processing unit 25, and cannot be changed by access other than the approver.

  The approval request unit 245 generates an approval request notification for requesting approval of transmission information. The approval request notification includes information that can identify trade secret information to be approved, such as an e-mail document name. The approval request unit 245 searches the destination information 221 in the in-house address management DB 22 using the name of the approver registered in the transmission information storage unit 23 as a search key, and stores it in the destination address information 222 in association with the destination partner that matches the search key. Get the registered destination address. The approval request unit 245 transmits the approval request notification generated via the e-mail server 3 to the acquired destination address, that is, to the approver (step S205), and ends the transmission information registration process.

  Returning to FIG. 5, when the transmission information registration process is completed, the workflow server 2 waits for access from the approver. The approver recognizes that there is transmission information to be approved by the approval request notification transmitted by the transmission information registration process. The approver accesses the workflow server 2 using the PC 1-2. When there is an access from the approver, that is, access from the PC 1-2, the approval processing unit 25 of the workflow server 2 executes an approval process for approving the transmission information registered in the transmission information storage unit 23 by the transmission information registration process. (Steps S102 and S103).

  The detailed operation of the approval process will be described with reference to the flowchart of FIG. The mail document registration unit 251 of the workflow server 2 displays the electronic mail document registered in the transmission information storage unit 23 on the PC 1-2 and requests confirmation of the electronic mail document. The approver confirms the e-mail document displayed on the PC 1-2. The approver corrects the electronic mail document when the electronic mail document displayed on the PC 1-2 needs to be corrected. The PC 1-2 transmits the electronic mail document confirmed or corrected by the approver to the workflow server 2. The mail document registration unit 251 of the workflow server 2 updates the e-mail document requested for confirmation registered in the transmission information storage unit 23 to the e-mail document received from the PC 1-2 (step S300).

  The file attachment unit 252 of the workflow server 2 displays the attachment file registered in the transmission information storage unit 23 on the PC 1-2 and requests confirmation of the attachment file. The approver confirms the attached file displayed on the PC 1-2. The approver corrects the attached file when the attached file displayed on the PC 1-2 needs to be corrected. The PC 1-2 transmits the attached file confirmed or corrected by the approver to the workflow server 2. The file attachment unit 252 of the workflow server 2 updates the attachment file requested for confirmation registered in the transmission information storage unit 23 to the attachment file received from the PC 1-2 (step S301).

  The destination setting unit 253 of the workflow server 2 displays the destination partner registered in the transmission information storage unit 23 on the PC 1-2 and requests approval of the destination partner. The approver confirms the destination partner displayed on the PC 1-2. The approver corrects the destination partner when the destination partner displayed on the PC 1-2 needs to be corrected. The PC 1-2 transmits the confirmed or corrected destination partner to the workflow server 2. The destination setting unit 253 of the workflow server 2 updates the destination partner who requested the confirmation registered in the transmission information storage unit 23 to the destination partner received from the PC 1-2 (step S302).

  The approver setting unit 254 of the workflow server 2 displays the destination partner registered in the destination information 221 of the in-house address management DB 22 on the PC 1-2 and requests setting of the approver. When an approver is required in addition to the approver, the approver selects an approver from the destinations displayed on the PC 1-2 and inputs the approver to the PC 1-2. The PC 1-2 transmits to the workflow server 2 that the set approver or approver is unnecessary.

  When the approver is set from the PC 1-2 (Yes in step S303), an approval request notification for notifying that there is an approval request is generated. The approver setting unit 254 searches the address information 221 in the in-house address management DB 22 using the approver received from the PC 1-2 as a search key, and is registered in the destination address information 222 in association with the destination partner that matches the search key. Get the destination address. The approver setting unit 254 transmits the approval request notification generated via the electronic mail server 3 to the acquired destination address, that is, the newly set approver address (step S304), and ends the approval process. The approver newly set by the approval request notification can recognize the transmission information to be approved and can approve the transmission information.

  On the other hand, if an approver is not necessary other than itself, the approver inputs approval information indicating whether or not to approve the confirmed electronic mail document, attached file, and destination partner to the PC 1-2. The PC 1-2 transmits the input approval information to the workflow server 2. When the approver is not set from the PC 1-2 (No at Step S303), the approval processing unit 25 of the workflow server 2 determines whether the approval information indicates approval. When the approval information indicates approval (step S305, Yes), the approval processing unit 25 notifies the approval registration processing unit 255 of the approval.

  The approval registration processing unit 255 registers that the approval by the export manager is required for the infusion approval information 216 in the external address management DB 21 and the infusion approval information 226 in the internal address management DB 22 in association with the approved destination. It is determined whether or not it has been done. If it is registered that the approval by the export manager is required in the infusion approval information 216 in the external address management DB 21 and the infusion approval information 226 in the internal address management DB 22 in association with the approved destination, the approval request A notification is generated, and the generated approval request notification is transmitted to a predetermined export manager via the e-mail server 3 to end the approval process. In other words, if it is registered that the approval by the export manager is required in the infusion approval information 216 in the external address management DB 21 and the infusion approval information 226 in the internal address management DB 22, it is not designated as an approver. Even in this case, the approval registration processing unit 255 designates it as an approver.

  If it is not registered in the infusion approval information 216 in the external address management DB 21 and the infusion approval information 226 in the in-house address management DB 22 that the approval by the export manager is registered in correspondence with the approved destination, approval registration The processing unit 255 sets the status of the transmission information to approved (step S306) and ends the approval process.

  When the approval information received from the PC 1-2 indicates denial (No in step S305), the approval processing unit 25 notifies the denial processing unit 256 of the denial. The denial processing unit 256 makes the status of the transmission information being created (step S307). Further, the rejection processing unit 256 generates a rejection notification that notifies that the transmission information is rejected.

  The rejection processing unit 256 acquires the sender of the rejected transmission information (sender associated with the e-mail document) from the transmission information storage unit 23. The denial processing unit 256 searches the destination information 221 in the in-house address management DB 22 using the acquired sender as a search key, and acquires the destination address registered in the destination address information 222 in association with the destination partner that matches the search key. . The denial processing unit 256 transmits the denial notification generated via the e-mail server 3 to the acquired destination address, that is, the sender (step S308) and ends the approval process. The sender can recognize that the transmission information has been rejected by the rejection notification and can correct the transmission information using the PC 1-1.

  Returning to FIG. 5, when the approval process is completed, the workflow server 2 confirms the status of the transmission information. If the status of the transmission information is being created (step S104, Yes), the workflow server 2 waits for access from the sender, and until the status of the transmission information is not being created, that is, the status of the transmission information is waiting for approval or approval. The processing of steps S100 to S104 is repeated until it is finished. If the status of the transmission information is waiting for approval (Yes at Step S105), the workflow server 2 waits for access from the approver, and repeats the processing of Steps S102 to S104 until the status of the transmission information becomes approved. When the status of the transmission information is not waiting for approval (No at Step S105), that is, when the status of the transmission information is already approved, the transmission processing unit 26 transmits the email document and the attached file whose status is approved to the destination. The transmission process is executed (step S106), and the process is terminated.

  The detailed operation of the transmission process will be described with reference to the flowchart of FIG. Based on the transmission information, the external address management DB 21, and the internal address management DB 22, the encryption processing unit 261 determines whether there is an encryption restriction on the destination of the e-mail document (step S400). Specifically, the encryption processing unit 261 acquires a destination partner registered in the transmission information storage unit 23 in association with an email document whose status has been approved. The destination information 211 of the external address management DB 21 and the destination information 221 of the internal address management DB 22 are searched using the acquired destination partner as a search key, and are registered in the encryption restriction information 215 and 225 in association with the destination partner that matches the search key. Get encryption restriction information. If the acquired encryption restriction information indicates that there is no encryption restriction (No in step S400), the encryption processing unit 261 performs predetermined encryption on the attached file to generate an encrypted attached file (step S400). S401).

  The encryption password used for encryption may be designated by the sender or the approver, or may be automatically generated by the encryption processing unit 261. When the sender designates the encrypted password, in the approval process, the approval registration processing unit 255 sends an approval completion notification indicating that the approval of the trade secret information and the destination has been completed to the sender via the e-mail server 3. The sender who received the notification of approval completion accesses the workflow server 2 using the PC 1-1.

  The encryption processing unit 261 displays a screen for requesting an encryption password on the PC 1-1, and the PC 1-1 transmits the encryption password input by the sender to the workflow server 2. The encryption processing unit 261 of the workflow server 2 satisfies a predetermined restriction condition such as whether the number of characters of the encrypted password or three kinds of alphanumeric special characters are mixedly included in the received encrypted password. It is determined whether or not. The encryption processing unit 261 displays the screen for requesting the encryption password again on the PC 1-1 when the constraint condition is not satisfied, and attaches it using the received encryption password when the constraint condition is satisfied. The file may be encrypted.

  When the approver designates the encrypted password, after the approval process is completed, the screen for requesting the encrypted password by the encryption processing unit 261 is displayed on the PC 1-2, and the approver inputs the encrypted password. You can make it as required.

  When the encrypted password is automatically generated, the encryption processing unit 261 displays the generated encrypted password on the PC 1-1 or PC 1-2, or is sent to the sender or approved via the e-mail server 3. Send an encryption password notification including the encryption password to the sender and notify the sender or approver.

  The encryption processing unit 261 registers the generated encrypted attachment in the transmission information storage unit 23 in association with the e-mail document. On the other hand, when the acquired encryption restriction information indicates that there is encryption restriction, the encryption processing unit 261 generates an encrypted attached file by performing security protection that is not a restriction target on the attached file (step S402). . Examples of safety protection include safety measures such as compression with a password. In this case as well, the password may be specified by the sender or the approver, or the encryption processing unit 261 may automatically generate the password, as with the encryption password. The encryption processing unit 261 registers the generated encrypted attachment in the transmission information storage unit 23 in association with the electronic mail document.

  When a plurality of destination partners are registered, the encryption processing unit 261 performs encryption or security protection corresponding to each destination partner on the attached file. In addition, when the destination is in-house (when transmission is possible only through the network 4 without going through the Internet 6), the attached file is encrypted and secured without depending on the encryption regulation information. The attached file may be left as it is.

  The transmission method determination unit 262 compares the data amount of the encrypted attached file with a predetermined data amount threshold (step S403). When the data amount of the encrypted attached file is larger than the data amount threshold value (Yes in step S403), the transmission method determination unit 262 outputs a transmission notification including the e-mail document name to the data exchange server transmission unit 264.

  The data exchange server transmitting unit 264 includes an e-mail document indicated by the e-mail document name included in the transmission notification, an encrypted attached file associated with the e-mail document, and a destination indicating the destination address of the destination The information and the transmission source address indicating the sender are transmitted to the data exchange servers 5 and 7 (step S404).

  Specifically, the data exchange server transmission unit 264 acquires the destination partner associated with the electronic mail document indicated by the electronic mail document name from the transmission information storage unit 23. The data exchange server transmission unit 264 searches the destination information 211 of the external address management DB 21 and the destination information 221 of the internal address management DB 22 using the acquired destination partner as a search key, and associates the destination address with the destination partner that matches the search key. The destination addresses registered in 212 and 222 are acquired.

  In addition, the data exchange server transmission unit 264 acquires the encrypted attached file registered in the transmission information storage unit 23 in association with the e-mail document indicated by the e-mail document name included in the transmission notification. Further, the data exchange server transmission unit 264 uses the sender name registered in the transmission information storage unit 23 in association with the e-mail document indicated by the e-mail document name included in the transmission notification as a search key to address the internal address management DB 22. The information 221 is searched, and the destination address registered in the destination address information 222 in association with the destination partner that matches the search key is acquired as the source address.

  When the destination address is acquired from the in-house address management DB 22, the data exchange server transmission unit 264 transmits the e-mail document, the encrypted attached file, the destination address, and the source address to the data exchange server 5, and the external address When the destination address is acquired from the management DB 21, the electronic mail document, the encrypted attached file, the destination address, and the transmission source address are transmitted to the data exchange server 7. The data exchange server transmitting unit 264 associates with the electronic mail document the encrypted attachment file, the approver, the destination address, the transmission source address, and the approval transmission recording unit 27 that transmitted to the data exchange servers 5 and 7. Registration is performed (step S405).

  On the other hand, if the data amount of the encrypted attached file is equal to or less than the data threshold (No in step S403), the transmission method determination unit 262 outputs a transmission notification including the e-mail document name to the mail transmission unit 263.

  The mail transmission unit 263 includes an electronic mail document indicated by the electronic mail document name included in the transmission notification, an encrypted attached file associated with the electronic mail document, destination information indicating the destination address of the destination partner, The transmission source address indicating the sender is transmitted to the electronic mail servers 3 and 9 (step S406). The mail transmission unit 263 registers in the approval transmission recording unit 27 that the encrypted attached file, the approver, the destination address, the transmission source address, and the transmission to the electronic mail servers 3 and 9 are associated with the electronic mail document. (Step S405).

  Next, details of the data exchange servers 5 and 7 will be described. Each of the data exchange servers 5 and 7 has the same function. The function of the data exchange server will be described with reference to the block diagram showing the configuration of the data exchange server 7 shown in FIG. 9, the data exchange server 7 includes a data storage unit 72, a reception recording unit 73, a data reception processing unit 71, a download recording unit 74, a download processing unit 75, and an erasure processing unit 76.

  The data storage unit 72 stores the attached file that has been encrypted and received by the reception process. The reception recording unit 73 stores a reception record of an electronic mail document, an encrypted attached file, and destination information. The data reception processing unit 71 performs data reception processing for receiving the e-mail document from the workflow server 2, the encrypted attached file, and the destination information. The data reception processing unit 71 includes a reception processing unit 711, a storage processing unit 712, an additional mail processing unit 713, and an email transmission unit 714.

  The reception processing unit 711 receives the electronic mail document, the encrypted attached file, and the destination information transmitted from the workflow server 2 and registers the reception record in the reception recording unit 73. The storage processing unit 712 stores the encrypted attached file received by the reception processing unit 711 in the data storage unit 72. The mail appending processing unit 713 appends a URL indicating the storage location of the encrypted attached file stored in the data storage unit 72 by the storage processing unit 712 to the email document. The mail transmission unit 714 transmits the e-mail document (URL-added e-mail document) in which the URL has been added by the mail addition processing unit 713 to all the destination addresses included in the destination information.

  The download recording unit 74 stores that the encrypted attached file has been downloaded from the recipient of the destination address that transmitted the URL-attached e-mail document. The download processing unit 75 performs a download process of the encrypted attached file by access from the recipient, and stores the download in the download recording unit 74. The deletion processing unit 76 deletes the downloaded encrypted attached file.

  Next, detailed operations of the data exchange servers 5 and 7 will be described with reference to the flowcharts of FIGS. 1, 9, and 10 to 12. First, the operation of the data reception process will be described with reference to the flowchart of FIG. When receiving the e-mail document, the encrypted attached file, and the destination information from the workflow server 2 via the Internet 6, the reception processing unit 711 registers the reception record in the reception recording unit 73 (steps S500 and S501). The reception record includes the received e-mail document name, the reception date and time, the encrypted attached file name, the destination information, and the transmission source address. The reception processing unit 711 outputs the received encrypted attached file to the storage processing unit 712, and outputs the e-mail document and destination information (destination address) to the mail addition processing unit 713 (step S502).

  The storage processing unit 712 stores the input encrypted attached file in the data storage unit 72 (step S503). The storage processing unit 712 acquires the URL that stores the encrypted attached file (step S504). The storage processing unit 712 notifies the mail appending processing unit 713 of the acquired URL. The storage processing unit 712 registers the acquired URL in the reception recording unit 73 in association with the reception record.

  The additional mail processing unit 713 adds the notified URL to the electronic mail document from the reception processing unit 711 (step S505). The URL addition is preferably at the end of the e-mail document. The additional mail processing unit 713 outputs the electronic mail document (the electronic mail document with URL) with the additional URL to the mail transmission unit 714.

  The mail transmission unit 714 transmits the URL-added electronic mail document to all destination addresses included in the destination information. Since the data exchange server 5 is an in-house data exchange server, an electronic mail with a URL is transmitted to an in-house recipient (in this case, a recipient using the PC 1-3) via the network 4 (step S506). ) End the data reception process.

  Next, the download processing operation of the data exchange servers 5 and 7 will be described with reference to the flowchart of FIG. By receiving the URL-attached e-mail transmitted by the previous data receiving process, the in-house recipient accesses the data exchange server 5 using the PC 1-3, and the outside recipient uses the PC 10 for the data exchange server. 7 is specified and the URL added to the URL-added e-mail is designated. When accessed from the PCs 1-3 and 10, the download processing unit 75 reads the encrypted attached file stored in the designated URL from the data storage unit 72 and transmits it to the PCs 1-3 and 10 for encryption. The attached file is downloaded (steps S600 and 601).

  In order to improve security, when the URL is specified, the PC 1-3, 10 is requested to send an e-mail address, and the e-mail address received from the PC 1-3, 10 is stored in the specified URL. It may be confirmed whether it matches any of the destination addresses of the destination information received from the workflow server 2 together with the attached file, and the encrypted attached file may be transmitted only if it matches.

  The download processing unit 75 registers a download record including the transmission destination (destination address of trade secret information) and the download time in association with the transmitted encrypted attachment in the download recording unit 74 (step S602). Exit.

  The recipient decrypts the encrypted attached file downloaded to the PC 1-3 and 10 using the encrypted password notified in advance from the sender, and attaches the attached file (trade secret document) from the sender. Check.

  Next, with reference to the flowchart of FIG. 12, the operation of the erasure process for erasing the encrypted attached file stored in the data storage unit 72 by the data exchange servers 5 and 7 will be described. The erasure processing unit 76 checks whether or not the encrypted attached file stored in the data storage unit 72 has been downloaded every predetermined cycle (step S700).

  Specifically, the erasure processing unit 76 acquires a reception record registered in the reception recording unit 73 and a download record registered in the download recording unit 74. The erasure processing unit 76 searches for the encrypted attached file in the download record using the encrypted attached file name in the received record as a search key, and extracts the encrypted attached file that matches the search key. The erasure processing unit 76 compares the destination address associated with the extracted encrypted attachment, that is, the destination address registered in the download record and the destination address of the destination information in the reception record. When the destination address of the destination information in the reception record matches the destination address registered in the download record, the deletion processing unit 76 sends the URL-attached e-mail document that prompts the user to download the encrypted attached file. It is recognized that all the recipients who have downloaded the encrypted attachment have downloaded the encrypted attachment.

  If the destination address of the destination information in the reception record does not match the destination address registered in the download record, the deletion processing unit 76 uses the destination of the URL-attached e-mail document that prompts the user to download the encrypted attached file. It is recognized that there is a recipient who has not downloaded the encrypted attachment among some recipients, and the download of the encrypted attachment is incomplete.

  If the download of the encrypted attached file has been completed (step S700, Yes), the deletion processing unit 76 compares the reception date / time of the encrypted attachment file with the current date / time, It is determined whether or not the period has elapsed (step S701). When the predetermined period has elapsed, the erasure processing unit 76 acquires the URL registered in the reception recording unit 73 in association with the reception record, and uses the encrypted attachment file stored in the acquired URL. Erasing from the data storage unit 72 (step S702) ends the erasure process. If the predetermined period has not elapsed, the erasure processing unit 76 ends the erasure process without erasing the encrypted attached file.

  On the other hand, when the download of the encrypted attached file has not been completed (No at Step S700), the deletion processing unit 76 determines whether or not the dunning mail has been transmitted (Step S703). If the dunning mail has not been sent, the erasure processing unit 76 generates a dunning mail notifying that the download of the encrypted attachment has been requested, and has not downloaded the encrypted attachment to the generated dunning mail. The message is transmitted to the recipient (step S704), and the download process is terminated. Specifically, the deletion processing unit 76 extracts a destination address not included in the destination address registered in the download record from the destination addresses of the destination information of the reception record, and prompts the extracted destination address. send mail. The deletion processing unit 76 stores that the dunning mail has been transmitted in association with the encrypted attached file.

  If the dunning mail has been sent, the deletion processing unit 76 generates a status mail notifying that the download has not been completed, and sends the generated status mail to the sender of the encrypted attachment (step S705). ) Terminate the erasure process. Specifically, the erasure processing unit 76 extracts a transmission source address associated with the encrypted attached file and registered in the reception record, and transmits a status mail to the extracted transmission source address. If the address of the recipient who has not been downloaded is included in the status mail, when there are a plurality of recipients, the sender can easily recognize the recipient who has not been downloaded.

  As described above, in this embodiment, the transmission information registration processing unit 24 of the workflow server 2 associates with the e-mail document designated by the sender, the trade secret document, the destination partner, the approver, and the sender. The transmission information including the name is registered in the transmission information storage unit 23, and an approval request notification requesting approval of the transmission information is transmitted to the approver via the e-mail server 3, and the approval processing unit 25 of the workflow server 2 When the transmission information registered in the transmission information storage unit 23 is corrected by the approver, the transmission information registered in the transmission information storage unit 23 is updated to the transmission information corrected by the approver and approved by the approver. The status of the transmitted information is approved, and the transmission processing unit 26 of the workflow server 2 encrypts or converts the status into an approved business secret document. Generate an encrypted trade secret document with security protection, and if the data amount of the generated encrypted trade secret document is less than a predetermined data amount threshold, an email document, an encrypted trade secret document, Information indicating the addressee and the information indicating the sender are transmitted to the e-mail servers 3 and 9 to attach the encrypted trade secret document to the e-mail document and transmitted to the addressee, and the generated encrypted trade secret If the data amount of the document is larger than the data amount threshold, the electronic mail document, the encrypted trade secret document, the information indicating the destination, and the information indicating the sender are transmitted to the data exchange servers 5 and 7. Therefore, when sending a trade secret document as electronic data, it is possible to prevent omission of authorization and destination error, and to send the trade secret document to the other party with appropriate encryption processing. It can be.

  Further, in this embodiment, the transmission information registration processing unit 24 of the workflow server 2 displays the destination partner registered in the external address management DB 21 and the internal address management DB 22 and designates the destination partner and the approver, Since the addressee registered in the in-house address management database is displayed and the approver is specified, it is possible to prevent registration errors of the addressee and approver by the sender and to prevent omission of registration. .

  Further, in this embodiment, the workflow server 2 associates with the destination partner a destination address, confidentiality contract information indicating whether or not there is a confidentiality agreement with the company to which the destination partner belongs, and a trade secret for the destination partner In the external address management DB 21 in which infusion approval information indicating whether or not the approval of the export manager is necessary when transmitting a document is registered, the destination address in association with the destination partner, and the communication to the destination partner In-house address management DB 22 in which encryption restriction information indicating the presence or absence of encryption restrictions and in-transit approval information indicating whether approval of the export manager is required when sending a trade secret document to the destination are registered The transmission processing unit 26 is associated with the destination partner registered in the transmission information storage unit 23 in the external address management DB 21 or the internal address management DB 22. When the encoding restriction information indicates that there is no encryption restriction, the trade secret document is subjected to a predetermined encryption process to generate an encrypted trade secret document, which is registered in the transmission information storage unit 23. If the encryption restriction information in the external address management DB 21 or the internal address management DB 22 indicates that there is an encryption restriction in association with the addressee, the trade secret document is encrypted with security protection different from the encryption. Since the encrypted trade secret document is generated, the sender can specify the destination partner and perform encryption or security protection according to the destination partner specified in the trade secret document. Can be sent to the other party with appropriate encryption processing.

  In this embodiment, the approval processing unit 25 of the workflow server 2 displays the confidentiality contract information in the external address management DB 21 in association with the destination partner accepted by the transmission information registration processing unit 24 to display the approver. And the transfer approval information in the external address management DB 21 or the internal address management DB 22 associated with the destination partner accepted by the transmission information registration processing unit 24 indicates that approval by the export manager is required. If the approver wants to designate a new approver, the approval request notification is sent to the export manager or the newly designated approver via the email server. E-mail document, trade secret document, and addressee omission can be prevented.

  Furthermore, in this embodiment, after the erasure processing unit 76 of the data exchange servers 5 and 9 downloads the encrypted business secret document stored in the data storage unit 72, the encrypted business secret document is stored. Since the data storage unit 72 is deleted, the encrypted business secret document is not unnecessarily held in the data exchange servers 5 and 9, and leakage of the business secret document can be prevented.

  As described above, the electronic document transmission system according to the present invention is useful for a system that transmits a secret document via a network, and is particularly suitable when an approval process is required for a secret document.

It is the schematic which shows the structure of the electronic document transmission system in this invention. It is a block diagram which shows the structure of the workflow server shown in FIG. It is a figure which shows the registration item of the external mail address relevant information registered into the external address management DB shown in FIG. It is a figure which shows the registration item of the internal mail address related information registered into the internal address management DB shown in FIG. It is a flowchart for demonstrating operation | movement of a workflow server. It is a flowchart for demonstrating operation | movement of the transmission information registration process of a workflow server. It is a flowchart for demonstrating operation | movement of the approval process of a workflow server. It is a flowchart for demonstrating operation | movement of the transmission process of a workflow server. It is a block diagram which shows the structure of the data exchange server shown in FIG. It is a flowchart for demonstrating operation | movement of the data reception process of a data exchange server. It is a flowchart for demonstrating operation | movement of the download process of a data exchange server. It is a flowchart for demonstrating the operation | movement of the deletion process of a data exchange server.

Explanation of symbols

1-1, 1-2, 1-3, 10 PC
2 Workflow server 3, 9 E-mail server 4, 8 Network 5, 7 Data exchange server 6 Internet 21 External address management DB
22 Internal address management DB
23 transmission information storage unit 24 transmission information registration processing unit 25 approval processing unit 26 transmission processing unit 27 approval transmission recording unit 71 data reception processing unit 72 data storage unit 73 reception recording unit 74 download recording unit 75 download processing unit 76 deletion processing unit 211 , 221 Destination information 212, 222 Destination address information 213 Confidentiality contract information 214, 224 Country of residence information 215, 225 Encryption restriction information 216, 226 Transfusion approval information 241, 251 Mail document registration unit 242, 252 File attachment unit 243 253 Address setting unit 244, 254 Approver setting unit 245 Approval request unit 255 Approval registration processing unit 256 Denial processing unit 261 Encryption processing unit 262 Transmission method determination unit 263, 714 Mail transmission unit 264 Data exchange server transmission unit 711 Reception processing unit 712 Storage location Part 713 mail appending processing unit

Claims (9)

In an electronic document transmission system including an electronic mail server that distributes electronic mail, a data exchange server that temporarily stores electronic documents, and a workflow server that approves registered electronic mail documents, electronic documents, and destinations,
The workflow server
Transmitting the electronic document to a destination party via the electronic mail server or the data exchange server according to the data amount of the approved electronic document;
An electronic document transmission system characterized by the above. The workflow server
A transmission information storage unit in which transmission information including an electronic document, a destination partner, an approver, and a sender name is registered in association with the electronic mail document;
A transmission information registration processing unit for registering transmission information designated by a sender in a transmission information storage unit and transmitting an approval request notification for requesting approval of the transmission information to the approver via the electronic mail server;
When the transmission information registered by the transmission information registration processing unit is corrected by the approver, the transmission information registered in the transmission information storage unit is updated to the transmission information corrected by the approver, and the approval An approval processor that approves the status of transmission information approved by the
When the electronic document of the transmission information whose status is approved is encrypted or secured to generate an encrypted electronic document, and the data amount of the generated encrypted electronic document is equal to or less than a predetermined data amount threshold Sends the e-mail document, the encrypted electronic document, the information indicating the destination, and the information indicating the sender to the e-mail server, and attaches the encrypted electronic document to the e-mail document and transmits it to the destination If the data amount of the generated encrypted electronic document is larger than the data amount threshold value, the data exchange server stores the e-mail document, the encrypted electronic document, information indicating the destination, and information indicating the sender. A transmission processing unit to transmit to,
With
The data exchange server is
A data storage unit for temporarily holding the encrypted electronic document;
The encrypted electronic document received from the workflow server is held in the data storage unit, and area information indicating an area in which the data storage unit holds the encrypted electronic document is added to the email document. A data reception processing unit to send to the destination,
When there is a request for access to the area indicated by the area information, a download processing unit that transmits the encrypted electronic document held in the area indicated by the area information of the data storage unit;
The electronic document transmission system according to claim 1, further comprising: The workflow server
The destination address, the confidentiality agreement information indicating whether or not there is a confidentiality agreement with the company to which the destination belongs, and the approval of the export manager when sending an electronic document to the destination An external address management database in which infusion approval information indicating whether or not is registered,
Destination address associated with the destination partner, encryption restriction information indicating the presence or absence of encryption restriction in communication to the destination partner, and whether export manager approval is required when sending an electronic document to the destination partner An in-house address management database in which infusion approval information is registered,
Further comprising
The transmission processing unit
When the encryption restriction information in the external address management database or the in-house address management database indicates that there is no encryption restriction in association with the destination registered in the transmission information storage unit, the electronic document is preliminarily stored in the electronic document. An encrypted electronic document is generated by performing a predetermined encryption process, and the encryption restriction information of the external address management database or the internal address management database is associated with the destination registered in the transmission information storage unit. Generating an encrypted electronic document by providing security protection to the electronic document if it indicates that there are encryption restrictions;
The electronic document transmission system according to claim 2. The transmission information registration processing unit
The addressee registered in the external address management database and the in-house address management database is displayed, the addressee and the approver are designated, the addressee registered in the internal address management database is displayed, and the approver is displayed. Letting you specify,
The electronic document transmission system according to claim 3. The approval processing unit
Display the confidentiality contract information in the external address management database in correspondence with the destination partner accepted by the transmission information registration processing unit to allow the approver to confirm the destination partner accepted by the transmission information registration processing unit. Correspondingly, if the approval information of the export manager is required by the approval information of the external address management database or the internal address management database, or the approver wants to designate a new approver In this case, sending an approval request notification to the export manager or a newly designated approver via the email server,
The electronic document transmission system according to claim 3 or 4, characterized by the above-mentioned. The transmission processing unit
The destination information of the external address management database or the internal address management database associated with the destination partner accepted by the transmission information registration processing unit is information indicating the destination partner, and the sender company name accepted by the transmission information registration processing unit; The destination address associated with the matching destination address in the in-house address management database is used as information indicating a sender, and the email document, the encrypted electronic document, the destination sent to the email server or the data exchange server Recording the address and sending address,
The electronic document transmission system according to any one of claims 3 to 5. The data exchange server is
An erasure processing unit for erasing the encrypted electronic document from the data storage unit after the encrypted electronic document held in the data storage unit is downloaded;
The electronic document transmission system according to claim 2, further comprising: The erasure processing unit
If the encrypted electronic document held in the data storage unit has not been downloaded, a reminder mail notifying that downloading is to be generated is generated and transmitted to the destination of the encrypted electronic document ,
The electronic document transmission system according to claim 7. The erasure processing unit
If the encrypted electronic document has not been downloaded after a lapse of a predetermined time since the transmission of the reminder email, a status email indicating that the encrypted electronic document has not been downloaded is generated to generate the encrypted electronic document. Sending to the sender of
The electronic document transmission system according to claim 7 or 8.

Images