JPH0553895A - File security control system - Google Patents

Abstract

PURPOSE:To refuse invalid access and to protect a file from destruction caused by operating error or from any intensive action depending on human maliciousness by deciding the possibility of access by comparing the access orders of access types. CONSTITUTION:Concerning a file name, a file 6 is designated according to a password and the access type, and a file access request is executed by using a file access requesting means 1. According to the access order to the access type requested by the file access requesting means in 1 a film information 4 of the file 6 coincident with the file name designated in advance and the access order corresponding to the access type requested by the file access requesting means 1 in access information 5 coincident with the password designated by the file access requesting means 1, a file access judging means 2 judges whether the requested access is permitted or not and when it is permitted, the file access is executed by a file access executing means 3.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a file security control system, and more particularly to a file security control system for checking a password and an access request from a file user in a file system of a computer and rejecting invalid access.

[0002]

2. Description of the Related Art A conventional file security control method has been performed by a protection confirmation function of giving an attribute including information for restricting access to the file to the file and judging whether or not the file can be accessed by the attribute.

[0003]

The conventional file security control method described above is performed by a protection confirmation function that gives an attribute including information for restricting access to the file to the file and determines whether or not the file can be accessed based on the attribute. Therefore, a file with an attribute that does not restrict access to the file can be accessed by anyone who knows the file name of the file,
Files are destroyed due to operation mistakes, destruction activities, crimes,
It has the disadvantage that it was exposed to the threat of malicious acts such as malicious acts by humans.

[0004]

According to the file security control method of the present invention, in a computer file system, a file name, a read request for the file,
File information storing access order for each access type such as write request, addition request, deletion request, etc., password, access information storing access order for each access type for the file, and the file name And file access request means for requesting access to the file by designating the password and the access type, and an access order in the file information matching the file name and access type designated by the file access request means. A file access determination that determines whether the file access requested by the file access requesting unit is possible by comparing the password specified by the file access requesting unit and the access order in the access information matching the access type. It comprises a stage, the judgment result of the file access determining means, and a file access executing means for executing access to said file of said file name which the file access request means specifies said file access request means requests.

[0005]

Embodiments of the present invention will now be described with reference to the drawings.

FIG. 1 is a block diagram showing an embodiment of the file security control system of the present invention.

As shown in FIG. 1, the file security control system of the present embodiment has a file 6, a file name of the file 6, and access types such as a read request, a write request, an add request, and a delete request for the file 6. File information 4 storing the access order for each, a password, and access information 5 storing the access order for each access type such as a read request, a write request, an add request, a delete request for the file 6, and a file name A file access request means 1 for requesting access to a file by specifying a password and a file type, an access order in the file information 4 matching the file name and access type specified by the file access request means 1, and a file access request Password and access specified by means 1 The access order in the access information 5 that matches the file type is compared with the file access determination means 2 for determining whether the file access requested by the file access request means 1 is possible, and the determination result of the file access determination means 2 Access request means 1
The file access execution unit 3 executes the access requested by the file access request unit 1 with respect to the file 6 having the file name specified by.

Next, the operation of the file security control system of the present invention will be described with reference to FIG. When using the file 6, the file user specifies the file 6 by the file name, password and access type, and uses the file access request means 1 to make a file access request. Then, the file access determination unit 2 accesses the file access information corresponding to the access type requested by the file access request unit 1 in the file information 4 of the file 6 matching the file name specified by the file access request unit 1, and the file access. From the access order corresponding to the access type requested by the file access requesting means 1 in the access information 5 that matches the password specified by the requesting means 1, it is determined whether the requested access is permitted, and the permitted file If it is an access request, the file access execution means 3 executes the file access. Next, the relationship between the file name and password specified by the file user and whether or not the file can be accessed will be described with reference to FIG.

In FIG. 2, "DA in file information 4"
"TA0000" and "DATA9999" are two file names, area 41 is a read access order, and area 42 is
Is an area that stores the write access order,
“7” and “1” are “DATA0” stored in the area 41.
000 ”and“ DATA9999 ”for read access order,“ 2 ”and“ 6 ”for write access order for“ DATA0000 ”and“ DATA9999 ”stored in area 42, and“ PA ”in access information 5
“SS10” and “PASS20” are two passwords, area 51 is a read access order, and area 52 is a write access order.
“8” is “PASS10” stored in area 51,
Reading access order of each of "PASS20",
“5” and “9” are “PASS1” stored in the area 52.
The write access ranks of "0" and "PASS20" are set.

Further, it is assumed that the access is permitted only when the number of the access order corresponding to the file name is greater than or equal to the number of the access order corresponding to the password.

The user A is given a password of "PASS10", and the read and write access orders corresponding to the password are "4", respectively.
It is "5". File 6 called "DATA0000"
Read and write access order is "7",
Since it is “2”, the user A is “DATA0000”.
The file 6 can be read but not written. On the other hand, "DATA9999"
Since the read and write access orders of the file 6 are "1" and "6" respectively, the user A
On the contrary, the file 6 "ATA9999" can be written but not read.

User B has been given a password of "PASS20", and the read and write access orders that match the password are "8", respectively.
Since it is “9”, the user B is “DATA0000”.
Also, the file 6 called "DATA9999" cannot be read or written.

[0013]

As described above, according to the file security control method of the present invention, in a computer file system, when a file user requests access to a file, the user requests access by a file name, a password and an access type. By comparing the access order of the corresponding access type in the file information corresponding to the file with the access order of the same corresponding access type in the access information corresponding to the password specified by the user, the availability of access is determined. It is possible to deny invalid access, and protect files from destruction by operation mistakes and intentional acts by human maliciousness such as sabotage, crime, and fraud.

[Brief description of drawings]

FIG. 1 is a block diagram showing an embodiment of a file security control system of the present invention.

FIG. 2 is a diagram showing a relationship between a file name, a password and file access permission in the file security control method of the present embodiment.

[Explanation of symbols]

1 file access requesting means 2 file access determining means 3 file access executing means 4 file information 5 access information 41, 42, 51, 52 access order corresponding to access 6 files

Claims (1)

[Claims] 1. In a computer file system, a file name, a file information storing a file name and an access order for each access type such as a read request, a write request, an add request, a delete request for the file, a password, and the file. Access information storing the access order for each access type, file access requesting means for requesting access to the file by designating the file name, the password, and the access type, and the file access requesting means Comparing the access order in the file information matching the file name and the access type with the access order in the access information matching the password and the access type designated by the file access requesting means, and The file access determining means for determining whether the file access requested by the file access requesting means is possible, and the file for the file having the file name designated by the file access requesting means according to the determination result of the file access determining means. A file security control method comprising: a file access execution unit that executes the access requested by the access request unit.