JPH04288655A - User interface system - Google Patents

Abstract

PURPOSE:To limit permitted commands in accordance with a user who inputs command names. CONSTITUTION:A user interface means 1 interprets and executes a command corresponding to an inputted command name when the inputted command name coincides with only one of command names registered in a command storage means 4 and the use condition of the command corresponding to this command name involves restrictions related to the use of the command stored in a restrictive information storage means 5.

Description

[Detailed description of the invention]

0001

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a user interface system for interpreting and executing commands of an operating system.

0002

[Background Art] Conversational operating systems (
There is UNIX (hereinafter referred to as an OS).

As is well known, in the UNIX hierarchical model, the user interface layer, which is a virtual machine (a collection of software resources) that is the point of contact with the user, is located at the top, and it handles all messages from the user to the system. is passed through the user interface layer.

[0004] When a user sends a command to the system, that is, when specifying (requesting) various services provided by the system in the UNIX single-layer model (service model), the user inputs UNIX commands as an interface language. conduct. A shell serving as a command interpreter interprets and executes the input UNIX command, thereby obtaining a result for the requested service.

[0005] Therefore, as a conventional UNIX user interface, "bit special edition 'Latest UNIX'"
(Vol.19, No.6) (Pages 124-129
Page), Kyoritsu Shuppan Co., Ltd., published on May 15, 1986. Those described in the literature are known.

However, in UNIX systems, permission modes can be set by the system administrator.

[0007] For example, the owner (file owner), the group to which the owner belongs, and other users can read the file (read) and write the file (w).
rite), information as to whether the file can be executed (the program written in the file can be executed), that is, the file access rights can be set by the system administrator.

[0008] Therefore, when a user who cannot execute a file needs to execute the file,
Even if you enter a certain UNIX command, that command will not be executed.

[0009]

[Problem to be Solved by the Invention] As described above, in the system using the UNIX user interface described in the above-mentioned document and in the conventional UNIX system, command execution rights depend on the UNIX permission mode. It was not possible to limit the commands that could be executed depending on the user's status (that is, the constraints imposed on the user regarding the use of commands).

The present invention has been made in view of the above circumstances, and it is an object of the present invention to provide a user interface system that can restrict usable commands depending on the user who inputs the command name.

[0011]

[Means for Solving the Problem] In order to achieve the above object, the present invention provides a user interface system that interprets and executes a command corresponding to an input command name. a command storage means for storing a command name and information indicating usage conditions of the command; a constraint information storage means for storing information indicating restrictions regarding the use of the command imposed on a certain user; A user interface means is provided for interpreting and executing a command corresponding to a predetermined command name when the usage conditions of the command corresponding to the predetermined command name include restrictions regarding the use of the command.

0012

[Operation] According to the user interface system according to the present invention, the user interface means matches the input command name with only one command name among the command names registered in the command storage means, and Interprets and executes the command corresponding to the input command name when the usage conditions of the command corresponding to the command name include constraints regarding the use of the command stored in the constraint information storage means. Therefore, the commands that can be used can be restricted depending on the restrictions imposed on the user regarding the use of commands.

[0013]

DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, embodiments of the present invention will be described with reference to the accompanying drawings.

FIG. 1 shows a diagram for explaining an overview of an embodiment of a user interface system according to the present invention.

In the figure, the user interface means 1 corresponds to the user interface layer located at the highest level in the hierarchical model of the operating system (hereinafter referred to as OS), and serves as an interface between the user and the system. be.

Further, when the user 2 inputs a command name 3 (including command aliases and abbreviated command names), the user interface means 1 displays a command table 400 (in a file stored in the command storage means 4). (details will be described later), and constraint information storage means 5
A predetermined process is performed by referring to a user constraint information/file 500 (details will be described later) stored in .

[0017] In this embodiment, UNIX is used as the OS.
Since the user interface means 1 adopts
It is configured on a shell, which is a command interpreter. Furthermore, since the UNIX hierarchical model (OS configuration) is well known, its explanation will be omitted in this embodiment.

The command table 400, as shown in FIG.
A command field 410, a command name field 420 in which a command name (including command aliases) indicating the name of the command is written, and information indicating the usage conditions of the command (hereinafter referred to as authorized user value). It consists of an authorized user value field 430, and predetermined information is written in each field in advance and saved in a file.

The authorized user value field 430 describes an authorized user value expressed in 32 bits for each command name.

The command name written in the command name field 420 may contain any characters as long as they can be input from an input means such as a keyboard. However, the characters used to separate the field from the command name field of the UNIX command to be started cannot be used. In addition, it is possible to write command names that are similar to English notation, and by specifying (inputting) the command name when inputting a command, it becomes easier to intuitively understand the operation of the command from the command name. Furthermore, command input from the user can be abbreviated without having to enter the full spelling of the command name written in the command name field 420.

[0021] Here, if the user has written the ls command in the UNIX command field 410 and the command name "List Directory" in the command name field 420, as shown in FIG. 1, for example, The user can enter the command name corresponding to the ls command in an alias format such as "List Directory", or can enter an abbreviated format such as "List" or "Li" that abbreviates the command name of "List Directory". You can also enter the command name.

On the other hand, the user restriction information file 500 is created by a system administrator level user for each user registered in advance in the system, and each file contains the commands of the corresponding user. Information indicating restrictions regarding use (hereinafter referred to as user state value) is stored. This user status value is expressed in 32 bits. Information for identifying the file, such as a user name and user identification information, is added to each file.

Next, an example of the permitted user value is shown in FIG.
An example of user status values is shown in FIG. In Figure 2, the Logon command, Logoff
Examples of permitted user values corresponding to the (logoff) command and the ls command are shown, while FIG. 3 shows examples of user status values corresponding to the users 301 and 302, respectively.

[0024] When expressing both the authorized user value and the user status value in 32 bits, logoff, logon, Mail, P
"1-bit data" is set corresponding to each piece of preset information such as rint and File.

User state values “logoff” and “
As for "logon", it is a necessary procedure when accessing the file in the constraint information storage means 5, so "logoff" is set to bit on (1) in the logoff state.
, “logon” is bit off (0), while,
In the logon state, “logoff” is “0”, “lo
The value is changed depending on the procedure state, such as ``gon'' being ``1''.

In the authorized user value for a given command,
logoff, logon, Mail, Print
, File, etc. are elements of the command usage conditions. On the other hand, in the user status value of a certain user, logoff, logon, Mail, etc.
, Print, File, and the like are elements of restrictions regarding the use of commands.

[0027] A certain user can use a predetermined command if an element set to "1" is set to "1" in the command use condition element group, or "1" is set in the command use constraint element group. ” is included.

[0028] Note that "logoff" is information related to logoff, "logon" is information related to logon, "
"Mail" is information related to e-mail, "Print
” indicates information regarding printing, and “File” indicates information regarding files.

[0029] Also, the Logo used in this example
The n command and the Logoff command are the UNIX command login (login) command, logou
It is essentially different from the t (logout) command,
This is a newly prepared command. The Logon command is used to read the user restriction information/file of a certain user from the restriction information storage means 5 and to authenticate the user, while the Logoff command is used to close the file.

FIG. 4 is a block diagram showing an embodiment of a computer system to which the user interface system according to the present invention is applied.

In the figure, the computer system includes an input device 10 for inputting commands, a display device 20 for displaying output information such as input commands, and an OS.
(UNIX), various programs, command table 40
0. A disk 30 that stores various data and functions as a command storage means 4, a main memory 40 that stores the OS, programs and various data loaded from the disk 30, input commands and various data, and an external A communication control unit 50 that performs control related to data communication, and a central processing unit (hereinafter referred to as CPU) 60 that executes a program including an OS are each connected to a common bus 70.

Note that the CPU 60 is set to control each section connected to it via a common bus 70. The communication control unit 50 also connects a local area network (hereinafter referred to as LAN) 8 such as Ethernet.
0, and according to instructions from the CPU 60, the LA
Data communication is performed with the file server 90 connected to the N80. The file server 90 functions as the constraint information storage means 5, and stores user constraint information and files for each user.

The input device 10 includes a backward key, an N key, a P
The keyboard is equipped with various function keys such as a key, a control key, a return/line feed key, and an end key, as well as various character keys. You can enter a command name by pressing the various character keys, delete the already input character string by pressing the back key, and press the control key and N key at the same time (at this time, The next candidate for the currently displayed candidate can be displayed by pressing the control key and the P key simultaneously (at this time, it functions as the previous candidate key). ), it is possible to display the previous candidate of the currently displayed candidate.

Next, the command execution processing operation of the computer system in the above configuration will be explained with reference to FIG.

First, when the login procedure is completed, the user interface means 1 sets the user status value to the initial value (step 101), then loads the command table 400 from the disk 30 into the main memory 40, and loads the command table 400 from the disk 30 into the main memory 40. (step 102), displays a prompt (input promotion symbol) on the screen of the display device 20 (step 103), and waits for input from the user.

Note that in step 101, the initial value of the user status value is set such that "logoff" as an element of the command usage condition is bit on (1), "logon
” is set to the value of bit off (0).

Now, when a code corresponding to the user's key operation is input (step 104), the user interface means 1 inputs the type of input character (code), for example, line feed, backward, next candidate, previous candidate, end. Among them, it is determined which code it is (step 105), and processing is performed according to the result of this determination.

That is, [When the new line key is pressed] When the user inputs an arbitrary number of characters and presses the new line key, the name starting with the character string input so far is selected from the command table 400. A search is performed (step 106), and as a result of this search, it is determined whether a command name matching the input character string is registered (step 107).

[0039] If the input character string matches only one name, then it is determined whether the user status value and the authorized user value corresponding to the corresponding command name in the command table 400 match. Check whether or not (step 108)
.

[0040] Note that the determination as to whether or not the user status value and the authorized user value match is made based on the element group set to "1" in the element group of the usage conditions of the command. Among the elements of restrictions regarding the use of commands, "1"
” is included,
It is determined that there is a match.

[0041] If there is a match, the command corresponding to the corresponding command name is activated and executed (step 109), and if the user's status changes due to the execution of the command, the user status value is reset. (step 110), and then returns to step 103 and executes the steps after this step. Note that if the input character string is in an abbreviated format in step 109, the command name is redisplayed in full spelling, and then the corresponding command is activated.

[0042] Here, the user 301 selects “Logon”.
Consider the case where you input the string . The contents of the command table 400 are as shown in FIG. 1, and the user state value of the user 301 is the user state value 30 shown in FIG.
Assume that it is 1A.

Now, as shown in FIG. 1, the input character string "Logon" matches only one command name among the command names registered in the command table 400. And, in the authorized user value of the Logon command, “log
off” value and “log
off” value (in this case, log
off is initialized to "1") are both "1"
, so they match. Note that at this point, the user constraint information/file of the user 301 has not been imported, so the user status value 301A is not referenced.

As described above, when the user status value and the authorized user value match, the Logon command is executed.

[0045] As a result of executing this Logon command,
The user restriction information/file corresponding to the currently operating user 301 is sent to the communication control unit 5 from the file server 90.
0 into the main memory 40. When importing the file, the user name and user identification information are added to the file, so the logon (Logon
) Refer to the user name and user identification information entered during the procedure, and import files with matching information.

[0046] User status value 301 thus imported
A is set as the user state value referenced by the user interface.

[0047] However, it is impossible to perform another Logon procedure after the Logon procedure has been performed, and when the Logon procedure is performed, the
Since it is necessary to perform the ff procedure, the value of "logoff" among the reset user status values 301A is "
1" to "0", and the value of "logon" is "0" to "0".
1”. Therefore, the actual user status value is the user status value 301B. Note that when the Logoff command is executed, the user status value 301B is
“logoff” is “1” and “logon” is “0”
' will be changed to '. In other words, it becomes the user status value 301A.

Next, the user 301 (see FIG. 3) who has completed the Logon procedure selects “List Detect
Suppose you input the character string "ry". In this case, Figure 1
As you can see, the input “List Ditec
"try" matches only one command name. Also, in the authorized user value corresponding to this command name, "Ma
The values of "il" and "File" are both "1".

On the other hand, in the user status value 301B of the user 301, as shown in FIG. 3, "logon" and "
The values of "File" are both "1".

[0050] Then, the authorized user value and user status value 30
1B, it can be seen that "Mail" and "File" as elements of command usage conditions include "File" as an element of restrictions regarding command usage. Therefore, it is assumed that the authorized user value and the user status value 301B match, and the corresponding ls command is executed.

However, even if the user 302 performs the Logon procedure, the ls command is not executed because the elements of restrictions on the use of commands corresponding to the ls command do not include any elements of restrictions on the use of commands.

Next, in step 107 above, if the input character string matches multiple names or does not match any name, in step 108 above, it is determined whether the authorized user value and the user status value match. If there wasn't,
'? ' mark is displayed on the screen of the display device 20 (step 111), and then the process returns to step 104.

[When the backward, next candidate, previous candidate, and end keys are pressed] If the backward key is pressed, after deleting the character string that has already been input (step 112),
Return to step 104 above. If this back key is pressed, the command name will be input again by the user.

Next candidate key is pressed (control key and N
key) is pressed at the same time, the command table 400 and the user status value 30 of the user 301 operating the command table 400
1B, the authorized user whose status value matches (or includes the user's status value) registered after the input character string (or currently displayed command name) The command name corresponding to the command having the value is displayed on the screen of the display device 20 as the next candidate (step 113). After step 113 is completed, the process returns to step 104 described above.

[0055] Previous candidate key is pressed (control key and P
key) is pressed at the same time, the command table 400 and the user status value 30 of the user 301 operating the command table 400
1B, the permission that matches the user's status value (or includes the user's status value) that is registered before the input character string (or the currently displayed command name) The command name corresponding to the command having the user value is displayed on the screen of the display device 20 as a previous candidate (step 114). After step 114 is completed, the process returns to step 104 described above.

Note that in steps 113 and 114, the display of candidates corresponding to each candidate key is repeated until the line feed key is pressed.

If the end key is pressed, the command execution process ends.

In the above embodiment, the constraint information storage means 5 is a globally existing file server.
This can also be a locally existing external storage device.

As explained above, according to this embodiment, commands can be divided into commands that can be used without logging on and commands that can be used with logging on. Further, commands that can be used can be restricted depending on whether or not the user can use resources such as e-mail, printers, and file servers.

In other words, the usable commands can be restricted depending on the command usage restrictions of the user who inputs the command name.

[0061]

[Effects of the Invention] As explained above, according to the present invention, an input character string matches only one command name, and
If the usage conditions for the command corresponding to the command name include restrictions on the use of the command imposed on the user, the command corresponding to the input command name is interpreted and executed. Usable commands can be restricted depending on restrictions on command usage imposed on the user.

[Brief explanation of the drawing]

FIG. 1 is a diagram for explaining an overview of an embodiment of a user interface system according to the present invention.

FIG. 2 is a diagram showing an example of permitted user values in this embodiment.

FIG. 3 is a diagram showing an example of user status values in this embodiment.

FIG. 4 is a block diagram showing an embodiment of a computer system to which the user interface system according to the present invention is applied.

FIG. 5 is a flowchart showing the processing operation of this embodiment.

[Explanation of symbols]

DESCRIPTION OF SYMBOLS 1... User interface means, 4... Command storage means, 5... Constraint information storage means, 10... Input device, 20... Display device, 30... Disk, 40... Main memory, 50... Communication control unit, 60... Central processing unit, 80...LAN, 90...File server, 400...Command table, 410...UN
IX command field, 420... Command name field, 430... Authorized user value field, 500...
User restriction information file.

Claims (1)

[Claims] Claim 1: In a user interface system that interprets and executes a command corresponding to an input command name, a command stores a command name and information indicating command usage conditions in correspondence with each of a plurality of commands. a storage means, a constraint information storage means for storing information indicating restrictions regarding the use of a command imposed on a certain user, and a usage condition of the command corresponding to a predetermined command name input by the certain user; 1. A user interface system comprising: user interface means for interpreting and executing a command corresponding to a command name when the command includes restrictions regarding the use of the command.