JPH04313135A - Information processor - Google Patents

Abstract

PURPOSE:To prohibit the illicit accesses given to a data base and at the same time to decide in a short time whether the accesses should be given to the data base or not. CONSTITUTION:Three data bases 1 are provided together with a host computer 2, and a terminal equipment 4 which can have accesses to the bases 1 with a prescribed instruction given to the computer 2. Furthermore an IC card 30 is added together with an IC card reader 3 provided between the equipment 4 and the computer 2. The card 30 includes a means which stores the information on the propriety of accesses to the bases 1, a means which decides whether the accesses should be given or not to the bases l with instructions based on the stored information, and a means which gives an instruction to the computer 2 only when an access practicable state is decided. In such a constitution, the accesses given to the bases 1 are controlled by the card 30.

Description

[Detailed description of the invention]

0001

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an information processing apparatus that is equipped with a database, a host computer, and a terminal, and is capable of accessing the database from the terminal via the host computer.

0002

2. Description of the Related Art Information processing apparatuses have been used in the past that are equipped with a database that stores various data and are capable of performing predetermined information processing using the data in the database.

FIG. 3 is a schematic block diagram showing the configuration of a conventional information processing device. In the figure, 1, 1, 1 are databases that store various data according to their types;
The host computer 2 is connected to a host computer 2 that performs various information processing such as reading out data stored in the computer, performing calculations using the read data, and managing the use of the databases 1, 1, 1. The host computer 2 includes a database 1
, 1, 1 user name list (
A list of user names given in advance to each user who is permitted to use the information processing device) and a database management list (for each database 1, a list of users who are permitted to use that database 1) A list of user names) is stored in the storage unit (not shown). Further, a terminal 4 is connected online to the host computer 2 for inputting and outputting data for use with the host computer 2. The user name is given to each user who is permitted to use the information processing device.

Next, the operation of the information processing apparatus configured as described above will be explained. FIG. 4 is a flowchart showing the operation of a conventional information processing device. When using the information processing apparatus, a user first inputs a user name into the host computer 2 from the terminal 4. The host computer 2 determines whether a user name has been input (step S101), and only when it is determined that a user name has been input, determines whether the input user name is registered in the user name list. (Step S102).

[0005] If it is determined that the input user name is not registered in the user name list, a use prohibition code indicating that the use of the information processing device is prohibited is given to the terminal 3, and the use of the information processing device is prohibited. (Step S)
103) , cancel the process. On the other hand, if it is determined that the input user name is registered in the user name list, a use permission code indicating permission to use the information processing device is given to the terminal 3, and the use of the information processing device is prohibited. Permit (step S104).

[0006] When the user is permitted to use the information processing device, the host computer 2 uses the database 1,
In order to perform desired information processing using the data 1,1, an access command for accessing the desired database 1,1,1 is input to the host computer 2. The host computer 2 determines whether or not an access command has been input (step S105), and only if an access command has been input, determines which database 1, 1, 1 is to be accessed from that access command. (Step S106).

[0007] Then, it is determined based on the database management list whether the user is permitted to access the database 1 to be accessed (step S
107).

[0008] If it is determined that the user is not permitted to access the database 1 to be accessed, an access denial code indicating that access to the database 1 to be accessed is denied is given to the terminal 4 to access the database 1 to be accessed. Access to the target database 1 is denied (step S108), and the process is stopped. On the other hand, if it is determined that the user is permitted to access database 1 to be accessed, database 1 to be accessed is
, and read the data stored in the database 1 into the host computer 2 (step S
109), performs information processing requested by the user (step S110), provides the processing result to the terminal 4 (step S111), and ends the process.

[0009]

However, in the conventional information processing apparatus as described above, the database management list for managing the databases 1, 1, 1 is stored in the host computer 2. If the database management list is tampered with, there is a problem in that an unauthorized user can gain unauthorized access to database 1, 1, 1. In addition, in conventional information processing devices, users cannot access It is determined whether or not access to the target database 1 is permitted based on the database management list. However, as the number of users registered in the database management list increases, the amount of data in the database management list increases. There is a problem in that the time required for the determination is long.

The present invention has been made to solve these problems, and it is possible to make unauthorized access to a database impossible and to quickly determine whether access to the database is possible. The purpose of the present invention is to provide an information processing device that enables the following.

[0011]

[Means for Solving the Problems] An information processing device according to the present invention includes a database, a host computer, and a terminal device that can access the database by giving a predetermined instruction to the host computer. At the same time, it stores information regarding whether or not the database can be accessed, determines whether or not the access related to the instruction can be executed based on the information, and only when it is determined that the access can be executed, sends the information to the host computer. An IC card configured to give an instruction and means for interposing the IC card between the terminal and the host computer are provided, and the instruction for accessing the database is transmitted from the terminal to the IC. The information is given to the host computer via a card, and the IC card manages access to the database.

0012

[Operation] In the information processing apparatus of the present invention, the user accesses the database from the terminal via the IC card and the host computer.
Determination as to whether access is possible or not is made based on information stored in the IC card regarding whether or not access to an accessible database is possible. If IC cards are issued separately to users who are permitted to use the database, each IC card will determine whether each user can access the database.
Anyone who does not have the card will not be able to access the database, so unless they have the IC card, unauthorized access to the database is impossible. It can be done in a short time because it is done individually for each card.

[0013]

DESCRIPTION OF THE PREFERRED EMBODIMENTS The present invention will be specifically described below with reference to drawings showing embodiments thereof. FIG. 1 is a schematic block diagram showing the configuration of an information processing apparatus according to the present invention.

In the figure, 1, 1, 1 are databases storing various data according to their types, and these databases 1, 1, 1 are used for reading and reading data stored in the databases 1, 1, 1. The host computer 2 is connected to a host computer 2 that performs various information processing such as calculations using the data obtained. The host computer 2 has user name list data (a list of user names given in advance to each user who is permitted to use the information processing device) used to manage the use of the databases 1, 1, 1.
is memorized. In addition, the host computer 2 has
A terminal 4 for using the databases 1, 1, 1 and the host computer 2 is connected online via an IC card reader 3. The IC card reader 3 has
When using the information processing apparatus, an IC card 30 issued to each user of the information processing apparatus is inserted. That is, data communication between the terminal 4 and the host computer 2 is possible only when the IC card 30 is inserted into the IC card reader 3. Each IC card 3
0 stores information regarding whether or not each user can access the database 1, 1, 1, and determines whether or not the access instructed by the user can be executed based on the information, and determines whether the access is possible or not. Only when it is determined that there is such an instruction is given to the host computer 2. By executing the above processing, access to the database 1, 1, 1 is managed. Further, each user who is permitted to use the information processing device is given the user name.

Next, the operation of the information processing apparatus configured as described above will be explained. FIG. 2 is a flowchart showing the operation of the information processing apparatus according to the present invention, and (H) in the figure
indicates the process performed by the host computer 2, and (I) in the figure indicates the process performed by the IC card 30. When using the information processing device, the user first inserts the IC card 30 that he/she owns into the IC card reader 3 and then enters his/her user name from the terminal 4 via the IC card reader 3 and the IC card 30. and input it to the host computer 2. The host computer 2 determines whether a user name has been input (step S1).
, only if it is determined that the username has been entered.
It is determined whether the input user name is registered in the user name list (step S2).

If it is determined that the input user name is not registered, a use prohibition code indicating that the use of the information processing device is prohibited is transmitted to the terminal 4 via the IC card reader 3 and the IC card 30. and prohibits the use of the information processing device (step S3), and cancels the processing. On the other hand, if it is determined that the input user name is registered, a usage permission code indicating permission to use the information processing device is sent to the terminal 4 via the IC card reader 3 and IC card 30. and permission to use the information processing device (step S4).

When the user is permitted to use the information processing device, the user can use the database 1,
In order to perform desired information processing using data 1,1, an access command for accessing a desired database 1,1,1 is input from the terminal 4 to the IC card 30. The IC card 30 determines whether or not an access command has been input (step S5), and only when an access command has been input, determines which database 1, 1, 1 is to be accessed based on the access command. (Step S6).

[0018] Based on the information stored in advance in the IC card 30, it is determined whether the user is a user who is permitted to access the database 1 to be accessed as inputted as described above. (Step S
7).

If it is determined that the user is not authorized to access the database 1 to be accessed, the IC card 30 sends an access denial code to the terminal indicating that the user is denied access to the database 1 to be accessed. 4 to deny access to the database 1 to be accessed (step S8), and cancel the process. On the other hand, if it is determined that the user is authorized to access the database 1 to be accessed, the IC card 30 provides the input access command to the host computer 2 (step S9).

[0020] Then, in the host computer 2, the IC
It is determined whether an access command has been given from the card 30 (step S10), and only when it is determined that an access command has been given from the IC card 30,
The database 1 to be accessed is accessed, the data stored in the database 1 is read into the host computer 2 (step S11), the processing requested by the user is performed (step S12), and the processing results are sent to the terminal 4. (step S13), and the process ends.

As described above, in the present invention, since the IC card 30 manages access to each database 1, 1, 1 separately, the amount of data for managing access is small. , 1, 1 can be determined in a short time whether or not access can be executed.

[0022] In this embodiment, the IC card 3
0 prevents users who are not authorized to use database 1, 1, 1 from accessing database 1, 1, 1 at all, but this is not limited to this.
Depending on the type of database, database 1, 1,
Users who are not authorized to use 1 may be permitted to only read the database, but may be prohibited from writing to the database.

[0023]

[Effects of the Invention] As described above, in the information processing device according to the present invention, the user accesses the database from the terminal device via the IC card and the host computer, and the user can access the database from the terminal device via the IC card and the host computer. The IC card determines whether the data can be accessed or not, but when each IC card is issued to each user who is authorized to use the database, each IC card determines whether or not each user can access the database. Therefore, those who do not have the IC card,
Since the database cannot be accessed, unauthorized access to the database is impossible, and each IC card determines whether or not to access the database. The present invention has excellent effects such as being able to perform the process in a short time.

[Brief explanation of drawings]

FIG. 1 is a schematic block diagram showing the configuration of an information processing device according to the present invention.

FIG. 2 is a flowchart showing the operation of the information processing device according to the present invention.

FIG. 3 is a schematic block diagram showing the configuration of a conventional information processing device.

FIG. 4 is a flowchart showing the operation of a conventional information processing device.

[Explanation of symbols]

1 Database 2 Host computer 3 IC card reader 4 Terminal 30 IC card

Claims (1)

[Claims] Claim 1: In an information processing device comprising a database, a host computer, and a terminal capable of accessing the database by giving a predetermined instruction to the host computer, whether or not the database can be accessed. means for storing information regarding the instruction, means for determining based on the information whether or not access related to the instruction can be executed, and means for providing the instruction to the host computer only when it is determined that the access is executable. and means for interposing the IC card between the terminal and the host computer, and means for transmitting instructions for accessing the database from the terminal via the IC card to the host computer. An information processing device configured to provide information to a host computer.