JPH05204763A - Privacy protecting system - Google Patents

Abstract

PURPOSE:To manage privacy by hierarchical right in a computer system provided with a privacy protecting function by executing privacy management using a tree structure. CONSTITUTION:Identifiers 1 for respective users are arranged in the tree structure and order codes 2 are allocated to the identifiers 1 for expressing order relation among these identifiers 1. A file 4 stored in a storage device 3 holds an owner identifier 6 and a permission mode 7 for this file 4 in a managing area 5 to manage privacy protection. The permission mode 7 contains high-order reference right 8, low-order reference right 9 and other person reference right 10. When referring to the file 4, the order code 2 of the identifier 1 to refer to the file 4 is compared with the owner identifier 6 of the file 4. Then, it is discriminated whether the identifier 1 shows the high-order person, low-order person or the other person of the identifier 6 and corresponding to the result, the presence/absence of the reference right is confirmed after referring to the permission mode 7.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a security system in a computer system.

[0002]

2. Description of the Related Art FIG. 5 is an explanatory diagram for explaining security management in UNIX of UNIX System Laboratories, which is an operating system of a computer system, for example. 11 is a user, 12 is a group,
All users who use this calculator are A, B, C, D, E
User identifiers such as X,
It is put in a group having a group identifier such as Y.

Conventional security management is constructed as described above,
For example, if the file to be confidentially managed is the file 4 stored in the storage device 3 as shown in FIG.
The file 4 holds a user identifier 13, a group identifier 14, and a permission mode 7 of the owner of the file 4 in a management area 5 for managing security. When a user tries to refer to this file 4,
Group reference 1 in permission mode 8 where the owner reference 15 in permission mode 7 is permitted and the user identifier of the user is equal to the use identifier 13 of the owner of this file 4.
6 is permitted, and the group identifier of the user is equal to the group identifier 14 of the owner of this file 4, the outsider reference right is permitted, and any one or more conditions are satisfied. Only if this user files 4
Are allowed to refer to. In addition to the reference right, the update right and the execution right are also managed.

[0004]

Since the conventional security system is configured as described above, one user identifier is assigned to each user of the computer system, and the user is unique. There was a problem that it was necessary to belong to one group, and hierarchical real-world organizations had to be forced to manage confidentiality in a planar manner.

The present invention has been made to solve the above-mentioned problems, and an object thereof is to perform hierarchical security management.

[0006]

According to the security system of the present invention, a user identifier and a group identifier are represented by an identifier having a unified tree structure to perform hierarchical security protection.

[0007]

In the present invention, an identifier having a tree structure has stronger authority as it is closer to the root of the tree structure, and an identifier on the branch side of a certain identifier has less authority than that identifier, and management is performed by hierarchical authority.

[0008]

【Example】

Example 1. FIG. 1 is an explanatory view showing an embodiment of the present invention, in which an identifier 1 for each user is arranged in a tree structure and has a partial order relationship. An order code 2 is assigned to the identifier in order to represent the order relation of these identifiers 1. This order code is composed of a number of sub-codes proportional to the level of the tree structure.

The order code 2 is composed of three sub-codes in a tree structure of level 3 as shown in FIG. 1, for example, and the order code consisting of sub-codes of all 0 is the order code of the root identifier. Have authority.

The first sub-code is assigned in order from 1 to the identifier at the level one level below the root, and the second and subsequent sub-codes are set to 0. Hereinafter, the order code is determined by the flow shown in FIG.

The security system configured as described above is
For example, if what is to be confidentially managed is a file 4 stored in the storage device 3 as shown in FIG. 2, the file 4 is owned in the management area 5 for managing security. Person identifier 6 and permission mode 7
Is held. The permission mode 7 includes an upper reference right 8 for an upper identifier of the tree structure and an equivalent identifier, a lower reference right 9 for a lower identifier of the tree structure, and an outsider reference right 10 for other identifiers.

When referring to this file 4, the sequence code 2 of the identifier which refers to the file is compared with the sequence code of the required identifier 5 of the file based on the flowchart shown in FIG. It is determined whether the identifier referring to is a higher-ranking person, a lower-ranking person, or an outsider of the owner identifier of the file, and accordingly, the permission mode 7 is referred to and the presence or absence of the reference right is confirmed.

In the above embodiment, the tree structure hierarchy is fixed and explained, but this hierarchy may change dynamically. Also,
It is also possible to dynamically assign permission modes such as three levels of upper, lower, and outsider, and two levels down.

[0014]

As described above, according to the present invention, since the security management has a tree structure, the security management can be carried out in a form similar to the management structure of the real world, and the management of the entire system can be simplified. There is an effect that complicated confidentiality management can be performed without being inferior in performance to the embodiment.

[Brief description of drawings]

FIG. 1 is an explanatory diagram showing security management according to an embodiment of the present invention.

FIG. 2 is an explanatory diagram showing a structure of a file managed by a tree structure identifier.

FIG. 3 is a flowchart showing an algorithm for determining a sequence code of a tree structure identifier.

FIG. 4 is a flowchart showing an algorithm for determining whether or not a file has a reference right.

FIG. 5 is an explanatory diagram showing a conventional security management system.

FIG. 6 is an explanatory diagram showing a file structure of a conventional security management system.

[Explanation of symbols]

 1 identifier 2 sequence code 3 storage device 4 file 5 management area 6 owner identifier 7 permission mode 8 upper reference right 9 lower reference right 10 outsider reference right 11 user 12 group 13 user identifier 14 group identifier 15 owner reference Right 16 Group reference right 17 Outsider reference right

Claims (1)

[Claims] 1. A security system characterized by security management using a tree structure in a computer system having security functions such as execution rights, reference rights, and update rights.