JPH0784852A - Security system for information - Google Patents

Abstract

PURPOSE:To offer information to limited users and to restrict the takeout of a copy of the information and also prevent it by providing a program, which controls a read of displayed screen data, with a function which limits the read. CONSTITUTION:This system is provided with a database server 1, a client work station 2, and a network 3, and the window server 22 of the client work station 2 performs an input/output process on a display screen at a request made by a user interface program 13 in the server 1. Then a document management file while managing a document file itself wherein substance data on a document are stored manages whether the document can be referred to or copied. At this time, a reference management program checks a reference right management file for a document file whose reference management attribute indicates 'limited' to check whether or not a referring person has the right to refer or copy, thereby deciding whether the the person is allowed to refer to or copy the document file.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an information system which is stored in a computer and refers to the data by a terminal or the like, and relates to a method for managing the security of information by restricting the reference and copying.

[0002]

2. Description of the Related Art Conventionally, the simplest method for restricting the reference of information on a computer is, for example, in the case of Unix, which is an operating system (hereinafter abbreviated as OS) of a workstation, an identification code for a user, a so-called , I
By giving a D code and giving a personal password corresponding to the ID code and keeping this password secret to the person or a specific group, it is prohibited to refer to information managed by others without permission. There is a way to do it.
In this method, in addition to the ID code and password, a reference right attribute is added to a program or an information file to write and read rights can be managed at individual, group, or other levels. It is common.

As an extension of this method, as a method of restricting reference permission to specific information, for example, a database or the like, the connection right to the database is limited, not the access right to the file, and the specific ID is further added. And a password is given and the method of aiming at hierarchical protection is used.

On the other hand, when it is necessary to protect the confidentiality of important information, in addition to the general method described above, a reference procedure,
Also, the information itself is encrypted and accessed by a terminal equipped with a specific encryption / decryption mechanism, and the encryption key is given to the specified person to provide a system that cannot be referred, decrypted or eavesdropped by others. Has been done.

On the other hand, illegal programs based on copyright,
In order to prevent copying of data, information for copy protection is added, a reference program is made to coexist on the stored medium, and the target program and data are referred to by the reference program. A general method is to realize protection by making it impossible to directly refer to the OS or the like other than the reference program.

[0006]

When a general-purpose Unix workstation or a general-purpose personal computer is used, for example, when an information system in the company is constructed by using the above protection method, employees in the company can freely Or, if you deal with information that needs to be referenced with loose restrictions, the reference itself is not a problem, but it is a physical medium,
For example, a copy on a floppy disk or a printed document has information that should not be taken outside. Technical information related to product development, design, and manufacturing is an example of such information.

Preventing copying or printing of such information on another medium can be realized relatively easily by making a program for referencing the information dedicated.

However, a general workstation or personal computer has a function of printing the displayed screen as it is, or it is possible to easily print the displayed screen by operating another program without having it. It is possible to print the display screen freely, but on the other hand, if there is no screen printing function, it will cause inconvenience in normal use and there is a problem that it can not be removed. .

[0009]

[Means for Solving the Problems] In order to solve the above problems, a program that controls the reading of the displayed screen data is provided with a function of limiting the reading, and the display of the information to which the reading should be limited. The problem is solved by giving the area (window) with the attribute of reading restriction.

[0010]

With the above-mentioned means provided, the program for displaying the specific information is given the above-mentioned reading restriction attribute to the display window and displayed, while the program for reading the screen is restricted in reading. If there is at least one window on the display screen, either read the entire area and prohibit it, or read only the area of the window where reading is restricted and read out the data that was extracted on a white background. Printing of confidential information can be prevented by executing a procedure such as passing to the requested program.

[0011]

Embodiments of the present invention will be described below with reference to the drawings.

FIG. 1 shows an example of the entire configuration of an information system embodying the present invention. Reference numeral 1 denotes a database server for accumulating information and providing the information in response to a request, and 2 for referencing the information. Client workstation, 3
Is a network.

Further, as a functional representation of the inside of the database server 1, a database file 11 stores data such as documents and its management information. 12 is a database management system (hereinafter DBM
S), 13 are user interface programs, and 14 is a communication control function.

On the other hand, the client workstation 2
As a functional representation of the inside of the server, 21 is a communication control function for pairing with the communication control in the server to exchange commands and data. 22 is a window server
An X-window server of a Unix system corresponds to this, and performs input / output processing on the display screen in response to a request from the user interface program 13 in the server 1. Also, 23
Prints a document or a display screen in response to a request from the print server 13.

In such a database system, confidentiality management of information is performed by duplicating ID / password management for using a normal computer system and ID / password management for using a database. The confidentiality management is mainly performed by the latter in the DBMS 12 and / or the user interface program 13 or both, but it only manages whether or not the reference is possible. In the present invention, the reference result is copied in addition to the reference or non-reference. to manage.

FIG. 2 illustrates an example of the copy management method. The document management file manages the document file itself in which the actual data of the document is stored, and at the same time manages the reference and copy permission / prohibition.

At this time, the reference management program uses the document file Wa in which the reference management attribute of the file indicates "restricted".
In this case, the reference right management file is checked to see if the referrer has the reference right and the copy right, and it is determined whether the reference or copy is permitted.

In the case of the example in FIG. 2, the reference right of the referrer whose ID is "NNNNNN" is "permitted", but the copy right is "non-permitted". Therefore, even if a copy request is issued, it is accepted. On the other hand, the referrer whose ID is "MMMM" has the copying right registered as "permitted", so the copying request can be accepted and the copying service can be received.

On the other hand, since the reference management attribute of the document file Fb is "copy prohibited" which prohibits copying of the file itself, copying is not permitted regardless of the rights of the referrer.

On the other hand, the document files Fc and Fd having the reference management attribute of "unlimited" have no restrictions on copying and reference, indicating that the copying service can be unconditionally received.

As described above, it becomes possible to manage whether or not a file reference / copy service is provided.

In this case, the meaning of "copy" is not only to copy a file as data to another medium such as a floppy disk or an external storage device such as a magnetic disk of another workstation, but also to output to a printer. Although it is included, if you want to finely control what is copied, it is possible to finely control the management items of the copy right management file.

However, even if the above-mentioned management is performed, Un
In the case of a workstation system equipped with an OS such as ix or a window server for X-window, it is possible to run completely different programs in parallel and to display multiple screens simultaneously on the same display in multiple windows. , A copy prohibited document is displayed in one window, a program unrelated to it is run to display another window, and a hard copy of the display screen is displayed from the window server or print server to the copy prohibited screen. Copying is possible, but this cannot be prevented as long as the conventional window server and print server are used as they are.

This is shown in FIG. 3, in which the window Wa displays a copy-prohibited document, while the window Wb,
Wc and Wd show the case where information that is not prohibited to be copied is displayed. For example, if a program requesting a hard copy of the screen is run from the window Wb, the entire screen including the copy prohibited window is printed. You can go out.

Of course, the window Wa is displayed on the entire surface,
It is also possible to temporarily erase the window Wb and print out only the screen of the copy prohibited document.

Therefore, according to the present invention, when a screen (window) is displayed, a copy management attribute is added as an attribute of the window, and when a window for which "copy prohibited" is displayed, the display screen is displayed. A mechanism for prohibiting the reading and copying of data is provided to prevent this.

FIG. 4 shows an example of the window management table to which the attribute is added. One window management table is added with an item for setting the presence / absence of the copy right, and the existing display state management information is used. Management control.

In the example shown in FIG. 4, the window Wa has the copy prohibition attribute, and the other windows Wb, Wc, Wd are not copy prohibited.

Therefore, in this case, as long as the window Wa is displayed on the screen, even if a window copy is requested from another window, the window server managing the window does not pass the screen data. You can solve the above problems.

FIG. 5 shows an example of a flow chart of a user interface program for searching a document file based on a request from a referrer and displaying the document file. Steps 301 and 302 are steps for the user for checking the reference right. Input of ID and password. In this case, the user ID and password may be input as they are at the time of starting the use of the workstation, or they may be provided separately for strict management. Further, in steps 301 and 302, not only the input of the user ID and the password, but also the user who should provide the service of this database system may be checked.

Next, in 303, a search item is input, and in step 304, the file registered in the database is searched based on the search item. If no corresponding file exists, the process ends. If there is a file, the next step 306 is executed. , 3
At 07, the reference right and the copy right are checked.

The check at this time is performed based on the data of the document management file and the reference management file shown in FIG.

Here, like the general database, when the user is not given the reference right, although omitted here, a message is output to the user indicating that the user is not permitted, and the process ends.

On the other hand, if the reference right is given, it is further checked in step 307 whether the copy right is given. If the copy right is given, a window having a copy permission attribute is generated in step 310. On the other hand, if there is no copy right, it is confirmed in step 309 whether or not the window server can prohibit the screen reading. If the reading is possible, the display is cut off because there is no prohibition function, and if it is prohibited, the reading protection is performed. Is determined to be possible, and the processing after step 311 is started.

After that, the file is read in step 311 and the display data is transmitted to the window server of the client workstation 2 in step 312, so that the document file is displayed on the display screen of the workstation used by the user. It will be displayed like the example of No. 3.

Next, FIG. 6 shows an example of a hard copy program of the print server when a hard copy of this screen is requested to the print server from another program or the like. 40
In step 1, the window server is requested to read and deliver the display screen, and in step 402, it is checked in the return information whether it is delivered normally or whether a copy prohibition window is included. If it is not prohibited, Step 4
In 03, the screen data is sent to the printer, and step 40
At 4, the printing is completed and the process is finished.

On the other hand, the window server which is requested to display the screen display data, as shown in the example of FIG.
Check the window management table with and only when the window with the copy prohibition attribute is not displayed, step 50
In step 2, the screen data is read, and in step 503 the data is transferred to the request source.

As described above, the window server monitors the reading of the display screen data for the copy right attribute and the display state of the window management information, and the delivery can be managed and controlled depending on whether the reading is permitted or not. It is possible to realize the function of limiting copying.

Next, FIG. 8 shows the processing when reference management is performed when registering a document file in a database. Reference attributes are input in step 601 and step 60
If the attribute is judged in 2 and reference is prohibited, step 6
In 03, a reference prohibition attribute is added, and in the case of reference restriction, a reference restriction attribute is added in step 604, and a reference management file for managing the reference is generated in step 605.
If unlimited, a reference unlimited attribute is added in step 606, and the file is stored in step 607.

In this case, the basic management is only for reference and the permission of copying is limited based on the reference. However, there are some cases where copying is unconditionally prohibited due to the nature of the information, and in this case, the attribute is set. If a copy prohibition attribute is added to the information, it can be managed.

Further, FIG. 9 shows a flowchart of reference right registration processing for each user. In FIG.
The database administrator specifies the registration target person and the reference target document file, and the system inputs them in steps 701 and 702. Next, the reference right corresponding to that is obtained in step 70.
3 is input, and it is checked in step 704. If the reference right is given, the reference permission attribute is set in step 705, and if it is not permitted, the non-permission attribute is set in step 709.

Further, if the reference right is given, the copying right is checked, and if the copying right is given, step 7 is executed.
In 07, copy permission is set, and if not given, non-permission is set. The result is registered in the reference management file in step 710, and the process ends.

Although the reference right is set for each document and reference person in FIG. 9, setting and management may be performed for each document type and reference person group.

[0044]

According to the present invention, there is a great effect in providing database information to a limited range of users, and restricting and preventing copying of the information.

[Brief description of drawings]

FIG. 1 is a block diagram of an embodiment of the present invention.

FIG. 2 is an explanatory diagram of an embodiment of a document management file of the present invention.

FIG. 3 is an explanatory diagram of a screen display example of the present invention.

FIG. 4 is an explanatory diagram of an example of a window management table of the present invention.

FIG. 5 is a flowchart of a database search processing embodiment of the present invention.

FIG. 6 is a flowchart of a screen print program according to an embodiment of the present invention.

FIG. 7 is a flowchart of a screen reading function of the window server according to the embodiment of this invention.

FIG. 8 is a flowchart of a database reference / copy management attribute setting process according to an embodiment of the present invention.

FIG. 9 is a flowchart of a reference right / copy right registration program for each referencer according to an embodiment of the present invention.

[Explanation of symbols]

1 ... Database server, 11 ... File system therein, 12 ... Database management system, 13 ... User interface program, 14 ... Communication control function, 2 ...
Client system, 21 ... communication control function, 22 ... window server with security, 23 ... display device,
24 ... Keyboard, 25 ... Print server, 26 ... Printer, 3 ... Network connecting server and client.

Claims (9)

[Claims] 1. A secret of information characterized by accumulating files of documents and data, and registering the propriety of copying together with the reference of the file in a computer system using the file, and restricting the reference and copying according to the propriety. Protection method. 2. The information security system according to claim 1, wherein a hard copy of the display screen is restricted by adding a function of restricting the reading of the display screen to the display control function of the terminal displaying the information. 3. The information security system according to claim 1, which has a function of restricting whether copying is possible for each copy medium of information. 4. The information security system according to claim 1, wherein the permission / inhibition of copying is registered for a reference person or a group of reference persons, and copying is restricted based on the registered information. 5. The information security system according to claim 1, wherein the propriety of copying is registered for each information type, and copying is restricted based on the registered information. 6. The terminal according to claim 2, further comprising a terminal having a function of displaying a multi-window, the terminal having a function of managing a read / write attribute for each window, and at least one reading prohibited window. An information security system that has a function to prohibit reading the display data on the screen while is displayed. 7. The program according to claim 6, wherein a read-out prohibition attribute is set in the display window of the terminal from the program for sending out information, then the read-out is instructed, and if the read-out is impossible, the prohibition function works. Information security method that displays information that is subject to copy prohibition. 8. A security system for information according to claim 6, wherein a terminal for displaying and displaying the information is realized by one computer. 9. A window server of a multi-window system of a computer is provided with a copy permission / prohibition attribute for designating copy permission / prohibition in the window management information for each window, and a request for reading display screen data to the wind server is issued. When there is a check, the copy permission / inhibition attributes of all the windows being displayed are checked, and if at least one window indicates the copy permission / inhibition attribute, the function of prohibiting the reading of the screen display data is provided. Characteristic wind server system.