JPH1115549A - Security check system with operator operation - Google Patents

Abstract

PROBLEM TO BE SOLVED: To improve the security of a system by registering/collating an operation command permitted only by a menu operation to/with a table. SOLUTION: A menu command file is read based on a menu command file indicated from a system manager. Various commands are registered in the menu command file 80 and the command which requires the authority of the system manager is extracted among them and the result is written into an access authority table 50. A command name, system operator user ID and a command parameter are stored in the access authority table 50 as one entry. A menu processing program successively reads the commands on the menu command file 80 and executes the commands as they are with system operator authority as they are when the commands registered in the access authority management table 50 are not matched with user 10.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a confidentiality system in computer operation, and more particularly to a security check system for confidentiality in computer operation by restricting the user authority of a system operator.

[0002]

2. Description of the Related Art In a computer system intended for use in a network, user authority is set for each user. The user authority defines access authority to a file and an executable command. Every file or command / program has an owner. The owner can freely execute a command owned by the owner, but secures the system by restricting a command owned by another person from being freely executed.

On the other hand, with the advancement of computer system technology, high-performance systems such as database processing and distributed transaction processing have become common. Programs that realize these functions are provided as distribution software, and users realize business functions by using the distribution software. These distribution softwares require a system administrator. The system administrator has command authority / access authority necessary for installation of distribution software, start and end of distribution software, and operation of distribution software. By limiting the system administrator, unauthorized access from other users is prevented, and a system that maintains high confidentiality has been realized.
On the other hand, only the system administrator can input operation commands such as start, end, and state change of distribution software essential for normal operation. System administrators are required to have deep specialized knowledge about distribution software. In a system in which a plurality of distribution software are combined, the demands on a system administrator have also increased, and this has been a major constraint on system operation.

[0004] For this reason, with the expansion of application of computer systems, there has been a demand for a processing method that can be operated by general operators who do not have detailed knowledge of distribution software. The countermeasure is a menu method. In the menu method, a normal operation necessary for business operation is performed by a system operator, and a system administrator changes a system configuration and responds to a failure. The system operator performs a normal machine operation by selecting a menu number from the menu screen. For this reason, the system can be operated even if the system operator does not have specialized knowledge about the distribution software.
In the menu method, a processing function corresponding to a menu screen is defined as a series of commands. This is called a menu command file. The command processing program sequentially analyzes and executes the commands on the menu command file. In the menu method, a menu screen is displayed as the first command in a menu command file, and the system operator is caused to select an operation by a number or the like. As a result, even a general operator who does not have the specialized knowledge of the distribution software can operate the machine.

However, the conventional menu system has an important problem. The design philosophy of the menu method is to separate the system operator who performs menu operations from the system administrator, and not to give the system operator authority to the system operator. The system operator only performs normal machine operation, and must not give authority to perform system maintenance. However, in the menu-based processing method, a system operator needs system administrator authority to execute commands such as start, end, and status change of distribution software. In the prior art, when a system operator connects to a computer, a menu screen is automatically displayed, and confidentiality is maintained by preventing access to anything other than the menu screen. However, since the system operator holds the system administrator authority, it is not a drastic solution. If the system operator knows how to exit the menu processing, the system operator will have system administrator authority, and confidentiality cannot be maintained. In addition, there is also a problem that the maintenance burden of the menu function is large because all of them need to be realized by menu processing.

[0006]

From the viewpoint of maintaining confidentiality, it is desirable that the system operator is not given system administrator authority, but is temporarily given system administrator authority only when necessary. Since the access authority is set for each user, it is necessary to temporarily grant the system administrator authority when executing the operation operation of the distribution software.

[0007]

According to the present invention, the above object is achieved by automatically registering commands requiring system administrator authority in an access authority table and by collating the access authority table when a command processing program is executed. Was realized.

[0008] The system administrator realizes the above-mentioned problem by the following procedure.

The system administrator analyzes the menu command file using the menu analysis program, and writes commands requiring system administrator authority to the access authority management table.

[0010] The system administrator registers the user ID of the system operator who permits the menu operation. Also,
For command processing programs that are started automatically,
Set up the environment to automatically load menu command files.

When the system operator connects to the computer, the menu command file is automatically read. At the top of the menu command is a command to display a menu screen. The system operator only needs to select functions on the menu screen, and does not need detailed knowledge of commands.

The command processing program sequentially reads the menu command file and checks, for each command, whether the command matches a command registered in the access authority management table. If the check results match,
The command processing program is programmatically switched to system administrator authority and issues an operation command with system administrator authority.

If the check results do not match, the command is executed with the system operator authority.

Thus, unauthorized operations other than commands registered in the access authority management table are prevented, and security of the system is maintained.

[0015]

Embodiments of the present invention will be described below in detail with reference to the drawings.

FIG. 1 is a block diagram of an embodiment of a security system to which the present invention is applied. In FIG. 1, 10 is a host computer, 20 to 30 are terminals used by a system administrator or a system operator, 40 is a magnetic disk for registering a user's access right, 50 is an access right registration table, and 60 and 70 are hosts. Reference numeral 80 denotes a menu command file for executing a menu used by a system operator, such as a line connecting a terminal and a network such as a LAN. Next, a process of creating an access right registration file will be described with reference to FIG. When the system administrator connects to the computer (item numbers 110 and 120), the system administrator starts the analysis processing of the menu command file 80 (item number 130). The following describes the algorithm of the program executed at that time. First, the menu command file is read (item 150) based on the menu command file name (item 140) pointed out by the system administrator. Various commands are registered in the menu command file 80,
A command requiring system administrator authority is extracted from the command, and the result is written to the access authority table 50.
Also, the user ID of the system operator who grants the operation authority
(No. 140). The access authority table 50 stores a command name, a system operator user ID, and a command parameter as one entry.

Next, the operation when the system investigator operates the system will be described with reference to FIG. When the system investigator connects to the computer (item 210), the access right is recognized as a general user, and then the menu command file 80 is automatically read (item 220).

The menu processing program sequentially reads out the commands on the menu command file 80 (item No. 24).
0), it is checked whether the command registered in the access authority management table 50 matches the user ID (No. 25
0). If the check results match, the menu processing program is programmatically switched to system administrator authority and issues an operation command of the system administrator (No. 28
0).

If the check result does not match, the command is executed with the system operator authority (item number 270).
As a result, operations other than the commands registered in the access authority management table 50 are prohibited, and the security of the system is maintained.

[0020]

According to the present invention, the authority of the system operator can be limited to the range of the original authority, and the security of the system is improved. In addition, the system administrator can concentrate on the original work such as expansion and maintenance of the system, thereby improving work efficiency.

Further, since there is no need to change existing menu commands, it is versatile and easy to introduce.

[Brief description of the drawings]

FIG. 1 is a block diagram of a security system.

FIG. 2 is an explanatory diagram showing a process of creating an access right registration file.

FIG. 3 is a flowchart showing an operation when a system investigator operates the system.

[Explanation of symbols]

 10: Command processing program 20, 30: Input terminal 50: Access authority table 60, 70: Network 80: Menu command file

Claims (1)

[Claims] In a computer system using an OS having a function of restricting operation authority for each user, and in a security check system of a computer system in which a system operator operates the entire machine by a menu system, only a menu operation is performed. A security check method in which confidentiality of computer operation is maintained by registering / verifying allowable operation commands in a table.