JP2000242356A - Console device - Google Patents

Abstract

PROBLEM TO BE SOLVED: To secure the security of the console device which displays icons representing processors and controls them. SOLUTION: The console device stores whether or not the icon corresponding to an arbitrary process is displayed at the date and time of automatic operation in automatic operation schedule information 2 in addition to information needed for the automatic operation of the processor as to respective combinations of the state of the processor and the level of a user who logs in the console device, performs a decision process by a display change decision part 9 at the date and time specified in the automatic operation schedule information 2, or when a change in the processor state or the level of the user who logs in the console device is detected, and erases or displays the icon corresponding to the processor according to the decision result.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a console device having a security function, and more particularly to a console device having a security function for suppressing user operations on a plurality of connected processors.

[0002]

2. Description of the Related Art In general, a computer system in which a plurality of processors are connected to a console device displays an icon of the plurality of processors on a display of the console device and operates an icon of a processor to be controlled to provide an arbitrary processor. Is configured to be controlled.

In the computer system configured as described above, in order to prevent a careless operation of a processor which is not a target of operation by mistake, an icon of a processor which is not a target of operation is hidden on a display of a console device. Some methods for ensuring security have been put to practical use.

For example, as an operating system of a console device, there are usually icons corresponding to all files in the system, and when a user opens a directory of an arbitrary file by a mouse operation, all files included in the directory are opened. Are displayed, and the user browses the contents of a file by operating an arbitrary icon, or activates a program.

[0005] Therefore, when it is assumed that an apparatus for controlling a processor by an icon operation employs an icon hiding method such as the operating system described above, special conditions are met by performing special settings for an arbitrary directory. It is conceivable to display only an icon corresponding to a file, for example, a file including a specific character string in the file name, and to hide the unmatched file without displaying it.

An operating system set to hide a specific file in this way prevents the user from operating on the hidden file,
Security is being provided for hidden files.

[0007]

As described above, a console device for controlling a processor by selecting a process from a menu for a control means such as an icon or the like, as described above, requires that the control means be operated erroneously during operation of a business. , The processor stopped, and the processor could stop.

For this reason, in the conventional console device for automatically operating the processor, the control means of all the processors are displayed and the operation is started during the time period when the automatic operation is not performed, and the processor enters the operating state. By concealing the control means from the point in time, an erroneous operation of erroneously operating the control means during business operation is avoided.

However, the control means (icons) are only displayed or hidden according to the conventional operation time, in other words, the control means which is hidden as necessary even during the start-up only under the fixed condition which is temporally static. There was a problem that flexible measures such as displaying means could not be performed.

In particular, if the console device is concealed and disabled during automatic operation for the purpose of ensuring security, a failure occurs during operation of the processor, and recovery processing is performed when the processor is out of operation. There is also a problem that the control means for performing the operation cannot be displayed and the recovery cannot be performed.

SUMMARY OF THE INVENTION An object of the present invention is to eliminate the above-mentioned disadvantages of the prior art, and to provide a console device having a security function capable of making detailed settings according to the security level.

[0012]

In order to achieve the above object, the present invention provides a console device for controlling a plurality of processors by displaying icons, wherein a display change that defines whether or not to display icons of the plurality of processors is provided. A display change information storage unit that stores information, a processor state management unit that manages the plurality of processors, a user level management unit that manages a user level, and the processor state management unit. A first feature is that a display change determination unit for non-display is provided.

Further, the present invention, in the console device according to the first aspect, defines whether or not the display change information of the display change information storage unit displays a processor icon based on a combination of processor state information and user level information. The display change determination unit displays the processor icon by referring to the display change information in the display change information storage unit based on the processor state information from the processor state management unit and the user level information from the user level management unit or The non-display is a second feature.

Further, according to the present invention, in the console device according to the second aspect, automatic operation schedule information in which an automatic operation schedule corresponding to a plurality of processors is set is stored, and a display change judging unit automatically determines the automatic operation schedule from the automatic operation schedule. It is determined that the operating state has been reached, and the processor is determined based on the display change information and the processor state information from the processor state management unit and the user level information from the user level management unit, which are specified in advance for the automatic operation state. A third feature is that the icons are displayed or hidden.

[0015]

An embodiment of the present invention will be described below in detail with reference to the drawings. FIG. 1 is a diagram illustrating a configuration of a console device having a security function according to the present embodiment, FIG. 2 is a diagram illustrating an example of automatic driving schedule information of the console device, and FIG. 3 is a display change included in the automatic driving schedule information. FIG. 4 is a diagram showing a format of a record, FIG. 4 is a diagram showing an example of a target processor included in the automatic driving schedule information, FIG. 5 is a diagram showing an example of a display availability matrix included in the automatic driving schedule information, and FIG. FIG. 7 is a diagram illustrating an example of a processor state of a processor to be monitored and controlled by the console device according to the present embodiment, FIG. 7 is a diagram illustrating an example of a user level who logs in to the console device, and FIG. 8 is a display device illustrated in FIG. FIG. 9 is a diagram showing an example of a screen displayed on the screen. FIG. 9 is a flowchart showing a display change determination process executed by the display change determination unit shown in FIG. A chart.

As shown in FIG. 1, the console device 1 according to the present embodiment has an automatic schedule in which a schedule for automatically operating a plurality of processors and information for displaying / non-displaying icons corresponding to the processors are stored in a hard disk or the like in advance. The operation schedule information 2, a schedule management unit 10 that performs automatic operation of a plurality of processors by the automatic operation control unit 12 according to the automatic operation schedule information 2, and processor state information 4 that stores the processor state of each processor in a semiconductor memory or the like. A processor status management unit 3 for reading the processor status information 4 upon request and reporting it to a higher order; a user level information 6 storing a user level logged in to a console in a semiconductor memory or the like; and a user level information 6 upon request. User level management unit 5 to read and report A display information management unit 7 for managing display information to be displayed on the display device 11, a display control unit 8 for displaying an icon corresponding to the requested processor and reporting the icon being displayed, and a processor state management unit 3 Alternatively, a display change determination unit 9 for updating a level at which an icon is displayed on the display device 11 in response to a request from the user level management unit 5 or the schedule management unit 10, and a date and time of the console device are stored, and the automatic operation schedule is stored. A schedule management unit 10 for managing automatic control of a control target with reference to the information 2; a display device 11 for displaying a plurality of icons and the like to be controlled; and a schedule management unit 10
And an automatic operation control unit 12 that controls automatic operation of a plurality of control targets with reference to FIG.

The automatic operation schedule information 2 describes a schedule for automatic operation of the processor and information for displaying / non-displaying (changing display) an icon corresponding to the processor, and is specifically shown in FIG. As described above, one or two or more entries are configured, and one entry (for example, “operation start”) includes a date / time column 21, a start item column 22, a display change record number column 23, and a configuration information column 2.
And 4.

The date / time column 21 is a column for describing (registering) a date and time for starting or ending the operation.
The start item column 22 describes either “operation start” or “operation end”, and the display change record number column 23 describes a display change record 200 (see FIG. 3) describing details of a display change. ) Is described, and "0" is described when the display is not changed.
Reference numeral 4 denotes a column for describing definition information for controlling the configuration of the system and other information necessary for starting the operation of the system.

As shown in FIG. 3, the format of the display change record 200 includes a record number 201, a target processor 202, and a display availability matrix 203. The record number 201 is a positive number for identifying each display change record. The integer, the target processor 202, is configured to describe the processor to be subjected to the display change processing, for example, "ALL" indicating all processors or the name of each processor. This target processor 202
As shown in FIG. 4, "ALL" indicates all processors, and CPU1 and CPU1 indicate individual processors.
2 etc. are described.

Further, the display availability matrix 203 shown in FIG.
Describes whether an icon corresponding to the target processor 202 is displayed when the target processor 202 is in each processor (activated) state at each user level. A specific example is shown in FIG.

The display availability matrix 203 is a matrix representing processor states 1 to m and operator levels 1 to n. The processor state is, for example, as shown in FIG. State (power off), power on (power on execution), power on completion (power on completion), system configuration control execution (SYSIML execution),
This is completed (SYSIML completed), initial program load is being executed (IPL is being executed), IP
L is completed (IPL completed).

As shown in FIG. 7, the user level is the level of the lowest operator (OPERATOR) who actually performs the system operation at the site, and the level (ADVANCED OPERATE) of the instructor of the OPEATER.
R), the level of a system operator such as a developer on the site (SYSTEM PROGRAMMER), and the level of a higher level administrator (ACCESS ADMINISTR).
ATOR), the level of a service engineer on the manufacturer side (SERVICE ENGINEER), and a higher level (PRODUCT ENGINEER).

As shown in FIG. 8, the console screen 110 displayed on the display device 11 displays a plurality of icons 111 corresponding to the processors to be monitored and controlled by the console device. When there are two or more processors to be monitored and controlled, according to the number of processors,
Two or more icons 111 are also displayed. The user of the console device 1 controls the corresponding processor by operating the icon 111.

The processor status management unit 3 reads the processor status information 4 holding the processor status of each processor in response to a request from the display change determination unit 9 and answers the processor status of the requested processor. When the processor status of a certain processor changes, the processor status information 4 is updated and the display change determination unit 9 is updated.
Request the execution of the display change determination process.

In response to a request from the display change determination unit 9, the user level management unit 5 reads the user level information 6 holding the user level currently logged in to the console, and answers the read user level. When the user level during login to the console device changes, the user level information 6 is updated and the display change determination unit 9 is updated.
Request the execution of the display change determination process.

The display information management unit 7 manages information to be displayed on the display device 11, and an icon corresponding to the processor requested by the request from the display change determination unit 9 is currently displayed on the display device 11. Answer whether or not. Further, in response to a request from the display change determination unit 9, the display control unit 8 displays an icon corresponding to the requested processor on the display device 11, and displays the icon on the display information management unit 7.
Is notified that an icon corresponding to the requested processor has been displayed.

Further, the schedule management unit 10 stores the date and time of the console device in the date / time 2 registered in an entry of the automatic operation schedule information 2.
At the time when the number has reached 1, the "operation start" or "operation end" registered in the start item 22 of the entry is requested to the automatic operation control unit 12, and a valid record number is displayed in the display change record number 23 of the entry. When (a value other than 0) is described, the record number is given as an input to the display change determination unit 9 to request execution of the display change determination processing.

The automatic operation control unit 12 is configured, for example, according to the configuration information 24 of the entry used when the "operation start" is requested from the schedule management unit 10 according to the configuration information 24 of the processor shown in FIG. Load (IPL) and the like are executed in order, and conversely, when "operation end" is requested, the power of the processor is turned off.

As shown in FIG. 9, in the console device configured as described above, the display change judging unit 9 automatically operates in response to a request from the processor state managing unit 3, the user level managing unit 5, or the schedule managing unit 10. The display change record 200 specified below is read from the schedule information 2 (step 901). That is, in the case of the display change determination process in response to a request from the schedule management unit 10, the display change determination unit 9 reads the record corresponding to the display change record number 23 given as input, and executes the processor state management unit 3 or the user level management. In the case of a request from part 5,
The record corresponding to the display change record number 23 of the entry corresponding to the current date and time of the console device (the date / time 21 is older than and closest to the date and time of the console device) is searched for and read. .

In the example shown in FIG. 9, the processor state management unit 3
, The record indicated by the display change record number 23 of the entry corresponding to the current date and time of the console device is read (step 902). That is, the processor status 20 corresponding to the target processor 202 of the display change record read in response to the request to the processor status management unit 3
31 and reads the state of the target processor.

Next, the display change determination unit 9 obtains the user level 2032 currently logged in to the console device in response to a request to the user level management unit 5 (step 903).
Then, referring to the display enable / disable matrix 203 of the display change record 200 based on the current processor state 2031 obtained in the step 902 and the user level 2032 read in the step 903, the target processor 202 acquires the processor obtained in the step 902. It is determined whether "display" or "non-display" is described in the state 2031 and the user level 2032 acquired in step 903, and if "non-display" is described as a result of the determination, step 905 is performed. The process proceeds to step 907 if "display" is described (step 904).
That is, in step 904, it is determined by referring to the display availability matrix 203 based on the processor state and the user level whether to display or hide the icon according to the state of the processor and the user level, and may be displayed. If so, the process proceeds to step 907;
Proceed to 08.

If concealment is set, it is determined whether or not the icon of the processor is being displayed (step 90).
5) If it is not being displayed, the process is terminated. If it is being displayed, the target icon is deleted (step 906) and the process is terminated.

If it is set to be displayed, it is determined whether or not the icon of the processor is being displayed in the same manner as described above (step 907). Displays the target icon (step 908) and ends the process.

That is, in the present embodiment, it is determined in step 905 whether or not the icon 111 corresponding to the target processor 202 of the display change record 200 (to be concealed) is currently displayed on the console screen 100. If the icon 101 is being displayed, the process proceeds to step 906, where the icon 111 corresponding to the target processor 202 is deleted (concealed). If not, the present process is terminated. As a result, the user of the console device 1 cannot perform control operations on the processor 203, and can maintain security.

Conversely, in step 907, it is determined whether or not the icon 111 corresponding to (to be displayed on) the target processor 202 of the display change record 200 is currently displayed on the console screen 100. If is displayed, the process proceeds to step 908 to display the icon 111 corresponding to the target processor 200. If the icon is displayed, the process ends. Thus, the user of the console device 1 can perform a control operation on the processor 202.

As described above, the console device according to the present embodiment has the date / time 2 registered in the automatic operation schedule 2.
First, the display change processing can be performed, but it is not always necessary to delete the icons by the above-described display change processing immediately after starting the operation.

For example, in the entry indicating "operation start" in the automatic operation schedule 2, an icon is displayed from the state of the processor (see FIG. 4) from "power off" to "executing IPL", and "IPL complete" is displayed. By setting the display change matrix 203 for hiding the icons in the state, the processor state sequentially changes after the operation starts while the processor state of the target processor 202 is from “power off” to “IPL in execution”. Even if the display change determination process is executed, the icon continues to be displayed, and when the IPL is completed, the processor state management unit 3 detects the processor state of “IPL completed” and changes the display to the display change determination unit 9. By requesting the judgment process and deleting the icon by this, it is possible to prevent the operation of the processor by mistake during the business operation Door can be.

More specifically, the user level 1 shown in FIG. 5 is from the OPERATOR level (the lowest operator level that actually performs the system operation) to the user level n shown in FIG. 5, the processor state 1 in FIG. 5 is from the power supply OFF to the processor state m in FIG.
In the case of L completion, the icon of the processor is displayed to all users in the processor state 1 (power OFF) state, and there is no normal operation in the processor state 3 (power ON completion) state. User level 1
For example, icons are not displayed for low-level persons, and icons are displayed for those who have a user level of 3 or more and have authority to recover from a failure at this stage.
It is possible to control the display or non-display of detailed processor icons according to the state of the processor and the level of the user, thereby preventing a low-level operator from accidentally operating the processor during business operation. It is possible to restore the system by increasing the icons displayed in reverse when a failure occurs.

Further, according to the present embodiment, by setting the display change matrix 203 arbitrarily, the IPL
An icon can be displayed as a control means for the user to perform a recovery process when a failure occurs during the execution of and the processor state does not reach the state of “IPL completion”. In addition, if it is desired to display icons in all processor states after the end of automatic operation, the automatic operation schedule 2
Display change matrix 203 that displays icons in all processor states in the entry indicating "operation end"
Should be set.

As described above, the console device according to the present embodiment displays / displays the icon corresponding to the processor in conjunction with the schedule for starting or ending the automatic operation of the processor.
Hidden can be changed. Since the conditions for displaying / hiding the icon can be set for each user level, the icon can be displayed only for a specific user. Further, since the same condition can be set individually for all or a specific processor, even when both the processor performing the automatic operation and the processor not performing the automatic operation are connected to the console device, the automatic operation is performed on the target processor. A processor can be specified, and the above-described display change can be performed only for a processor that performs automatic operation.

Incidentally, the console device according to the present invention can also be represented as the following embodiment. First Embodiment A console device that controls one or more processors, a display change information storage unit that stores display change information that defines whether to display a control unit of a processor, and a control unit. A processor state management unit that manages a processor state of a target processor, and a user level management unit that manages a user level logged in to a console device, the display change information storage unit, the processor state management unit, A processor control unit connected to a user level management unit and displaying on the console device according to the display change information, the processor state information from the processor state management unit, and the user level information from the user level management unit. Console device having display change determination unit for displaying or non-displaying > In the console device according to the first embodiment, control of a processor to be displayed on a console device based on the display change information, the processor status information from the processor status management unit, and the user level information from the user level management unit. <Second Embodiment> In the security system according to the second embodiment, it is determined from the automatic operation schedule of the processor that the automatic operation state has been set, by displaying or not displaying the means. Controlling a processor to be displayed on a console device based on the display change information specified in advance for the automatic operation state, processor state information from the processor state management unit, and user level information from the user level management unit. Showing or hiding means Console device security method

[0042]

As described above, according to the present invention, security can be ensured by displaying / hiding the control means of the processor on the console device in conjunction with the automatic operation schedule of the processor. Become. In addition, display / non-display of the control means can be designated for each processor state of the processor to be controlled and for each user level who is logged in to the console device, so that detailed settings according to the operation mode of the user and the required security level can be made. It becomes possible.

[Brief description of the drawings]

FIG. 1 is a diagram showing a configuration of a console device having a security function according to an embodiment of the present invention.

FIG. 2 is a view showing an example of automatic operation schedule information of the console device according to the embodiment.

FIG. 3 is a diagram showing a format of a display change record included in automatic operation schedule information according to the embodiment.

FIG. 4 is a diagram showing an example of a target processor included in the automatic driving schedule information.

FIG. 5 is a diagram showing an example of a display availability matrix included in the automatic driving schedule information.

FIG. 6 is a view showing an example of a processor state of a processor to be monitored and controlled by the console device according to the embodiment;

FIG. 7 is a view showing an example of a user level who logs in to the console device according to the embodiment.

FIG. 8 is a view showing an example of a screen displayed on the display device of FIG. 1;

FIG. 9 is a flowchart illustrating a display change determination process executed by a display change determination unit in FIG. 1;

[Explanation of symbols]

1: console device, 2: automatic operation schedule information,
3: processor status management unit, 4: processor status information,
5: User level management unit, 6: User level information, 7:
Display information management unit, 8: display control unit, 9: display change determination unit, 10: schedule management unit, 11: display device, 1
2: Automatic operation control unit.

 ──────────────────────────────────────────────────続 き Continuing from the front page (72) Inventor Akio Yamamoto 1 Horiyamashita, Hadano-shi, Kanagawa Prefecture Inside the General-purpose Computer Business Division, Hitachi, Ltd. (72) Inventor Yutaka Tawara 1 Horiyamashita, Hadano-shi, Kanagawa Hitachi, Ltd. F-term in the General-purpose Computer Division of the Works (reference) 5B014 HC15 5B045 HH08 JJ33 5E501 AA05 AC24 AC35 AC42 BA02 FA04 FA46

Claims (3)

[Claims] 1. A console device for controlling a plurality of processors by icon display, a display change information storage unit storing display change information defining whether icons of the plurality of processors are displayed, and the plurality of processors. A console device comprising: a processor state management unit that manages a processor; a user level management unit that manages a user level; and a display change determination unit that displays or hides a processor icon. 2. The processor according to claim 1, wherein the display change information in the display change information storage unit defines whether or not to display a processor icon based on a combination of processor state information and user level information. 2. A processor icon is displayed or hidden by referring to display change information in the display change information storage unit based on processor state information from the processor and user level information from a user level management unit. Console device as described. 3. An automatic operation schedule information in which an automatic operation schedule corresponding to a plurality of processors is set is stored, and a display change determining unit determines that the automatic operation schedule is changed to an automatic operation state, and A processor icon is displayed or hidden based on the display change information specified in advance for the operating state, the processor state information from the processor state management unit, and the user level information from the user level management unit. 3. The console device according to claim 2, wherein: