JP2003167740A - Install file creation device and user using environment management method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an install system maintaining a security level of a commercial use network system without requiring a load of a system administrator. <P>SOLUTION: An install file creating device comprises a parameter list creating means 10 for creating parameter list file indicating kinds of software and combination thereof to be installed for each section, and packing means for creating an install file for installing only indicated software, by following the parameter list file 12 indicated by the system administrator. <P>COPYRIGHT: (C)2003,JPO

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an installer system for creating an installer program for installing business software necessary for a client computer used by an employee in a business network system using an IC card.

[0002]

2. Description of the Related Art With the spread of computers, business operations of companies are performed by a network system composed of a large number of client computers used by employees and a small number of server computers which provide some services to these computers. became. In recent years, the network systems themselves have become large in scale, and it has become quite common to carry out business using them, and the business to be carried out on the network has become a domain related to settlement and approval. Since it is about to be expanded, it is extremely important to properly manage security related to the network system such as unauthorized access to data that should be restricted in access and impersonation to other users.

In such a situation, the system administrator is required to always maintain the security of the client computer connected to the network system at a required level. This is because if there is any client computer that does not meet the required security level, it becomes a security hole and the security level of the entire system will drop.

Therefore, when a combination of software to be installed in a client computer is determined in a certain department based on a specific security policy, a person who is unwilling to choose a different combination of software. If installed, the security level of the entire department may be reduced.

In order to avoid this, the system administrator or the security officer of the department thoroughly ensures that each person has a combination of software to be installed in the client computer in advance, and the software other than the specified software is arbitrarily selected. Must not be installed, and the software that is required to be installed must not be uninstalled without notice, and it must be observed.

Alternatively, at the time of system startup and subsequent version upgrade, the system administrator or the security officer of the department must always install and uninstall the software on each client computer.

[0007]

The first method is not a good method because it is often impossible to thoroughly publicize it when a large number of people are targeted. The second method cannot be said to be a good method when the load on the system administrator or the security officer of the department is high and this is also the case when the number of people is large.

The present invention has been devised in view of the above problems, and provides a software installation system that maintains the security level of a business network system and does not require a load on a system administrator. The task is to do.

[0009]

SUMMARY OF THE INVENTION A first invention for solving the problems is an installation file creating apparatus used when installing a plurality of software necessary for a computer used by an employee in a business network system. In the first aspect, when the combination of software to be installed is determined for each department to which the employee belongs, the type and combination of software to be installed are specified for each department. An installation file creation device having a parameter list creation means for creating a parameter list file and a packing means for creating an installation file for installing only specified software according to a parameter list file specified by a system administrator. .

The install file is a bundle of a plurality of files including an executable file of a target application program, a dynamic link library, etc., and is compressed into one file. Unzip the files that were put together in a folder and expand them. Immediately after that, start the installation program that performs the installation itself.

Usually, this installation program is GU
I (graphical user interface) is provided so that the user can select the condition / environment for using the target application program. However, the installation program provided by the installation file of the present invention does not allow such freedom to the end user. As a result, the system administrator can completely manage the usage environment of the end user of the department.

A more preferable second aspect of the install file creating apparatus of the first invention is an install file creating apparatus configured to authenticate an administrator with an IC card of the administrator when creating the install file. is there. With such an installation file creation device, only the system administrator creates the installation file, which is convenient for security management.

A more preferred third aspect of the install file creating apparatus of the first invention is the install file creating apparatus of the first aspect, wherein the parameter list creating means is for uninstalling the installed software. A parameter list file is created as a parameter list file that includes, as one of the parameters, whether or not authentication by an administrator's IC card is required, and the packing means manages the specified parameter list file. If it is specified that authentication by the IC card of the administrator is required, an installation file is created that has an uninstall function that performs authentication by the IC card of the administrator when uninstalling. It is a device.

A second invention for solving the problem is a computer program which describes a series of instructions for causing a computer to operate as the installation file creating apparatus of the first invention.

A third invention for solving the problem is a computer-readable recording medium in which the computer program of the second invention is recorded.

A fourth invention for solving the problem is a method for managing a user use environment of a business computer network system by creating and distributing an install file including an install program in which a user cannot freely set a use environment.

A more preferred second aspect of the fourth invention is that
Not only does the user not be able to freely set the usage environment when installing, but also the uninstall function that requires the authentication of the system administrator when uninstalling the software once installed on the computer used by the user. A user use environment management method for a business computer network system, characterized in that an installation file including a provided installation program is provided so that a user cannot arbitrarily change the use environment. For authentication of the system administrator, for example, an IC card in which personal identification information of the system administrator is recorded may be used.

[0018]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS FIG. 5 is a block diagram illustrating an installation file creation device 1 according to an embodiment of the present invention. Reference numeral 1 is a computer (hereinafter referred to as PC) body including a keyboard, a mouse, and a monitor display. PC1
It includes a parameter list creating means 10, a packing means 20, and an IC card reader / writer 3. Further, the built-in or external hard disk 2 is recorded with an installation program 11, execution programs 14 of various element software, a registry update program 13, and a parameter list file 12 created in the past. Each component will be described below in order.

FIG. 1 is a flow chart for explaining an operation mode using an installer file creating apparatus 1 (hereinafter, creating apparatus 1) according to the present invention. The system administrator uses the IC card 5 of the system administrator on the creating apparatus 1 to create the install file 21 which is the install file for each department (S01). In FIG. 1, three types of installation files 21 of department A, department B, and department C are created. The user of each department installs the set of software defined in his / her own PC using the install file 21 of his / her department (S02).
At this time, the user does not select the combination of software to be installed. The install file 21 does not have such a user interface. Therefore, the user can install only the set of software specified by the installation file 21 on his PC.
To install.

FIG. 2 is a diagram for explaining an operation mode in which the software once installed in the user's PC is uninstalled for some reason. When the user uninstalls the software installed using the installation file 21, the IC card 5 of the system administrator must be inserted into the user's PC (S03). By doing so, it is possible to prevent the user from arbitrarily uninstalling a part of the software installed using the installation file 21.

FIG. 3 is a block diagram for explaining the constituent elements involved in the installation work using the apparatus 1 and the relationship between the constituent elements. The flow of the installation work using the device 1 will be described in detail below with reference to FIG. In the following description, the present system refers to a system for the entire installation work using the device 1.

In FIG. 3, 10 is a parameter list creating means,
Reference numeral 12 is a parameter list file which is an output product of the parameter list creating means 10. First, the parameters in this system will be described. In this system, the combination of software distributed to each department is called a pattern. The parameter list is information for determining this pattern, and is a string of codes indicating whether or not each element software is included in the set to be installed. However, physically, all the element software is copied to the user PC at the time of installation. At the same time, information as to whether or not each element software can be executed (which is naturally set based on the pattern or the parameter list) is written in a predetermined area of the user PC. This predetermined area is called a registry. The usage environment of the user PC is determined by the information set in this registry. Therefore, it seems that only the component software set to be executable is installed. FIG. 4 shows an example of the pattern as a table.

FIG. 4 is a list of four patterns which a company introducing a business network system sets for each department. The four patterns are the six types of selection functions displayed in the row headings ((1) Login PI
N authentication, ... (6) XX function usage) is defined. ○ in the figure selects the function, ×
Means not to select that function. This ○ or ×,
That is, the column in which the values of variables (which are called parameter flags) indicating the selection result of the selection function are arranged is the parameter list.

The parameter list creating means 10 is a GUI program for setting a parameter list forming the pattern by selecting a predetermined pattern as shown in FIG. By editing the parameter list itself, it is possible to set a usage environment other than a predetermined pattern. In order to use the parameter list creating means 10, it is necessary to authenticate the system administrator. Normally used by the system administrator. The parameter list creating means 10 can create a completely new parameter list file 12 or can read a previously created parameter list file 12 and output a partially modified version of the parameter list file as a new parameter list file. .

After setting all the parameter flags (that is, after determining the parameter list), the system administrator selects either "installer creation" or "registry update program creation", sets the output data save name, and sets the parameter list. The output means is instructed to the creating means 10. As a result, the parameter list file 12 is output.

The installation program 11 is a GUI program that, after being installed in the user's PC, reads the parameter list file 12 and installs it based on the setting information. The registry update program 13 is a GUI program that reads the parameter list file 12 and changes the registry after it is installed on the user's PC.

The packing means 20, when the parameter list file 12 specifies "Create installer", the parameter list file 12, the installation program 11, the execution format program files 14 of all the element software, and the installation setup means 30. Is compressed to create an install file 21 which is a self-extracting file as an install file. Alternatively, when the parameter list file 12 specifies "create registry update program", the parameter list file 12, the registry update program 13, and the registry update setup means 40 are compressed and installed as a single self-extracting file. Create 22.

The installation file 21 copied in the user PC is started as the installation setup means 30 when a file is selected by the user.
The installation setup means 30 first decompresses the installation program 11, the parameter list file 12, and the executable program file 14 in the temporary folder. Next, the installation program 11 is started by giving the parameter list file name as an argument.
The installation program 11 moves the executable program file 14 to a predetermined folder, sets necessary information in the registry of the user PC according to the parameter list, and executes the installation process. After the installation is completed, the installation program 11 and the parameter list file 12 are deleted.

When the installation program 11 is started from the installation setup means 30, confirmation of the environment of the PC, prompting the designation of the installation destination folder, acceptance of the designation, acceptance of the start of the installation, installation processing, and a post-installation notice text Display and restart processing. Installation program 1
After the execution of step 1, the installation program 11 and the parameter list file 12 are erased by the installation setup means 30 as described above. In this way, the installation process on the user PC is completed.

When the usage environment is changed according to a different parameter list for the user PC in which the element software is once installed, the installation file 22 is used instead of the installation file 21.

Next, the case of the installation file 22 will be described. The installation file 22 copied in the user PC is activated as the registry updating setup means 40 when the user selects a file. The registry updating setup means 40 first
Registry update program 13 in the temporary folder
And the parameter list file 12 is decompressed. Next, the parameter list file name is given as an argument to start the registry update program 13. After the execution of the registry update program 13, the registry update program 13 and the parameter list file 12 are deleted.

When the registry update program 13 is started from the registry update setup means 40, it displays a confirmation message, receives an update start, a registry update process, an end message display, and a restart process. After the execution of the registry update program 13, the registry update program 13 and the parameter list file 12 are erased by the registry update setup means 40 as described above. In this way, the registry update process on the user PC is completed.

The uninstall process on the user PC is performed by activating the install program 11. When the parameter list file 12 is created, if the parameter flag "requires system administrator authentication" is specified at the time of uninstallation, the installation program 11 will delete the IC card inserted before the uninstallation. Go read the authentication information. The installation program 11 checks whether the read authentication information of the IC card belongs to the system administrator. If it is confirmed that the IC card of the system administrator is inserted, the subsequent steps can be performed, but if not, the uninstall work cannot be continued.

As described above, in this system, the uninstallation can be performed by setting the parameters of the system administrator.
You can select from "Leave at the discretion of the end user" or "Require system administrator authentication". Therefore, when preparing the installation file 21, the packing means 20 checks the contents of the parameter list file 12 and installs the installation program 11 including a series of commands for authenticating the system administrator prior to the uninstall process. Alternatively, the installation program 11 that does not include such an instruction is incorporated into the installation file 21. This is, for example,
A plurality of program files of the installation program 11 are prepared according to the designation at the time of uninstallation, and the packing means 20 makes the parameter list file 1
The packing unit 20 may be configured to select an appropriate program file according to the contents of item 2.

The installer system for each function according to the present invention has been described above. According to the present invention, the system administrator prepares the executable program that installs only the combination of the necessary element software for each department, so that the end user cannot install the different combination without permission. Since the end user's PC is always provided with a combination as set by the administrator, the system administrator can easily manage it.

Also, when uninstalling, the parameters can be set so that the system administrator must be authenticated on the user PC. If this function is used, the end user cannot uninstall the installed component software without permission, so that it is possible to prevent the security level of the department concerned from being lowered without the knowledge of the system administrator.

By using the installation file creation device 1 described above, the user usage environment of the business computer network system is managed by creating and distributing the installation file including the installation program in which the user cannot freely set the usage environment. The method can be carried out. Its effectiveness has already been stated.

Further, by using the installation file creating apparatus 1, the user cannot freely select the usage environment at the time of installation, and when uninstalling the software once installed, it is necessary to authenticate the system administrator. A method for managing the user usage environment of the business computer network system can be implemented by creating and distributing an installation file including an installation program having an uninstall function. Its effectiveness is as described above.

[0039]

As described above, the installation file creating apparatus 1 according to the present invention can provide a software installation system that maintains the security level of the business network system and does not require the load of the system administrator. There is a remarkable effect.

[Brief description of drawings]

FIG. 1 is a flowchart illustrating an operating form using an installer system according to an embodiment of the present invention.

FIG. 2 is a diagram illustrating an operation mode in which installed software is uninstalled.

FIG. 3 is a block diagram illustrating each component of the installation system according to the embodiment of the present invention and a relationship between the components.

FIG. 4 is a table illustrating parameters and patterns of the installation system according to the embodiment of the present invention.

FIG. 5 is a block diagram illustrating the configuration of a system administrator's PC.

[Explanation of symbols]

PC used by 1 system administrator 3 IC card reader / writer IC card of 5 managers 10 Parameter list creation means 11 Installation program 12 Parameter list file 13 Registry update program 14 Execution programs of various element software 20 packing means 21 Self-extracting program 22 Self-extracting program 30 Setup means for installation 40 Registry Update Setup Means

   ─────────────────────────────────────────────────── ─── Continued front page    (72) Inventor Satoshi Nakamura             1-1-1, Ichigaya-Kagacho, Shinjuku-ku, Tokyo             Dai Nippon Printing Co., Ltd. F term (reference) 5B058 CA27 KA02 KA04 KA31 YA20                 5B076 BB06 BB17 FB05 FB10

Claims (7)

[Claims] 1. An installation file creation device used when installing a plurality of software required for a computer used by an employee in a business network system, the software being installed according to the department to which the employee belongs. When the combination is decided, according to the parameter list creation means that creates the parameter list file that specifies the type and combination of software to be installed for each department and the parameter list file specified by the system administrator, An installation file creation device equipped with packing means for creating an installation file for installing only specified software. 2. The installation file creating device according to claim 1, wherein when creating the installation file, the IC card of the administrator is used to authenticate the administrator. 3. The installation file creation device according to claim 1, wherein the parameter list creation means specifies whether or not authentication by an IC card of an administrator is required when uninstalling the installed software. Is created as a parameter list file containing one of the parameters as a parameter, and the packing means specifies that the specified parameter list file requires authentication by the IC card of the administrator. An installation file creation device characterized by creating an installation file having an uninstall function for performing authentication by an IC card of an administrator when uninstalling. 4. A computer program in which a series of instructions for causing a computer to operate as the installation file creation device according to claim 1 is described. 5. A computer-readable recording medium in which the computer program according to claim 4 is recorded. 6. A method for managing a user usage environment of a business computer network system by creating and distributing an installation file including an installation program in which a user cannot freely set a usage environment. 7. An installation program including an uninstall function that requires a user to authenticate the system administrator when uninstalling software once installed, which does not allow the user to freely select a usage environment during installation. A method of managing the user environment of a business computer network system by creating and distributing installation files.