JP2969620B2 - Database security scheme - Google Patents

Description

Description: TECHNICAL FIELD The present invention relates to a database security system, and more particularly to a database security system in an online transaction processing system. [Prior art] Conventionally, this type of database security protection method sets a password for a terminal user, and when the terminal user inputs a connection request command between the terminal device and the online transaction processing system from the terminal device, the terminal A user name and a password are added to the input, and the online transaction processing system checks whether or not the terminal user has the authority to update the database based on the added terminal user name and the password. If the terminal user of the connected terminal device does not have the authority to update the database, the connection request between the terminal user's terminal device and the online transaction processing system is rejected, or the transaction processing request message is rejected. By database Therefore, a terminal user who has the authority to update the database could perform an unauthorized update of the database based on malicious intentions other than the update of the database necessary for the original work. In addition, in case the storage device storing the database is broken, the database name, database record address, image after database update, and database update date and time are assembled into one journal record and stored in a journal file. Was trying to protect the safety. [Problems to be Solved by the Invention] In the above-mentioned conventional database security protection method, since a terminal user having the authority to update the database can freely update the database, the use of a malicious terminal having the authority to update the database is possible. However, there is a disadvantage that even if an illegal update of the database other than the update of the database necessary for the original work is performed by the user, this cannot be prevented. Further, in the conventional journal file, only the database name, the database record address, the image after the database update, and the database update date and time are stored, and the terminal device name and the terminal user name that updated the database are not stored. Therefore, the name of the terminal user who updated the database was identified from the database name and database record address that were updated by the database update history report created from the journal file, or the database was incorrectly updated. It is not possible to identify the database that may have been updated illegally from the terminal user name of the malicious terminal user that was found to be malicious, and it was found that the malicious update was performed Unauthorized updating of other databases by terminal users There is a disadvantage that it is not possible to know whether or not made. In view of the above, it is an object of the present invention to add the name of a terminal device that has updated a database to a journal record and the name of a terminal user to store them in a journal file, thereby performing an unauthorized update of the database. When it is determined that the malicious terminal user has been updated, the malicious terminal user who has updated the database with the incorrect update is investigated and identified from the update history report created based on the database name, etc. In addition, it is possible to prevent the unauthorized update of the database again, and when a specific malicious terminal user is suspected of having performed an unauthorized update of the database, the name of the malicious terminal user who performed the unauthorized update Investigate the database update history of malicious terminal users who suspected unauthorized update from the update history report created based on It is to provide a database safety protection method to investigate the presence or absence of illegal update of the other database by the user it is possible to reduce the safety protection of the database. [Means for Solving the Problems] The database security system according to the present invention receives a transaction processing request message input to an online transaction processing system from a terminal device, and records a database record in accordance with the contents of the transaction processing request message. And updating the database name of the updated database, the database record address of the updated record, and the record image after the database update to the update journal output means each time one record of the database is updated, and then transmitting the transaction processing result to the terminal. A transaction processing means for sending to the device, and when the online transaction processing system and the terminal device are connected, the terminal device name and the terminal user name of the terminal device are stored in the terminal management table. Terminal management means for searching the terminal management table in response to a request from the update journal output means and returning the terminal device name and the terminal user name to the update journal output means; and The database name, the database record address, the record image after the database update, the database update date and time received from the timer device, and the terminal device name and the terminal user name received from the terminal management means are 1
The update journal output means for writing the journal records as journal records in the journal file, reading the journal file started by a job control language, and editing and printing the journal record of the journal file as an update history report by designating the job control language Update history editing means. [Operation] In the database security protection system of the present invention, the transaction processing means receives a transaction processing request message input to the online transaction processing system from the terminal device, and updates a record of the database according to the content of the transaction processing request message. Each time one record in the database is updated, the updated database output unit notifies the update journal output unit of the database name of the updated database, the database record address of the updated record, and the record image after the database update, and then sends the transaction processing result to the terminal device. The terminal management means stores the terminal device name and the terminal user name of the terminal device in the terminal management table when the online transaction processing system and the terminal device are connected, and outputs the update journal. The terminal management table is searched in response to a request from the input means, and the terminal device name and the terminal user name are returned to the update journal output means. The update journal output means receives the database name, database record address and database received from the transaction processing means. The updated record image, the database update date and time received from the timer device, the terminal device name and the terminal user name received from the terminal management unit are written as one journal record in the journal file, and the update history editing unit writes the job control language. , Reads the journal file, edits and prints the journal record of the journal file as an update history report by specifying the job control language. Next, the present invention will be described in detail with reference to the drawings. FIG. 1 is a block diagram showing a configuration of a database security protection system according to one embodiment of the present invention. The database security system according to the present embodiment includes a terminal device 1, an online transaction processing system 2, a database 7, a journal file 8, a job control language 9, an update history editing unit 10, and an update history report 11. It is configured. The online transaction processing system 2 includes a transaction processing means 3, a terminal management means 4, an update journal output means 5, and a terminal management table 6. Referring to FIG. 2, a journal record 20 written in the journal file 8 includes a database name 21 and
It is composed of a database record address 22, a database update date and time 23, a terminal device name 24, a terminal user name 25, and a record image 26 after database update. Referring to FIG. 3, the processing in the update history editing means 10 includes a journal record read step 31, a journal record read end determination step 32, a database update date / time determination step 33, a database name determination step 34, a database record address Judgment step
35, and a journal record printing step 36. Next, the operation of the database security protection system of the present embodiment configured as described above will be described. First, the journal record to journal file 8
The 20 write operation will be described. The terminal user inputs a connection request command with the online transaction processing system 2 from the terminal device 1 in order to update the database 7, but at this time, the terminal user name is also added as a parameter of the connection request command. throw into. Here, a description will be given assuming that the terminal user who has input the connection request command has a right to update the database 7. The terminal management means 4 in the online transaction processing system 2 receiving the connection request command with the online transaction processing system 2 from the terminal device 1 manages the terminal device name 24 and the terminal user name 25 received together with the connection request command. The message is stored in Table 6, and a message to the effect that the connection process has been completed is sent to the terminal device 1. The terminal user of the terminal device 1 receiving the message indicating that the connection processing has been completed from the online transaction processing system 2 inputs a transaction processing request message from the terminal device 1 to update the database 7. Then, the terminal device 1 sends a transaction processing request message to the online transaction processing system 2. The transaction processing means 3 in the transaction processing system 2 that has received the transaction processing request message from the terminal device 1 updates the database 7 according to the contents of the transaction processing request message, and updates each time one record of the database 7 is updated. Database name 21, database record address 22, and updated database record image 26
To the update journal output means 5 and the database 7
Is notified to the terminal device 1 and control is passed to the update journal output means 5. The update journal output unit 5 to which control has been passed from the transaction processing unit 3 requests the terminal management unit 4 to search the terminal management table 6. The terminal management means 4 requested to search the terminal management table 6 from the update journal output means 5 searches the terminal management table 6 and inputs the terminal device name 24 to which the transaction processing request message is input and the terminal user name at that time. 25, the terminal device name 24 and the terminal user name 25 are notified to the update journal output means 5, and the control is returned to the update journal output means 5. The update journal output unit 5 that has returned the control obtains the database update date and time 23 from a timer device (not shown). Next, the update journal output unit 5 outputs the database name 21, the database record address 22 and the record image 26 after the database update obtained from the transaction processing unit 3, the terminal device name 24 and the terminal user name obtained from the terminal management unit 4. 25 and the database update date and time 23 obtained from a timer device (not shown) are written to the journal file 8 as one journal record 20. The above processing is repeated every time a record in the database is updated, and the journal file 8 is stored in the journal file 8.
Are sequentially written. Next, an operation of outputting the update history report 11 will be described. When it is determined that an unauthorized update has been performed on the database 7, the operation manager of the online transaction processing system 2 determines the database name, database record address, investigation period, and database name of the database 7 on which the unauthorized update was performed. The update history editing means 10 is started by the job control language 9 which designates. The activated update history editing means 10 reads one journal record 20 from the journal file 8 (step 31), and determines whether all journal records 20 have been read, that is, the journal record 20 to be read.
It is determined whether or not has been completed (step 32). If the journal record 20 has not been completed, the update history editing means
10 judges whether or not the database update date and time 23 in the read journal record 20 is within the investigation period specified by the job control language 9 (step 33).
If it is out of the survey period, the update history editing means 10
The process returns to step 31 to read the next journal record 20. If it is within the investigation period, the update history editing means 10
Determines whether the database name 21 in the read journal record 20 matches the database name specified by the job control language 9 (step 34). If the database names do not match, the update history editing means 10
Returns to step 31 and returns to the next journal record
Read 20. If the database names match, the update history editing unit 10 determines whether the database record address 22 in the journal record 20 matches the database record address specified by the job control language 9 (Step 35). . If the database record addresses do not match, the update history editing means 10 returns the process to step 31 and reads the next journal record 20. If the database record addresses match each other, the update history editing means 10 outputs the database update date and time 23,
The terminal device name 24, the terminal user name 25, and the record image 26 after updating the database are edited and printed as the update history report 11 (step 36), and the process returns to step 31 to read the next journal record 20. If it is determined in step 32 that the journal record 20 to be read has been completed, the update history editing unit 10 ends the processing. As described above, when it is determined that the database 7 has been illegally updated, the operation manager of the online transaction processing system 2 uses the job control language 9 that specifies the database name, the database record address, and the period to be investigated. By creating and examining the update history report 11 in which the update date and time 23, the terminal device name 24, the terminal user name 25, and the database updated record image 26 are described, when, who, from which terminal device 1 and how Since it is possible to easily know whether or not the database 7 has been illegally updated, it is possible to prevent a malicious terminal user who has illegally updated the database 7 from updating the database 7 again. In this embodiment, the case where the update history report 11 is edited and printed by designating the database name, the database record address, and the investigation period in the job control language 9 has been described. Since the record address 22, the database update date and time 23, the terminal device name 24, the terminal user name 25, and the record image 26 after the database update are stored, by specifying other information in the job language 9, another form can be obtained. The update history report 11 can be edited and printed. For example, a specific malicious terminal user is
When it has been determined that an illegal update has been performed, the operation manager of the online transaction processing system 2 uses the job control language 9 specifying the specific terminal user name and the period to be investigated to specify that the specific terminal user Database 7
The update history report 11 describing the database update date and time 23 when the update was performed, the other database name 21, the database record address 22, and the record image 26 after the database update can be edited and printed. Then, by examining the printed update history report 11, it is possible to determine when, how, and which database record of which database was updated by a specific malicious terminal user who has performed unauthorized update of the database 7. Since it can be easily known, the database record of the database 7 in which the unauthorized update has been performed can be specified. [Effects of the Invention] As described above, the present invention adds a terminal device name and a terminal user name of a terminal device that has updated a database to a journal record and stores the journal record. If it is found that an unauthorized update has been performed, it is possible to investigate and identify the name of the terminal user who updated the database from the update history report created based on the database name, etc., and as a result As a result, it is possible to prevent a malicious terminal user from replaying an unauthorized update of the database, thereby providing an effect that the security of the database can be protected. If it is found that a specific malicious terminal user has updated the database illegally, the update history report created based on the terminal user name can be used to identify other databases used by this terminal user. By examining whether or not the other database has been illegally updated, the security of the database can be protected.

BRIEF DESCRIPTION OF THE DRAWINGS FIG. 1 is a block diagram showing a configuration of a database security protection system according to an embodiment of the present invention. FIG. 2 is a record of a journal record output by an update journal output unit in FIG. FIG. 3 is a flowchart showing processing in the update history editing means in FIG. In the figure, 1 ... terminal device, 2 ... online transaction processing system, 3 ... transaction processing means, 4 ... terminal management means, 5 ... update journal output means, 6 ... terminal management table, 7 ... database , 8 ... Journal file, 9 ... Job control language, 10 ... Update history editing means, 11 ... Update history report, 20 ... Journal record, 21 ... Database name, 22 ... Database record address, 23 ... ... Database update date and time, 24 ... Terminal device name, 25 ... Terminal user name, 26 ... Recorded image after database update.

Continuation of the front page (58) Field surveyed (Int.Cl. ⁶ , DB name) G06F 12/00 G06F 15/00

Claims (1)

(57) [Claims] Receiving the transaction processing request message input to the online transaction processing system from the terminal device, updating the record of the database according to the content of the transaction processing request message, and updating the database name of the database each time one record of the database is updated Transaction processing means for notifying the update journal output means of the database record address of the updated record and the database image of the updated record to the update journal output means, and sending the transaction processing result to the terminal device; and connecting the online transaction processing system to the terminal device. When the terminal device name and the terminal user name of the terminal device are stored in the terminal management table, the terminal management table is searched by a request from the update journal output unit. Terminal management means for returning the terminal device name and the terminal user name to the update journal output means; the database name, the database record address, the record image after database update received from the transaction processing means, and a timer device The update journal output means for writing the database update date and time received from the terminal and the terminal device name and the terminal user name received from the terminal management means to a journal file as one journal record; Update history editing means for reading the journal file and editing and printing the journal record of the journal file as an update history report by designating a job control language, wherein: Protection system.