JP3357694B2 - Network system - Google Patents

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to security of data files in a network system, and more particularly, to an access right setting device for files transmitted and received between terminal devices.

[0002]

2. Description of the Related Art In a computer system, the authority to read a certain file, write to change the contents of a file, and execute processing using a file (hereinafter referred to as access right) is managed by the file. A person (or a system administrator) may limit the persons who can use the file in consideration of the use situation and confidentiality of the file, or may make the file unusable for a normal computer user (user) It can be set as follows. These functions are usually given by an OS (operating system), and are configured so that an access right can be set by a file manager (or a computer system administrator).

[0003] For example, in UNIX (a type of OS), read, write, and execute rights are set to 3 for the same file.
There are two categories: owner (OWNER), group (GROU)
P) and others (OTHER). The setting of the access right can be appropriately made by a person who can access (the creator of the file or the system administrator).

FIG. 9 shows an example of a conventional access right setting table, in which a circle is accessible, a cross is inaccessible,
r means reading, w means writing, and x execution. FIG.
In the “access right” column, the owner item 91 indicates the restriction on file operation for the owner of the file, and the group item 92 indicates the restriction on file operation for those who belong to the same group as the group of the file. The other items 93 mean restrictions on file operations of other users. For example, file 1 is the owner,
Anyone of the group and the other users can freely access the file, but the owner and the group can freely access the file 2 but the other users cannot perform other than reading. The file 3 can be freely accessed by the owner, but the group cannot access other than reading, and the other users cannot access the file 3 at all.

[0005]

However, in the prior art, the file access right setter needs to fully understand who and how to set the access right of the file. When setting access rights, it is necessary to keep track of the file usage and confidentiality. However, in an image communication system, since a large number of users share the same file resources, it is difficult to keep track of them. there were. In addition, the above-described conventional technique has a disadvantage that the access right must be manually changed for each file each time.

SUMMARY OF THE INVENTION An object of the present invention is to solve the above-mentioned problems and inconveniences, and when a use condition of a file changes in an image communication system, a file access right that can automatically set the file access right. It is an object to provide a setting device.

[0007]

SUMMARY OF THE INVENTION In order to solve the above-mentioned problems, the present invention provides a communication network, data storage means connected to the communication network and storing a plurality of files, and data stored through the communication network. In a network system having a plurality of terminal devices for transmission and reception and a network management device for monitoring and controlling the transmission and reception of data by the terminal devices, the network management device includes a user of the terminal for each of the file state change factors. An access right setting table that defines an access right according to a type, and data input / output information transmitted from the terminal device regarding a file requested to be input to the data storage unit or output from the data storage unit is the state variation factor. State change recognition means for analyzing whether or not
Access right management means for setting an access right to the file requested to be input or output based on the analysis result based on the access right setting table.

Further, the access right management means changes the setting of the access right by changing the attribute information of the file.

[0009]

[0010]

As described above in detail, according to the present invention, since the access right setting table for specifying the access right according to the type of the terminal user for each file status change factor is provided, the access to the data storage means is performed. The state change recognizing means analyzes whether or not the data input / output information transmitted from the terminal device regarding the file requested to be input or output from the data storage means corresponds to the state change factor, and based on the analysis result, Since the access management unit sets the access right with reference to the access right setting table for the file for which input or output has been requested, the access right is automatically changed during system operation.

The access right may be changed by changing the attribute information of the file.

[0012]

[0013]

FIG. 1 shows an embodiment of a file access right setting apparatus according to the present invention, and FIG.
The system manager (SM) 3 includes a state change recognition unit 11 and an access right management unit 12, and the access right setting device and the system manager 3 share a terminal device (hardware corresponding to a network management device). I have.

The system manager 3 is a network 2
And an image input device CT device 4 and MR device 15, an X-ray diagnostic device 6, an image database (DB) 7,
In addition, a terminal device connected to the network 2 such as the workstation 8 accesses the network 2, monitors data input / output, controls input / output timing, and performs file access right setting according to the present invention as an access right setting device.

The state change recognizing means 11 and the access right management means 12 share the access right management table 13, and when the file is registered in the database 7, the access right set in the access right management table 13 is stored in the database 7 side. Or set to a file. Also, when there is a file request from the workstation 8, when the system manager 3 notifies the system status recognizing unit 11 of information indicating that the usage status of the file has changed,
Access right management means 12
Automatically set in the file (or the database 7 side). In FIG. 1, the file access management device and the system manager 3 share the same terminal device. However, the file access management device and the system manager 3 may be connected to the network 2 as independent terminal devices (access right setting devices). Alternatively, the workstation 8 may be provided with a status change recognizing unit 11, an access right management unit, and an access right management table 13.

FIG. 2 shows an example of an access right management table in the medical image information system of FIG. 1. Users are classified into owners (OWNER), groups (GROUP), and others (OTHER) for each medical department. Are classified into read (R) and write (W) accesses, and are classified as keywords by job such as an input device (MRI, CT), doctor's interpretation, doctor's interpretation report creation for each medical department, Access is permitted (circled) and not permitted (cross).

FIG. 3 is a flowchart showing an operation example of the access right setting apparatus of the present invention, and FIG. 3 is a flowchart showing an operation example relating to a flow from the image input apparatus such as the MRI apparatus 5 to the image data to the database 7. FIG. 4 is a flowchart relating to the exchange of data between the database 7 and the workstation 8. Hereinafter, each operation will be described with reference to FIGS. <Image Input Device to Database (FIG. 3)> [Step 21] Data generated by the MRI device 5 is stored in the database 7 via the network 2.

[Step 22] A data storage notification is sent from the database 7 to the system manager 3 to notify that the database 7 has stored the image data from the MRI apparatus 5. As shown in FIG. 5, the data storage notification includes a notification identification code 51, a file identification code 52,
It has an identification code 53 and a request department name 54 of the input device that generated the data.

[Step 23] The state change recognizing means 11 of the system manager 3 constantly monitors the communication interface (not shown) of the system manager 3, and each terminal device (input device connected to the network, database, workstation, etc.) Etc., the same applies hereinafter)
The input / output notification (information) transmitted to the system manager 3 is checked, and when the notification identification code indicates a data storage notification from the database 7, the notification is analyzed and the keyword of the access right setting table 13 is included. When it is determined that the notification has been made, the notification is copied and passed to the access right management unit 12.

[Step 24] Access right management means 1
2 receives the data storage notification and analyzes it to know the MRI device 5 that transmitted the image data to the database 7 from the identification code 53 of the input device, and the MRI device 5
When the keyword matches one of the keywords in the access right setting table 13, the portion corresponding to the access right in the attribute information of the file in the database 7 is rewritten using the file identification code 52 with the corresponding access right. In addition,
Instead of rewriting the part corresponding to the access right in the attribute information of the file in the database 7, the header part of the file may be rewritten. <Between Database 7 and Workstation (FIG. 4)> [Step 26] The operator enters the workstation 8
Sends a display request for an image to the system manager 3 (hereinafter, for the sake of explanation, it is assumed that a display request for an unread image has been issued, and that case will be described).

[Step 27] The system manager 3 instructs the database 7 to transfer the list data of the unread image list file from the files registered in the database 7 to the workstation. The database 7 transfers the list data to the workstation 7, and the workstation 7 displays a list of unread images (not shown) on the screen.

[Step 28] The operator looks at the displayed unread image list or message and inputs a command corresponding to the desired image number or message. Based on the input image number, the workstation 8 sends to the system manager 3 a request to transfer image data including the file identification code and the image number of the image.

[Steps 29 and 30] The system manager 3 checks a part corresponding to the access right among the attributes of the specified file. If the transfer is prohibited (access (read in this case) of the file corresponding to the affiliation classification of the operator) is prohibited, the following step 31
Is executed, and if the transfer is not prohibited (the transfer is possible), the step 32 is executed.

[Step 31] The system manager 3 notifies the workstation 8 that transfer is prohibited.
The workstation 8 displays an access prohibition (a message indicating that reading is prohibited) on the screen, and returns to step 28 to wait for an operator's instruction from the workstation 8.

[Step 32] The system manager 3 issues an instruction to transfer the file to the workstation 8 to the database 7, and the database 7 transfers the file to the workstation 8. Then, the workstation 8 displays the specified image on the screen.

[Step 33] When the operator needs to write the image interpretation result as a report, the operator inputs a report creation request command to the system manager 3, and the workstation 8 notifies the system manager 3 of the report creation request. Is sent. If no report is required, the following step 39 is executed. Note that the report creation request notification has the same format as the data storage notification of FIG.
1, a file identification code 52 and a device identification code 53.

[Step 34] The status change recognizing means 11 of the system manager 3 analyzes the report creation request notification received by the system manager 3 and determines that the keyword "report creation" of the access right setting table 13 is included. Then, the notice is copied and passed to the access right management means 12.

[Step 35] Access right management means 1
2 receives the report creation request notification, analyzes it, finds out the work station from the identification code 43 of the input device, and checks the work station (or the operator who uses the work station) in the access right setting table 13 shown in FIG. Is determined, and the corresponding access right information (access permission / non-permission) is notified to the system manager 3.

[Step 36] The system manager 3 executes the following step 37 when access is not possible (report creation is prohibited), and when access is possible, step 3
8 is executed.

[Step 37] The system manager 3 sends a report creation non-permission notice to the workstation 8
The workstation 8 displays an access prohibition (a message indicating that writing for report creation is prohibited) on the screen, and returns to step 33 to wait for an operator's instruction from the workstation 8.

[Step 38] The system manager 3 sends a report creation permission notice to the workstation 7, and the operator inputs a report from the workstation 8.

[Step 39] When the operator inputs an image reading end command to the effect that image reading has been completed, the workstation 8 sends an image reading end notification to the system manager 3. Note that the interpretation completion notification has the same format as the data storage notification of FIG.
1, a file identification code 52 and a device identification code 53.

[Step 40] The status change recognizing means 11 of the system manager 3 analyzes the interpretation completion notification received by the system manager 3 and determines that a keyword in the access right setting table 13 is included.
The notification is copied and passed to the access right management means 12. [Step 41] The system manager 3 sends a transfer instruction to the workstation 8 to transfer the file for which the interpretation has been completed to the database 7. [Step 42] The database 8 sends a write completion notification of the file to the system manager 3.

[Step 43] The status change recognizing means 11 of the system manager 3 analyzes the write completion notification received by the system manager 3 and executes the access right managing means 1.
2 is notified that the writing of the file has been completed.

[Step 44] Access right management means 1
2 receives the write completion notification, analyzes the information, finds out the workstation that transferred the file to the database 7 from the identification code 43 of the input device, and the workstation (or the operator who uses the workstation) reads the information. It is determined which of the two categories belongs, and if it matches any of the keywords in the access right setting table 13, the portion corresponding to the access right in the attribute information of the file in the database 7 is rewritten with the corresponding access right. . Instead of rewriting the part corresponding to the access right in the attribute information of the file in the database 7, the header part of the file may be rewritten.

FIGS. 6, 7 and 8 show an embodiment of the present invention in another in-hospital image communication system. FIG. 6 shows an example of an access right management table for an image file of a patient. FIG. 8 is a diagram showing an example of an access right management table when a patient is admitted (FIG. 8A) and when the patient is discharged (FIG. 8B) at the time of joint operation of surgery. In the access right tables shown in FIGS. 6, 7, and 8, the user classification is classified into owner, internal medicine, surgery, pediatrics, and others, R is read, W is changed (written), and the file type (keyword) To "Medical charts" (Make medical charts, "CT" (Data generation on CT device), "X-ray" (Data generation on X-ray device), "MRI"
(Data generation in MRI apparatus) and other (report creation, etc.), and access rights are set as accessible (circled) and inaccessible (crossed), respectively. Such an access right management table is used. In this case, the operation when the access right setting device is placed under the system manager is the same as that described above, and the description is omitted.

The user classification is not limited. For example, in addition to the classification for each medical department, a classification of a pharmacy, an accounting section, or the like may be added, and the classification may be set without being limited to these classifications. . Although one embodiment of the present invention has been described above, the present invention is not limited to the above embodiment, and it goes without saying that various modifications can be made.

[0038]

As described above, according to the present invention, the setting (change) of the access right is automatically performed during the operation of the system, so that falsification of the file by a third party can be prevented.
In addition, the privacy of the patient can be protected, and the burden on the file manager (system manager) concerning file protection can be reduced. Since the access right of the file can always be set to an appropriate state, the management of the group becomes easy.

[Brief description of the drawings]

FIG. 1 is an embodiment of an access right setting device of the present invention.

FIG. 2 is an example of an access right management table in a medical image information system.

FIG. 3 is a flowchart showing an operation example of the access right setting device of the present invention.

FIG. 4 is a flowchart showing an operation example of the access right setting device of the present invention.

FIG. 5 is a format example of an input / output notification.

FIG. 6 is an example of an access right management table for an image file of a patient.

FIG. 7 is an example of an access right management table at the time of joint work of internal medicine and surgery.

FIG. 8 is an example of an access right management table when a patient is admitted and discharged.

FIG. 9 is an example of a conventional access right setting table.

[Explanation of symbols]

Reference Signs List 1 medical image communication system (network system) 2 network 3 system manager (network management device) 4 CT device (terminal device) 5 MR device (terminal device) 6 X-ray diagnostic device (terminal device) 7 image database (terminal device) 8 Workstation (terminal device) 11 status recognition / change recognition means 12 access right management means 13 access right management table 50 data storage notification (file status change information)

──────────────────────────────────────────────────続 き Continued on the front page (58) Fields surveyed (Int. Cl. ⁷ , DB name) G06F 12/00 G06F 12/14 G06F 15/00 G06F 17/30 G06F 17/60

Claims (2)

(57) [Claims] 1. A communication network, data storage means connected to the communication network for storing a plurality of files, a plurality of terminal devices for transmitting and receiving data via the communication network, and data transmission and reception by the terminal devices A network management device that monitors and controls the access rights, wherein the network management device includes: an access right setting table that defines an access right according to a type of a user of the terminal for each of the file status change factors; and State change recognizing means for analyzing whether data input / output information transmitted from the terminal device regarding a file which has been input to a storage means or requested to be output from the data storage means corresponds to the state change factor; Based on the result, the file requested for input or output Network system comprising: a an access right management means for setting an access right on the basis of the access right setting tables. 2. The network system according to claim 1, wherein the access right management means changes the access right by changing attribute information of the file.