JP3767698B2 - Menu creation method, menu display method, and information processing system therefor - Google Patents

Description

  The present invention relates to a menu creation method, a menu display method, and an information processing system therefor.

As a method for performing security management in an information processing system, as disclosed in Japanese Examined Patent Publication No. 03-37224, identification of a user by a user name and a password, and a program start menu that can be used for each user (hereinafter abbreviated as menu) Each program start command is abbreviated as a menu item) and a data range is generally set. Furthermore, when the main use is in the enterprise as an advanced method, as shown in Japanese Patent Laid-Open No. 03-246742, screen usage information for each user / department is managed as data, such as an important menu or submenu. There is a method to increase security by making the menu available only when it is hierarchized and matches the user name and password. In this way, the current security management is aimed at limiting the range that can be used according to authority within a single company.
Japanese Patent Publication No. 03-37224 Japanese Patent Laid-Open No. 03-246742

  However, for example, in a parent company with multiple small subsidiaries, the parent company's finance department may handle not only the parent company's financial processing but also the subsidiary's finance because the subsidiary does not have the personnel or knowledge to perform its own financial processing. The person in charge of the finance department of the parent company will be responsible for the financial processing of both the parent company and the subsidiary. In this case, for security management, it is common for the person in charge to limit the processing of the large-scale parent company to daily processing such as slip entry, and for small subsidiaries to leave all processing. According to the prior art, security is ensured by processing the data of both the parent company and the subsidiary in the same menu, or preparing different user names for each company and setting the menu. However, in the former method, processing of a large parent company and a small subsidiary is performed on the same menu, so it is difficult to limit the range that can be processed, and security management problems are likely to occur. In addition, when the processing contents of each company are different, many menus exist on the same screen, and the operability is deteriorated. On the other hand, in the latter method, since the user once stops using the information processing system and enters the information processing system again with another user name, the operation becomes complicated. In addition, as the number of subsidiaries increases, the number of user names also increases, and errors tend to occur.

  There are other cases, such as when a franchise headquarters with independent franchise member stores handles financial processing for large headquarters and small independent member stores, or as an accounting firm or information processing company. There are cases where large and small companies of various sizes are used as consultants, and one person in charge handles a plurality of consultant companies. This causes similar security management and operational problems.

  An object of the present invention is to improve the security management level and the operability when one person in charge handles data files having the same data structure such as a plurality of companies and corporate data as described above.

Menu creation method of the present invention, at least, Rutotomoni an input device and an auxiliary storage device, user identification means, the permission data selection means, the program activation menu creating method in an information processing system having a menu item selection means and menu creation unit The user specifying means searches a password file stored in the auxiliary storage device based on a login name input from the input device, and the input login name is registered in the password file. if it is has a user identification step of the user to identify the valid user registered in the information processing system having said login name, the permission data selecting means, the identified user The permission data file selection information for selecting the data file permitted to be used for And permission data selection step of receiving from the force device, the menu item selection means, the identified user to the authorization the input device the menu item name to select a menu item to allow for data files corresponding to A menu item selection step for selecting a desired menu item from a basic menu file stored in the auxiliary storage device based on the received menu item name, and the menu creating means includes the received permission data. characterized by comprising the a menu generating step of generating a possible program start menu information available to the identified user based on the file selection information and the selected menu item.

Also, the menu display method of the present invention, at least, Rutotomoni an input device, an auxiliary storage device and a display device, user identification means, processing the data selection means, in the information processing system having a display data creating means and the display processing unit A program start menu display method, wherein the user identification means searches a password file stored in the auxiliary storage device based on a login name and a password input from the input device, and the input login If the name and the password are registered in the password file, and authorized user identification identifying the user registered the user with the login name to the information processing system, said processing data selection means, of the identified plurality of data files that are allowed to use to the user And processing the data selection step of receiving the process data file selection information for selecting a data file to be processed from said input device from said display data producing means, the inputted login name and the accepted treatment data file selection information The program start menu information is selected from the program start menu file stored in the auxiliary storage device based on the program start menu information, and can be used by the identified user based on the selected program start menu information. and menu display data generating step of generating a menu display data, said display processing means, characterized by comprising the a menu display step of displaying the menu display data created in the above on the display device.

In the menu display method of the present invention, in the processing data selection step, when the number of data files permitted for the identified user is one, the permission data file selection corresponding to the data file is selected. This step is characterized in that it is a step of setting the received processing data file selection information.

The information processing system of the present invention, at least, in an information processing system including an input device and an auxiliary storage device, the password file stored in the auxiliary storage device based on a login name input from the input device Search and, in the case where the input login name has been registered in the password file, to identify a legitimate user who is registered for a user who has a login name that is the input to the information processing system available A user identification means, a permission data selection means for receiving permission data file selection information for selecting a data file permitted to be used for the identified user from the input device, and the identified user before fill in the menu item name to select a menu item to allow the use in the data file corresponding to allow Receiving from the device, the auxiliary storage device from the basic menu file stored with the menu item selecting means for selecting a desired menu item, the accepted authorization data file selection information and on the basis of the menu item name accepted the Menu creation means for creating a program start menu usable for the specified user based on the selected menu item.

The information processing system of the present invention, at least, an input device, an information processing system having an auxiliary storage device and a display device, stored in the auxiliary storage device based on the login name and password input from said input device and search for password files, in the case where the input login name and password has been registered in the password file, legitimate, which is registered for a user who has a login name that is the input to the information processing system User input means for identifying a user and processing data file selection information for selecting a data file to be processed from among a plurality of data files permitted to be used by the identified user and processing the data selection unit that accepts the login name is the input and accepted the Selecting desired program start menu information from the program start menu files stored in the auxiliary storage device based on the physical data file selection information, and identifying the use based on the selected program start menu information Display data creating means for creating menu display data usable by a user, and display processing means for displaying the created menu display data on the display device.

The information processing system of the present invention, the processed data selection means further if the number is one authorized data file to the identified user, selects permission data file corresponding to the data file The processing data file selection information is received as information.

As described above , according to the present invention , for a user who is permitted to handle a plurality of data files, a different program startup menu can be created for each user and for each data file. The security management level can be improved by creating a program start menu based on the combination of the level and the sensitivity of the target data file. In addition, when the user starts using the information processing system, the user selects at least one of the plurality of data files and displays a program start menu corresponding to the selected data file. From the menu, only the menu items necessary for the user are displayed, making it easy to see and operate, and at the same time improving the security management level. Further, when the user started with an information processing system, the selection operation becomes unnecessary when the number of data files that are allowed one, operability is improved because the program start menu corresponding to the data file is displayed .

Further, according to the present invention, each user, it is possible to create a different program start menu for each data file, to create a program start menu by a combination of confidentiality of the user's authority level and the target data file Can improve the security management level.

(Function)
The present invention, the user name of the information processing system to define the (login name) data files available to each, providing a further stores the information of the program start-up menu for each data file file, the login name and the data file Depending on the combination, the program start menu is defined individually. At the start of use of the information processing system, after entering the login name, the data file to be used is selected to identify the file storing the program start menu, and the program start menu is displayed based on this.

(Example)
An embodiment of the present invention will be described with reference to the drawings. FIG. 1 is a functional block diagram showing an embodiment of the present invention. An input device 1 for inputting a login name, a password, and the like when using an information processing system, and an input processing unit 2 for checking input data. And a display processing unit 3 for creating display data, a display device 4 for displaying the created display data, and a pointing device 5 for designating data displayed on the display device 4. Is done. Further, it includes a menu creation unit 6 for creating a menu for each company and a user identification processing unit 7 for identifying a user of the information processing system and creating menu display data for each user. . The menu creation unit 6 includes user specifying means, permission data selection means (permission data file selection information reception means), menu item selection means, and menu creation means. The user identification processing unit 7 includes user identification means, processing data selection means, and display data creation means.

  In addition, the auxiliary storage device 8 includes a password file 9 in which a login name and a password corresponding to a user name for identifying a user of the information processing system are registered, and a program start menu usable in the information processing system. A registered basic menu file 10, a menu file 12 registered with a menu for each user, created by limiting from the basic menu file 10, and a menu management file 11 registered with management information for managing the menu file 12 And a company data management file 13 for managing a plurality of company data and a company data file 14 storing individual company data. One company data file 14 includes financial accounting data, salary calculation data, fixed asset management data, etc. The data structure and data contents are the same among the plurality of company data files 14, but the data structure is the same. Is a “data file having the same data structure” in the claims. The menu management file 11 and the menu file 12 correspond to “program start menu information” in the claims.

  The following relationship exists between files stored in the auxiliary storage device 8. The password file 9 has information (menu management file name) for specifying a plurality of menu management files 11, and the menu management file 11 has information (menu file name) for specifying a plurality of menu files 12 and company data. It has information (company code) for specifying a record in the management file 13. The company data management file 13 has information (company data file name) for specifying a plurality of company data files 14. The basic menu file 10 is independent of other files.

  FIG. 2 is a configuration example of the password file 9. A line in the figure is a record for identifying a single information processing system user, a login name for identifying a user, a password that only a user knows to check whether it is a legitimate user, It consists of the file name of the menu management file 11 to be used. An authorized user can be checked from the login name and password, and the menu management file 11 used by the user can be specified.

  FIG. 3 is a configuration example of the menu management file 11. One line in the figure is a record representing the menu of one company, and is composed of the company name and the file name of the menu file 12. When a company is selected, the corresponding menu file 12 can be specified.

  FIG. 4 is a configuration example of the menu file 12. A line in the figure represents one menu item (program start command), which is a menu item code for identifying the menu item, a display name that is displayed on the menu, and activated when a menu is selected. Consists of the startup program name. This is created from the basic menu file 10 only for menu items necessary for security management. The basic menu file 10 has the same configuration as that shown in FIG. 4, and all menu items usable in the information processing system are registered.

  FIG. 5 is a configuration example of the company data management file 13. Each row in the figure corresponds to one company data. The company code uniquely assigned to identify the company, the company name storing the company name, and the company data file 14 storing each company data. It consists of a file name.

  FIG. 6 is a screen example when selecting company data. In the window 61, a plurality of company codes, company names, and operation buttons are displayed. The company data selection is performed by clicking the display line of the company to be selected in the display area 62 with the pointing device 5 and clicking the confirm button 63. When canceling, the cancel button 64 is clicked. This operation is a single selection.

  FIG. 7 shows an example of a screen when menu items necessary for security management are selected based on the basic menu file 10. In the window 71, a plurality of menu item codes, menu item names, and operation buttons are displayed. The menu item is selected by clicking the display line of the menu item to be selected in the display area 72 with the pointing device 5 and clicking the confirm button 73. When canceling, the cancel button 74 is clicked. On this screen, multiple menu items can be selected. When the end button 75 is clicked, the use menu item selection process ends.

  FIG. 8 shows an example of a menu screen created according to the present embodiment. A window 82 represents a basic menu, which is displayed as it is based on the basic menu file 10, and has six menu items as shown in a display area 83. The window 84 is an example of a menu screen in the user A industry Co., Ltd. of the user with the login name CK80221. In the display area 85, the company code and company name of the target A Industry Co., Ltd. and the login name of the user of the information processing system are displayed. The menu that can be used by the user is only one item for slip entry in the display area 86. Entering “1” from the input device 1 or clicking the display portion of the slip input with the pointing device 5 allows the user to enter the slip. The program is started. The window 87 is an example of a menu screen when a user with the same login name CK80221 processes B Sales Co., Ltd. In the display area 88, the company code and company name of the target B Sales Co., Ltd. and the login name of the user of the information processing system are displayed. In this company, there are four menus that can be used as shown in the display area 89.

  Next, a process for creating the menu file 12 for each company for the same user will be specifically described with reference to the flowchart of FIG. The person who creates the user's menu is the administrator of the information processing system. This system administrator inputs the user's login name from the input device 1 and checks whether the input login name is correct (ST1). . Next, the file necessary for creating the menu, the password file 9, the basic menu file 10, and the company data management file 13 are read from the auxiliary storage device 8 into the menu creating unit 6 (ST2). A menu management file 11 for the user to be created is created, and the menu management file name is set in the password file 9 (ST3). Next, a processing target company permitted to the user is selected (ST4). This displays a company data selection screen as shown in FIG. 6, and the target company is selected by the pointing device 5. The company code selected in ST4 and the name of the newly created menu file are set in the menu management file 11 newly created in ST3 (ST5). As a result, the structure of the menu management file 11 shown in FIG. 3 was created. Menu items that can be used by the user for the company selected in ST4 are selected by the pointing device 5 according to the menu item selection screen of FIG. 7 (ST6). The record of the selected menu item is copied from the basic menu file 10 to the menu file 12 (ST7), and the menu file 12 is written to the auxiliary storage device (ST8). Thereby, the menu file of the company selected in ST4 could be created. Subsequently, when permitting the user to process another company, the process returns to ST4 to select another company and create the menu file 12. When the process ends, the process branches to ST9Y, where the menu management file 11 and the password file 9 are written and the process ends. Through these processes, the file relationship shown in FIG. 1 is created, and a menu file 12 for each company of a plurality of companies that can be processed by the user is created. This allows users of the parent company's finance department's information processing system to use limited menu items such as daily processing for parent company processing and all menu items for processing at small subsidiaries. The person in charge with a low level can prevent unauthorized use of important information such as the settlement of accounts of the parent company, and the security management level is improved.

  Next, processing up to menu display when the user starts using the information processing system will be described with reference to the flowchart of FIG. In this example, the case where the user of login name CK80221 performs the process of B sales corporation is shown. When the user inputs the login name CK80221 and the password PSWD1 from the input device 1 (ST21), the user identification processing unit 7 reads the password file 9 from the auxiliary storage device 8, and is a valid user from the login name and password. (ST23), if it is an unauthorized user, the process branches to ST23N and ends. If it is a valid user, the process branches to ST23Y, and the menu management file name K80211. The menu management file 11 is read based on the MGF. If a plurality of company codes are stored in this file, it is necessary to select a company, and the process branches to ST25Y. The company selection ST26 is performed by selecting one company, for example, B Sales Co., Ltd. (company code MS4810) with the pointing device in the screen display of FIG. If only one company is stored in the menu management file 11 in ST25, the process branches to ST25N. Next, the menu file name MS48221... Corresponding to the company code MS4810 stored in the menu management file 11 is displayed. The MNU is obtained and the menu file 12 is read from the auxiliary storage device 8. As shown in FIG. 4, the menu file 12 stores the display names of the menu items, so menu display data is created from the display names and displayed on the display device 4 (ST28). As a result, the menu of B Sales Co., Ltd. selected by the user in ST26, the window 87 of FIG. 8, is displayed. When the user of the information processing system inputs a login name and password, only company data that can be processed by the user is displayed. When company data is selected, only a menu that can be processed by the company data is displayed. From the user's point of view, it is easy to select a process and the operability is improved.

  In the above embodiment, the company data such as financial accounting has been mainly described. However, the present invention can be applied to Japanese word processor data, CAD data, and the like. When the document has a management level such as a document that can be changed, a document that can be changed only in date, or a document that can only be printed, the security management level and operability can be improved by applying the present invention. Further, in the present embodiment, description has been made on one information processing system. However, even if data is distributed to a plurality of information processing systems connected via a network, the present invention can be applied to any data file having the same data structure. Is available. That is, in the company data selection of this embodiment, a menu for each user is created for a data file having the same data structure by adding information specifying one of a plurality of information processing systems such as a network address. Is possible.

  In the above embodiment, the password file 9 is used to identify the user. However, in the information processing system, a user identification function is provided in the operating system. When the security management method according to the present invention is used for a business program using this function, a file in which a login name and a menu management file name are linked instead of the password file 9 is prepared, and a user identification function is provided for the business program. In this case, it is possible to obtain the menu management file 11 corresponding to the login name by querying the operating system for the login name of the business program user.

It is a functional block diagram which shows one Example of the security management method concerning this invention. It is a block diagram of the password file 9 in FIG. It is a block diagram of the menu management file 11 in FIG. It is a block diagram of the menu file 12 in FIG. It is a block diagram of the company data management file 13 in FIG. It is a figure which shows one Example of the selection screen of company data. It is a figure which shows one Example of the selection screen of a menu item. It is a figure which shows the menu screen produced by one Example of this invention. It is a flowchart which shows the process at the time of menu creation in one Example of this invention. It is a flowchart which shows the menu display process at the time of the information processing system utilization start in one Example of this invention.

Explanation of symbols

1 Input Device 2 Input Processing Unit 3 Display Processing Unit 4 Display Device 5 Pointing Device 6 Menu Creation Unit 7 User Identification Processing Unit 8 Auxiliary Storage Device 9 Password File 10 Basic Menu File 11 Menu Management File 12 Menu File 13 Company Data Management File 14 Company data file

Claims (6)

At least, Rutotomoni an input device and an auxiliary storage device, user identification means, the permission data selection means, a program start menu creating method in an information processing system having a menu item selection means and menu creation unit,
When the user specifying means searches a password file stored in the auxiliary storage device based on a login name input from the input device, and the input login name is registered in the password file the, a user identification step of identifying an authorized user registered for a user who has the login name to the information processing system,
A permission data selection step in which the permission data selection means accepts permission data file selection information from the input device for selecting a data file permitted to be used by the identified user;
The menu item selection means receives from the input device a menu item name for selecting a menu item that is permitted to be used for the specified data file corresponding to the specified user, and the received menu item name A menu item selection step for selecting a desired menu item from the basic menu file stored in the auxiliary storage device based on
Said menu creation unit, and a menu generating step of generating a possible program start menu information available to the identified user based on the accepted grant data file selection information and the selected menu item A method for creating a program start menu. At least, an input device, Rutotomoni an auxiliary storage device and a display device, user identification means, processing the data selection means, a program start menu display method in an information processing system having a display data creating means and the display processing means,
The user identification unit searches a password file stored in the auxiliary storage device based on a login name and password input from the input device, and the input login name and password are registered in the password file. if it is has a user identification step for identifying a user and authorized user registered in the information processing system having said login name,
Process data selection means for receiving, from the input device, process data file selection information for the process data selection means to select a data file to be processed from among a plurality of data files permitted for use by the identified user Steps,
The display data creation means selects desired program activation menu information from program activation menu files stored in the auxiliary storage device based on the input login name and the received processing data file selection information. A menu display data creating step for creating menu display data usable for the identified user based on the selected program start menu information ;
It said display processing means, the program activation menu display method characterized by comprising a menu display step of displaying the menu display data created in the above on the display device. In the processing data selection step, when the number of data files permitted to the identified user is one, processing data file selection information that has received permission data file selection information corresponding to the data file; 3. The program start menu display method according to claim 2, wherein the program start menu is displayed. At least, in the information processing system having an input device and an auxiliary storage device,
The password file stored in the auxiliary storage device is searched based on the login name input from the input device, and when the input login name is registered in the password file, the input and user identification means that a user who has a login name to identify a legitimate user who is registered in the information processing system,
Permission data selection means for receiving permission data file selection information for selecting a data file permitted to be used for the specified user from the input device;
Receiving a menu item name to select a menu item to allow for data files corresponding to the permission to the identified user from the input device, in the auxiliary storage device based on the menu item name accepted the Menu item selection means for selecting a desired menu item from the stored basic menu file;
An information processing system comprising: menu creation means for creating a program start menu usable for the specified user based on the accepted permission data file selection information and the selected menu item. At least, in the information processing system having an input device, an auxiliary storage device and a display device,
Search the password file stored in the auxiliary storage device based on the login name and password input from the input device, and when the input login name and password are registered in the password file, and user identification means for identifying an authorized user registered for a user who has a login name that is the input to the information processing system,
Processing data selection means for receiving processing data file selection information for selecting a data file to be processed from among a plurality of data files permitted to be used by the identified user;
Based on the input login name and the received processing data file selection information, a desired program start menu information is selected from the program start menu files stored in the auxiliary storage device, and the selected program is selected. Display data creating means for creating menu display data usable for the identified user based on startup menu information; and display processing means for displaying the created menu display data on the display device. A featured information processing system. The processing data selection means, when the number of data files permitted to the identified user is one, processing data file selection information that has received permission data file selection information corresponding to the data file; The information processing system according to claim 5, wherein:

Images