JP4543750B2 - Access control system, image forming apparatus, access control method, and computer program - Google Patents

Description

  The present invention relates to control of access to a storage device provided with a plurality of storage areas.

  In recent years, image forming apparatuses having a box function have begun to spread. According to this box function, a storage area called “personal box” or the like can be provided for each user. Each user can store document data such as his / her image data or document data in his / her personal box. Furthermore, image forming apparatuses are becoming more and more multifunctional with functions such as a scanner, a FAX, a printer, and a network. Such a multifunctional image forming apparatus is called a multifunction peripheral or MFP (Multi Function Peripherals).

  In addition, as described in Patent Documents 1 and 2, methods have been proposed in which a personal box provided in such an image forming apparatus is used by a terminal device connected to a network.

According to the method described in Patent Document 1, access restrictions can be set for each personal box. According to the method described in Patent Literature 2, when authentication information is correctly input, processing such as printing is executed.
JP 2001-358882 A JP 2002-183091 A

  However, the conventional methods described in Patent Documents 1 and 2 cannot flexibly set access restrictions or the like according to the situation of the owner of the personal box. For example, it is not possible to make a setting that loosens the access restrictions on the personal box when the owner is on duty and tightens the access restrictions when outside the office. Therefore, the security management of the personal box is troublesome.

  In particular, when a personal box is shared in a public office or company, the users can mutually trust each other to some extent, so that it is less necessary and more convenient to restrict access to the personal box. However, the owner is still required to perform security management on his / her own personal box at his / her own risk.

  The present invention has been made in view of such problems, and it is an object of the present invention to make it easier to perform security management of a storage area for each user, such as a personal box.

An access control system according to the present invention is an access control system that performs access control of a storage device provided with a plurality of storage areas, and includes at least one of a timing for permitting access and a prohibition for accessing the storage area. Owns a screen display processing means for displaying a designation screen for the user to designate access permission information indicating one, an access permission information acquisition means for acquiring the access permission information specified by the user, and the storage area a start determination unit that the user of the terminal device determines whether or not to start, the switching based on the propriety of access to the storage area before Symbol access permission information, however, the user of the terminal device that owns the storage area Is determined to be running, the storage area is stored regardless of the contents of the access permission information. Switching the propriety of access to the variable, and availability switching means, if the need for access to said storage area has occurred, if access to the storage area is not permitted, the process for holding the access And an access control means for performing the access when switching is made possible.

Preferably, the access permission / rejection information acquisition unit acquires, as the access permission / rejection information, access permission / rejection information indicating a period during which access is permitted, and the permission switching unit determines whether or not access to the storage area is current time. Is switched according to whether or not it is included in the period indicated in the access permission information of the storage area .

An image forming apparatus according to the present invention is an image forming apparatus that manages one or a plurality of boxes for storing data, and at least one of a timing for permitting access and a timing for prohibiting access to the box. Screen display processing means for displaying a designation screen for the user to designate access permission information to be displayed, access permission information obtaining means for obtaining the access permission information designated by the user, and a terminal of the user who owns the box and activation determining means that the device determines whether or not to start, the switching based on whether the access to the box before Symbol access permission information, however, the user of the terminal device that owns the box is activated Is determined whether access to the box is permitted regardless of the content of the access permission information. The switch, and whether switching means, if the need for access to the box has occurred, if access to the box is not permitted, performs hold processing to hold the access, cut the variable Access control means for performing the access when it is replaced.

  In the present invention, the “period” only needs to be determined at least one of the initial period and the final period. For example, “after 9:00 on Monday”, “until 19:00 on Friday”, and “from 9:00 on Monday to 19:00 on Friday” correspond to “period” in the present invention.

  According to the present invention, security management of a storage area for each user such as a personal box can be performed more easily than in the past.

  1 is a diagram illustrating an example of the overall configuration of the document sharing system 100, FIG. 2 is a diagram illustrating an example of a hardware configuration of the multifunction device 1, and FIG. 3 is a diagram illustrating an example of a functional configuration of the multifunction device 1. is there.

  As shown in FIG. 1, the document sharing system 100 includes a multifunction device 1 (1A, 1B,...), A terminal device 2 (2A, 2B,...), A communication line 4, and the like. The multi-function device 1 and the terminal device 2 are connected to each other via a communication line 4. As the communication line 4, a LAN, the Internet, a dedicated line, a public line, or the like is used. Identification information for identifying each device, such as an IP address, is assigned to each multifunction device 1 and terminal device 2.

  One terminal device 2 is provided for each user. The terminal device 2 is installed with a driver of the multifunction device 1. As the terminal device 2, a personal computer or a workstation is used.

  As shown in FIG. 2, the multi-function device 1 includes a control unit 11, a printing unit 12, an image reading unit 13, and the like. The multifunction device 1 is an image forming apparatus that integrates functions such as a copy, a printer, a scanner, a FAX, or a document server, and is sometimes called an MFP (Multi Function Peripherals).

  The “document server” is a function for giving a personal box to each user or group, and storing and managing document data such as an image file by the personal box of each user or the group to which the user belongs. Sometimes called "box function". The “personal box” is a storage area for storing (saving) document data and the like, corresponds to a “folder” or “directory” in a personal computer, and is provided in the hard disk 11c. An access right can be set for the personal box or data stored in the personal box so that other users can use it. Hereinafter, the personal box is simply referred to as “box”.

  The image reading unit 13 includes a document table, an image sensor such as a CCD, and an automatic document feeder. The image reading unit 13 optically reads an image of a document and converts it into electronic data to generate image data. That is, it is a scanner device. The printing unit 12 is a laser-type or inkjet-type printing apparatus (printer, engine) that prints an image on a predetermined sheet based on print data.

  The control unit 11 includes a control unit 11a, an operation panel 11b, a hard disk (HDD) 11c, an image processing unit 11d, a network interface 11e, a printer interface 11f, a scanner interface 11g, and the like, and includes a printing unit 12 and an image reading unit 13. Control and so on.

  The network interface 11 e is an interface for exchanging data with another multifunction device 1 or the terminal device 2 via the communication line 4. As the network interface 11e, a network interface card or a modem is used. The printer interface 11f and the scanner interface 11g are interfaces for connecting to the printing unit 12 and the image reading unit 13, respectively.

  The operation panel 11b is a user interface (UI) for the user of the multifunction machine 1, and includes a liquid crystal display and an operation unit. The liquid crystal display displays an operation screen or a setting screen. The operation unit has buttons or keys such as a numeric keypad and a start button. A touch panel may be used as the operation panel 11b.

  The user can operate the operation panel 11b to store data in a box provided in the multi-function device 1 or use already stored data. Alternatively, data can be stored or used by operating the operation panel 11b or the terminal device 2 of another multifunction device 1.

  The image processing unit 11d performs correction processing such as image color correction, top-and-bottom correction, and tilt correction, and processing for converting image data or facsimile data written in a page description language corresponding to the multifunction device 1 into bitmap data. And processing for converting the image data obtained by the image reading unit 13 into image data of the page description language or facsimile data.

  The control unit 11a includes a CPU, a RAM, and a circuit for controlling each unit of the multifunction device 1. The hard disk 11c stores an operating system (OS), firmware, and other programs and data. The firmware includes a program for executing processing related to each function of the copy, printer, scanner, FAX, document server, etc., that is, the basic function of the multifunction device 1, as well as the screen display processing unit 31 shown in FIG. A program for realizing functions such as a unit 32, a box switching unit 33, a user situation monitoring unit 34, a box control unit 35, a job execution control unit 36, and a switching related information storage unit 37 is included. These programs or data are loaded into the RAM as necessary, and the programs are executed by the CPU. All or part of the program may be stored in a ROM or a non-volatile memory. Or you may comprise so that a part or all of the function of each part shown in FIG. 3 may be implement | achieved by a processor (control circuit).

  The multifunction device 1 of the present embodiment is configured to be able to perform on / off switching for each box. When a box to which the user is authorized to use is on, the user can use the box by storing the document data 70 in the box or accessing the stored document data 70. However, when it is off, the box cannot be used. That is, the multifunction device 1 is a device to which the access control system of the present invention is applied.

  Hereinafter, the processing content of each unit in FIG. 3 and the like will be described by taking as an example a case where the user uses the above-described box provided in the multifunction machine 1A.

  4 is a diagram illustrating an example of the designation screen HG1, FIG. 5 is a flowchart illustrating an example of the flow of switching processing to ON, FIG. 6 is a flowchart illustrating an example of the flow of switching processing to OFF, and FIG. FIG. 8 is a flowchart illustrating an example of a notification screen HG2, and FIG. 9 is a flowchart illustrating an example of a flow of on-switching processing.

  For example, the user can perform the setting for switching on / off the user box and other boxes to which a predetermined authority is given as follows. The user inputs his / her user ID and password on a predetermined screen displayed on the operation panel 11b of the multifunction machine 1A. Then, the screen display processing unit 31 executes a process for displaying the designation screen HG1 as shown in FIG. 4 on the operation panel 11b. When the user can make settings for a plurality of boxes, the user selects which box to set when inputting a user ID or the like. Note that the user can also perform settings by operating other multifunction devices 1 or terminal devices 2. In this case, the screen display processing unit 31 transmits the screen data of the designated screen HG1 to the multifunction device 1 or the terminal device 2 operated by the user.

  In the present embodiment, three types of modes, ie, a timer switching mode, a PC linkage switching mode, and a manual switching mode are prepared as switching setting modes. The timer switching mode is a mode for switching on / off according to the day of the week or the time. When the user wants to specify the day of the week or the time to switch from the off state to the on state, the user presses any of the buttons C2 to C9 or inputs the time in the text box TX1.

  For example, if it is desired to switch on at 8:00 every Monday, the button C3 is pressed and selected, and “08:00” is entered in the text box TX1. When it is desired to switch on at 8 o'clock every day regardless of the day of the week, the button C9 is selected instead of the button C3. Similarly, the day of the week or time for switching from the on state to the off state is designated using the buttons E2 to E9 and the text box TX2. Hereinafter, the day of the week and time specified by the buttons C2 to C9 and the text box TX1 are described as “start time”, and the day of the week and time specified by the buttons E2 to E9 and the text box TX2 are described as “end time”.

  When the box is not automatically turned on by the timer switching mode, the button C1 is selected. Similarly, when not automatically turning off, the button E1 is selected.

  The PC cooperation switching mode is a mode in which a box that is off is switched on according to the situation of the terminal device 2 of the user who is the owner of the box. In order to turn on the box when the terminal device 2 is activated, the ON button BP1 is pressed and selected, and the identification information (for example, IP address) of the terminal device 2 is input to the text box TX3. When the PC cooperation switching mode is not used, the OFF button BP2 is selected.

  The manual switching mode is a mode for forcibly switching on / off immediately according to the user's intention regardless of the contents set in the timer switching mode and the PC linkage switching mode. The setting of the manual switching mode has priority over the settings of the other two modes, as will be described later with reference to FIGS. The user selects the ON button BM1 if he wants to immediately turn on the box. If it is desired to immediately turn it off, the OFF button BM2 is selected.

  When the user can designate switching on / off, the user selects the OK button BK. Then, the designation accepting unit 32 in FIG. 3 accepts the content designated on the designation screen HG 1 as the switching designation information 71. The switching designation information 71 is stored in the switching related information storage unit 37 in association with the box. In addition to the switching designation information 71, the switching related information storage unit 37 stores a management flag FL indicating the current on / off state for each box.

  The box switching unit 33 updates the management flag FL, that is, switches the box on / off based on the box switching designation information 71 as follows. Switching from OFF to ON is performed according to the procedure shown in FIG.

  When new switching designation information 71 is received by the designation receiving unit 32 (# 101), it is immediately checked whether or not the switching designation information 71 indicates that the manual switching mode is turned on (ON) ( # 102). If it is indicated to be turned on (Yes in # 102), the management flag FL of the box is immediately updated to “on” (# 107). This switches the box on. The new switching designation information 71 received is replaced with the old switching designation information 71 and stored in the switching related information storage unit 37.

  While waiting for the new switching designation information 71 to be received, the processes of steps # 103 to # 104 and # 105 to # 106 are performed based on the switching designation information 71 stored in the switching related information storage unit 37. Do it in parallel.

  That is, when the start time of the timer switching mode is indicated in the switch designation information 71, it is monitored that the current time becomes the start time (# 103). When the start time is reached (Yes in # 104), the management flag FL of the box corresponding to the switching designation information 71 is updated to “ON” (# 107).

  If the switch designation information 71 indicates that the PC link switching mode is to be turned on (Yes in # 105), the user status monitoring unit 34 identifies the identification information (IP address) indicated in the switch designation information 71. ) Is checked whether the terminal device 2 is activated. For example, a signal such as “ping (Packet Internet Groper)” is used to transmit a signal to the terminal device 2 and wait for a response to be returned. If there is a response, it is determined that the terminal device 2 is activated (Yes in # 106). Then, the box switching unit 33 updates the management flag FL of the box corresponding to the switching designation information 71 to “ON” (# 107).

  The checks in steps # 105 and # 106 are performed regularly (for example, every few seconds to several minutes). However, if the box is currently off due to the manual switching mode, the checks in steps # 105 and # 106 are canceled in order to give the manual switching mode the highest priority.

  Switching from on to off is performed according to the procedure shown in FIG. When new switching designation information 71 is received (# 201), it is immediately checked whether or not the switching designation information 71 indicates that the manual switching mode is turned off (# 202). If it is indicated to be turned off (Yes in # 202), the management flag FL of the box is immediately updated to “off” (# 205). This switches the box off. The new switching designation information 71 is stored in the switching related information storage unit 37 in place of the old switching designation information 71.

  When the end time of the timer switching mode is indicated in the switching designation information 71, while waiting for the new switching designation information 71 to be received, the current time is monitored to become the end time (# 203). When the end time is reached (Yes in # 204), the management flag FL of the box corresponding to the switching designation information 71 is updated to “off” (# 205).

  The box control unit 35 performs processing such as control of access to each box. The job execution control unit 36 performs a process for executing the job stored in each box. These processes are performed as follows.

  When the box is in an on state, that is, when the management flag FL indicates “on”, the box control unit 35 and the job execution control unit 36 perform normal processing. That is, for example, when a request to save the document data 70 in the box is received from the terminal device 2 or another multifunction device 1, the box control unit 35 stores the document data 70 in the hard disk so as to store the document data 70 in the box. 11c is controlled.

  When a print job is received, the job execution control unit 36 controls the print unit 12 to execute print processing based on the print job. When the transmission job is accepted, the document data 70 is converted into a file, electronic mail, FAX data, or the like based on the transmission job, and transmitted to the designated transmission destination. When a notification job for notifying that the document data 70 is newly stored in the box is received, an e-mail describing that is transmitted based on the notification job.

  When the box is in an off state, the process is performed as shown in FIG. When request information 74 indicating a request to store the document data 70 in the designated box is received from the terminal device 2 or another multifunction device 1, the box control unit 35 stores the document data in the box. By storing the location information 72 indicating the URL (Uniform Resource Locator) or path of 70, the storage of the document data 70 is suspended (# 303). The box does not store the document data 70 itself but leaves it in the requesting terminal device 2 or the like. Alternatively, it is stored in a temporary storage box provided in the multifunction machine 1A.

  When request information 74 indicating that a job such as a print job or a transmission job is to be executed is received, location information 72 of job data 73 indicating the contents of the job is stored in the box, so that the job information is stored. Execution is suspended (# 304). As with the document data 70, the job data 73 is left in the request source apparatus or stored in a temporary storage box.

  One request information 74 may include a request to save the document data 70 in a box and a request to execute a job. In this case, the location information 72 of the document data 70 and the location information 72 of the job data 73 for executing the job are stored in the box, and the storage of the document data 70 and the execution of the job are suspended (# 303, # 304).

  When the execution of the job is suspended, the scheduled time (start time) for executing the job is notified (# 305). For example, a notification screen HG2 having a box list LT2 as shown in FIG. 8 is displayed in a pop-up on the multifunction device 1 or the terminal device 2 operated by the user. Alternatively, the scheduled time may be notified by e-mail.

  However, if the box is switched off not by the timer switching mode but by the manual switching mode (No in # 302), the acceptance of the document data 70 and the job data 73 is rejected (# 306).

  Also, when there is a request for switching from ON to OFF during access to the box (during the saving processing of the document data 70 or during execution of a job), or when it is time to switch off (end time) (Yes in # 301), the process of switching off is delayed (# 307). Then, after the storage process or job process is completed, the box is switched off (# 308).

  When the box is switched from the off state to the on state, the box control unit 35 and the job execution control unit 36 perform processing in a procedure as shown in FIG.

  That is, when the location information 72 is stored in the box (Yes in # 401), the document data 70 or the job data 73 indicated by the location information 72 is moved to the box (# 402). Further, if the data indicated by the location information 72 is job data 73 (Yes in # 403), the job execution control unit 36 executes print processing or transmission processing based on the job data 73 (#). 404). In parallel with or before or after these processes, the management flag FL of the box is updated to “ON” (# 405).

  FIG. 10 is a flowchart for explaining an example of the processing flow of the multifunction peripheral 1A. Next, the flow of processing of the multifunction peripheral 1A when processing a certain box will be described with reference to the flowchart of FIG.

  If the current state of the box is on (Yes in # 1), it is constantly monitored whether it needs to be switched off (# 2). In parallel with this, according to the request information 74 from the user, the document data 70 is stored in the box, or the job data 73 such as printing or transmission is received and the job is executed (# 3). The processing flow of step # 2 is as described above with reference to FIG.

  If the current state of the box is off (No in # 1), it is constantly monitored whether it needs to be switched on (# 4). In parallel with this, in accordance with the request information 74 from the user, the document data 70 or the job data 73 is received and temporarily suspended (# 5). The processing flow of steps # 4 and # 5 is as described above with reference to FIGS.

  When the box is switched from off to on (Yes in # 6), the document data 70 is stored in the box or the held job is executed (# 7). The processing flow of step # 7 is as described above with reference to FIG.

  According to this embodiment, the user can manage the security of his / her box more easily than before. In addition, by using the timer switching mode, the PC linkage switching mode, and the manual switching mode according to their work style and lifestyle, it is easy to use and flexible security management can be performed.

  While the box is off, only the location information 72 of the document data 70 that is to be saved in the box is left, and the document data 70 can be saved after the box is turned off. As a result, it is possible to prevent the capacity of the box from exceeding when the user is absent, and to efficiently use hard disk resources as the entire multifunction device 1.

  In the present embodiment, the document data 70 received when the box is off is stored in the box immediately after being turned on, but the user is asked whether or not the document data 70 may be stored after being turned on. You may make it inquire.

  In the present embodiment, the period is specified by combining the day of the week and the time in the timer switching mode. However, the date is changed to “start time = March 1 7:00”, “end time = March 5 19:00”, etc. And time may be specified in combination. A plurality of start times and end times may be designated.

  In the PC linkage switching mode, whether or not the user terminal device 2 is activated is checked using a “ping” command or the like, but whether or not the user is logged on to a predetermined server in the document sharing system 100 is checked. You may check by examining.

  A plurality of boxes may be provided depending on the type of data to be stored. For example, a storage box for storing and storing the document data 70, a function box for storing the job data 73, and a system box for storing data used by the system of the multi function device 1A are provided. One accumulation box and one function box are provided for each user.

  In such a case, the switching designation information 71 can be set for each storage box, function box, and system box. That is, on / off switching can be set in accordance with the type of data. As a result, it is possible to separately switch permission / inhibition of storing the document data 70 and permission / inhibition of executing processing based on the job data 73.

  In addition, the configuration, processing contents, processing order, etc. of the entire document sharing system 100 and the multi-function device 1 can be appropriately changed in accordance with the spirit of the present invention.

Further, the present embodiment includes the following inventions.
1. An activation determining means for determining whether or not the terminal device of the user owning the box is activated;
When it is determined that the terminal device of the user who owns the box is activated, the availability switching unit executes the predetermined process on the box regardless of the contents of the access permission information of the box. Switch to yes,
The image forming apparatus according to claim 3.
2. When the box management means receives a request to store data in the box, the box management means is disabled based on the access permission information indicating a period during which the execution of the predetermined process is permitted for the box. If the storage location information is stored in the box, the storage location information indicating the storage location of the data is stored in the box. Based on the access permission / rejection information indicating a request that the access should be prohibited immediately, the data should be stored. Reject the request to that effect,
The image forming apparatus according to claim 6 .
3. The document processing control means executes one of a process of transferring document data to a destination designated by a user, a process of printing a document, and a process of notifying that the document data is stored in the box. To
The image forming apparatus according to claim 5 .
4). Having user authentication means for performing user authentication;
The screen display processing means performs a process of displaying the designated screen when authenticated as a correct user.
The image forming apparatus according to any one of claims 3 to 7.

  The present invention is particularly preferably used for flexibly managing the security of a box in a public office or company.

It is a figure which shows the example of the whole structure of a document sharing system. FIG. 2 is a diagram illustrating an example of a hardware configuration of a multifunction machine. 2 is a diagram illustrating an example of a functional configuration of a multifunction peripheral. FIG. It is a figure which shows the example of a designation | designated screen. It is a flowchart explaining the example of the flow of a switching process to ON. It is a flowchart explaining the example of the flow of the switching process to OFF. It is a flowchart explaining the example of the flow of the reception process at the time of OFF. It is a figure which shows the example of a notification screen. It is a flowchart explaining the example of the flow of a process at the time of ON switching. 10 is a flowchart illustrating an example of a process flow of a multifunction machine.

Explanation of symbols

1 MFP (access control system, image forming device)
11c Hard disk (storage device)
31 Screen display processing unit (screen display processing means)
32 Designation reception part (access permission / inhibition information acquisition means)
33 Box switching part (Availability switching means)
35 Box control unit (access control means, box management means)
36 Job execution control unit (document processing control means)
71 Switching designation information (access permission / inhibition information)
HG1 designation screen

Claims (10)

An access control system for performing access control of a storage device provided with a plurality of storage areas,
Screen display processing means for displaying a designation screen for a user to designate access permission / rejection information indicating at least one of a timing for permitting and prohibiting access to the storage area;
Access permission information acquisition means for acquiring the access permission information specified by the user;
Activation determining means for determining whether the terminal device of the user owning the storage area is activated;
Switching on the basis whether the access to the storage area before Symbol access permission information, however, if the user of the terminal device that owns the storage area is judged to be started, the contents of the access permission information Regardless of whether the access to the storage area is enabled or not, the availability switching means,
When access to the storage area becomes necessary, if access to the storage area is not permitted, a process for deferring the access is performed, and the access is Performing access control means;
An access control system comprising: The access permission / rejection information acquisition unit acquires access permission / rejection information indicating a period during which access is permitted as the access permission / rejection information,
The availability switching unit switches the availability of access to the storage area according to whether the current time is included in the period indicated in the access permission information of the storage area ,
The access control system according to claim 1. An image forming apparatus that manages one or more boxes for storing data,
Screen display processing means for displaying a designation screen for the user to designate access permission / rejection information indicating at least one of a timing for permitting access to the box and a timing for prohibiting access to the box;
Access permission information acquisition means for acquiring the access permission information specified by the user;
Activation determining means for determining whether the terminal device of the user owning the box is activated;
Switching on the basis whether the access to the box before Symbol access permission information, however, if the user of the terminal device that owns the box is determined to be activated, regardless of the content of the access permission information , A permission switching means for switching permission / prohibition of access to the box ,
When access to the box becomes necessary, if access to the box is not allowed, a hold process for holding the access is performed, and the access is performed when the access is switched. Access control means;
An image forming apparatus comprising: If the access control means needs to access the box for storing data in the box, and access to the box is not allowed, the data is stored as the hold process. The storage location information indicating the storage location is stored in the box, and the data is stored in the box based on the storage location information after switching to be possible.
The image forming apparatus according to claim 3. When access to the box is disabled when a request to execute a process related to a document is received based on the data stored in the box, the execution of the process is suspended, Having document processing control means for starting execution of the processing after the access to the box is switched to be enabled;
The image forming apparatus according to claim 3. The access permission / rejection information acquisition unit acquires access permission / rejection information indicating a period during which access is permitted as the access permission / rejection information,
The availability switching means switches availability of access to the box according to whether or not the current time is included in the period indicated in the access permission information of the box.
The image forming apparatus according to claim 3. A list display processing means for displaying a list of whether or not each box can be accessed and a scheduled time when the access to each box is enabled.
The image forming apparatus according to claim 6. An image forming apparatus having a storage device provided with a plurality of storage areas,
An access control system according to claim 1 or 2 is provided,
The storage area is managed by the access control system.
An image forming apparatus. An access control method for performing access control of a storage device provided with a plurality of storage areas by a computer ,
In the computer,
Executing a display process for displaying a designation screen for the user to designate access permission information indicating at least one of a timing for permitting access to the storage area and a timing for prohibiting access;
The acquisition process for acquiring the access permission information specified by the user is executed,
Causing a determination process to determine whether the terminal device of the user who owns the storage area is activated;
Switching on the basis whether the access to the storage area before Symbol access permission information, however, if the user of the terminal device that owns the storage area is judged to be started, the contents of the access permission information Regardless of whether the access to the storage area is enabled or disabled, a switching process is executed,
When access to the storage area is necessary, if access to the storage area is disabled, a hold process for holding the access is executed,
After the necessity of access to the storage area occurs , when the access to the storage area is switched from impossible to possible, the access process for accessing the storage area is executed,
An access control method characterized by the above. A computer program used in a computer that performs access control of a storage device provided with a plurality of storage areas,
In the computer,
Executing a display process for displaying a designation screen for the user to designate access permission information indicating at least one of a timing for permitting access to the storage area and a timing for prohibiting access;
The acquisition process for acquiring the access permission information specified by the user is executed,
Causing a determination process to determine whether the terminal device of the user who owns the storage area is activated;
Switching on the basis whether the access to the storage area before Symbol access permission information, however, if the user of the terminal device that owns the storage area is judged to be started, the contents of the access permission information Regardless of whether the access to the storage area is enabled or disabled, a switching process is executed,
When access to the storage area is necessary, if access to the storage area is disabled, a hold process for holding the access is executed ,
After the necessity of access to the storage area occurs , when the access to the storage area is switched from impossible to possible, an access process for accessing the storage area is executed.
A computer program characterized by the above.