JP5236603B2 - Security policy information setting device - Google Patents

Description

  The present invention relates to a security policy information setting device, and more particularly to a security policy information setting technique capable of simplifying a setting change of security policy information.

  In a conventional security system, for example, policy information defining a time zone in which use is permitted for a room to be protected or an article to be protected is created in advance. The policy information is set by assigning the usage time to the user who uses (see Patent Document 1).

JP 2008-160803 A

  In the method of assigning policy information defined in advance to a user as shown in the prior art, in the previous stage of policy information setting, the room to be allowed to enter or the article to be used are allowed to be used. It is necessary to consider the combination of time periods permitting the use of, and further define the contents of the policy information and the room or article.

  In addition, in the method of defining policy information in advance, when changing the time zone in which a user or a user group to which policy information has already been assigned is permitted to enter a room or use an article, It is necessary to define policy information and reassign the policy information, and changing the setting contents becomes complicated.

  The present invention has been made in view of these problems, and provides a security policy information setting technique capable of changing the setting of policy information with a few steps.

  In order to solve the above problems, the present invention employs the following means.

User group information table in which users are grouped and registered according to their attributes, equipment group information table in which facilities are grouped and registered according to their attributes, and users with group names that group the users However, the schedule information table that sets the schedule information that represents the time allowed to use the equipment with the group name that groups the equipment, and the group name that groups the users on one axis of the display screen are arranged. A policy setting screen on which the group name in which the equipment used by the user is grouped is arranged on the other axis, and a group name in which the user is grouped on the policy setting screen and a group name in which the equipment is grouped When the selection of the cell set at the intersection of When a schedule information selection screen is displayed, and in the schedule information selection screen, a user belonging to the group name selects an access permission time pattern representing a time during which use of equipment belonging to the group name is permitted, Schedule information in which the selected access permission time is set is set in the user group and equipment group associated with the selected cell.

  Since the present invention has the above-described configuration, it is possible to provide a security policy information setting technique that enables a policy setting change with a few steps.

It is a figure explaining the security policy information setting apparatus concerning embodiment of this invention. It is a figure explaining the detail of a policy setting screen. It is a figure which shows the detail of a schedule information selection screen. It is a figure which shows the data stored for every table. It is a figure explaining the process which sets security policy information.

  Embodiments of the present invention will be described below with reference to the accompanying drawings. FIG. 1 is a diagram for explaining a security policy information setting device according to an embodiment of the present invention. As shown in FIG. 1, the security policy information setting device includes a policy setting screen 21 and a schedule information selection screen 22.

  In FIG. 1, 11 is a user group information table in which users are grouped and registered according to their attributes, 12 is a user information registration table in which user information is registered, and 13 is a group of facilities according to their attributes. An equipment group information table 14 registered separately, and an equipment information table 14 in which equipment information is registered.

  FIG. 2 is a diagram for explaining the policy setting screen. The policy setting screen 21 includes a user group name display unit 31, an equipment group name display unit 32, and a schedule information setting unit 33. The user group name display unit 31 displays the user group name stored in the user group information table 11. The equipment group name display unit 32 displays the equipment group name stored in the equipment group table 13.

  In the schedule information setting unit 33, a user belonging to the user group displayed in the user group name display unit 31 permits use of equipment belonging to the equipment group displayed in the equipment group name display unit 32. The time is set in the cell that is the intersection of the user group name and the equipment group name. In the screen shown in FIG. 2, when a target cell for setting a time zone in which use is permitted is selected, a schedule information selection screen 22 shown in FIG. 3 is displayed.

  FIG. 3 is a diagram showing details of the schedule information selection screen 22. The schedule information selection screen 22 displays a schedule information list display unit 41 that displays names (schedule patterns 1 to n) of a plurality of schedules stored in the schedule pattern table 16 and detailed setting contents of the selected schedule information. A schedule pattern display unit 42 is provided. For example, when the schedule pattern n is selected in the schedule information list display 41, the access permission time pattern for each selected day of the week, holiday, and special day is displayed on the schedule pattern display unit 42. The displayed schedule information is registered in the cell selected on the policy setting screen 22 as information for setting a time zone in which use is permitted.

  Further, when any of the day of the week, holiday, and special day is selected on the schedule information selection screen 22, the access permission time of the selected day of the week, holiday, and special day is displayed on the schedule pattern display unit 42. In this way, the schedule information selected in the display unit schedule information list display unit 41 is registered as information for setting a time zone in which use is permitted for the cell selected in the policy setting screen 22.

  FIG. 4 is a diagram showing data stored for each table. FIG. 4A is a user group information table 11, FIG. 4B is a user information table 12, and FIG. 4C is an article. The group information table 13, FIG. 4 (d) is the article information table 14, FIG. 4 (e) is the schedule information table 15, and FIG. .

  FIG. 5 is a diagram for explaining processing for newly setting security policy information.

  As advance preparation for policy registration, user information is registered in the user information table 12 in step S1. Subsequently, the user information registered in step S2 is grouped by specifying the conditions for grouping with the personal attribute information such as organization and position, and the grouped user group information is registered in the user group information table 11 To do.

  In step S3, for example, a facility for managing facilities such as a personal authentication device or a PC attached to the door of each room is registered in the facility information table 14. In step S4, conditions for grouping the facility information registered in step S3 with the facility attribute information such as the installation location and the type of facility are specified, and the facilities are grouped into the facility article group information table 13. Register with.

  In step S <b> 5, schedule information that defines a facility entry permission time zone or a facility use permission time zone is selected from the schedule pattern table 16 and registered in the schedule information table 15.

  In step S6, the policy setting screen 21 shown in FIG. 2 is displayed.

  If it is determined in step S7 that the cell of the schedule information setting unit 33 has not been selected during the operation of the policy setting screen 21, the operator is inquired whether or not to end the schedule setting in step S8. When continuing the schedule setting, the operator selects “NO” and returns to Step S7. To end the schedule setting, select “YES” to end the process.

  When the cell of the schedule information setting unit 33 is selected in step S7, the schedule information selection screen 22 shown in FIG. 3 is displayed in step S9. In step S10, it is determined whether or not schedule information is selected. If schedule information is selected, information on the selected schedule is registered in the cell selected by the schedule information setting unit 33. If no schedule information is selected in step S10, the process proceeds to step S8.

  Next, a method for changing settings of registered security policy information will be described.

  If none of the registered schedule information tables shown in FIG. 3 matches the changed schedule information, new schedule information is registered in the schedule information table 15 in step S5. In step S6, the registered new schedule information is displayed on the policy setting screen 21.

  In step S7, a cell whose schedule information is to be changed is selected from the schedule information setting unit 33 shown in FIG.

  When the cell of the schedule information setting unit 33 is selected, the schedule information selection screen 22 is displayed in step S9. In step S10, it is determined whether or not schedule information is selected. If schedule information is selected, information on the selected schedule is registered in the cell selected by the schedule information setting unit 33. If no schedule information is selected in step S10, the process proceeds to step S8.

If it is determined in step S7 that the cell of the schedule information setting unit 33 has not been selected during the operation of the policy setting screen 21, the operator is inquired whether or not to end the schedule setting in step S8. When continuing the schedule setting, the operator selects “NO” and returns to Step S7. When finishing the schedule setting, select “YES” and finish the process. As described above, according to the present embodiment, for example, a user or a group of users is arranged on the vertical axis, and the equipment is shown on the horizontal axis. A two-dimensional table in which a room, a room group, an article, or an article group is arranged is created, and a user or a user group enters the room or room group, or an article or an article group is used. By setting schedule information that defines possible time zones, it is expressed who can enter or use where, what, and when. For this reason, in setting the security policy information, it becomes possible to examine who can enter the room, where, or what can be used, and the setting at the same time. In addition, it is possible to flexibly cope with a change in the time zone in which entry into some rooms or use of articles is permitted.

  In this way, separately defined user or user group information, protected room or room group or article or article group information, and schedule information that defines the time zone in which entry or use is permitted. Since the two-dimensional table is used for the combination, it is possible to review the policy and perform the setting operation at the same time, and it is possible to change the policy with a few steps.

DESCRIPTION OF SYMBOLS 11 User group information table 12 User information table 13 Equipment group information table 14 Equipment information table 15 Schedule information table 16 Schedule pattern table 21 Policy setting screen 22 Schedule information selection screen 31 User group name display part 32 Equipment group name display part 33 Schedule information setting part 41 Schedule list display part 42 Schedule pattern display part

Claims (2)

A user group information table in which users are grouped and registered according to their attributes;
Equipment group information table in which equipment is grouped and registered according to its attributes;
User group name grouped the user, the schedule information table that sets the schedule information representing a time that is allowed to use the facilities of the group names were grouped facilities,
Place a group name grouped users with one axis of the display screen, and a policy setting screen which includes grouping the group name of the facility the user on the other axis is utilized,
When a selection of a cell set at an intersection of a group name obtained by grouping the users on the policy setting screen and a group name obtained by grouping equipment is accepted, a schedule information selection screen is displayed on the policy setting screen, and a schedule information selection is displayed. In the screen, when a user belonging to the group name selects an access permission time pattern representing a time during which the user belonging to the group name is permitted to use, a user group associated with the selected cell and A security policy information setting device , wherein schedule information in which the selected access permission time is set is set in an equipment group . A user group information table in which users are grouped and registered according to their attributes;
Equipment group information table in which equipment is grouped and registered according to its attributes;
A schedule information table for setting schedule information indicating a time when a user of a group name grouping the users is permitted to use the facility of the group name grouping the facility;
A policy setting screen in which a group name in which users are grouped is arranged on one axis of the display screen, and a group name in which equipment used by the user is grouped is arranged on the other axis;
In the security policy information setting method for setting the schedule information in which the selected access permission time is set in the user group and equipment group associated with the selected cell,
When the selection of the cell is accepted, a schedule information selection screen is displayed on the policy setting screen, and on the schedule information selection screen, a time when a user belonging to the group name is allowed to use the equipment belonging to the group name When the access permission time pattern indicating the selected access permission time pattern is selected, schedule information in which the selected access permission time is set is set in the user group and the equipment group associated with the selected cell. Setting method.

Images