JPH01258052A - Method for protecting file - Google Patents

Abstract

PURPOSE:To attain highly reliable protection by adding a password to each file or directory. CONSTITUTION:An operator for a file checks whether an access right to the file exists or not. When the access right does not exist, whether the password of the file coincides with the one applied at the time of operating the file or not is checked. When both the files coincide with each other or the access right is obtained, the operation of the file is executed, and in the other case, no operation is executed. Similar operation is applied also to the directory. Since a password is applied to each file or directory, the access right of the file or directory can be obtained also by a specific user other than the owner of the file or directory, a user in the same group and other general users.

Description

[Detailed Description of the Invention] [Industrial Application Field] This invention is directed to a file or directory (management book)
The present invention relates to a file protection method that protects against operations.

[Conventional technology]

Figure 3 is a diagram of the internal structure of a file applied to the conventional file protection method. In the figure, 1 is the file name;
2 is for the owner of the file, 3 is for files in the same group, and 4 is for other general users.
, write W, and execution X, 5 is the user ID (!Ii separate label label 6 is the group ID, and 8 is the file containing the program and data.

Next, the operation will be explained. FIG. 4 is a flowchart showing the flow of the operation. When operating a file for the first time, it detects whether the operation is reading, writing, or executing.

Next, in step STI, access rights associated with file operations are checked. That is, first, it is checked whether the person operating the file is the owner of the file using the user ID 5, and if the owner is the owner, it is checked using the owner's access rights 2 whether or not he or she has access rights to the file.

If it is not the owner, use the group ID to check whether it is the same group or not.
6, and if the same group has access rights to the file, it can be checked three times using access 1 and 3 in the same group.

Furthermore, if they are not in the same group, whether or not the general user has access rights to the file is determined based on the general user's access rights (4).
111 Vero.

If there is an access right in the above process, an operation is performed on the file in step ST3. If you don't have access, you won't do anything.

[Problem to be solved by the invention]

Since the conventional file protection method is configured as described above, there is a problem in that it is not possible to give access rights to a specific person from the same group or general users.

As an approximation technique, there are chapters 6 and 7 of rUNIXJ, written by Haruhisa Ishida and published by Kyoritsu Publishing Co., Ltd.

This invention was made in order to solve the above-mentioned problems, and provides a file protection method that allows specific users within the same group or general users to have control over files or directories. The purpose is to obtain.

[Means to solve the problem]

The file protection method according to the present invention adds a password to each file or directory.
This allows file or directory access rights to be granted to specific users within the same group or general users.

[Effect]

The file protection method of this invention allows file or directory operations to be performed by giving access rights to a file or directory to a specific user in the same group or general users, or by using a password for each file or directory. do it like this.

〔Example〕

An embodiment of the present invention will be described below with reference to the drawings. 1st
In the figure, 1 is the file name, 2 is the owner of the file, 3 is the same group, and 4 is the access right that indicates whether reading r, writing W, and executing X are allowed for other general users, respectively. , 5 is the user ID,
6 is a group ID, 7 is a password, and 8 is a file containing programs and data.

Next, the operation will be explained. FIG. 2 is a flowchart showing the operation. First, as before, step S
Check whether the person operating the file in TI has access rights to the file.

Next, if there is no access right, in step ST2,
Check whether password 7 of file 8 matches the password given during file operation.

If the passwords match or if access rights are obtained, the file 8 is operated in step ST3. Otherwise, do nothing.

Note that in the above embodiment, operations on files have been described, but a protection method for directories may also be used, and the same effects as in the above embodiments can be achieved.

〔Effect of the invention〕

As described above, according to the present invention, since a password is added to each file or directory, a file or directory can be accessed by a specific user, in addition to the owner of the file or directory, the same group, or other general users. Alternatively, access rights to the directory can be granted, and a highly reliable file protection method can be obtained.

[Brief explanation of the drawing]

FIG. 1 is a file internal configuration diagram of a file protection method according to an embodiment of the present invention, FIG. 2 is a flowchart showing the operation of the same embodiment, and FIG. 3 is a file internal configuration diagram of a conventional file protection method. FIG. 4 is a flowchart showing the operation of the conventional file protection method. 2 is the file access rights of the file owner, 3 is the file access rights of the same group, 4 is the file access rights of other general users, 5 is the user ID, 6 is the group ID, 7 is the password, and 8 is the file . Note that the same reference numerals in the figures indicate the same or equivalent parts.

Claims (1)

[Claims] In a file or directory management system managed in a computer system, etc., access rights are set to allow reading, writing, and execution for the owner of the file or directory, the same group, and other general users. A file protection method characterized by setting a password for each of the files or directories in addition to the access rights, so that the files or directories can be operated using the password even if the user does not have the access rights.