JPH02122348A - File protecting method - Google Patents

Abstract

PURPOSE:To protect files with high reliability by preparing a file group identifier ID and the access right to the group for each file or directory. CONSTITUTION:A file group ID 8 and the access right 3 to the group are prepared for each file or directory. The it is checked whether the right 3 is given to a file 9 or not. If not, it is checked whether the group ID 8 of the file 9 is coincident with a file group given previously or not. If so, it is checked whether the access right 5 is given to the file 9 or not. If so, the file 9 is operated.

Description

[Detailed Description of the Invention] [Field of Industrial Application] The present invention relates to a file protection method for protecting files or directory (management list) against manipulation.

[Conventional technology]

Figure 3 is a diagram of the internal structure of a file that is applied to the conventional file storage method. In Figure 2, 1 is the file name, 2 is the owner of the file, 3 is the name of the file in the same group, 4 is 6 indicates the access rights that indicate whether reading v, writing W, and execution X are permitted for other general users, and 6 indicates the user ID (identification label).
, 7 is a group ID, and 9 is a file containing programs and data.

Next, the operation will be explained. FIG. 4 is a flowchart 1 showing the flow of the operation. When first operating on a file, it detects whether the operation is read, write, or execute.

Next, in step STI, access rights for file operations are checked. That is, l! First, it is determined whether the person operating the file is the owner of the file using the user ID 6, and if the owner is the owner, it is determined whether or not he or she has access rights to the file based on the owner's access rights.

If the owner is not the above-mentioned owner, it is checked by group ID 7 whether they are in the same group, and if it is the same group, it is checked by access right 3 in the same group to see if they have access rights to the file.

Furthermore, if they are not in the same group, it is checked whether the user has the access right to the file using the -stage user's access m4.

If there is an access right in the above process, an operation is performed on the file in step ST4. If you don't have access, you won't do anything.

[Issues that the investigation seeks to solve]

Conventional file protection methods are structured as described above, so they can only provide access rights for each group of file owners, such as the same group or general users. There was a problem that it could not be carried out.

In addition, as an approximation technique, there are chapters 6 and 7 of rUNIXJ, written by Tokuhisa Ishida and published by Kyoritsu Publishing Co., Ltd.

The present invention has been made to solve the above-mentioned problems, and it is an object of the present invention to provide a file protection method that allows file or directory operations to be performed on a group-by-file basis.

[Means for deciding the issue]

The file protection method related to this investigation is to provide a file group ID (identifier) and access rights for that group for each file or directory.
The access rights to the same group of files can also be used to grant specific operations on files or groups.

[For production]

The 7-aisle preservation 3τ method in this invention is based on the file or (
By groups of files per directory and by permissions for those groups.

To enable a file or directory to be operated without depending on the access rights of the owner of the file or directory, the same group, or a general user.

[Embodiment of the Invention] Hereinafter, an embodiment of the present invention will be described with reference to the drawings. 1st
In the figure, 1 is the file name, 2 is the owner of the other file, 3 is in the same group, and 4 is the access rights that indicate whether reading, writing, and execution are allowed for other general users, respectively. , 5 is the access right indicating whether reading r, writing W, and executing It is a file that contains data.

Next, the operation will be explained. FIG. 2 is a flowchart showing the operation. First, as before, step S
Check whether the person operating the file in TI has access rights to the file.

Next, if there is no access right, in step ST2,
Finodo 9's file list -/ID86f.

Check whether the person operating the file matches the pre-given file group. If the group IDs of the files match, use the command ST3 to check whether the access right 5 to the file has been granted. If the access right is obtained from the above, step ST4
Perform operations on isle 9. Otherwise, do nothing.

Note that in the above embodiment, operations on files have been described, but a protection method for directories may also be used, and the same effects as in the above embodiments can be achieved.

[Effects of the Invention] As described above, according to the present invention, the file group ID and the access right for the group are added to each file or directory, so that the owner of the file or directory and the same In addition to access rights for groups and other first-level users, you can have access rights for each file or group.

This has the effect of providing a highly reliable file protection method.

[Brief explanation of the drawing]

Fig. 1 is a file internal configuration diagram of the file protection method according to this redundant embodiment, Fig. 2 is a flowchart showing the operation of the same embodiment, and Fig. 3 is a diagram of the conventional file protection method. File internal configuration diagram, Figure 4 is the conventional file storage; τ
3 is a flowchart illustrating the operation of the method. 1 (file name, 2 is the file owner's access rights, 3 is the file access rights of the same group,
4 is the file access rights of other users in general; 5 is the file access rights for the same group of files;
6 is a user ID (FA identifier), 7 is a group ID, 8 is a file group ID, and 9 is a file. Note that the same reference numerals in the two figures indicate the same or equivalent parts.

Claims (1)

[Claims] In a file or directory management system managed in a computer system, etc., access rights are set to allow reading, writing, and execution for the owner of the file or directory, the same group, and other general users. In addition to the above access rights, set a group ID (identification label) and access rights for that group for each file or directory, and set access rights for the file or directory in addition to the access rights for the owner, the same group, and other general users. A file protection method characterized in that the operation of the file or directory is permitted depending on the access rights for the group.