JPH02181846A - File protecting method - Google Patents

Abstract

PURPOSE:To raise the reliability of file protection by setting the pass word of every file or every directory in addition to an access right. CONSTITUTION:Only a specified person among the persons of the same group or ordinary users having the access rights 3, 4 is made capable of executing the operation of the file or the directory by giving the access right of the file or the directory by means of the pass word 7 of every file or every directory. Namely, it is investigated whether the person to execute the operation of the file has the access right to the file or not, and if he has the access right, it is investigated whether the pass word 7 is set previously in the file 8 or not. If the pass word 7 is set previously, it is investigated whether the pass word 7 of the file 8 coincides with the one given at the time of the operation of the file 8 or not, and if the pass word coincides, the operation for the file 8 is performed by a step ST4. Thus, the file protection is improved.

Description

DETAILED DESCRIPTION OF THE INVENTION [Industrial Application] The present invention relates to a file protection method for protecting files or directories (management books) from manipulation.

[Conventional technology]

Figure 3, for example, is written by Haruhisa Ishida and published by Kyokai Publishing Co., Ltd. 1”
This is a diagram of the internal structure of a file applied to the conventional file protection method shown in 'aN Engineering 3) is for the same group of files, and (4) is for other general users.
Each access right indicates whether 1 write W1 execution I is allowed, (5) is from the user (identification label)
, (6) is a group, and (8) is a file containing programs and data.

Next, the operation will be explained. FIG. 4 is a flowchart showing the flow of the operation. When operating a file for the first time, it is detected whether the operation is reading, writing, or executing.

Next, in step STI, access rights for file operations are checked. That is, first, the user checks whether the person operating the file is the owner of the file using (5), and if the user is the owner, then checks whether he or she has access rights to the file using the owner's access rights (2).

If it is not the owner, use the group ID to check whether it is the same group or not.
(6), and if the same group has access rights to the file, check whether the same group has access rights (
Check by 3).

Furthermore, if they are not in the same group, it is checked whether the user has access rights to the file based on general user access rights (4).

If there is an access right in the above process, an operation is performed on the file in step ST4. If you don't have access, you won't do anything.

[Problem to be solved by the invention]

Conventional file protection methods are structured as described above, and operations on files or directories can only be performed with access rights for the same group or general users. There was a problem in that it was not possible to give access rights only to specific people.

This invention was made in order to solve the above-mentioned problem, and it is possible to perform file or directory operations only for the same group or general users who have access rights, and only for specific users among them. The purpose is to obtain a file protection method that can protect files.

[Means to solve the problem]

The file protection method according to the present invention adds a password to each file or directory.
This allows access rights to files or files to be granted only to specific people within the same group or general users who have access rights.

[Effect]

The file protection method according to the present invention uses a password for each file or directory to give access rights to the file or directory only to a specific person among the same group or general users who have access rights. Enable directory operations.

[Embodiments of the invention]

An embodiment of the present invention will be described below with reference to the drawings. 1st
In the figure, (1) is the file name, (2) is the owner of the file, (3) is the same group, and (4) is information on whether to allow other general users to read, write, write, and execute X. each access right indicating,
(5) is from the user, (6) from Hageloop, (7) is a password, and (8) is a file containing programs and data.

Next, the operation will be explained. FIG. 2 is a flowchart showing the operation. First, as before, step 1
9Tl checks whether the person operating the file has access rights to the file.

Next, if there is an access right, it is checked in step 12 whether a password (7) is set in the file (8). If the password (7) has been set, it is checked in step ST3 whether the password (7) of the file (8) matches the password given when operating the file (8). If the passwords match, step 19'! '4
Perform operations on file (8). Otherwise, do nothing. Further, if the password (7) is not set, an operation is performed on the file (8) in ST4.

In the above embodiment, operations on files have been described, but a protection method against direct redirection may also be used, and the same effects as in the above embodiment can be achieved.

〔Effect of the invention〕

As described above, according to the present invention, a password is added to each file or directory, so that the owner of the file or directory, the same group, and other general users have access rights, and Only those who know the password can have access to the file or directory, providing a highly reliable file protection method.

[Brief explanation of the drawing]

FIG. 1 is a file internal configuration diagram of a file protection method according to an embodiment of the present invention, FIG. 2 is a flowchart showing the operation of the same embodiment, and FIG. 3 is a file internal configuration diagram of a conventional file protection method. FIG. 4 is a flowchart showing the operation of the conventional file protection method. In the figure, (2) is the file owner's file access rights, and C3) is the file access rights of the same group.
, (4) is the file access rights of other general users, (
5) is the user name, (6) is from the group, (7) is the password, and (8) is the file. In addition, in the figures, the same reference numerals indicate the same or equivalent parts.

Claims (1)

[Claims] In a file or directory management system managed in a computer system, etc., access rights are set to allow reading, writing, and execution for the owner of the file or directory, the same group, and other general users. , set a password for each file or directory above in addition to the above access rights,
A file protection method characterized in that, if a password is set even if the above-mentioned access right is given, only a person who knows the password is allowed to operate the above-mentioned file or directory.