JPH0221016B2 - - Google Patents

Description

[Detailed Description of the Invention] [Technical Field of the Invention] The present invention relates to a security protection method in a data processing system, and in particular to a resource with a hierarchical structure such as a database, which provides advanced protection only to necessary parts. Concerning a multi-level security scheme that efficiently enables.

[Technology background]

In data processing systems, data sets,
A variety of access protections are implemented for various resources such as programs, disks, magnetic tapes, and terminals.

FIG. 1 shows an example of the structure of staff management data. Employee management data includes individual history, family composition, address,
It consists of a large amount of data such as commuting methods, work status, and health checkup data, and is used by personnel in various business fields such as personnel management, salary management, and health management. However, most of the human resources management data is only accessible to human resources personnel, and access to salary-related data and health examination data is usually prohibited to all but a limited number of people.

Conventionally, the general method used to protect such access is to create a management table for each resource to be protected, and register the names of users who are allowed access and the range of access permissions such as reference and update. Then, when an access request is received, it is necessary to refer to a management table and grant/deny permission, or to rank each resource according to its protection level, and also to rank the user's access rights. In this system, only users with access rights of equal or higher rank to the resource are allowed access.

This method is effective when each resource is independent and has a flat (single-layer) structure, but it is effective when the resources are independent and have a flat (single-layer) structure, but when the resources are hierarchical or multidimensional like many general databases, These resources have the drawback of not being able to function adequately, resulting in incomplete protection, or conversely, being overly protected, making it inconvenient to use.

FIG. 2 is a conceptual diagram of the above-described hierarchically structured database. Database A ₀ has table A ₁₁ ,
consists of A ₁₂ and further table A ₁₁ has column A ₂₁
and A ₂₂ , and table A ₁₂ is composed of columns A ₂₃ , A ₂₄ , and A ₂₅ . in this case,
The database, table, and column represent levels L ₀ , L ₁ , and L ₂ of the hierarchical structure, respectively.

In the past, database access protection could only be set at a single level, or it was set by creating a new artificial level of protection rather than this natural level.

This defect is reduced to a natural level (L ₀ , ₁ , ₂ in Figure 2)
It is also possible to automatically set protection at lower levels when setting protection at higher levels of the hierarchy in order to accommodate the There was a problem of growth.

[Object and structure of the invention]

The purpose of the present invention is to provide a reliable and simple access protection method for resources with a hierarchical structure. Therefore, the protection scope is registered in the same way as in the conventional example, and the presence or absence of protection is determined from the lower level to the higher level. Look straight ahead and make a logical decision. In a data processing system having a hierarchical structure of resources whose access should be protected, the structure includes: an access protection management table means for registering access protection information for users at each hierarchical level for the resources; When an access request is made, all the access protection information of the resources at each hierarchical level connected to the resource is extracted based on the table means, a predetermined logical operation is performed on the extracted protection information, and the The present invention is characterized in that it includes means for determining whether access is permitted or not based on the calculation result.

Note that the predetermined logical operation performed here is to sequentially examine the access protection information extracted from the access protection management table for the resources at each hierarchical level connected to the access request resource, and to determine the type of access request such as reference/update. This refers to logically determining whether a resource is included in the access permission range or whether the user has access rights by comparing the level of access rights of the user and the protection level of the resource.

[Examples of the Invention] The details of the present invention will be described below with reference to Examples.

FIG. 3 is a diagram explaining the principle of the present invention, and is shown to correspond to FIG. 2 for convenience. In the figure, resources A ₁₁ , A ₂₁ , A ₂₃ , and A ₂₄ are marked with a protection key ○* (protected), and access to these resources is directly checked as in the past. However, access to A ₂₂ is conventionally unprotected and could be used freely because A ₂₂ does not have a protection key, but according to the present invention, the protection key of A ₁₁ , which is at a higher level, is used to access A 22. , and from that protection key ○＊,
It is determined that _A22 is also protected. Furthermore, in the case of accessing A ₂₅ , access is allowed because neither A ₁₂ nor A ₀ on the upper level has a protection key attached.

In other words, the branches are sequentially traced upward from the lowest level of the hierarchy, and the presence or absence of access rights is checked at the first level that has a protection key. Therefore, if it is determined that there is no access right at that level, an access right check using a protection key at a higher level is not performed. Of course, if the upward branch does not result in a level with a protection key, access is not protected and access is permitted. The flow in the logic decision block of FIG. 3 represents the above algorithm.

FIG. 4 is a configuration diagram of a system according to an embodiment of the present invention. In the figure, 1 is a data processing device, 2 and 3
4 is a terminal device, 4 is a database processing unit, 5 is an access protection unit, 6 is a database storage device, 7 is an access protection management table storage device, and 8 is a printer.

The user inputs the user ID and a processing request to the database from the terminal devices 2 and 3.
Based on the request, the database processing unit 4 selects a database, table, etc. that requires access processing.
Resources such as columns and access types such as reference/update are determined and notified to the access protection unit 5.

The access protection unit 5 searches the access protection management table storage device 7 and stores the resource name and user ID.
Search through each hierarchy level for the protection key corresponding to .

FIG. 5 shows an example of the structure of the access protection management table. In the illustrated example, the table is provided for the database, and the protection keys ○* for each resource hierarchized for each user ID are recorded. The protection key ○* instructs, for example, to permit reference/prohibit updating. In addition, the protection level is
It is possible to provide and control multiple numbers, such as 0: no protection, 1: only reference possible, 2: updatable, printable, etc.

Returning to FIG. 4, the access protection unit 5 performs a logical operation on the protection key data retrieved from the access protection management table for each level of protection keys connected from the lower level to the upper level as explained in FIG. Run and grant permissions/based on the results.
It is determined that permission is not granted and the database processing unit 4 is notified.

If access is not permitted, the database processing unit 4 outputs a message to the user's terminal device to the effect that the process cannot be performed, and terminates the process; if access is permitted, the database processing unit 4
It performs necessary access to the database, executes database processing, and outputs the processing results to the user terminal device or to the printer 8.

〔Effect of the invention〕

As described above, according to the present invention, it is possible to set natural protection keys that are layer-aware for hierarchically structured resources, while also providing reliable and flexible access protection for access at any hierarchical level. be able to.

[Brief explanation of drawings]

FIG. 1 is an explanatory diagram of the structure of staff management data, FIG. 2 is an explanatory diagram of a hierarchically structured database, FIG. 3 is an explanatory diagram of the principle of the present invention, and FIG. 4 is a diagram of the configuration of a system according to an embodiment of the present invention. FIG. 5 is an explanatory diagram of the access protection management table. In the figure, 1 is a data processing device, 2 and 3 are terminal devices, 4 is a database processing section, 5 is an access protection section, 6 is a database storage device, 7 is an access protection management table storage device, and 8 is a printer.

Claims (1)

[Claims] 1. In a data processing system having a hierarchical structure of resources whose access should be protected, an access protection management table means for registering access protection information for users at each hierarchical level for the resources, and an access protection management table means for registering access protection information for users for each hierarchical level, When this happens, all the access protection information of the resources at each hierarchical level connected to the resource is extracted based on the table means, a predetermined logical operation is performed on the extracted protection information, and based on the result of the operation, A multi-level access protection system characterized by comprising a means for determining whether access is permitted or not.