JPH02228738A - Security check system for personal computer - Google Patents

Abstract

PURPOSE:To give various complicated security levels by offering individual information of security to a floppy disk. CONSTITUTION:A RAM (system program) 2 and ROM BIOS (basic input output system) part 9 include a security control program and control the access of disk resources of a hard disk (HD) 3 and a floppy disk (FD) 6 through an FD/HD interface 5. A CMOS part 8 for machine individual information storage is controlled through a CMOS access interface 7 by the RAM 2 and the ROM BIOS part 9. That is, individual information of security is offered by the floppy disk 6 in the security check system. Thus, various complicated security levels are given, and it is unnecessary for a user to input these information at each time of access because they are set at the time of start.

Description

DETAILED DESCRIPTION OF THE INVENTION [Field of Industrial Application] The present invention relates to an information processing device, and particularly to a security check method when using resources of a personal computer (hereinafter abbreviated as a personal computer).

[Conventional technology]

Conventionally, the security check methods for personal computers were to lock the computer itself, check the password at startup, and perform a 7-trivial check when using resources.
Tribute) and a password check were used.

[Problem to be solved by the invention]

In the conventional security check method mentioned above,
Each security check works independently, so users must perform their own checks on each resource each time it is used. Additionally, since resources are checked using only a combination of password and attribute, there is a problem in that the security check is easily compromised.

[Means to solve the problem]

To solve these problems, the computer security check method of the present invention uses a floppy disk containing individual information specifying a security level, gives the individual information to the machine, reads it out, reads out the individual information, and checks the information. It has a control program section that determines and checks the security level of access to resources such as disks based on the information on the disk.

[Effect]

Therefore, according to the present invention, various and complex security levels can be provided by providing individual security information using a floppy disk. Additionally, this information can be set at startup, and can be checked using a combination of floppy disk information and machine individual information.

〔Example〕

Next, the present invention will be explained with reference to the drawings.

FIG. 1 is a block diagram showing one embodiment of the present invention. In the figure, 1 is a CPU that constitutes the main body of the personal computer, 2
is a RAM as a system program including a security check processing unit, 3 is a hard disk as a system source, 4 is a local bus, and 5 is a hard disk (
FD that connects HD) 3 and floppy disk (FD) 6
/HD Ink 7 Ace, this floppy disk 6 includes individual information specifying a security level as security information. In addition, T is a CMOS access interface unit connecting CMo5sat that stores individual information of the machine, and 9 is a ROM-Bi1 as a system program containing control codes for security check.
69 in the second part, which is EIO8 (Ba5la Input
0output 5yst@m).

Here, the RAM 2 and ROM@BIO 8 section 9 include a security check control program, and control access to the disk resources of the hard disk 3 and floppy disk 6 through the F'D/HD interface 5. Then, the 0M08 unit 8 for storing machine individual information connects RAM2, ROM・B I through its interface T.
It can be controlled by the O8 section 9.

2 and 3 are flowcharts of a control program according to an embodiment of the present invention. FIG. 2 shows the case when the personal computer is started up, and FIG. 3 shows the case when the computer is in operation.

First, in Figure 2, when you start up your computer, the system control program runs on a floppy disk (hereinafter referred to as FD).
The specific area of @ is accessed and individual information is read out (step 11). Then, determine the presence or absence of individual information including the presence or absence of this FD6 (step 12), Yes (YES)
In this case, the 0M08 section 8 is then accessed to read out the machine's individual information and compared with part of the information on the FD 6 (steps 13 and 14).

At this time, if the individual information of the FD8 is the information of a proper user, set the security level (in this case, the disk access level) in the system memory based on the individual information of the FD (step 15). Replace the INT vector so that one security level check can be performed on request.

The memory area to be used is initialized (step 16).

In addition, if there is no individual information in step 12 to step 14 above, and if the user is not an appropriate user,
Initial settings are made to the lowest access level allowed by the system (step 16).

Next, in FIG. 3, when the personal computer is running, the system accepts and accepts requests (step 21), and checks whether this is a disk access request (step 22). At this time, if it is a disk access request, the request content is compared with the security level set in step 15 (step 23), and it is checked whether the access is permissible (step 24). Then, if the permission level is granted, the requested processing is performed (step 25), and if the permission is not permitted, an error message is displayed for the number of error codes set (step 26), and the system request processing is terminated.

〔Effect of the invention〕

As explained above, the security check method of the present invention can provide various and complex security levels by providing individual security information using a floppy disk, and can also set this information at startup. Therefore, there is no need for user input each time an access is made (user input can also be specified depending on the information settings). Additionally, since the check is performed using a combination of floppy disk information and machine individual information, security is further strengthened.

Furthermore, if it is realized by a combination of ROM@BIO8 and a system program on RAM, the content and degree of security checks can be easily expanded. Furthermore, since the system can control the individual information on the floppy disk, it has the effect of providing a means for appropriately changing the storage location, method, and whether copying is possible.

[Brief explanation of the drawing]

FIG. 1 is a block diagram of an embodiment of the present invention, and FIGS. 2 and 3 are flow charts of an example of a control program of the present invention. 1...CPU, 2'...φ failure M, 3...Red Bartisk (HD), 4 Reference...local bus, 5-Book...FD/HD interface, 6 Red Partition Floppy Disk (FD), T0... CMOS access interface, 8... Individual information storage 0M0
8 parts, 961--ROM-BIO 8 parts. Diagram

Claims (1)

[Claims] When performing a security check when using resources of a personal computer, a floppy disk containing individual information specifying the security level is provided, the individual information is given to the machine, and the individual information is read out.
A security check method for a personal computer, comprising a control program section that determines and checks the security level of access to resources such as disks based on the information.