JPH02249047A - Security protecting method in electronic filing device - Google Patents

Abstract

PURPOSE:To easily alter a pass word which is once set by deciding a pass word key as to a confidential record in a file and generating the collation table of the pass word key and the pass word in a rewritable storage part. CONSTITUTION:An additional optical disk 1 which stores a document file consisting of image data of a document and the set of the control information, a memory 2 which temporarily stores data reproduced from the optical disk 1 or the like, a hard disk device 7 generating the collation table, and a decision part 6 which extracts the pass word from the collation table and the pass word key on the optical disk 1 are provided. Then, the collation table of the having set pass word and the pass word key is generated in the rewritable storage part 7 and the pass word key is recorded in a filing medium 1. Thus, a processing is considerably easily executed only by altering the pass word of the collation table even if the pass word is leaked owing to a certain cause, and security can considerably inflexibly be operated.

Description

DETAILED DESCRIPTION OF THE INVENTION Field of Industrial Application This invention relates to an electronic file device 2-7 that files document information, etc. onto a write-once storage medium such as an optical disk, and in particular, only authorized persons can use the file. Concerning security protection methods to prevent

Document file devices using conventional write-once optical discs generally employ the following security protection method. An appropriate password is determined for each document (record) to be registered in the file, and the password is recorded in the register as part of the management information of each document. This register is recorded on the optical disc together with the document information. Note that passwords are not set for documents that do not particularly require security protection.

File users can read documents without a password without any conditions, but for confidential documents with a password, the password authentication procedure (entering a password and making sure it matches the set password) is required. ), the document cannot be read.

Problems to be Solved by the Invention In the conventional technology described above, passwords are recorded as part of management information on a write-once optical disk, which is a file medium, so it is difficult to change the initially assigned password. be. Therefore, if the password of a document is leaked for some reason, the document is no longer a confidential document.

In a file device that uses a write-once optical disk, if you want to change part of the management information (for example, a password), you must add the management information with the changed password to a new area and update the document. Must be. This is extremely troublesome and wastes file space.

Therefore, even if the password is leaked, it is easy to leave it alone.

This invention was made in view of the above-mentioned conventional problems, and its purpose is to provide security protection by making it possible to easily change the password that has been set, and to prevent file capacity from being wasted due to the change. The purpose is to provide a method.

Means for Solving the Problems Therefore, in the present invention, a password key is defined for a confidential record in a file, and the password key is registered in the file (write-once storage medium) as part of the management information of the record, An arbitrary password is determined for the password key, a comparison table of the password key and the password is created in a rewritable storage unit, and when there is an access request to the confidential record, the password key and the password of the record are set. The corresponding password is extracted from the comparison table and used in the authentication procedure.

Effect: Although it is difficult to change the password key registered in the write-once storage medium, the password in the comparison table in the rewritable storage unit can be easily changed.

Embodiment FIG. 1 shows a schematic configuration of an electronic file device to which the present invention is applied. This device includes a write-once optical disc 1 that stores a document file consisting of a set of document image data and its management information, a memo 5 storage 2 that temporarily stores data reproduced from the optical disc 1, and a memory 2. A display 3 that displays read document information, a printer 8 that also prints the document information, an image scanner 9 that reads the document to be registered in a file, a keyboard 5 that is operated by an operator, and the entire device. a hard disk drive 7 as a rewritable storage unit that creates the above-mentioned comparison table, and a judgment unit 6 that extracts the corresponding password from the comparison table and the password key on the optical disk 1. We are prepared.

The operation of the electronic file device configured as described above will be explained below.

First, scan the document you want to register into a file using the scanner 9.
Read it and save it to memory 2. This document image data is recorded on the optical disc 1 together with management information input from a keyboard or the like.

In this example, as shown in FIG. 2, the management information is recorded in the management information area on the optical disk 1, and the image data is recorded in the image data area. You can play back the management information and extract the corresponding document image data according to its contents.

As shown in FIG. 3, the management information includes items such as document identification data, image data pointer, search information area, and password key. Here, the password key is not the password itself set for the document (record), but the heading of the password comparison table created on the hard disk drive 7. For example, set a password r12345J for a certain confidential document, and enter it as the key [AAAJ
If you write in the field, this password key rAAAJ
is recorded in the corresponding area of the management information of the optical disc 1.

Here, it is difficult to change the password key "AAA", but the password "12345" can be easily changed.

FIG. 4 shows a control procedure when reading a document including the security protection method of the present invention.

When a certain document is specified through search processing or the like and an access request (output request) is issued (Step 7/Tub 401), first, the management information of the corresponding document is reproduced from the optical disk 1, and a password key is stored in it. is set (step 4o2). If there is no password key, it is a non-confidential document, so the specified document is played back from the optical disc 1 and displayed on the display 3 or printer 8.
(step 405). If a password key is set, it is a confidential document, and in that case, the comparison table of the hard disk device 7 is retrieved according to the password key, and the corresponding password key is read out (step 403).
).

Next, it is determined whether the correct password has been entered from the keyboard 5 (step 405), and if the password is correct, the corresponding document is reproduced and output from the optical disc 1, and if the password is incorrect, the output is rejected (step 406).
).

Effects of the Invention As explained in detail above, in this invention, instead of directly recording passwords on a write-once file medium, a comparison table of set passwords and password keys is stored in a rewritable storage unit. Since the password key is created and recorded in a file medium, if for some reason the password is leaked and there is a risk that confidentiality cannot be protected, it can be dealt with very easily by simply changing the password in the comparison table. This makes it possible to use password-based security protection extremely flexibly.

[Brief explanation of drawings]

Figure 1 is a schematic configuration diagram of an electronic file device to which the present invention is applied, Figure 2 is a conceptual diagram of the file structure on an optical disk, Figure 3 is a conceptual diagram showing the content of management information in the file, and Figure 4. is a flowchart of file read control to which the present invention is applied. l...-light density 20. - Name of agent: Patent attorney Shigetaka Awano and one other person

Claims (1)

[Claims] determining a password key for a confidential record in a file stored in a write-once storage medium, registering the password key in the file as part of the management information of the record, determining an arbitrary password for the password key, A comparison table of the password key and the password is created in a rewritable storage unit, and when there is a request for access to the confidential record, the corresponding password is extracted from the password key of the record and the comparison table. , a security protection method in an electronic file device in which access is permitted subject to an authentication procedure using the password.