JPH02294855A - Sub-file using right managing system - Google Patents

Abstract

PURPOSE:To more minutely execute the control with regard to the security of a file by setting the right of using of data existing in the file to sub-file unit. CONSTITUTION:It is only an implementor of a sub-file that can register information of a user by a registering means 2, and an input/output managing means 5 decides first whether a user who starts a program 6 and an implementer of a file are the same or not, and when they are the same, it is permitted to utilize a sub-file 4 and an input and an output are executed. In other case, from a using right control flag registered in advance in a directory entry of the sub-file 4, whether it is permitted to this user to utilize the sub-file 4 or not is decided. When the utilization is permitted, an input and an output are executed to the sub-file 4, and when the utilization is inhibited, the input and the output to the sub-file 4 are discontinued and it is informed to a user program 6 that there is no right of using of the sub-title 4. In such a way, with regard to the security, the right of using can be controlled more minutely.

Description

DETAILED DESCRIPTION OF THE INVENTION [Field of Industrial Application] The present invention relates to a security function for files owned by each user, and particularly to the right to use subfiles existing in a file.

[Conventional technology]

Conventionally, when controlling a user's usage rights to a file, the computer system has a security control table for each user and file, and this table is used to specify whether or not the data in the file can be referenced. Information was used to control whether a user requesting input/output could use the file.

[Problem to be solved by the invention]

In the conventional file management method described above, data input/output rights can only be specified on a file-by-file basis, and some subfiles within a file can be referenced by other users. Even if there are files that are not allowed to be referenced, it is not possible to control usage rights on a per-subfile basis, and it is only possible to specify whether the entire file can be used or not.

[Means to solve the problem]

The subfile usage rights management method of the present invention is: ■In a file system in which multiple subfiles are registered in a file and each subfile is managed with a unique name, when creating a new subfile, the creator name is subfile generation means for setting a subfile in a subfile and creating the subfile; and registration means for recording a user who can use the subfile in a directory section of the subfile for each subfile existing in the file. , with respect to the subfile to which the user program inputs and outputs, it is determined whether or not the subfile is usable by referring to the user name of the user who started the user program and the user information registered by the registration means. and input/output management means for making decisions.

〔Example〕

Next, the present invention will be explained in detail with reference to the drawings.

FIG. 1 is a block diagram showing the configuration of a computer system including an embodiment of the present invention. In the figure, the subfile usage rights management system includes subfile generation 1,000 steps, registration means 2 for setting users who are allowed to use the subfile and recording it in the subfile, file 3 containing multiple subfiles, and subfile 4, an input/output management means 5 that controls whether or not the subfile can be used based on the name of the user who started the user program, and a user program 6.

First, a method of defining usage right control information will be explained. The subfile generating means 1 generates a subfile 4 in the file 3. At this time, the name of the user who started the subfile generating means 1 is input and registered in the subfile as the creator of the subfile. Further, the registration means 2 sets a user who is permitted to use the subfile by the creator of the subfile, and registers this user information in the directory entry of the subfile.

Next, the process from starting the user program to controlling subfile usage rights will be explained. When a certain user executes a user program 6 that uses a subfile 4, the user name of the user who started the user program 6 is notified to the input/output management means 5. When an input/output request is generated from the user program 6 to the subfile 4, the input/output management means 5
refers to the directory entry of subfile 4, inputs the user information and creator name, determines whether the subfile can be used by the user who requested input/output of subfile 4, and executes user program 6. Control subfile input/output for .

Figure 2 shows one subfile 4 that exists in file 3.
FIG. 2 is an explanatory diagram showing directory entries of . The subfile “SUBFOI” is created by the subfile generation means 1.
When creating a subfile, the name of the user who created the subfile is registered in the directory entry as the subfile creator name.

Furthermore, the registration means 2 sets information on users other than the creator who can use the subfile on this directory entry as usage right control information.

FIG. 3 is a flowchart showing the procedure for generating a new subfile by the subfile generating means l. The subfile generation Sendan 1 generates a new subfile in the file 3 (Step 7), and then registers the creator Akira in the directory entry (Step 8).

FIG. 4 is a flowchart showing the procedure for registering user information by registration 1000 steps 2. First, it is compared whether the user who started the registration means 2 is the creator of the subfile for which user information is to be registered (step 9), and if the user is the creator, the user information that allows the use of the subfile is checked. Register (Step 1)
0). If you are not the creator, the process ends without registering user information.

Therefore, only the creator of the subfile can register user information using the registration means 2.

FIG. 5 is a flowchart showing the procedure for controlling usage rights by the input/output management means 5. First, it is determined whether the user who started the user program and the creator of the file are the same (step 11), and if they are the same, the subfile is permitted to be used and input/output is executed (step 14). In other cases, it is determined whether the user is permitted to use the subfile based on the usage right control flag registered in the directory entry of the subfile (step 12).

If use is permitted, input/output is executed to the subfile (step 14); if use is prohibited, input/output to the subfile is interrupted and the user program 6 does not have the right to use the subfile. (Step 13).

〔Effect of the invention〕

The present invention relates to a security function of an information processing system, and allows the right to use data existing in a file to be set on a subfile basis. Therefore, there is no need to manage subfiles that are prohibited to users other than the creator in a separate file, and more fine-grained control over file security is possible.

[Brief explanation of the drawing]

Fig. 1 is a block diagram of an embodiment of the present invention, Fig. 2 is an explanatory diagram showing an example of a subfile directory entry, Fig. 3 is a flowchart showing the procedure of subfile generation 1,000 stages, and Fig. 4 is FIG. 5 is a flowchart showing the procedure of the registration means 2, and FIG. 5 is a flowchart showing the procedure of the input/output management means 50. 1... File generation means, 2... Registration means, 3... File, 4... Subfile, 5... Input/output management Means, 6...
・User program. 14...Operation step. Agent Patent Attorney Susumu Uchihara Dimensions File ``δIJB FO 1'' Is Month 1 Ruza'/I Recto Soeshishiri No. 3 Concave Diagram Cow Tagram

Claims (1)

[Claims] In a file system that registers multiple subfiles in one file and manages each subfile with a unique name, when creating a new subfile, set the creator name to the subfile and create the subfile. subfile generation means; registration means for recording a user who can use the subfile in a directory section of the subfile for each subfile existing in the file; On the other hand, it is characterized by having an input/output management means for determining whether or not the subfile can be used by referring to the user name of the user who started the user program and the user information registered by the registration means. A subfile usage rights management method.