JPH0322047A - File secret protecting system - Google Patents

Abstract

PURPOSE:To protect the secret of a file for each record while sharing the file by collating users of a user management file, user discrimination information recorded in records of the file, and reference/update levels with respect to each record of the file. CONSTITUTION:Users of a data file 10 are registered in user files 2 to 8 in a hierarchical structure by a user file registering means; and when a user of the file 10 registers a record 11, user discrimination information 13 and a reference/update level 12 are added to this record by a record registering means. When the record 11 is used, user discrimination information 13 and the reference/update level 12 registered in the record 11 are collated with a user management file 1. Thus, the secret of the file 10 has the security protected for each record while sharing the file.

Description

DETAILED DESCRIPTION OF THE INVENTION [Field of Industrial Application] The present invention relates to a file security system that protects the security of each record of a file when the file is used by multiple users. [Prior Art] Conventionally, the security of this type of file has been maintained so that the file can be shared and used by the user who registered the file and the users who are authorized to use it, but security protection has not been applied to each record in particular. However, anyone with access to the file could read and update all records.

[Problem to be solved by the invention]

In this way, in the conventional file security method described above, anyone who can use the file can refer to and update all records in the file, so each record in the file can be It cannot provide security protection, and if you dare to protect the security of each record, it has the disadvantage that you have to divide the file and have a separate file for each user. The present invention improves upon these conventional drawbacks, and its purpose is to provide a file security protection method that can protect the security of each record of a file while sharing the file. [Means for Solving the Problems] The file security protection method of the present invention includes a user file registration means for registering file users in a user file in a hierarchical structure, and a method for registering a record when a file user registers a record. It has a record registration means for adding and registering user identification information, reference, and update levels to the record, and is used to check the user identification information, reference, and update levels registered in the record with the user management file. It is characterized by the fact that records are used based on [Operation] In the user file registration means, file users register in the user file in a hierarchical structure, and in the record registration means, when the file user registers a record, the user registers in this file. Add identification information and reference update level. When a record is used, the user identification information registered in the record and reference. Since the update level is checked against the user management file, it is possible to protect the confidentiality of each record while sharing the file.

〔Example〕

An embodiment of the present invention will be described below with reference to the drawings.

FIG. 1 is a block diagram of one embodiment of the present invention.

Referring to FIG. 1, the security processing unit 9 is configured to register all users who use the data file IO in the user management file 1 in a hierarchical structure. In FIG. 1, the user management file 1 shows a state in which user data 2; 3, 4; 5, 6, 7.8 are registered with the user hierarchy being ``3m''. When pressing the button on the data file 10, when registering record 1l in this, record l1 contains the reference, update level identifier l2, and record 1.
A user identifier 13 for which 1 is registered is attached.

Next, file security protection processing applied to such a configuration will be explained.

First, the security processing unit 9 registers users 2 to 8 as users of the data file 10 in the user management file l. When users are registered in the user management file 1, the security processing unit 9 stores them in a hierarchical structure by specifying a higher-ranking user for each user. For example, first user 2 is registered in the security processing section 9, and then when user 3 is registered, user 2 is registered in a hierarchical structure such that user 2 is designated as the upper user.

Use the data file 10 as the user management file 1 using these steps. Register all users 2 to 8.

Next, when registering a record in the data file 10, the security processing unit 9 adds the user identifier 13 to the record 11.
, reference, and update level identifier 12 are added. The user identifier 13 stores the name of the user who registered the record. The contents are stored in the reference/update level identifier l2 by the user who registers the record by specifying the reference/update level. For example, the contents of the reference/update level are ``, II, which allows all users to read and update, and ``b'', which allows all users to read but not update, and ``KCjl allows reference and update within the same group, ``d# allows reference within the same group but does not allow update, and ● allows only the user who registered the record to view and update. It shall be possible. Here, the same group refers to a collection of users who have a hierarchical relationship in the user management file. In Figure 1, users 2, 3,
User 5 and user 6 are in the same group.

When the user 5 stores the record 11 in the data file 10, if the user 5 specifies and registers "C" as the reference/update level, the security processing unit 9 stores the record 11 with "c12 reference" as the content of the user identifier l3. , update level identifier l
Add "a" as the content of 2 and register the data.

When the user 6 refers to the record 1l, the security processing unit 9 refers to the user identifier 13 added to the record 1l, the contents of the update level identifier 12, and the contents button of the user 6 of the user management file 1. Based on the connection b of the user 6, it is determined whether the record l1 can be referenced. In this case, since the content of the reference/update level identifier l2 is "'C", reference/update to the same group is permitted. Next, the security processing unit 9 stores the user management file 1
User identifier l added to record 1l in
It is checked whether the contents of user 3 @c1'' and the contents of user 6 ``c2#'' belong to the same group. At this time, since users 5 and 6 belong to the same group, reference by user 6 is allowed and the contents of the record 1l can be referenced.

When user 8 requests to refer to record 11, security processing unit 9 checks it in the same way as described above, but since user 8 and user 5 do not belong to the same group in user management file l, The contents of record 1l cannot be referenced.

In this way, when the data file 10 is used by a plurality of users, it is possible to share the data file/klO and protect the security of each record of the data file 10.

〔Effect of the invention〕

As explained above, the present invention is capable of managing a file by comparing the user of the user management file with the user identification information and the reference/update level recorded in the file record for each record of the file. This has the effect of being able to share files while protecting the confidentiality of each record.

[Brief explanation of drawings]

FIG. 1 is a block diagram of one embodiment of the present invention.

Claims (1)

[Claims] A user file registration means that registers file users in a user file in a hierarchical structure, and when a file user registers a record, adds user identification information, reference, and update level to the record and registers it. 1. A file security protection method, comprising: a record registration means, and the record is used based on a comparison between the user identification information and reference update level registered in the record and the user file.