JPH04220733A - File control system with independent utilization right - Google Patents

Abstract

PURPOSE:To enable file control more in detail by making the right to access a file independent of a user, setting the file utilization right by objects of programs, and realizing conditioned utilization right. CONSTITUTION:Utilization information on the file is composed by a file information control part 24 to control processes such as storage and update, and uniform control is realized while consistency is maintained. A file access control part 25 confirms the legality of an operation instruction from input data with information on the file utilization right controlled by the file access information control part 24 and passes to a file structure control part 26 according to the process of the file. For access with improper utilization right, that is reported.

Description

[Detailed description of the invention]

0001

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a file management system that is independent of usage rights, and more particularly to a file management system that is independent of usage rights that controls access methods for updating, referencing, etc. to all files, including databases.

0002

[Background Art] In conventional file usage, usage rights for access methods are set for each user for each file, and usage rights for file access methods are set in a subordinate manner to the user. Ta. For this reason, it was necessary to set usage rights necessary for the file access method for each user in the program being used.

0003

[Problem to be Solved by the Invention] In the conventional file management system described above, usage rights are in a subordinate relationship with users, so there is no way to access with conditions such as granting usage rights only from a program. It was difficult. In addition, access methods for users' files permitted by conventional usage rights are unconditionally possible, and files can be accessed and processed from programs other than those specified.
There is a risk of data corruption. As described above, the right to use the file access method that is subordinate to the user poses a problem in terms of security protection.

[0004] Furthermore, when a file is changed in a program that accesses a file, it is basically necessary to set appropriate usage rights for all users, and it is necessary to maintain consistency in file management. However, there was a problem in that it required a lot of work.

[0005]

[Means for Solving the Problems] A file management system independent of usage rights of the present invention includes a data input/output control unit that confirms the validity of operation data regarding a file input by a user through an application program; Organize and store information on access rights to files for each file, manage updating, registration, and deletion of access information without compromising legitimacy, and use access methods that depend on programs and users when accessing files. A file information control unit that distinguishes between access methods and controls usage rights for each access method, processes operation data for files using access methods based on legitimate usage rights, and organizes files in a storage device in an orderly manner. It has a file structure management section that properly manages files, realizes independence between file users and usage rights, and performs consistent and integrated file access control.

[0006]

Embodiments Next, embodiments of the present invention will be described with reference to the drawings.

FIG. 1 shows a block diagram showing the configuration of an embodiment of the present invention.

[0008] The present invention is directed to users 11 and 11 who use files.
An application program 12, a file information control unit 2 that includes a data input/output control unit 22, a file access control unit 25, and a file access information management unit 24.
3 and a file structure management section 26, and a storage device 30 that stores actual data. The user 11/application program 12 has an interface function that enables the input of data including operation instructions for files, and sends the input data to the file management system 21.

[0009] In the file management system 21, the data input/output control unit 22 checks the validity of input data for processes such as updating, referencing, and deleting files. After confirming the validity of the data, the file information control unit 23 checks the operation on the file.

[0010] The file usage right information is organized by the file access information management unit 24, and processes such as storage and updating are controlled to maintain consistency and realize integrated management.

[0011] Operation instructions from input data are
The file access control unit 2 uses information on file usage rights managed by the file access information management unit 24.
5, the validity is confirmed and the data is passed to the file structure management section 26 according to the file processing. In addition, if there is inappropriate access, a notification will be sent to that effect.

After confirming the right to use the data and operations, the data in the data storage section 32 is manipulated using appropriate input operation data through the management information for each device in the storage device management section 31 of the storage device 30. The file structure management section 26 realizes the control of the above file access processing and the management of the data structure of the storage device management section 31.

Next, the operation of this embodiment will be explained.

FIGS. 2 and 3 show images of the input operation data and the portions of the file access management information relating to usage rights, respectively. First, the file usage right control process will be explained with reference to the flowchart in FIG.

First, operation input data (FIG. 2)
is input to the data input/output control section 22 according to the application program 12. After inputting, the validity of the input format is confirmed (step 41). After checking the input data, the file information control unit 23 saves the file name “TEST1”.
Processing is performed with program usage rights using access mode "P", and processing instructions are issued using operation mode "U".
Accordingly, it is determined that the update process is to be performed (step 42).

The file access control unit 25 checks the presence or absence of a file (step 44) and checks the right to use the program (steps 45 to 47). From the file access management information (Figure 3), the usage rights for the file name “TEST1” can be changed to access mode or active type “
Search for program usage rights for "P".User "TARO
The usage right subordinate to " is "N", meaning that it does not exist, but the usage right subordinate to the program is "U", which means the right up to update usage. Therefore, the program name " The operation input data based on the program-dependent usage right of "KOSHIN" is determined to be an update processing instruction.The operation input data is updated through the file structure management section 26 (step 48).
.

[0017] In this way, even if the user does not have the usage right,
It can be seen that it is easy to set and use conditional usage rights, such as enabling update processing from a specific application program.

Note that this embodiment describes the present invention with respect to a specific example, and it is clear that the present invention can be applied to other specific examples in the field of file access management. Therefore, the examples presented here are not intended to limit the invention.

[0019]

[Effects of the Invention] According to the present invention, the right to use a file can be made independent of the user, so it is possible to set the right to use a file for each object such as a program, and it is possible to set the right to use a file with conditions. This allows for more detailed file management than before, while ensuring confidentiality. Furthermore, since usage rights can be set in accordance with the purpose, this has the effect of improving operability and facilitating integrated management.

[Brief explanation of the drawing]

FIG. 1 is a block diagram showing the configuration of an embodiment of the present invention.

[Fig. 2] Explanatory diagram showing the input contents for the operation of this embodiment

[Figure 3]
Explanatory diagram showing file access management contents of this embodiment

[Figure 4] Flowchart showing the operation of this embodiment

[Explanation of symbols]

11 Terminal user 12 Application program 21
File management system 22 Data input/output control unit 23 File information control unit 24 File access information management unit 25
File access control section 26 File structure management section 30 Storage device 31 Storage device management section 32 Data storage section

Claims (1)

[Claims] Claim 1: A data input/output control unit that confirms the validity of operation data regarding a file input by a user through an application program;
Organize and organize file access rights information for each file.
The update, registration, and deletion of access information is managed without compromising the validity of the access information, and when accessing a file, the access method that is subordinate to the program and the access method that is subordinate to the user are distinguished, and the usage rights are determined by the access method. It has a file information control unit that performs control, and a file structure management unit that processes file operation data using an access method based on legitimate usage rights and manages file organization in a storage device in an orderly manner. A file management system that realizes independence between users and usage rights, and performs consistent and integrated file access control.