JPH0456348B2 - - Google Patents

Description

[Detailed Description of the Invention] [Summary] In order to prevent falsification of various output data in a host-workstation cooperation system,
Tamper-prevention information is added to the output data from the host processing device to the workstation, and when editing or updating is performed on the workstation side, this tamper-prevention information is used to prohibit partial extraction or updating, and also prevent printing. A means of tamper-proof printing is provided to ensure that the results cannot be tampered with, thereby guaranteeing the validity of the content output by the system.

[Industrial application field]

The present invention is directed to a tamper-proof processing method in a workstation, in particular, when data managed by a host processing device or data resulting from processing is sent to the workstation and printed on a printer, etc. of the workstation, the system must guarantee the contents. This paper relates to a tamper-proof processing method in a workstation that prevents certain important data from being tampered with either before or after printing.

For example, clinical data showing the effectiveness of a newly developed drug is processed by a computer, and the analysis results are printed on a printer or the like. This printed result may be used as a document to be submitted to a public organization, and it may be necessary to guarantee that the data written in the document is the correct result of analysis by a computer.

[Conventional technology]

For example, the output of a well-known program that analyzes and processes clinical data, etc. has gained great social credibility for its output results. Conventionally, results were printed only within the computer center using so-called batch processing, and in such cases,
Through system operation management, we were able to prevent falsification of output.

However, recently, it has become possible to import the results processed by the host processing device into the workstation online and print them on the workstation's printing device. Through processing, data can be edited freely at a workstation. In other words, workstations now have document creation/editing functions, etc., and can process data sent from host processing devices and print that data in various form and report formats. ing.

[Problem that the invention seeks to solve]

Because users can easily manipulate data on workstations, there is a risk that users may fabricate data or falsify processing results using the workstation's simple editing functions. There is. Hitherto, commonly used security protection using passwords and memory protection cannot prevent such tampering in workstations.

On the other hand, if the editing function on the workstation were completely eliminated, it would be impossible to change only the output format within the permitted range without changing the data content, and flexibility would be lost.

The present invention aims to solve the above-mentioned problems and provides comprehensive tampering prevention means for all or a portion of a certain set of data outputted from a host processing device to a workstation. .

[Means for solving problems]

FIG. 1 shows an example of the basic configuration of the present invention.

In FIG. 1, 10 is a host processing device;
12 is a work station (WS), 12 is a database, 13 is a data search processing unit that reads data from the database 12, 14 is an analysis processing unit that executes data analysis processing, and 15 is a presentation that outputs data such as analysis results. 16 is a processing unit, tamper prevention information setting unit, 17 is a printer, 18 is an intermediate file in which transfer data is stored, 19 is a WS
An interface unit 20 is a host interface unit that sends and receives data to and from the host processing device 10;
21 is an intermediate file in which data transferred from the host processing device 10 is stored; 22 is a keyboard; 23
24 is a tampering prevention information checking unit; 25 is a tampering prevention processing unit; 26 is a presentation unit that outputs data to various output devices of the workstation 11; 27 is a processing section, 27 is a tamper-proof setting designation section, 28 is a display, 29 is a printing device with a tamper-proof printing mechanism, and 30 is a line.

In response to a request from the workstation 11, the presentation processing unit 15 calls the tampering prevention information setting unit 16 when transferring data managed by the host processing device 10 or data resulting from processing to the workstation 11 side. The tampering prevention information setting unit 16 performs a process of adding tampering prevention information to data to be transferred. Setting of this tampering prevention information is performed depending on the importance of the data to be transferred.

The data with the tamper-proof information added is stored in the intermediate file 18 and sent to the WS interface section 1.
9, the data is transferred to the host interface unit 20 via the line 30, and stored in the intermediate file 21 of the workstation 11.

The workstation 11 has an intermediate file 21
It has an editing/updating processing section 23 that performs editing processing and updating processing on data stored in the . When editing/updating is instructed through input from the keyboard 22, the tamper-proof information checking section 24 is called. The tamper-proof information check unit 24 performs editing and
This checks the tampering prevention information for the data specified to be updated.

The tampering prohibition processing unit 25 prohibits the process of partially extracting and updating the data stored in the intermediate file 21 according to the check result of the tampering prevention information check unit 24. That is, processing requests such as partial extraction and updating are ignored.

Furthermore, a printing device 29 with a tamper-proof printing mechanism is used as a printing device that outputs the data of the intermediate file 21. Printing device with tamper-proof printing mechanism 29
is a printer that has a tamper-proof printing mechanism, such as that used when printing amounts on checks, and when printing, it not only applies ink to the paper but also removes the ink. It is now possible to print in a way that leaves marks on the paper even when the paper is stained.

The tamper-proof designation unit 27 in the presentation processing unit 26 operates the tamper-proof printing mechanism of the printing device 29 with a tamper-proof printing mechanism during printing, according to the tamper-proof information setting state of the data to be printed. control.

[Effect]

In the host processing device 10, tampering prevention information is set according to the importance of the data to be transferred, and the tampering prevention information is sent to the workstation together with data such as processing results. Therefore,
The tamper prevention information checking unit 24 in the workstation 11 checks tamper prevention information and can prohibit tampering with data using an editor or the like.

Furthermore, if tamper-proof information is set, the data printed at the workstation 11 is printed by the printing device 29 with a tamper-proof printing mechanism.
Since tamper-proof printing is performed, the print result cannot be tamper-proofed either.

In other words, since selection information to prevent tampering is added as an attribute of data to be processed and printed, even if the data is in the form of a table in a database, for example, it can be processed and converted into a table. The tampering prevention mechanism of the present invention works even if the document is in the form of a document or a graph, or even if it is a table or graph in a document.

〔Example〕

FIG. 2 is a diagram for explaining one embodiment of the present invention.

In Figure 2, the same numbers as in Figure 1 are numbered 1.
Corresponds to that shown in the figure. 31 is a tampering prevention/security protection main control unit, 32 is a security setting unit that sets security information in data, 33 is a security check unit, 34 is a workstation usage qualification setting unit, and 35 is a host/workstation cooperation interface. ACE, 36 represents communication data, 37 represents an editor, 38 represents an arithmetic/processing unit, and 39 represents a log file.

The workstation usage qualification setting unit 34 sets usage qualifications for each workstation based on a user identification number (user ID). As a result, the qualification to access the database 12 managed by the host processing device 10, the qualification to start processing of the analysis processing section 14, etc. are checked.

The security setting unit 32 sets read prohibition, write prohibition, etc. for each data in the database 12. This setting information is checked by the security check section 33 of the data search processing section 13, and access to data that is protected is prohibited.

These usage qualification checks and security protection have been used in the past, but these alone cannot prevent falsification in processing after data is transferred to a workstation and falsification of printed results. Therefore, the presentation processing unit 15 sets the tamper-proof information setting unit 1 to the data to be transferred to the workstation.
6, predetermined tampering prevention information is added.

That is, the communication data 36 by the host-workstation cooperation interface 35 includes tamper-proof information and actual output data. This tampering prevention information may be a flag, and instructs, for example, to prevent tampering of the entire data or to prevent tampering of partial data. In the case of partial data tampering prevention, position information such as rows and columns is included.

The data delivered to the workstation 11 in this manner is temporarily stored in the intermediate file 21, and becomes subject to editing, processing, and output processing according to instructions from the keyboard 22.

The editor 37 performs processing such as document editing, and has a tampering prevention information checking section 24A and a tampering prevention processing section 25A. , updating or partial extraction in any format is now prohibited.

The arithmetic/processing section 38 processes processing through spreadsheet calculations, data statistical processing, etc.
This also has a tampering prevention information checking section 24B and a tampering prevention processing section 25B, and similarly prevents tampering. Of course, data in the intermediate file 21 that is not subject to tampering can be used for calculations and processing.

When printing the data in the intermediate file 21, the presentation processing unit 26 checks the tamper prevention information using the tamper prevention designation unit 27, and according to the designation of the tamper prevention information, printing with a tamper prevention printing mechanism is performed at the time of printout. The tamper-proof printing mechanism in device 29 is activated. As a result, the printed characters cannot be erased/modified in the print result. Note that the tamper-proof printing mechanism may be similar to that used in printing checks and the like, so detailed explanation thereof will be omitted.

In particular, in this embodiment, history information when editing data or processing results is automatically and forcibly recorded in the log file 39, and the contents of the log file 39 determine who edits and when. You can now see information such as what has been fixed. The contents of log file 39 can be changed as needed.
The data is transferred to the host processing device 10 via the host/workstation cooperation interface 35.

〔Effect of the invention〕

As explained above, according to the present invention, it is possible to prevent falsification of data and output results at a workstation, and it is possible to ensure that the printed content is a valid output result. You will be able to do this. Thus, for example, it becomes possible to fabricate clinical data.

[Brief explanation of the drawing]

FIG. 1 shows a basic configuration example of the present invention, and FIG. 2 shows an explanatory diagram of one embodiment of the present invention. In the figure, 10 is a host processing device, 11 is a workstation, 12 is a database, 13 is a data search processing section, 14 is an analysis processing section, 15 is a presentation processing section, 6 is a tampering prevention information setting section,
17 is a printer, 18 is an intermediate file, 19 is a
WS interface section, 20 is a host interface section, 21 is an intermediate file, 22 is a keyboard, 23 is an editing/update processing section, 24 is a tampering prevention information check section, 25 is a tampering prevention processing section, 26
27 is a presentation processing section, 27 is a tamper-proof designation section, 28 is a display, 29 is a printing device with a tamper-proof printing mechanism, and 30 is a line.

Claims (1)

[Claims] 1. Host-workstation cooperation in which data managed by the host processing device 10 or data resulting from processing is transferred to the workstation 11 connected via the line 30 and output from the workstation 11. In the system, a tamper prevention information setting means 16 sets tamper prevention information in data transferred from the host processing device 10 to the work station 11; and for editing/updating data received by the work station 11; Tampering prevention information checking means 24 for checking the above-mentioned tampering prevention information
a tampering prevention processing means 25 that prohibits partial extraction and updating of received data according to the check result by the tampering prevention information checking means 24; a printing device 29 having a tampering prevention printing mechanism; and a setting state of the tampering prevention information. A tampering prevention processing method in a workstation, comprising: tampering prevention designating means 27 for operating a tampering prevention printing mechanism of the printing device 29 to print in accordance with the above.