JPH06348576A - Data processor - Google Patents

Abstract

PURPOSE:To provide a data processor which enables a respective user to use as if the user exclusively employs a data storage device by putting information in the data storage device shared by the users together, user by user. CONSTITUTION:This data processor has a data storage means 1 which stores information used by the uses as encoded files 11 and 12 given file names, a coordinate table storage means 2 which stores the relation between the file names of the encoded files 11 and 12 and user names, a data encoding means 3 which encodes and then stores the information at a specified write part of a specified encoded file, an encoded file read means 4 which takes information out of a specified read part of a specified encoded file, and encodes and then passes the information to a program, and an encoded file name retrieval means 6 which finds the file name of the encoded file from the name of a user which starts the program, passes the file name of the encoded file and the read part specified by the program, and also passes the file name of the encoded file and the write part specified by the program.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a data processing device, and more particularly to a computer system in which a plurality of users and systems commonly use the connected data storage device as if it were used exclusively. Data processing device.

[0002]

2. Description of the Related Art In a computer system in which a plurality of users jointly use or a plurality of systems operate, a data storage device such as DASD connected to a computer is also commonly used, and each user individually writes a file. Creating and writing programs has been done. And when each user creates a file or program individually, it becomes the same as the file name or program name created by another person, and there is a problem that confusion occurs, conventionally, the naming rule of the file or program to be created is decided, It has been practiced to use a separate directory for each user.

[0003]

However, even if the above-mentioned method is used, all files and programs of all users and systems can be accessed, so that the files and programs used by oneself are used. When searching for, extra files and programs used by other users and systems will be searched, and the search will become complicated, or files and programs used by other users and systems will be deleted accidentally. Or if you need a file or program with the same name as another user's file or program,
There is a problem that we cannot handle it. In particular, when general-purpose packaged software is used, the file names and program names used do not follow the above-mentioned local naming rules and directory usage methods, so the above problems are highlighted.

The present invention has been made in view of the above-mentioned problems, and collects information in a data storage device shared by a plurality of users for each user, and each user uses the data storage device exclusively. It is an object to provide a data processing device which can be used as it is used.

[0005]

The above-described object is to provide a data storage means for storing information to be used for each user as an encrypted file with a discriminable file name, and an encrypted file of the data storage means. A correspondence table storage means for storing a correspondence relationship between a file name and a user name; a data encryption means for encrypting and storing information in a designated write portion of a designated encrypted file in the data storage means; The encrypted file reading means for taking out the information from the designated read portion of the designated encrypted file in the data storage means, deciphering the information, and passing the information to the application program, and the user name starting the application program The correspondence table storage means is searched for the file name of the encrypted file, and the encrypted file is read. The file name of the encrypted file and the read part specified by the application program are passed to the column, and the file name of the encrypted file and the write part specified by the application program are passed to the data encryption means. It is achieved by a data processing device having a search means.

[0006]

Embodiments of the present invention will now be described in detail with reference to the drawings. FIG. 1 is a block diagram showing the configuration of a data processing device according to an embodiment of the present invention. This data processing device comprises a data storage device 1, a correspondence table 2, a data encrypting means 3, an encrypted file reading means 4, a user name designating means 5, an encrypted file name searching means 6, and an application program 7. .

In the present embodiment, the data storage device 1 is assumed to be a magnetic disk device, and stores information to be used for each user as an encrypted file with a distinguishable file name. The data encryption means 3 can always write (input) information, and the encrypted file reading means 4 can always read (output) information. The data storage device 1 has two encrypted files 11 and 12 therein, and the encrypted file 11 stores therein the files 11a, 11b, 11c and 11d which each application program is aware of. The encrypted file 12 is the file 12 that each application program is aware of.
a, 12b, 12c and 12d are encrypted and stored.

In the specific example, the encrypted file 11 is "SC
The RTF1 ”and the encrypted file 12 have the file name“ SCRTF2 ”, and the encrypted file 11 stores therein the data files“ FILE1 ”11a and“ FILE ”in which the data created by the application program is stored.
2 ”11b and programs“ PGMA ”11c and“ PGMB ”11d for storing codes of the execution format, and the encrypted file 12 is a data file“ FIL ”for storing data created by the application program.
"E1" 12a, "FILE3" 12b, and programs "PGMA" 12c, "PG" that store the code of the execution format
MC "12d. However, the files managed by the file control function in the OS that integrates and controls the computer system are only the encrypted files 11 and 12, and the files 11a and 11 included in the encrypted file 11 are included.
b, 11c, 11d are regarded as a part of the data of the encrypted file 11, and the files 12a, 12b, 12c, 12d included in the encrypted file 12 are regarded as a part of the data of the encrypted file 12. That is, a file or program is considered only when data is read or written (accessed) through the encrypted file reading unit 4 or the data encryption unit 3 described later, and the content of the file or program is also the above-mentioned two units. Only significant when accessed via. In other words, encryption and decryption are required to access files (data) other than the files managed by the file control function in the OS.

The correspondence table stores the correspondence between the file names of the encrypted files 11 and 12 in the data storage device 1 and the user names. In the specific example, the encrypted file name “SC” is associated with the user name “USER1”.
RTF1 ”stores an encrypted file name“ SCRTF2 ”corresponding to the user name“ USER2 ”.

The data encryption means 3 uses the encrypted file 1
1, 12 file names, file names stored in the encrypted file (“FILE1” 11a in FIG. 1,
"FILE2" 11b, "PGMA" 11c, "PGM"
B ”11d,“ FILE1 ”12a,“ FILE3 ”1
2b, “PGMA” 12c, “PGMC” 12d level file name), storage location and information to be stored, the storage location of the designated file in the designated encrypted file is stored according to the instruction. Information is encrypted and stored. A file compression method is used for the data encryption means 3.

The data encryption file reading means 4 receives the file names of the encrypted files 11 and 12, the file names stored in the encrypted files, and the storage positions, and then, in accordance with the instruction, performs the specified encryption. The storage location of the designated file in the file is obtained, the stored information is decrypted, and the information is passed to the application program 7. A file compression method is used for the data encryption file reading means 4.

The user name designating means 5 is a computer
It is activated when the system is used and the user name to be used is passed to the encrypted file name search means 6. The encrypted file name retrieval means 6 retrieves the correspondence table 2 from the user name passed from the user name designation means 5, finds and stores the file names of the encrypted files 11 and 12, and reads the encrypted file. The file name of the encrypted file and the file name specified by the application program in the means 4,
Along with passing the storage position, the file name of the encrypted file, the file name designated by the application program, the storage position, and the information to be stored are passed to the data encryption means 3.

Next, the operation of the data processing apparatus of the present invention will be described with reference to the flowchart of FIG.

First, when the computer is started, the OS
In addition to the initialization of etc., the correspondence table 2, the data encryption means 3, the encrypted file reading means 4, the user name designating means 5, the encrypted file name searching means 6, the application,
The program 7 is loaded on the storage, and the user name designating means 5 is first activated (step S1). The user name designating means 5 displays the user name designating screen 21 as shown in FIG. 3, waits for the input of the user name, and when the user name is entered, passes the user name to the encrypted file name searching means 6, Thereafter, it is considered that the user has operated with this user name (step S2). For example, if "USER1" is entered on the user name designation screen 21 shown in FIG.
After passing "USER1" to the file name search means 6, the subsequent command input from the user in the computer and the instruction from the started program are "USE1".
It is regarded as an operation performed by a user having a user name "R1".

When the user name is passed from the user name designating means 5 to the encrypted file name searching means 6, the encrypted file name searching means 6 searches the correspondence table 2 for the file name of the corresponding encrypted file. , When the user of the subsequent application program gives an instruction to access the data storage device 1, the file name of the encrypted file can be added and transmitted to the data encryption means 3 and the encrypted file reading means 4. The file name of the encrypted file is stored in the storage area of the encrypted file name search means 6 (step S3). For example, in this specific example, since the user name is “USER1”, the file name of the encrypted file is “SCRTF” from the correspondence table.
Data storage device 1
To the access instruction to, the information of the file name "SCRTF1" of the encrypted file is added,
The data is transmitted to the data encryption means 3 and the encrypted file reading means 4.

In this state, the user can
When the program is started from the screen of the program 7 (step S4), since the program needs to be loaded on the storage, the instruction content such as the file name of the program is passed to the encrypted file name search means 6. The encrypted file name retrieving means 6 adds the encrypted file 1 to the instruction content.
The file names 1 and 12 are added and transmitted to the encrypted file reading means 4 (step S5). Next, the encrypted file reading means 4 reads the execution form of the designated program stored in the designated encrypted file of the data storage device 1 according to the file name of the designated encrypted file and the instruction content, After decryption, the program is loaded on the storage and the program is started (step S6). For example, when the user gives an instruction to activate “PGMA” on the screen, the encrypted file search means 6 causes the file name = “P”.
The file name of the encrypted file = “SCRTF1” is added to the instruction to load “GMA” on the storage and the result is transmitted to the encrypted file reading means 4. Next, the encrypted file reading means 4 determines the encrypted file (SCRTF) in the data storage device 1 by the file name = “SCRTF1” and the file name = “PGMA” of the encrypted file.
1) Read the execution-type module of "PGMA" 11c stored in 11, read the code, load it on the storage, and activate the program "PGMA".

Similarly, the files 11a and 11 in the encrypted files 11 and 12 are extracted from the program that has just been started.
When data is written in b, 12a, 12b, the instruction contents such as data contents and file name are passed from the application program to the encrypted file name searching means 6 (step S7). The encrypted file name search means 6 is
The file names of the encrypted files 11 and 12 are added to the instruction content and transmitted to the data encryption means 3 (step S
8). Next, the data encryption means 3 encrypts the data contents, and the designated files 11a, 11b, 12a, 12b in the encrypted files 11, 12 designated by the file names of the encrypted files 11, 12 and the designated contents. The contents are stored in (step S9). For example, when writing data from the activated "PGMA" to "FILE1", the encrypted file name search means 6 gives the file name "SCRTF1" of the encrypted file to the instruction to store the data content, file name = "FILE1". Information is added and transmitted to the data encryption means 3. Next, the data encryption means 3 encrypts the data content, and the encrypted file has a file name = “SCRTF1” and a file name = “FI.
The file "FILE1" 11a of the encrypted file (SCRTF1) 11 in the data storage device 1 by "LE1"
Store the data contents in.

Next, the operation when different users access the data storage device 1 will be described. For example, in the state shown in FIG. 1, a user with user name = “USER2” launches a program with “PGMA” and
A case where data is written in a file "ILE1" will be described. That is, the operator's operation is different only in that the user name is changed from "USER1" to "USER2". At this time, the encrypted file name search means 6 causes the user name designating means 5 to send the user name = “US
"ER2" is received, the correspondence table 2 is searched, the file name of the encrypted file = "SCRTF2" is obtained, and "PGM" is obtained.
At the time of instructing to load "A" and at the time of instructing to write data to "FILE1", the encrypted file name = "SCRTF2" is added and the data encryption means 3 and the encrypted file reading means 4 are added.
Communicate those instructions to. Therefore, "PGMA" loaded on the storage becomes "PGMA" 12c stored in the encrypted file 12, and "FILE1" storing data is "FILE1" stored in the encrypted file 12. "12a.

As described in detail above, a user who uses a computer can access the data storage device 1 without having to be aware of what program names and file names other users are using. .

Although the user name designating means 5 is started immediately after the computer is started in the embodiment, a special command (for example, "USER") may be used even when the computer is being used.
Command) or press a preset function key (for example, PF1), the user name designation screen as shown in Fig. 3 is displayed, and the user name can be changed. It may be. Further, the user name may be designated without fail when the data storage device 1 is accessed. By doing this, for example, the file 11a in the encrypted file 11 and the encrypted file 1 in FIG.
It becomes possible to easily access both of the files 12b in 2.

Further, in the embodiment, the data storage device 1
Only the information used for each user is stored as an encrypted file in the area, but an area for storing files and programs common to all users (this area is the same as making encrypted files for each user) An encrypted file may be collectively included, or a normal unencrypted format may be provided, and when accessing the data storage device 1, an area common to all users and an encrypted file unique to each user are arranged in this order. You may make it search. In this way, it is not necessary for each user to have what is commonly used by all users, and the data storage device 1
Can be effectively used.

In the embodiment, in the state shown in FIG. 1, the user whose user name is "USER3" is "FILE".
In the case of writing data to the file "1", the encrypted file name search means 6 receives the user name = "USER3" from the user name designation means 5 and searches the correspondence table 2 for the file of the corresponding encrypted file. Although I tried to make an error because the name could not be obtained, for example, the file name "SCRTF3" of the encrypted file was obtained by the naming rule that decided not to have the same name as other encrypted files, and the user name = "U
File name "S" of the encrypted file corresponding to "SER3"
"CRTF3" is stored and the file name of the encrypted file is "SCRTF" when the data writing is instructed to "FILE1".
3 ”may be added to transmit those instructions to the data encryption means 3. As a result, "FILE1" for storing data is stored in the newly created encrypted file (SCRTF3).

[0023]

As described above in detail, according to the data processing device of the present invention, each user can be shared among a plurality of users or information stored in a data storage device such as DASD shared by a plurality of systems. It becomes possible to mask other than the own one, and each user can use the data storage device as if they were using it exclusively, which has the effect of improving work efficiency. If a file compression method is used for the encrypted file reading means and the data encryption means, the data storage means can be effectively used.

[Brief description of drawings]

FIG. 1 is a block diagram showing a configuration of a data processing device of the present invention.

FIG. 2 is a flowchart showing the operation of the data processing device of the present invention.

FIG. 3 is a diagram showing a screen of an embodiment of a user name designating means.

[Explanation of symbols]

 1 Data Storage Device 2 Correspondence Table 3 Data Encryption Means 4 Encrypted File Reading Means 5 User Name Designation Means 6 Encrypted File Name Search Means 7 Application Programs

Claims (1)

[Claims] 1. A data storage means for storing information to be used for each user as an encrypted file with a file name that can be discriminated, and a correspondence relationship between the file name of the encrypted file of the data storage means and the user name. A corresponding table storing means for storing the data, a data encrypting means for storing information after encrypting the information in a designated write portion of the designated encrypted file of the data storing means, and a designated encryption for the data storing means. Retrieve the information from the specified read portion of the encrypted file, decrypt the code, and then retrieve the corresponding table storage means from the encrypted file reading means that passes the information to the application program and the user name that started the application program, Obtain the file name of the encrypted file, and use the encrypted file reading means to write the encrypted file A name and an read part specified by the application program, and an encrypted file name search means for passing the file name of the encrypted file and the write part specified by the application program to the data encryption means. Characteristic data processing device.