JPH07134696A - Security function witching system - Google Patents

Abstract

PURPOSE:To prevent an operation of authenitication from being complicated even when different kinds of application software for a security function are used frequently by setting authentication data after applying conversion when different kinds of contents of authorization data or data formats of a processing program are provided. CONSTITUTION:When the processing programs 200 with different authentication data 220 or security attribute 260 for the security function are started up alternately, since the user same as the user of the processing program 200 succeeds the security environment of the processing program 200 using just before also in a newly started up processing program 200, the security setting processing 250 of an operating system program 300 sets security environment switching processing 270 that is a condition to make access processing data 260, and converts the authorization data 220 and the security attribute 260. Therefore, it is possible to dispense with the repeat setting of the operation of authentication.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an information processing device having a security function, and more particularly, in the same information processing device,
The present invention relates to a security function switching method and device which are suitable when application software having security functions of different methods operate simultaneously.

[0002]

2. Description of the Related Art It has become widespread in information processing apparatuses to provide a security function for restricting access to specific data by a user other than a specific user.

As a first prior art example of the security protection function in a conventional information processing apparatus, Japanese Patent Laid-Open No. 63-24925.
There is one as shown in Japanese Patent No. 4 publication. That is, when the user uses the information processing device, the user's name and personal identification number are input. Then, after the information processing device confirms that the correspondence between the user name and the personal identification number matches,
The user can use the information processing. As described above, the method that enables the use of information processing by inputting the number or character string for uniquely identifying the user and the personal identification number or character string corresponding to the user is widely used in terminal devices. Has been.

The above-mentioned first prior art example is a very general one and is widely used as a security protection system for information processing apparatuses. However, for example, in a word processor whose purpose of use is document creation and there are many users who are new to the operation of information processing devices, a simple security function is used.
In addition, it is necessary to be able to use the security function with an extremely simple operation. On the other hand, an accounting system or the like requires an extremely advanced security function, and it is generally difficult to operate the security function. So a word processor,
There is a second prior art example in which the function and operation method of the security protection function are changed depending on the type of software such as an accounting system. In this embodiment, when using application software of a word processor that has many unspecified users, except for the case of accessing a file that only specific users are allowed to access, a security-related operation of authentication operation (login) is performed. You don't need
On the other hand, when using the application software of the accounting system, the authentication operation (login) is required before starting the use. Further, even if each application software has a different security function or operation method, it is possible to access the same data by using each different security function or operation method.

[0005]

The second prior art described above has the following problems.

When accessing the same data while alternately using application software having different security functions and operation methods, the security mechanism is different for each application program. , Authentication operation (login) to allow access to certain data
Even if the second application software is continuously used, the authentication operation (login) is performed using the security function of the second application software even if the same data is accessed.
Need to be redone again. That is, the user needs a different authentication operation (login) every time different application software is used. Therefore, in the work of using the information processing apparatus, when the use of different application software is frequently repeated alternately, The authentication operation (login) also needs to be repeated, which causes a problem that the operation becomes complicated.

The present invention solves the above conventional problems,
To realize an operation method for the security function that prevents the authentication operation (login / logout) from becoming complicated even when the application software with different security functions and operations are used alternately. is there.

[0008]

The above object can be achieved by providing the following means in an information processing apparatus including a central processing unit, a storage device, an input device and an output device.

(1) Processing data including a security protection attribute indicating a condition for permitting access from a processing program.

(2) Authentication data provided corresponding to each processing program being executed and showing qualification for permitting the processing program to access specific processing data.

(3) Authentication means for setting or changing the authentication data corresponding to the processing program being executed.

(4) Security setting means for setting or changing the security attribute of the processed data.

(5) Security attribute format conversion means for converting the content or data format of the security attribute of the processed data.

(6) Authentication data format conversion means for converting the content or data format of the authentication data.

(7) When a processing program is newly started (including a case where a task that has been stopped once restarts its operation due to task switching in multitasking), it is the same as the user of the processing program. Authentication data of the processing program that the user was using immediately before is copied to the authentication data of the newly started processing program (if the contents or formats of the authentication data of both processing programs are different from each other, the authentication data The authentication data is converted by the format conversion means and then copied.) Authentication data inheritance means.

(8) When the processing program attempts to access the processing data, it is determined whether the access is permitted by using the security protection attribute of the processing data and the authentication data of the processing program ( If the security attribute and the format or content of the authentication data do not match and the determination cannot be made, the security attribute format conversion means converts the security attribute so that the determination can be made before making the determination.) An access restriction control unit that performs the access if the permission is permitted and does not perform the access if the permission is not permitted.

[0017]

The authenticating means sets / changes the authentication data corresponding to the processing program being executed. Further, the security setting means sets the security attribute of the processed data. Then, when the processing program attempts to access the processing data, the access restriction control means determines whether or not the access is permitted by using the security attribute of the processing data and the authentication data of the processing program. (If the security attribute and the format or contents of the authentication data do not match and the determination cannot be made, the security attribute format conversion means
The security attribute is converted so that the judgment can be made before the judgment.

If the permission is permitted, the access is performed. If the permission is not permitted, the access is not performed. Further, when a processing program is newly started (including a case where a task that was once stopped restarts its operation due to task switching in multitasking).

)) The authentication data inheriting means copies the authentication data of the processing program that was used by the same user as the user of the processing program immediately before to the authentication data of the newly started processing program ( When the contents or formats of the authentication data of the both processing programs are different from each other, the authentication data is converted by the authentication data format conversion means and then copied.

As described above, when the processing programs having different security functions (the formats or contents of the authentication data or the security attributes are different) are alternately activated (switched), the processing programs have different security functions. To inherit the authentication data of the processing program that was used by the same user as the user just before to the authentication data of the newly started processing program, and convert the format of the authentication data and security attribute if necessary. Thus, even when application software with different security mechanism (functions and operations) is frequently used alternately, it is not necessary to repeat the authentication operation (login / logout) operation, preventing complicated operation. can do.

[0021]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS An embodiment of the present invention will be described below with reference to the drawings.

First, referring to FIG. 1, the hardware configuration of the information processing apparatus according to the present invention will be described. A central processing unit (CPU) 110 executes processing programs such as various application programs 200 described later and controls peripheral devices 120 to 190. 1
A main memory (MM) 20 stores processing data 260 and various processing programs. Reference numeral 130 denotes a video memory (VM), the content of which is displayed on the display device 160 as described later. Various application programs and instructions relating to the security function are given via the keyboard 140 (KB) or the mouse 150 (MS). A display device (CRT) 160 displays various application programs 200 and a screen for instructing the security function in a multi-window format. 170 is a printer (PRT),
The processing data 260 instructed to print is the printer 17
It is printed with 0. 180 is a floppy disk device (FD
D), which reads and saves various processing data 260 and processing program 200. Reference numeral 190 denotes a fixed disk device (HD), which, like the floppy disk device 180, has various processing data 260 and processing programs 200.
To read and save. Reference numeral 105 is a bus for transferring data between these peripheral devices 120 to 190 and the central processing unit 110.

Next, the software configuration of this embodiment will be described with reference to FIG. The software configuration of this embodiment has a plurality of application programs (AP) 20.
0 and operating system program (OS)
It consists of 300.

Application program (AP) 20
0 is a word processor 200a, a customer management system 200b, a wage calculation system 200c, and a menu program 200d, respectively. Menu program 200
d is an application program (AP) 200a,
It is a processing program for the user to select the application program (AP) 200a, 200b, or 200c to be operated from among b and c. In addition, 230a, b, c,
Reference numeral d denotes a processing program body of each application program (AP) 200 that stores data executable by the CPU 110. Each processing program 200 is controlled by an operating system program (OS) 300 as an independent task. The operating system program (OS) 300 controls from basic task control and input / output control to realize a multi-window on the screen of the display device 160 and control to access the processing data 260 designated by the processing program body 230. And so on. Below, each processing program 200 and operating system program (OS) 300
The internal processing and data will be described.

First, the outline of each process will be described.

Reference numeral 210 is an authentication process for setting authentication data 220 for identifying a user who is using the processing program 200. The application program (AP) 200
In the case of a and b, the application program (A
P) Authentication processes 210a and 210b dedicated to 200a and 200b are provided, respectively. Similarly, 210x is also an authentication process for setting authentication data for identifying a user who is using the processing program 200.
P) 200c, which is provided for the processing program 200 that does not have the authentication processing dedicated to the processing program.
The authentication process 220x constitutes a part of the operating system program 300 (OS) and sets the authentication data 220x. The processing contents of each authentication processing 210 will be described later in detail.

Reference numeral 250 is a security setting process for setting a security attribute 270 which is a condition of access to the processed data 260. Application program (AP) 20
In the case of 0a and b, the application program (A
P) Security setting processing 260a, b dedicated to 200a, b
Are provided respectively. Similarly, 250x also has a security attribute 270 that is a condition for accessing the processed data 260.
The security protection setting process for setting the security protection setting process is provided for a processing program such as the application program (AP) 200c that does not have a security protection setting process dedicated to the processing program. The security setting process 250x constitutes a part of the operating system program (OS) 300, and sets the security attribute 270 of each application program (AP) 200. The processing content of the security setting processing 250 will be described later in detail.

Reference numeral 240 denotes the authentication data 220 when the processing program body 230 accesses the processing data 260.
And the security attribute 270 of the processing data 260 are checked, and the processing program main body 230 determines that the processing data 260
Is an access restriction control process for inspecting whether or not access is possible. Application program (AP) 2
In the case of 00a, b, access restriction control processing 24 dedicated to the application program (AP) 200a, 200b
0a and 0b are provided respectively. Similarly, 240x is also an access restriction control process for checking whether the processing program body 230 can access the processing data 260, but the application program (AP) 20
It is provided for a processing program such as 0c that does not have an access restriction control processing dedicated to the processing program. The security setting process 250x constitutes a part of the operating system program (OS) 300.
The processing contents of the access restriction control processing 240 will be described later in detail.

Reference numeral 270 denotes an application program that next uses the security environment of the application program (AP) 200 used immediately before when the user switches (uses) the application program (AP) 200. This is a security environment switching process for inheriting even in (AP) 200. The details of the security environment switching process 270 will be described later.

Next, each data will be described in detail.

Next, the authentication data 220 will be described. The authentication data 220 is data that stores information that identifies a user who is using each running application program 200.

Application program (AP) 20
0a dedicated authentication data 220a is the processing program 20
0a is data in which a user ID consisting of 8-digit alphanumeric characters for identifying the user in use is stored.
Stored by 10a, access restriction control processing 240
a or the security attribute setting process 250a.

Application program (AP) 20
The authentication data 220b of 0b is the processing program 200b.
Is data that stores a personal identification number consisting of four-digit numbers for identifying the user who is using, is stored by the authentication process 210b, and is read by the access restriction control process 240b or the security attribute setting process 250b.

Similarly, the authentication data 220 is data for specifying the user who is using the processing program 200, but is provided for a processing program such as the application program 200c which does not have the authentication data dedicated to the processing program. ing. Similar to the authentication data 220a, the authentication data 320 is a user I consisting of 8-digit alphanumeric characters for specifying the user who is using the processing program 200.
Store D.

Next, the processed data 260 will be described with reference to FIG. The processing data 260 is data used by the processing program body 230 and has a data name 261,
It is composed of a security attribute 270 and a data body 280. In the data name 261, the name of the data is described. Each processing program 200 has the data name 261
Is used to specify the processing data to be accessed. The security attribute 270 is for restricting the access of the processing data 270 by the user (permitting or prohibiting the access depending on the difference of the user).
Identifier 271 indicating the owner of the processing data 26
A flag 272 indicating read / write enabled / disabled for the owner of 0, a flag 273 indicating write enabled / disabled,
Flag 27 that indicates whether reading is possible for other users
4 and a flag 275 indicating whether writing is possible or not. The data body 280 differs depending on the application program (AP) 200 that uses the processed data 260.
The wage calculation system 200c is wage data, and the customer management system 200b is customer data. The user identifier 271 contains an application program (A
P) 200a, c user ID consisting of 8 digit alphanumeric characters
However, in the application program (AP) 200b, it is a personal identification number consisting of four digits.

Next, the application program execution data 380 will be described with reference to FIG. The application program execution data 380 stores the program number 381 of the application program (AP) 200 that was being executed immediately before the application program (AP) 200 that is being executed, and the program number 382 of the application program (AP) 200 that is being executed. To do.

Next, the security mode management data 390 will be described with reference to FIG. The security mode management data 390 is stored in each application program (AP).
200 program number 391 and security mode 392
Stores the correspondence relationship of. The security mode means the application program (AP) that was running immediately before the execution of the application program (AP) 200 was started.
Whether to inherit the authentication data 220 of 200 (using the authentication data 220 of the application program (AP) 200 used immediately before, automatically log in with the application program (AP) 200 to be used next). It is the data data indicating that.

Next, the authentication data conversion data 400ab will be described with reference to FIG. The authentication data conversion data 400ab includes the user ID 410, which is the content of the authentication data 220a and 320, and the personal identification number, which is the content of the authentication data 220b, when both the personal identification number and the user ID are registered for the same user. 4 is a table describing a correspondence relationship with 420.

Next, the flow of each processing in the information processing apparatus having the system configuration described above will be described below.

First, the security setting processing 250 will be described with reference to FIG. The activated security setting process 250 displays the security setting screen shown in FIG. 16 (1910). The security setting screen 2200 is a screen for the user to set a security attribute 270 that prohibits the processing data 260 from being read or written by the user or read or written by another person. 221 when prohibiting reading by yourself
0, 2215 to allow the reading of itself,
The user uses the mouse 150 to instruct 2220 to prohibit writing by himself, and 2215 to allow writing to himself. In addition, 2250 is for prohibiting reading by other people, 2255 is for permitting reading by other people, 2260 is for prohibiting writing by other people, and 2260 is for permitting writing by other people. 2265 for mouse 150
(1920). Then, these security attributes set by the user are set as the security attributes 272 to 275 of the processed data 260 (193).
0), and the content of the authentication data 220 is the processing data 2
It is stored in the user identifier 271 of 60 (user ID in the security setting processing 250a, c, security setting processing 25
0b is a PIN code). Then, the security setting screen 220
0 is ended (1940). Note that security setting process 2
The processes of 50a, 250b and 350 are all the same.

Next, the authentication process 210a will be described with reference to FIG. The authentication process 210a displays the login screen A (1700) shown in FIG. 13 (1410). The login screen A (1700) is the processing data 400 in which the user is prohibited from reading or writing by anyone other than himself.
User ID of the user when using the
Is a screen for making it possible to read or write the processed data by notifying. Reference numeral 1710 is a user ID input field, and 1720 is a password input field, which requires user input (1420). Then, the authentication process 210a uses the input user ID 171.
It is checked whether the correspondence relationship between 0 and the password 1720 matches the correspondence relationship between the user ID 711 and the password 712 stored in the user management data 700 (14).
30, 1440). If they match, the input user ID 1710 is set in the authentication data 220a (1
450). The user management data 700 is data in which a user who uses the information processing apparatus is registered in advance, and is read by the access restriction control processing 240. As shown in FIG. 7, the user management data 700 stores a user ID 711 for each user and a password 712 for the user ID 711.

Next, the authentication processing 210b will be described with reference to FIG. The authentication process 210b displays the login screen B (1800) shown in FIG. 14 (1510). The login screen B (1800) is the processing data 400 in which the user is prohibited from reading or writing by anyone other than himself.
This is a screen for enabling the reading or writing of the processed data by notifying the information processing device of the personal identification number of the user when using. Reference numeral 1810 is a personal identification number input field, which requires input by the user (1
520). Then, the authentication processing 210b stores the input personal identification number in the authentication data 220b (1550).

Next, the authentication process 210x will be described. The authentication process 210x is similar to the authentication process 210a,
The login screen A (1700) shown in FIG. 13 is displayed, and the user ID and password need to be input. Then, after checking the correspondence between the input user ID and password 1720, the user ID is stored in the authentication data 320.

Next, the application program (A
P) The processing program main body 230 of 200 is the processing data 2
The access restriction control processing 240 when performing access (reading and writing) of 60 will be described with reference to FIG. When the processing program 230 accesses the processing data 260, the operating system program (OS) 300 calls the access restriction control processing 240. The access restriction control process 240 uses the authentication data 2
20 is read (in the authentication data 220a, the user ID,
In the authentication data 220b, the personal identification number) (2510). In addition, from the processing data 260 to be accessed, the user identifier 2
71 and the security attributes 272 to 275 (252
0). The security attributes 272 and 273 indicate that the user has permission to read or write, and the contents of the authentication data 220 and the user identifier 27 of the processing data 260.
If 1 matches, or security attribute 274,275
Indicates that the permission of reading or writing by another person is accessed, otherwise access is not performed (2530, 2540).

Next, the security environment switching process 270 will be described with reference to FIG. The security environment switching process 270 is performed by the application program (AP) 20.
This is a process of inheriting a security environment between 0s. A security environment when the operating system program (OS) switches the application program (AP) 200 (stops the running application program (AP) 200 and starts executing another application program (AP) 200) The switching process 270 is called. The security environment switching process 270 refers to the application program execution data 280,
The application program that was running immediately before (A
P) 200 program number 281 and running application program (AP) 200 program number 2
82 is acquired (271). Next, the security mode 292 corresponding to the program number 280 is acquired from the security mode management data 290 (272). Then, when the security mode 292 is the inheritance mode, the authentication data 220 of the application program (AP) 200 corresponding to the program number 281 is acquired, and the authentication data is applied to the application program (AP) corresponding to the program number 280. 200 to the authentication data 220 (the authentication program 210 uses the former authentication data 22
Input 0 to set the latter authentication data 220. When there is no authentication process 210 or authentication data 220 dedicated to the application program like the application program 200c, the authentication process 310 and the authentication data 320 in the operating system program 300 are used) (273). That is, the security environment of the application program (AP) 200 used immediately before is changed to the application program (AP) used next.
Authentication data 220 of the application program (AP) 200 used immediately before to be inherited to
Application program (AP) 2 to use next
00 is automatically copied to the authentication data 220 of 00 (using the authentication data of the application program 200 used immediately before, the application program 200 to be used next automatically logs in). If there is a difference in content or format between the authentication data 200 of both parties, conversion is performed. For example, the authentication data 220a or 320 is a user ID consisting of eight-digit alphanumeric characters, while the authentication data 220b is a personal identification number consisting of four-digit numbers. Therefore, the authentication data is converted by referring to the correspondence relationship of the authentication data conversion data 400ab.

Next, the processing of the menu program 200d will be described with reference to FIG. Menu program 2
00d is each application program (AP) 20
0a-c or an operating system program (OA) 300. The menu program 200d first displays the menu screen 600 shown in FIG. 6 (510). Reference numerals 610 to 630 are instruction areas for selecting an application program (AP) 200 to be activated, which is instructed using the mouse 150.
When the instruction is input, the menu program 200
d is the corresponding application program (AP) 2
00 is started (520). The menu program 200d is called by the operating system program (OS) 300 when the information processing apparatus is started up (when the power is turned on or reset). The menu program 200d deletes the authentication data 220x corresponding to the menu program 200d when the time during which the menu screen 600 is continuously displayed exceeds a preset time. As a result, when a certain period of time elapses while the menu program is displayed after the work of using the information processing device is completed, the authentication data 220x is automatically erased, and the security of confidentiality is secured.

As described above, the application program (AP) 200 having a different security function mechanism (the format or contents of the authentication data or security attribute is different).
, The authentication data 220 of the application program (AP) 200 previously used by the same user as the user of the application program (AP) 200 when the authentication data 220 is newly used (switched). The authentication data 220 of the application program (AP) 200 activated by the
By converting the content or format of 0 or the security attribute 270, even when the application programs (AP) 200 having different security function mechanisms (functions and operations) are frequently used alternately, the operation of the authentication processing 210 is performed. It is possible to prevent the operation from becoming complicated by eliminating the need to repeat (login / logout).

[0048]

As described above, according to the present invention, when an application program having a different security function mechanism is used by being alternately switched in the information processing apparatus, it is the same as the user of the application program. By inheriting the authentication data of the application program that the user was using immediately before to the authentication data of the newly activated application program, application programs with different security function mechanisms (functions and operations) can be frequently used. Even when they are used alternately, it is not necessary to repeat the authentication operation (login / logout), and it is possible to prevent the operation from becoming complicated.

[Brief description of drawings]

FIG. 1 is a hardware configuration diagram.

FIG. 2 is a software configuration diagram.

FIG. 3 is a processing data structure diagram.

FIG. 4 is a diagram showing a security environment switching process.

FIG. 5 is an explanatory diagram of a menu program.

FIG. 6 is a diagram showing a display example of a menu screen.

FIG. 7 is a user management data structure diagram.

FIG. 8 is a security mode management data structure diagram.

FIG. 9 is an authentication data conversion data structure diagram.

FIG. 10 is an application program execution data structure diagram.

FIG. 11 is an explanatory diagram of an authentication process A.

FIG. 12 is an explanatory diagram of authentication processing B.

FIG. 13 is a diagram showing a display example of a login screen A.

FIG. 14 is a diagram showing a display example of a login screen B.

FIG. 15 is an explanatory diagram of security setting processing.

FIG. 16 is a diagram showing a display example of a security protection attribute setting screen.

FIG. 17 is an explanatory diagram of access restriction processing.

Claims (7)

[Claims] 1. An information processing device comprising a central processing unit, a storage device, an input device and an output device, provided corresponding to each processing program being executed, and permitting the processing program to access specific processing data. Set the authentication data indicating the conditions for performing the processing and the authentication data of the processing program that was operating immediately before the execution of the processing program to the authentication data of the processing program that has started execution. The authentication data inheritance means and the authentication data format conversion means for converting the content or data format of the authentication data into the specified content or data format, and the authentication data inheritance means, when setting the authentication data,
A security protection function switching method characterized in that, when the content or data format of the authentication data of the processing program is different, the authentication data format conversion means sets the authentication data after setting the authentication data. 2. An information processing apparatus comprising a central processing unit, a storage unit, an input unit and an output unit, processing data including a security attribute indicating a condition for permitting access from the processing program, and each processing program being executed. Authentication data indicating the qualification for permitting the processing program to access specific processing data, and authentication means for setting or changing the authentication data corresponding to the processing program being executed, Security setting means for setting or changing the security attribute of the processing data, and the processing program for which the execution of the authentication data of the processing program that was operating immediately before the execution of the processing program was started Authentication data inheritance method to set to the authentication data of the other, and the processing program tries to access the processing data. In this case, the security attribute of the processing data and the authentication data of the processing program are used to determine whether to permit the access. If the permission is permitted, the access is performed. If the permission is not permitted, the access is not performed. Limit control means,
A security function switching method characterized by consisting of. 3. The security function switching method according to claim 2, further comprising security attribute format conversion means for converting the content or data format of the security attribute of the processed data into the specified content or data format, and restricting access. When determining whether or not to permit the access using the authentication data, the control means converts the security attribute format if the security attribute and the format or content of the authentication data do not match and the determination cannot be made. A security protection function switching method, wherein the security protection attribute is converted so that the security protection function can be determined by means. 4. The security function switching method according to claim 2, further comprising an authentication data format conversion means for converting the content or data format of the authentication data into the specified content or data format, and the authentication data inheritance means is the authentication data inheritance means. When setting data, if the contents or data format of the authentication data of the processing program are different, the authentication data format conversion means converts the authentication data before setting the security protection function switching method. 5. The security function switching method according to claim 1, 2, or 4, wherein the authentication data of the processing program executed immediately before the execution of the processing program is changed to the authentication data of the processing program whose execution is started. The security mode inheritance data describing the security mode indicating whether or not to set is provided corresponding to each processing program, and the authentication data inheritance means corresponds to the processing program that started the execution of the security mode inheritance data. The security mode, the authentication data of the processing program that was operating immediately before the execution of the processing program is processed only when the security mode instructs the inheritance of the authentication data. A security function switching method characterized by setting in the authentication data of the program. 6. The security function switching method according to claim 5, further comprising an authentication data format conversion means for converting the content or data format of the authentication data into the specified content or data format, and the authentication data inheritance means is the authentication data inheritance means. When setting data, if the contents or data format of the authentication data of the processing program are different, the authentication data format conversion means converts the authentication data before setting the security protection function switching method. 7. The security function switching method according to claim 2, wherein the authentication data inheritance means sets the authentication data of the processing program, which was operating immediately before the execution of the processing program, at the start of the execution of the processing program. A security protection function switching method characterized by inputting to an authentication means of a processing program which has started to be executed and setting the authentication data of the processing program.