JPH07319815A - Analyzer - Google Patents

Abstract

PURPOSE:To manage an access to an analyzing condition, an analyzed result or the like while using reference software. CONSTITUTION:An operator name, a corresponding picture and an inhibition command are previously registered in an access right table 12 as one unit. When a command is issued, a command plundering part 14 plunders the command, and only when an entry corresponding to the plundered command does not exist in the table 12, an access limiting part 16 transfers the command to its issued destination.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION The present invention relates to GLP (Good Laborat
ory Practices) and GMP (Good Manufacturing Practi)
The present invention relates to an analyzer that requires a security function, such as an analyzer that performs a corresponding analysis.

[0002]

2. Description of the Related Art In an analyzer, various functions such as a function for setting analysis conditions and a function for analyzing measurement data are realized by using software, and this software is standardly attached to the analyzer. (Hereafter, this software is called "standard software"). In addition, in the analyzer, all the functions are usually available to any operator, and a mechanism for managing access to data such as analysis conditions and analysis results held in the device is provided. Absent. Therefore, any operator can easily change the analysis conditions via the standard software, and can re-analyze the measurement data and overwrite the data obtained.

[0003]

[Problems to be Solved by the Invention] In the development and manufacturing of pharmaceuticals, etc., GL is used as a standard for conducting safety tests.
P uses GMP as a standard for manufacturing control and quality control.
, Respectively, and these GLP and GMP
Stipulates that when conducting analysis in safety tests or manufacturing of pharmaceuticals, etc., rules should be established within the manufacturer to control access to analysis conditions and analysis results.

However, as described above, in the conventional analyzer, all the functions can be used by any operator, so that even a specific operator who is not responsible for management can use the predetermined software to execute the functions. Therefore, the analysis conditions can be easily changed, and the data obtained by reanalyzing the measurement data can be overwritten.
On the other hand, as software that handles data such as analysis conditions and analysis results, it is possible to use custom-made products that incorporate a function to manage access to these data, but the use of such custom-made products is significant. Increases costs.

The present invention has been made to solve such a problem, and its purpose is to manage access to data such as analysis conditions and analysis results while using standard software as it is. It is to provide an analyzer that enables the above.

[0006]

According to the present invention made to solve the above problems, in an analyzer in which a program for processing data relating to analysis operates, a) for each command issued to the program An access right table defining access rights to the program; b) operator information acquisition means for acquiring information about an operator who issues a command to the program; and c) interception of commands issued to the program. And a) command access means for permitting access to the program by a command intercepted by the command capture means based on the information acquired by the operator information acquisition means and the access right defined in the access right table. If it is allowed, Only in the case of access, the access limiting means for passing the intercepted command to the program is provided.

[0007]

With this configuration, information (operator name, access level, etc.) about an operator who issues a command to a program for processing data such as analysis conditions and analysis results is obtained, and the command is issued. Then, the command capturing means intercepts the command. The access restriction means determines, based on the information about the operator who issues the command and the access right defined in the access right table, whether or not access to the program of the issue destination by the command is permitted. Then, only when it is allowed, the intercepted command is passed to the issuing program. The program at the issue destination executes the command, whereby processing relating to data such as analysis conditions and analysis results is performed. on the other hand,
If it is determined that the access by the intercepted command is not permitted, the command is not executed because it is not passed to the issuing program.

Therefore, for example, by defining the access right so that only a specific operator such as a system administrator can use the command for rewriting the analysis condition, the analysis condition of the general operator can be changed. Changes are eliminated. By appropriately defining the access right for each command in this way, a mechanism for managing access to data such as analysis conditions and analysis results is realized.

[0009]

EXAMPLE An analyzer for liquid chromatography (hereinafter referred to as "LC system"), which is an example of the present invention, will be described below. FIG. 2 is a block diagram showing the overall configuration of the LC system of this embodiment. This LC system is based on a command input to the data processing unit 34 by key operation or menu operation, etc.
It operates as follows under control by. First, the liquid as a mobile phase is supplied to the column 26 via the injector 24 by the pump 22. This liquid is stored in column 26
After passing through, it is discharged through the detector 28. The sample is instantaneously injected from the injector 24, and each component thereof is separated while passing through the column 26 and sent to the detector 28. The detector 28 detects the concentrations of various components emitted from the column 26 and generates a detection signal Sd. The data processing unit 34 qualifies and quantifies the sample based on the detection signal Sd.

FIG. 1 is a block diagram showing the configuration of the main part of the data processing unit 34. The data processing unit 34, together with the controller 32, includes a personal computer (hereinafter referred to as “L
C workstation)), and the LC workstation comprises a CPU, RAM, keyboard, display device, external storage device, printer, and the like. Software for realizing the function of the data processing unit 34 is standardly attached to this LC workstation, and this standard software is the operating system MS-Wi.
It runs under Windows ™. The standard software is composed of a plurality of programs A, B, ... For realizing each function of the data processing unit 34, and each program corresponds to a predetermined screen. Then, a command is issued to the program corresponding to the screen by the menu operation from each screen, whereby various functions as the data processing unit 34 are realized. Now, assuming that the function of performing data processing required for chromatographic analysis is realized by the program A, the program A corresponds to, for example, an "analysis" screen as shown in FIG. The "method file" displayed on this screen is a file in which the conditions for chromatographic analysis are stored. This screen shows "create", "read", "store", "new store" for method files. , And “print” can be executed.

The data processing unit 34, as shown in FIG.
An operator information acquisition unit 10, an access right table 12,
The command capturing unit 14 and the access limiting unit 16 are provided. Of these, the operator information acquisition unit 10, the command capture unit 14, and the access restriction unit 16 are realized by one piece of software (hereinafter referred to as “management software”). When started, this management software requests the operator to input the operator name and password, and thereby the function as the operator information acquisition unit 10 is realized.

The command capturing section 14 uses the program A,
The commands C1, C2, ... issued to B, ... are intercepted, and the API (Application Programming Interface) provided by MS-Windows is intercepted.
It is realized by using the SetWindowsHook function in e). M
In S-Windows, whenever a menu operation is performed, a command code called a message is passed to a program corresponding to each screen (command issuance). Se
This message can be intercepted by the tWindowsHook function, whereby the content and issue destination of the command issued by the menu operation can be known.

The access limiting unit 16 is a command capturing unit 1.
In 4, the contents of the message intercepted by the SetWindowsHook function are collated with the contents of the access right table 12. Then, depending on the collation result, the issued command is discarded or passed to the issuing program. When passing the command to the program, the SendMessage function of API provided by MS-Windows is used.

The access right table 12 has a structure as shown in FIG. 4, and is stored as a predetermined file in the management software. The access right table 12 includes, as a unit, an operator name, a screen (corresponding screen) corresponding to a program that realizes a function to be used, and a command of the screen that is prohibited from being executed by the operator. Is registered as (below,
The unit of this registration is called "entry"). For example, among the commands that can be executed on the “Analysis” screen shown in FIG. 3, the commands marked with “*”, that is, “New”,
The "storage" and "new storage" can be executed only by the method developer or system administrator who has the right to determine the analysis conditions, and should not be executed by general operators. Therefore, in the access right table 12, the command marked with "*" in the "Analysis" screen is registered as a prohibited command together with the general operator name. The files of the access right table 12 are preferably made invisible so that they cannot be accessed by a general operator, or the contents thereof are encrypted.

Next, the operation of the data processing unit 34 having the above configuration will be described. When using the function of the data processing unit 34, the operator activates the management software. When started, this management software first requests the operator to enter the operator name and password, and when the operator inputs the operator name and the correct password corresponding thereto, the standard for realizing each function of the data processing unit 34. Launch the software. After that, the command can be issued to the standard software, and every time the command is issued, the routine represented by the flowchart of FIG. 5 is called. Note that the function of requesting the operator name and password and starting the standard software when the operator name and the corresponding correct password are input is the same mechanism as the opening of a session in a normal multi-user operating system. (For example, a login mechanism in UNIX (trademark)).

As described above, in this embodiment, the standard software for realizing the function of the data processing unit 34 is MS-
Since it operates under Windows, commands for the software are issued by menu operations.
When the command is issued, first in step S12, the command capturing unit 14 intercepts the message by the menu operation. Next, in step S14, the access restriction unit 16 checks the screen (corresponding screen) corresponding to the command type and the program to which the command is issued from the message. Further, the operator name input after the management software is started is recognized as the name of the operator who issued the command. Then, by checking these with each entry in the access right table 12, it is checked whether or not there is an entry in which the issued command is a prohibited command and the operator name and the corresponding screen match. If such an entry does not exist in the access right table 12, the process proceeds to step S16, and the issued command is passed to the issuing program. As a result, the command is executed. For example,
When the operator "Taro" issues a "read" command by a menu operation from the "analysis" screen, the entry corresponding to this command does not exist in the access right table 12 of FIG. It is passed to the program A corresponding to the "Analysis" screen, and the analysis conditions are read. When the command is passed to the issuing program A, the processing of this routine ends.

On the other hand, if the above-mentioned entry exists, the process proceeds to step S18, the intercepted command is discarded, and the processing of this routine ends. As a result, the issued command is not processed and the command is ignored. For example, when the operator “Taro” issues a “new creation” command by a menu operation from the “Analysis” screen, an entry corresponding to this is present in the access right table 12 of FIG. The "command" is not passed to the program corresponding to the "Analysis" screen, and a new analysis condition file is not created.

As described above, according to the present embodiment, by simply adding the above-mentioned management software and the file of the access right table 12, the standard software can be used as it is and the execution of each command on each screen can be performed by the operator. Can be restricted. This makes it possible to manage access to data such as analysis conditions and analysis results.

The access right table 1 of the above embodiment
Although the corresponding screen and the prohibition command are registered in 2 for each operator, the access level of the user is set and the operator is classified according to the access level, and the corresponding screen and the prohibition command are set for each access level of the user. And may be registered.

Further, instead of searching the access right table 12 by using the information (operator name or access level etc.) regarding the operator issuing the command, the access right table 12 is entered when the operator name is input after the management software is started. Of each entry, only the entry group having the inputted operator name may be loaded in the RAM or the like. In this case, it is not necessary to check the information about the operator each time the command is issued, and it is only necessary to check whether or not the entry corresponding to the type of command issued and the corresponding screen exists in the loaded entry group. Good.

Furthermore, in the above embodiment, the execution of commands for software that handles data such as analysis conditions and analysis results was restricted. However, execution of commands for software not related to analysis itself should be restricted according to the operator. You can also Thereby, for example, when spreadsheet software for further processing / arranging the data of the analysis result operates in the analyzer, the screen of this spreadsheet software is registered as the corresponding screen of the access right table 12. By setting it, it becomes possible to manage access to the data handled by this spreadsheet software.

[0022]

According to the present invention, it is possible to easily realize a management mechanism for accessing data such as analysis conditions and analysis results while using standard software as it is. As a result, it is possible to provide an analysis device that requires a security function, such as a GLP or GMP compatible analysis device, at low cost.

[Brief description of drawings]

FIG. 1 is a block diagram showing a main configuration of a data processing unit in a liquid chromatography analyzer (LC system) that is an embodiment of the present invention.

FIG. 2 is a block diagram showing the overall configuration of the LC system.

FIG. 3 is a diagram showing an analysis screen in the LC system.

FIG. 4 is a diagram showing a configuration of an access right table in a data processing unit of the LC system.

FIG. 5 is a flowchart showing the operation of the data processing unit of the LC system.

[Explanation of symbols]

 10 ... Operator information acquisition unit 12 ... Access right table 14 ... Command capture unit 16 ... Access restriction unit 34 ... Data processing unit

Claims (1)

[Claims] 1. An analysis apparatus in which a program for processing data related to analysis operates: a) an access right table in which access rights to the program are defined for each command issued to the program; and b) the program. Operator information acquisition means for acquiring information about an operator issuing a command to c, command capture means for intercepting the command issued to the program, and d) the information acquired by the operator information acquisition means Based on the access right defined in the access right table and the access right table, it is determined whether or not the command intercepted by the command interception means is permitted to access the program. Only when the access is permitted, the command is intercepted. Access to pass the command to the program Analyzer characterized in that it comprises a limiting means.