JPH0830554A - Method for managing picture display security by picture attribute and information processing system for attaining the method - Google Patents

Abstract

PURPOSE:To manage operation by the security of a picture display or setting to be generally referred to by adding a log ON necessity/unnecessisity attribute to each picture in a system for displaying various kinds of operation pictures. CONSTITUTION:At the time of preparing operation pictures 302, 303, the bit setting of a picture attribute 'log ON necessity/unnecessity' is executed so that 'log ON bit necessary bit ON' and 'log ON unnecessary bit ON' are respectively set up in the pictures 302, 303 and stored in a picture file 301 of a server 300. When the pictures 302, 303 are accessed from a terminal 100 executing log ON through an ID card reader 102, both the pictures 302, 303 can be displayed. When the pictures 302, 303 are accessed from a terminal 200 not executing log ON operation, only the operation picture 303 indicating 'log ON unnecessary bit ON' can be displayed.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a method of security management according to display contents in an information processing system for displaying display information on a display such as a computer and a drawing creation device.

[0002]

2. Description of the Related Art Conventionally, when performing security management by executing / not executing log-on by an ID card reader,
It was impossible to call and display all business screens from a terminal that did not log on.

The following are known as prior art related to the present invention. JP-A-3-62215 (hereinafter,
Japanese Patent Laid-Open Publication No. 2003-242242) discloses an "item keyboard" that allows information to be kept confidential by permitting access only when the passwords match. In this known technique 1, when the electronic item keyboard determines to input a password, the input password is compared with the password recorded in the password setting area in advance to determine whether or not they match.
As a result, if the passwords match each other, the item is displayed in the input operation area on the display screen and the function of the touch panel is activated to enable the information access from the IC memory card. Thus, it is possible to realize an electronic item keyboard having a security function for keeping information stored in the IC memory card confidential.

Further, Japanese Laid-Open Patent Publication No. 63-64127 (hereinafter, abbreviated as known technique 2) has a command scheduler, a qualification check routine, a command table, and a user information dictionary, and thus has general versatility. A "command qualification check method" that enables detailed qualification check is disclosed. In the prior art 2, the command scheduler prompts the user to enter a command by displaying a special mark on the display, reads the entered command, and issues a predetermined macroinstruction for calling the qualification check routine. , If the routine gives an answer indicating that the command can be used, the program corresponding to the command is started. The routine refers to the command table in which the command use permission level is entered corresponding to each command and the user information dictionary in which the user information in which the usage qualification level for each group is entered, and then the user level and command The levels of are compared for each group, and the command is permitted when all groups can use it.

JP-A-62-219068 (hereinafter, referred to as
By giving access attributes of each cell, row, and column of spreadsheet data, a plurality of users can handle the spreadsheet data at the same time, and data that the others do not want to change, etc. There is disclosed a "cell attribute management method" in which is prevented from being accidentally changed. In the known technique 3, 8 is set for each cell.
The access attribute of the bit is given, bits 0 to 3 are the owner number, bits 4 to 5 are the owner's read / write permission, and bits 6 to
7 is a read / write permission other than the owner. When a user requests the use of the spreadsheet, the access attribute is referred to, and the spreadsheet is displayed on the display with the read addition cell blank. When the user wants to enter data in a cell, the corresponding cell is specified with the cursor,
Fill the cells with data. When cell data is input, the data input section refers to the access attribute, etc., writes data in the cell only when writing is possible, and when writing is not possible, displays a message to that effect on the lower side of the display. Display in the area.

[0006]

In the above-described conventional screen display security management method, since there is no recognition by the attribute of each screen, it is possible to display all business screens on the terminal where the operator has logged on. , All the business screens could not be displayed on the terminals that were not logged on.

The technical problem of the present invention is that in a system that displays several types of business screens, by adding a log-on required / unnecessary attribute to each screen, security can be given to the screen display and general reference can be made. It is intended to manage business by giving various settings.

[0008] The publicly known technology 1 only discloses an item keyboard having a security function effective for keeping information confidentially, and is based on a technical idea which is completely different from the present invention in which security management is performed in screen units. is there. The publicly known technique 2 only discloses a technique for limiting the commands that the user can use by checking the usage qualification level of the user and the usage permission level of the command. It is based on a completely different technical idea. The publicly known technique 3 only discloses a technique in which data can be protected even when a plurality of users use the sheet by giving an access attribute to each cell or each row or column of the spreadsheet. It is based on a technical idea completely different from the present invention in which security management is performed in units.

[0009]

According to the present invention, a plurality of windows for each work content can be simultaneously divided in the screen of the display, and display information about each work content can be fitted and displayed in each window. In the information processing system equipped with the terminal of, the log-on required / unnecessary bit for designating whether the display of the window is log-on required or not is set for each window,
Only the terminal for which the operator has logged on displays all the screens on the display,
For terminals that have not been logged on by the operator, the screen display security management method based on screen attributes is characterized in that the screens that can be called and displayed are limited to those with the log on unnecessary bit set. To be

Further, according to the present invention, a log-on-completed terminal for which log-on is performed by an operator, a log-on-non-terminal for which log-on is not executed by an operator, and a log-on-completed terminal. In an information processing system that has a server that manages screen files that store multiple business screens and is connected to terminals that do not have log-on, "log-on required / unnecessary bit" is included in each screen attribute of multiple business screens. "If you set up a business screen from a terminal that has already been logged on, any screen can be displayed. Even if you call a business screen from a terminal that has not yet logged on, only the business screen with" Logon unnecessary bit on "will be displayed. An information processing system characterized by being displayable is obtained.

[0011]

According to the present invention, even in a terminal which is not logged on by an operator, anyone can call up and display the screen and refer to the content if the content displayed is outside the security range.

Further, when the system is deployed and serviced to each sales office, even if there is no operator at the sales office, a function test such as screen calling can be performed by calling the screen with the log-on unnecessary bit turned on. It can be performed by the person in charge of the work.

[0013]

The present invention will be described in detail with reference to the drawings.

FIG. 1 is a diagram showing a flow of displaying a business screen from a terminal which realizes a screen display security management method according to an embodiment of the present invention.

The illustrated system has a terminal 100, an ID card reader 102, a terminal 200, an ID card reader 202, and a server 300. The ID card reader 102 is connected to the terminal 100, and the ID card reader 202 is connected to the terminal 200. Server 300
Is connected to the terminals 100 and 200. The server 300 has a screen file 301.

Next, a screen display security management method will be described with reference to FIG.

At the start of work, the operator uses the ID card reader 102 to log on the terminal 100, and keeps the log on state. Here, log-on means that the user of the system inputs the user identification code (user ID) and password to confirm the identity of the system. User IDs and passwords are initially assigned to individual users when they are granted access to the system. On the other hand, for the terminal 200, log-on is not performed. That is, the terminal 100 becomes a logged-on terminal and the terminal 200 becomes a log-on terminal.
ON Not in terminal.

When creating a business screen, the first business screen 3
02, as the screen attribute of the second business screen 303 "log.
Set "On required / Not required." This setting is made in consideration of the business content of the created business screen / necessity for security, etc. Specifically, for business screens that require security such as customer information. For example, log on is required to be bit on, and log on is not required for business screens such as market information that can be generally provided as a service. In the example, for the first business screen 302, log-on required bit on, second
For the business screen 303 of No. 1, log-on unnecessary bit is set to be on.

The on / off setting point of the "log-on required / unnecessary bit" is as follows in the display contents of the screen to be displayed. When the reference is limited to the operator of the sales office from the displayed contents, "log on required bit on" which requires log on by the ID card reader is set. For example, such a business screen includes a business screen requiring security such as customer information. If the display content is open to the public, "log on unnecessary bit on" setting that does not require log on is set. For example, as such a business screen, there is a business screen having contents that can be generally provided as a service, such as market price information, stock price information, and chart information.

From the log-on completed terminal 100 to the server 300
On the other hand, the first business screen 302 and the second business screen 30
Requesting 3 calls, each log-on terminal 10
It becomes the terminal 101 which is fitted into the window of 0. However, even if the log-on-unterminal 200 requests the server 300 to call the first business screen 302 and the second business screen 303, only the second business screen 303 with the log-on unnecessary bit on Into the window of the terminal 200 without log-on, and becomes the terminal 201.

The unlogged-on terminal 200 is installed in a store or the like where general customers can freely touch,
The service information can be freely accessed.

As an effect, it is possible to add security for each screen depending on the content of the information, and if the information can be disclosed to the customer at the sales office,
It is possible to call and refer to information that the user wants to know without requiring the operation of the operator of the branch. Therefore,
Only the persons concerned (who can log on) can call / access the business screen that requires security, such as customer information, so that information leakage prevention and security management will be ensured. Moreover, anyone can freely access the business screen having contents that can be generally provided as a service, such as market price information, stock price information, and chart information, and customer service is improved.

It should be noted that the present invention is not limited to the above-described embodiments, and it is needless to say that various modifications and changes can be made without departing from the gist of the present invention.

[0024]

As described above, according to the present invention, it becomes possible to add and manage security on a screen-by-screen basis according to the display contents of the screen to be fitted into the window. With respect to the information content that can be disclosed, it is possible to refer to the information that the customer wants to know by the operation of the customer himself, without the operation of the operator of the sales office.

[Brief description of drawings]

FIG. 1 is a block diagram showing an information processing system to which a screen display security management method based on screen attributes according to an embodiment of the present invention is applied.

[Explanation of symbols]

 100 Log-on-completed terminal 101 Terminal 102 ID card reader 200 Log-on non-terminal 201 Terminal 202 ID card reader 300 Server 301 Screen file 302, 303 Business screen

Claims (3)

[Claims] 1. Information processing provided with a terminal (100, 200) capable of simultaneously dividing a plurality of windows for each business content in a screen of a display and displaying display information about each business content in each window by embedding the display information. In the system, for each window, the log-on required / not-necessary bit that specifies whether the display of the window is required to be logged on or not to be logged on is set, and the terminal that logged on by the operator ( 100)
For all terminals (200) that are not logged on by the operator, the log-on unnecessary bit is set for the terminal (200) on which the log-on is not performed by the operator. A method for managing screen display security by screen attributes, which is characterized in that it is restricted to those that have been created. 2. A log-on-completed terminal (100) whose log-on is carried out by an operator and a log-on-unterminal (20) whose log-on is not carried out by an operator.
0), the log-on terminal and the non-log-on terminal, and a server (30) that manages a screen file (301) that stores a plurality of business screens (302, 303).
0), an "log-on required / unnecessary bit" is provided in the screen attribute of each of the plurality of business screens, and the business screen (302, 303), any screen can be displayed, and the terminal (2
00), even if the business screen (302, 303) is called, the "log-on unnecessary bit on" business screen (30
An information processing system characterized in that only 3) can be displayed. 3. The information processing system according to claim 2, further comprising an ID card reader (102) for an operator to log on to the log-on completed terminal (100).