JPH0844630A - Device for controlling file access and method thereof - Google Patents

Abstract

PURPOSE:To provide a device for controlling file access and method thereof with which data can be effectively prevented from being destroyed over a wide range by the malfunction of a software composed of plural application softwares or the execution of any troubled program. CONSTITUTION:This device is provided with a file attribute managing table 2 defining a user to perform each file, application software and the kind of processing to that file, user information storage means 4 for storing the information of the user under executing the software, application information managing means 5 for managing the information of the application software under being executed, and file access control means 7 for permitting or inhibiting the instruction of access to the file while referring to the user information storage means 4, application information managing means 5 and file attribute managing table 2.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention controls the access of a program or data to a file to prevent the program or the data from being destroyed due to a malfunction or the execution of an unauthorized program, or a large-scale data destruction due to a virus infection. The present invention relates to a device and a method for preventing, in particular, a user or a program (hereinafter, referred to as application software or simply an application) that can access the file of a program or data is defined, and thereby a large scale by chained execution of applications is defined. The present invention relates to a file access control device that prevents data destruction and a control method thereof.

[0002]

2. Description of the Related Art Generally, software includes a plurality of programs and data files inside one piece of software, and these programs (applications) are switched and executed.

As such an example, there is game software. In the game software, new screens are developed one after another from the first screen, and the new developed screens are configured so that one game can be enjoyed as a whole by performing operations according to the screens. Such a technique is widely used not only for game software but also for various kinds of software at present.

In the above software, applications are complicatedly related to each other, and one application can be read or executed by a plurality of other applications. In some cases, a program or data file can be read. May be rewritten or erased by other applications.

In the software having such a configuration, an irrelevant program or data file (a file that is not originally accessed by the execution of the application) is destroyed due to an operation error or the execution of an application having a defective portion.
Furthermore, unrelated files are destroyed in a chain,
There was a risk of causing serious data corruption as a whole.

Particularly, the virus infection which has become a problem in recent years is intended intentionally to the above phenomenon, and causes a wide range of data destruction in a chained manner by executing a program concealing the data destruction. is there.

On the other hand, conventionally, there have been proposed devices and methods for controlling access to files of programs and data by applications. This conventional file access control device and method loads a non-writable program and data and a writable program and data into an access prohibited area and an access permitted area on a memory, respectively, to access a source of an access instruction and access. The previous program and data were managed by addresses on the memory, and access to the file was controlled by this (Japanese Patent Laid-Open No. 57-71597).
(See the official gazette).

[0008] On the other hand, there have conventionally been apparatuses and methods for permitting or prohibiting access to a program or data file by a user. This was to protect the software by giving access to the file only to users who would use it legitimately. Specifically, by confirming the user identification information, access to the file is permitted or prohibited on a user basis or on a user group basis.

[0009]

However, in the conventional method of loading the above-mentioned program and data files into the accessible area and the access prohibited area of the memory and managing them by the address on the memory, there are many restrictions on the software configuration. It was That is, in the case of complicated software, a file of a certain program or data is a write-protected file for access by a predetermined program, etc., and a writable file for access by other programs. It needs to be finely structured. On the other hand, in the above-described conventional method of distinguishing between writable and writable depending on the area on the memory, such fine setting cannot be performed.

Further, the once set writable and writable settings cannot be flexibly changed according to the software execution conditions. Furthermore, it has been impossible for a user to permit or prohibit access to a predetermined file.

On the other hand, in the conventional method of permitting or prohibiting access to the application by confirming the user's authentication information, once the user is recognized as a legitimate user, the user can access any file in the software. Access is also possible. As a result, if the execution instruction of the legitimate user is an operation error or the program to be executed has a defect, chained data destruction of the application may occur.

In particular, virus-infected software hides a defective program and allows a legitimate user to execute it. Therefore, the above-mentioned conventional method cannot prevent widespread data destruction by a virus.

Therefore, an object of the present invention is to solve the above-mentioned problems of the conventional technique and effectively prevent a wide range of data destruction due to malfunction of software including a plurality of application software and execution of a defective program. A control device and a control method thereof are provided.

[0014]

[Means for Solving the Problems] To achieve the above object,
A file access control device according to claim 1 of the present application is a file attribute management table that defines a user who can access each file constituting software, application software, and a type of processing for the file, and a user who is executing the software. Information storing means for storing the information of the application, an application information managing means for managing the information of the application software being executed, the user information storing means and the application information managing means when an access command to the file is issued. A file that detects the user who issued the access command and the application software by referring to and permits or prohibits the access command to the file according to the definition contents of the file attribute management table. It is characterized in that a access control means.

A file access control device according to claim 2 of the present application is the file access control device according to claim 1, wherein the file access control device reads and writes each file.
It is characterized by comprising a file attribute management table setting means capable of setting a user who can execute and delete and application software on a screen of a computer.

A file access control method according to claim 3 of the present application defines a user and application software capable of reading, writing, executing and erasing each file constituting software and storing the same in a storage device of a computer. Then, the user who executes the software is allowed to enter user information and registered as the user who is executing the software, and by registering the currently accessed application software by grasping the access status to the file, the software When an access command for a file is issued, the user who issued the access command and the application software are detected, and the user is identified by the definition of the user and the application software that can access the file. It is characterized in that to permit or prohibit the processes instructions.

The file access control method according to claim 4 of the present application is the file access control method according to claim 3, in which each file constituting the software is displayed on the screen of the computer in accordance with the conditions under which the software is used. It defines user and application software that can read, write, execute and erase.

[0018]

According to the file access control apparatus and the control method of claims 1 and 3 of the present application, for each file constituting software, the user who can access the file, the application, and the type of processing for the file are stored in advance in the file attribute management table. The user information storage means stores the information of the user who is executing the software, and the application information management means stores the information of the application software currently being executed.
When there is an access command to the file, the user information storage means and the application information management means detect the user and application that issued the access command, and permit or prohibit the access command according to the file attribute management table. be able to.

As a result, the file access control apparatus and control method of the present invention described above allow the user, application, and type of processing (eg, read, write, execute, etc.) to access each file constituting the software. (Erase, etc.) can be specified, the processing by the correct operation of the application that constitutes the software can be guaranteed, and the chained data destruction of the file due to the malfunction or the execution of the defective program can be prevented.

Further, in the file access control device and control method according to claims 2 and 4 of the present application, a user who can read, write, execute and erase each file constituting software on the screen of the computer. Since the application software can be defined, the access condition for each file can be changed at any time according to the conditions under which the software is used. In addition, a file access control device and control method applicable to various software can be obtained by the freedom to freely define access conditions for such files.

[0021]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS An embodiment of a file access control device and a control method therefor according to the present invention will be described below with reference to the accompanying drawings.

FIG. 1 shows the configuration of an embodiment of the file access control device according to the present invention and the flow of processing thereof.

File access control apparatus 1 of this embodiment
Can be configured by hardware different from a computer that executes software, but is preferably configured by using a processing device, a storage device, an input / output device, and the like of a computer that executes each software by software.

As shown in FIG. 1, the file access control apparatus 1 of this embodiment manages file attributes for each file of software to be executed, which defines a user, a user group, and application software that can access the file. A table 2, a file attribute management table setting unit 3 for setting the contents of the file attribute management table 2, and a user information storage unit 4 for storing information about a user who is currently executing software,
An application information management unit 5 for grasping which application software command the command currently being executed is, and the application information management unit 5,
With reference to the application information initial setting unit 6 that performs the initial setting of the application information management unit 5, the user information storage unit 4, the application information management unit 5, and the file attribute management table 2 when there is an access command for a file. And a file access control unit 7 for permitting or prohibiting access to the file.

Next, the operation of the file access control device 1 during execution of software based on the above configuration will be described.

Assuming that the file attribute management table 2 has already been set, a computer start signal is input to the application information initial setting section 6 when the computer is first started up, whereby the application information is set to the initial state. . Normally, by the action of the application information initial setting unit 6, the application information management unit 5 is returned to the state in which no application software is registered.

When the computer is started up, the user information is immediately required to be input. This is to eliminate unauthorized users primarily before running the software.

The user information can be obtained by a known method such as asking the user to input a user ID or asking for verification using an IC card.

When the acquired user information belongs to a legitimate user, the user is permitted to use the software, and the obtained user information is stored in the user information storage unit 4.

As described above, the user who is permitted to use the software executes the software and performs various processes. These processes include input / output processes for a large number of files (a program file and a data file) that make up the software.

File access control apparatus 1 of this embodiment
The input / output processing command for the file is once input to the file access control unit 7, and the access control unit 7 determines whether to permit or prohibit the access, and the file can be accessed only after that. There is. The types of input / output processing for this file include program execution, file writing, file reading, and file erasing.

When the file access control unit 7 receives an input / output processing command for a file, if the command is a command for reading and executing a new program, the new program name is sent to the application information management unit 5. to register. This makes it possible to keep up to date information about the running application.

On the other hand, when the input / output processing command for the file is a command for changing or erasing the contents of a predetermined file, the file access control unit 7 causes the user information storage unit 4, the application information management unit 5, and the file By referring to the contents of the attribute management table 2, whether or not the command is a command of a user and application software who are authorized to access the target file, It judges whether the type is permitted, and permits or prohibits execution of the instruction.

Next, the contents of the file attribute management table, which is the basis of the above judgment, will be described.

FIG. 2 shows an example of a screen for setting the contents of the file attribute management table 2 by the file attribute management table setting unit 3.

In FIG. 2, the upper part of the screen is a part for setting the search condition of the setting screen, and the file name, user name,
By inputting at least one of the user group name, type, and file ID, the file attribute management table setting unit 3 displays the file attribute management table setting screen of the file that matches the search condition.

Below the part for inputting the setting screen search conditions is a screen for setting the contents of the file attribute management table.

The left side of the screen for setting the contents of the file attribute management table is the name of the file to be accessed (here, main.exe, image.dat, sub.exe, hisc
ore.dat), a user (α) who accesses, a user group (β), and an ID (XXX) as an application given to each file.

On the right side of the screen for setting the files, users, etc., there is a screen for setting the access conditions of the application for each file. The access condition setting screen is roughly divided into a user management setting screen and an application management setting screen.

The user management setting screen is divided into users, user groups, and access permission conditions other than users and user groups. This division is an example,
If necessary, more detailed designation, for example, access permission conditions for each user can be set.

Below the user management division column, there is displayed a screen for setting conditions for permitting or prohibiting for each type of processing (reading, writing, executing, erasing) for a target file.

Similarly, the application management setting screen is divided into access from the same application ID and access from different application IDs, and access from each application is permitted or permitted for each type of processing. The prohibition condition can be set. Also here, it is possible to set more detailed specifications, for example, access conditions for each application ID, if necessary.

In the setting example of FIG. 2, the file main.exe is
People other than users and user groups can only read,
The regular user α and the user group β can be executed. Further, the user α can rewrite or delete the file main.exe. Also, the file main.e
xe can be launched and executed by all other application software.

On the other hand, the file image.dat can be referenced and rewritten only by the application having the same ID, and only the user α can rewrite it.

Further, the file sub.exe is executed only by main.exe (same ID) by the user α and persons in the user group β. User α has the file sub.exe
Can be erased, but cannot be rewritten to prevent erroneous operation.

Finally, the file hiscore.dat contains the user α
And the person in the user group β is the file main.exe or sub.
Can be referenced and rewritten only through the exe. Further, only the user α can delete the information.

As described above, according to the present invention, by setting the user management, application management, and permitted processing types in the file attribute management table 2, the users, applications, and processing types that can access the files can be freely set for each file. Can be set. Further, since the file attribute management table 2 can be set by the file attribute management table setting unit 3 when necessary, software execution conditions such as adding / changing a user who can access a file and designing the software can be performed. Applications that can access each file can be added or changed by changing the specifications. Also, by freely setting the access conditions for the above files,
The file access control device and control method of the present invention have high versatility applicable to various software.

Next, the access control in the file access control unit 7 will be described along with the operation of a specific application.

FIG. 3 shows an example of control by the file access control section 7 in time series. It is assumed that the software illustrated in FIG. 3 includes a plurality of application software, and these application software are configured to be started and executed one after another in a fixed procedure by a user's command.

In FIG. 3, the main application PRG is shown.
-A is started and this main application PRG
The case where the file FLLE-A is rewritten by -A is shown.

In this case, the user α directly enters the main application PR in the file attribute management table 2.
GA can be started and the main application PRG-
It is assumed that the sub application PRG-B can be activated through A and the data file FILE-A can be rewritten through the sub application PRG-B.

In FIG. 3, if the user ID α is acquired after the computer is started up, this user ID α is obtained.
Is determined to be that of an authorized user, and if it is of an authorized user, it is stored in the user information storage unit 4 (step 100).

The stored user ID α is the new user I
As long as D is not acquired, that is, unless the software is stopped and the computer is restarted, it remains valid.

Although not shown in FIG. 3, as described with reference to FIG. 1, when the computer is started up, the application information management unit 5 is returned to the initial state, that is, the state in which nothing is registered.

Next, the main application PRG-A
If you enter a command to execute
The information of access to A is the file access control unit
Detected by the file access control unit 7,
The user and the application that want to execute GA are detected by the user information storage unit 4 and the application information management unit 5, respectively (step 110).

In this case, although the user information α is obtained from the user information storage unit 4, since the application information management unit 5 is in the unregistered state, the direct P by the user α is obtained.
It can be seen that this is a read command of RG-A. Here, the main application PRG- by the user α is
A is defined in the file attribute management table 2 so that it can be read directly, so that the main application PRG-A is executed, and at the same time, the application currently being executed is PRG-A. It is registered in the section 5 (step 120).

The application information (PRG-A) registered in the application information management unit 5 is the PRG.
Effectively remains in the application information management unit 5 until the execution of -A ends.

Next, it is assumed that the execution instruction of the sub-application PRG-B is issued by PRG-A during the execution of the software. This sub-application PRG-
The access command for B is detected by the file access control unit 7, and the file access control unit 7 assigns the user and the application, which are the source of the execution command for the sub-application PRG-B, to the user information storage unit 4 and the application information management unit 5. Inquire (step 130).

As a result, the execution instruction of this PRG-B is
It is understood that the user α is performing through the main application PRG-A, and the file access control unit 7
Permits the execution instruction of the sub-application PRG-B based on the setting condition of the file attribute management table 2.

When the sub application PRG-B is executed, the file access control unit 7 additionally registers in the application information management unit 5 that the application currently being executed is the sub application PRG-B (step 140). .

Next, the sub application PRG-B
It is assumed that a write command for the data file FILE-A is issued by executing the. The file access control unit 7 inquires of the user information storage unit 4 and the application information management unit 5 about the user and the application that issued the write command for the data file FILE-A. As a result, it is determined that the user α is to rewrite the contents of the data file FILE-A through the sub application PRG-B, and the write command is prohibited according to the setting condition of the file attribute management table 2 (step 150).

Then, the sub application PRG-B
The case where the execution of is completed will be described. When the execution of the sub application PRG-B is completed, the file access control unit 7 detects this and the sub application PR registered in the application information management unit 5 is detected.
GB is erased (step 160).

When the execution of the sub application PRG-B is completed, the suspended main application PRG-A is executed, and further, in this state, the main application PRG-A is executed.
It is assumed that a write command for the data file FILE-A is issued by executing the application PRG-A. In this case, the file access control unit 7 determines that the user α or the main application PRG-A is about to rewrite the data file FILE-A, and the file access control unit 7 sets the data file FILE-A according to the setting condition of the file attribute management unit 2. Rewriting is permitted (step 170).

FIG. 4 and FIG. 5 exemplify control patterns by the file access control device and control method according to the present invention.

FIG. 4 mainly shows the user management, and the file 1 is created only by the operation of a specific program A by a predetermined user X.
It shows a case where control is performed so as to be able to update / delete.

FIG. 4A shows a file process performed through the user X or the program A, and any of reading, writing, erasing and executing can be performed.

On the other hand, FIG. 4B shows the file processing performed by the user X through the program B other than the designated one. In this case, only reading is possible in order to prevent data destruction due to malfunction. .

FIG. 4C shows a file process that can be performed by a user (Y) other than the user X, but in this case, even the program A can read only the file.

FIG. 5 shows a case where the file 2 can be executed only by the operation of the specific program B, centering on the application management.

FIG. 5A shows that any user X or Y can read and execute the file 2 only through the program B. On the other hand, FIG.
As shown in (b), it is shown that the file 2 cannot be read, written, erased, or executed through the program A by any user X or Y.

As described above, various types of file access control can be performed by combining the access to the file centering on the user management and the access to the file centering on the application management, thereby configuring the software. The relationships between applications can be specified in detail.

Thus, for example, when a program having a defective portion is erroneously executed, data destruction by the defective program extends to only a very limited number of files. As a result, it is possible to substantially prevent widespread data destruction due to malfunction of application software, defective programs, or virus infection.

[0073]

As is apparent from the above description, the file access control device and control method according to claims 1 and 3 of the present application include a file attribute management table, application information management means, user information storage means, and By the operation of the file access control means, it is possible to limit the users and applications that can access a predetermined file, and to limit the processing of files by the users and applications to a specific type.
It is possible to prevent files from being rewritten or erased by executing unrelated programs (applications), which substantially prevents extensive and serious data corruption due to malfunction, execution of defective programs, virus infection, etc. be able to.

[Brief description of drawings]

FIG. 1 is a diagram schematically showing a configuration of a file access control device according to an embodiment of the present invention and a flow of information between its components.

FIG. 2 is a diagram showing an example of a setting screen of a file attribute management table of the present invention.

FIG. 3 is a flowchart showing the operation of the file access control unit of the present invention in time series using a specific application.

FIG. 4 is a diagram showing an aspect of access to a predetermined file centering on user management.

FIG. 5 is a diagram showing an aspect of access to a predetermined file centered on application software management.

[Explanation of symbols]

 1 File Access Control Device 2 File Attribute Management Table 3 File Attribute Management Table Setting Section 4 User Information Storage Section 5 Application Information Management Section 6 Application Information Initial Setting Section 7 File Access Control Section

Claims (4)

[Claims] 1. A file attribute management table that defines a user who can access each file that constitutes software, application software, and the type of processing for the file, and a user information storage that stores information of a user who is executing the software. Means, application information management means for managing information of the application software being executed, and when the access instruction for the file is issued, the access instruction is made by referring to the user information storage means and the application information management means. A file access control means for detecting the user and application software that issued the error and permitting or prohibiting an access command to the file according to the definition contents of the file attribute management table. File access control device to. 2. A file attribute management table setting means capable of setting a user and application software capable of reading, writing, executing and erasing the file for each file on a screen of a computer. File access control device described. 3. A user who can read, write, execute and erase each file that constitutes software and application software are defined and stored in a storage device of a computer, and user information for a user who executes the software. To register the currently executing application software by registering as a user who is executing the software and grasping the access status to the file, and when the software is issued an access command to the file. , Detecting the user who issued the access command and the application software, and permitting or prohibiting the access command in accordance with the definition of the user who can access the file and the application software. § yl access control method. 4. Depending on the conditions under which the software is used,
4. The file access control method according to claim 3, wherein a user and an application software capable of reading, writing, executing and erasing each file constituting the software on the screen of the computer are defined.