JPH10232811A - Security management method for data base - Google Patents

Abstract

PROBLEM TO BE SOLVED: To perform the security management of a data base capable of finely setting an access right in unified specifications viewing from a client side in a client/server system. SOLUTION: A security information table 32 sets the access right of the data base in the data base 22, a chart in the data base, a column in the chart and specified data in the column for respective users or user groups. An AP 14 inquires an accessible data base, chart list or column list for a specified user to a security server 30 through a security information obtaining part 16. A security information management part 34 informs the AP 14 of the range of the accessible data base and the AP 14 requests retrieval to a data base server 20 in the range of the accessible data base.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a database security management method, and more particularly to security management when a client accesses a server database from a client-server system.

[0002]

2. Description of the Related Art A client configured by an information processing apparatus such as a personal computer accesses a database of a server configured by an information processing apparatus such as a workstation or a mainframe, and processes and edits data obtained by the client. Client server systems (CSS) are known. In the CSS, a database management system of a server or an application program manages the security of the database in order to allow only registered users to access the database. However, security specifications are not always unified between database management systems or server application programs, and the functions supported by the systems or programs differ. For example, for a relational database, a certain database management system can set access rights to a user for each column in a table, but another database management system cannot set an access right for each column.

[0003]

According to the above prior art, the security management of the database depends on the database management system and the application program on the server side, so that the security of each database management system and the application program on the client side. It is troublesome to understand the specifications and respond to each security specification. Also, depending on the database, tables in the database, columns in the table,
Further, there is a problem that detailed security management cannot be performed until data in the columns.

An object of the present invention is to solve the above problem by constructing a security management system having unified specifications on the client side instead of the server side for managing the database.

Another object of the present invention is to enable fine-grained security management capable of setting an access right to individual data in a column in a table of a database.

It is still another object of the present invention to prevent an operation of accessing a database server by using logon information that has been obtained improperly.

[0007]

According to the present invention, a security server is provided in addition to a client and a database server, and a database accessible from a client to a security server for a specific user, a table in the database, or a column in the table is provided. Inform the client of the database name, table name or column name accessible by referring to the security information table by the security server, and search within the database, table or column accessible from the client to the database server The method is characterized by a security management method for transmitting a request. By setting the data to be kept private in the columns corresponding to the columns that can access the security information table, the private data is notified to the client along with the accessible column names, and the search result received from the database server is returned. Of the private data can be suppressed.

Further, regarding a user ID and a password used when a client logs on to the security server and the database server, a user ID alias and a password alias are respectively associated with a regular user ID and password when logging on to the database server. If the setting is made so that the user can log on to both servers using only the user ID alias and the password alias, leakage of the regular user ID and password can be prevented.

[0009]

Embodiments of the present invention will be described below with reference to the drawings.

FIG. 1 is a configuration diagram of a client server system of the present embodiment. System is Client 1
0, database server 20 and security server 3
It consists of 0. The client 10 includes a processing device 19
And an information processing device including a display device 11 and an input device 12 connected to the processing device 19. The main memory of the processing device 19 includes a user interface unit 13,
Each program of the application program (AP) 14, the application program (AP) 15, the security information acquisition unit 16, and the connection request processing unit 17 is stored and executed by the processing device 19. Communication control unit 18
Is connected to the database server 2 via the communication lines 40 and 50.
0 and hardware and a program for controlling communication with the security server 30. The security information acquisition unit 16 is a processing unit that requests and acquires security information from the security server 30 via the communication control unit 18. The connection request processing unit 17 is a processing unit that requests a logical connection with the database server 20 via the communication control unit 18. The display device 11 is a device that displays tables and columns to be searched in a database and displays search results. The input device 12 is a device such as a keyboard and a mouse that inputs a user ID and a password at the time of logon, specifies a table and a column to be searched, and inputs search conditions. The user interface unit 13 is interposed between the APs 14 and 15 and the display device 11 and the input device 12, and
1 and a control program for controlling the input device 12, such as an operating system and a window system. A
P14 inquires security information to security server 30 in accordance with an instruction from input device 12, displays the result on display device 11, transmits a search request to database server 20 for the selected database table or column, The received search result is displayed on the display device 11. The AP 15 also transmits a database search request to the database server 20 according to the instruction from the input device 12 and displays the received search result on the display device 11, but does not inquire the security information acquisition unit 16 for security information. Note that the security information acquisition unit 16
Performs a connection request process for making a logon request to the security server 30. The AP 14 and the security information acquisition unit 16 have a special application program interface (API) between them.
To exchange information based on Generally, a plurality of clients 10 exist.

The database server 20 includes a processing unit 29
And an information processing device including a storage device connected to the processing device 29. The storage device stores a logon table 21 and a database 22. Each program of the logon management unit 23 and the database management unit 24 is stored in the main storage device of the processing device 29, and is executed by the processing device 29. The communication control unit 25 is hardware and a program that controls communication with the client 10 via the communication line 40. Logon table 21
Is a user ID that can access the database server 20
It is a table for registering a password and a corresponding password. The database 22 is a relational database, and stores a plurality of databases. Each database is composed of a plurality of tables. The logon management unit 23
The user ID and password of the user who has made the connection request are checked with reference to the logon table 21. The database management unit 24 searches the specified table and column of the requested database with reference to the database 22 and transmits the search result via the communication control unit 25 to the client 1.
Send to 0. In addition, the data on the database 22 is updated / added / deleted according to the request.

The security server 30 includes a processing device 39
And a storage device connected to the processing device 39. The storage device stores a logon table 31 and a security information table 32. The logon management unit 3 is provided in the main storage device of the processing device 39.
3 and programs of the security information management unit 34 are stored and executed by the processing device 39. The communication control unit 35 is hardware and a program that controls communication with the client 10 via the communication line 50. The logon table 31 is a table for registering a user ID that can access the security server 30 and a password corresponding to the user ID. The security information table 32 sets a database name, a table name, and a column name that can be accessed by each user or user group. The logon management unit 33 checks the user ID alias and the password alias of the user who has made the logon request with reference to the logon table 31, and converts the user ID and the alias of the password into a legitimate user ID and password if valid. To the client 10.
In response to the security information request from the client 10, the security information management unit 34 refers to the security information table 32 and transmits a database name, a table name, and a column name accessible to the requested user to the client 10.

FIG. 2 is a diagram showing a data format of the logon table 31. The group ID 61 is an identifier assigned to a group of users, the user ID 62 is an identifier of a user used when logging on to the database server 20, and the user ID alias 63 corresponds to the user ID 62 and is used when logging on to the security server 30. User identifier and password 64 are stored in the database server 2
The password corresponding to the user and the password alias 65 used when logging on to 0 are passwords corresponding to the password 64 and used when logging on to the security server 30. The data format of the logon table 21 includes a group ID 61, a user ID 62, and a password 64, and has no user ID alias 63 and password alias 65. The logon table 31 is registered in the storage device by a program (not shown).

FIG. 3 is a diagram showing a data format of the security information table 32. As shown in FIG. The user ID or group ID 71 is the group ID 61 of the logon table 31.
Or it is the same as the user ID 62. The connection destination database 72 is a name of a database to be connected in the database 22. The table name 73 indicates the name of the table in the database, and the table access right 74 indicates the access right to the user for the table. s indicates reference, u indicates update, d indicates deletion, i indicates addition is permitted, and N indicates not permitted. The column name 75 indicates the name of a column in the table, and the column access right 76 indicates an access right to the user for the column. The private data name 77 indicates a data entity to be kept private among the data stored for the column. An alias that is familiar to the user is also provided for the name of the connection destination database 72, the table name 73, or the column name 75, is displayed on the display device 11 as an alias, and is used as a search condition for the database server 20. Name 73 or column name 75
May be used. According to the example of FIG.
It is understood that the number of entries in the security information table 32 can be reduced by grouping users. The security information table 32 is registered in a storage device by a program (not shown).

When a user ID alias 63 and a password alias 65 are input from the input device 12 of the client 10 and a logon request is made to the security server 30, the logon request is sent to the user interface unit 13 and the AP1.
The security information acquisition unit 16 transmits the request to the security server 30 via the communication control unit 18 and the communication line 50. Logon management unit 33 of security server 30
Receives the request via the communication control unit 35 and refers to the logon table 31 to receive the user ID alias 6
It is determined whether or not the password alias 3 and the password alias 65 match the password alias 65 corresponding to the user ID alias 63 in the logon table 31. If they match, the requested AP
14 and the security information management unit 34 are permitted to be connected,
The corresponding group ID 61 and user ID 62 as responses
And the password 64 to the AP 14.

FIG. 4 shows that the logon procedure is completed and AP1
4 is a flowchart showing the flow of processing of the security information management unit after the security information management unit is connected to the security information management unit. From the input device 12 to the connection destination database 72
Is input to the security information acquisition unit 16 via the user interface unit 13 and the AP 14, and the security information acquisition unit 16 transmits the request to the user ID 62 or the group. The ID is transmitted to the security server 30 together with the ID 61. The security information management unit 34 receives this request (step 51) and recognizes it as a connection destination inquiry.
All the connection destination databases 72 corresponding to D or the group ID 71 are acquired (step 52). Next, if the connection destination database 72 that has been queried is included in the obtained connection destination database 72, it is determined that connection is possible (step 53YES), and A is determined via the security information obtaining unit 16.
The connection is notified to P14 (step 54). If the inquired connection destination database 72 is not included in the acquired connection destination database 72, it is determined that connection is impossible (step 53NO), and the AP 14 is notified of the connection impossibility (step 55). The AP 14 displays on the display device 11 the received information indicating that connection is possible or not. If you can connect,
When a request for inquiring a table list for the connection destination database 72 is input from the input device 12, the request is sent to the AP.
The security information acquisition unit 16 transmits the table list acquisition request to the security server 30 by specifying the user ID 62 or the group ID 61 and the connection destination database 72 via the security information acquisition unit 16. The security information management unit 34 receives this request (step 51) and recognizes it as a table list request. Therefore, the user ID or group ID 71 specified with reference to the security information table 32 and the table name 73 corresponding to the connection destination database 72 And the table access right 74 is acquired (step 5).
6) Only the table names 73 to which access is permitted are listed and sent to the AP 14 (step 57). A
P14 displays the list of the received table name 73 and access right 74 on the display device 11. When a request to specify a table name and query a column list is input from the input device 12, the request is passed to the security information acquisition unit 16 via the AP 14, and the security information acquisition unit 16 transmits the user ID 62 or the group ID 61 and A column list acquisition request is transmitted to the security server 30 by designating the table name 73. The security information management unit 34 receives this request (step 5).
1) Since it is recognized as a column list request, the user ID or group ID 71 specified with reference to the security information table 32 and the column name 75 corresponding to the table name 73, the column access right 76 and the secret data name 77 are stored. Acquisition (step 58), and for only the column name 75 to which access is permitted, the access right 76 and the private data name 77 of the column are transmitted to the AP 14 in the form of a list (step 5).
9). The AP 14 displays on the display device 11 a list of the received column names 75 and column access rights 76. The secret data name 77 is not displayed but is stored on the main storage device.

Next, the AP 14 passes a logon request including the acquired user ID 62 and password 64 to the connection request processing unit 17. The connection request processing unit 17 transmits this request to the database server 20 via the communication control unit 18 and the communication line 40. The logon management unit 23 of the database server 20 receives this request via the communication control unit 25, and refers to the user I
It is determined whether D62 and the password 64 match the password 64 corresponding to the user ID 62 in the logon table 21. If they match, the connection between the requested AP 14 and the database management unit 24 is permitted. After the logon procedure has been completed and the AP 14 and the database management unit 24 have been connected, it becomes possible to input database search conditions from the input device 12. When the access destination database 72 and the table name 73 or the access destination database 72, the table name 73, and the column name 75 to which access is permitted are specified through the input device 12 and the search condition is input, the AP 14 performs the specified search. A search request including the condition is transmitted to the database management unit 24. The database management unit 24 transmits a search result obtained by searching the database 22 to the AP 14. The AP 14 displays the search result on the display device 11.
However, for columns with the private data name 77,
The search result is compared with the secret data name 77, and the secret data is not displayed on the display device 11. The AP 14 permits only the table name 73 and the column name 75 to which access is permitted as a search condition, and permits the user only the operation permitted by the table access right 74 and the column access right 76. If the user already knows the accessible connection destination database 72, the process may be started from a table list request specifying the connection destination database 72. If the user knows the connection destination database 72 and the table name 73 that can be accessed by the user, the processing may be started from a column list request that specifies the connection destination database 72 and the table name 73. Further, if a case where the user does not know the accessible connection destination database 72 is considered, a list of accessible databases may be referred to. Security information table 32
When an alias of the connection destination database 72, the table name 73, or the column name 75 is set above, the security information management unit 34 transmits both the regular name and the alias to the AP 14. The AP 14 displays the alias on the display device 11 and, when making a search request to the database server 20, converts the alias in the search condition into a regular name and expresses the regular name.

The information sent from the logon management unit 33 and the security information management unit 34 to the AP 14 includes information such as a user ID 62, a password 64, and a secret data name 77 that are not disclosed to the user. If it remains on the main storage device, there is a risk that the main storage will be substantially made public by a main memory dump. In order to prevent such danger, at least information not to be disclosed among the information sent from the logon management unit 33 and the security information management unit 34 to the AP 14 can be encrypted and transmitted. A
P14 erases the encrypted information at an appropriate timing when decrypting the encrypted information so that the decrypted information does not remain in the main memory. Of course, it is possible to delete information that is not disclosed on the main memory without encrypting the information, but it is possible to conceal the information more securely by encrypting the information.

If a security management system is constructed between the client 10 and the security server 30 as described above, the security management prepared by the database management unit 24 of the database server 20 or the application program is roughly performed on a database basis. Unit management will be good. In addition, for the user of the AP 15, the database that can be accessed can be limited according to the database managed by the security information table 32.

According to the present embodiment, since the client 10 can acquire the information of the table list and the column list which can be accessed by communicating with the security server 30, the database server 20 can acquire the list information as in the related art. No longer needs to access client 1
0 reduces the time to communicate with the database server 20,
The concentration of access to the database server 20 can be reduced. Further, according to the present embodiment, the user using the AP 14 uses the user ID alias 63 and the password alias 65 as the logon information, and uses the corresponding user ID 6
2 and the password 64, the database server 20 does not know even if another user using the AP 15 knows the user ID alias 63 and the password alias 65 of another person.
Can not log on to Further, since the API between the AP 14 and the security information acquisition unit 16 is a special API, other APs 15 to which this API is not applied cannot log on to the security server 30 and therefore cannot access the security information table 32, 22 thorough security management can be performed. If a dedicated security server 30 is provided for each specific group, the users to be managed can be divided into the security servers 30 and the logon table 31 and the security information table 3
2, the amount of information is also reduced, and more detailed security management becomes possible.

[0021]

As described above, according to the present invention, since the security server is provided and the security management is mainly performed on the client and the security server side, there is a uniform specification at least among users belonging to a specific group. Security management can be performed. In addition, access rights can be set up to individual data in columns in a database table, and fine-grained security management is possible. Further, when logging on to the database server, it is possible to prevent the logon information from being leaked due to the carelessness of the user.

[Brief description of the drawings]

FIG. 1 is a configuration diagram of a client server system according to an embodiment.

FIG. 2 is a diagram illustrating a data format of a logon table 31 according to the embodiment.

FIG. 3 is a diagram showing a data format of a security information table 32 according to the embodiment.

FIG. 4 is a flowchart illustrating a flow of processing of a security information management unit according to the embodiment.

[Explanation of symbols]

16: Security information acquisition unit, 31: Logon table, 32: Security information table, 34: Security information management unit, 63: User ID alias, 65: Password alias, 72: Connection destination database, 73: Table name, 7
5: Column name, 77: Private data name

Claims (5)

[Claims] 1. A security management method for a system having a client, a security server, and a database server, each of which is constituted by an information processing apparatus, comprising: a database accessible from the client to the security server for a specific user; Querying the table or any of the columns in the table, notifying the client of the accessible database name, table name or column name by referring to the table in the storage means in response to the query by the security server; A database accessible from the client to the database server,
A search request within a range of a table or a column is transmitted, a database, a table or a column specified by the database server is searched, a search result is transmitted to the client, and the search result is displayed on the display device by the client. A database security management method. 2. The user ID corresponding to each user ID and password by the security server.
Registering the alias and the password alias in the logon table in the storage means, and responding to the logon request with the user ID alias and the password alias from the client, checking the user ID alias and the password alias based on the logon table, If the logon is valid, the corresponding user ID and password are transmitted to the client, and the client sends the user ID to the database server.
2. The database security management method according to claim 1, wherein a logon request including a password and a password is issued. 3. The system sets data to be made private in a column corresponding to a column which can be further accessed in the table, together with a column name which can be accessed in response to a query on the column in the table by the security server. 2. The database security management method according to claim 1, wherein the secret data is notified to the client, and the display of the secret data among the search results received from the database server by the client is suppressed. 4. A database security management method according to claim 3, wherein said security server encrypts said secret data and notifies said client to said client, and decrypts said secret data received by said client. 5. A system having a client, a security server, and a database server each constituted by an information processing apparatus, wherein the client transmits database search conditions to the database server, and retrieves the database by the database server. A security management method of a system for transmitting the searched result to the client, wherein the client can access the security server from the client to a database accessible to a specific user, a table in the database, or a column in the table, The security server responds to the inquiry by referring to the table in the storage means and notifies the client of the accessible database name, table name or column name, and notifies the database accessible from the client to the database server. Scan, security management method of the database and transmits a search request within a table or column.