JPS6089242A - External system of secret protecting information - Google Patents

Abstract

PURPOSE:To prevent the use without permission of the individual property data to other persons by protecting the secret protecting information with an external memory means which can be controlled individually and therefore protecting the individual data. CONSTITUTION:A user of a work station WK1 finishes production of a file A with addition of the secret protecting information and then puts a floppy disk FPD1 on a device. Then the user designates the FPD1 and supplies a SECRET OUT command. Thus the secret protecting information of the file a is written to the FPD1 together with the name of the file A. When this writing is over, the secret protecting information excluding the password of the file A is crossed out of a disk volume DSV. When the file A in the DSV is referred to, the disk FPD1 is designated to feed a SECRET IN command. The only the secret protecting information that has a coincident password is written with correspondence to the file A.

Description

DETAILED DESCRIPTION OF THE INVENTION [Technical Field of the Invention] The present invention provides a method for removing security-related information from files in a disk volume and writing this information to an external storage medium such as a diskette. When used, the security information on the external storage medium plays a key role,
External security information that makes the file available
It is related to the method.

[Prior art and problems]

Created on disk volume ÷ 1. The information (file data, source programs, object programs, etc.) that is created is kept confidential in order to make it available to the creator or anyone authorized by the creator. This security is constantly inspected for each individual file, source program, and object within the disk volume, and the user can access the path given by the creator.
By typing the word key, you can use the desired file size. Unlike the prior art, security information is always stored in a file 6, within a disk volume.
Since the password is added to the password, it can be seen by a program that is fully equipped to print the entire disk volume. Furthermore, in the conventional method, one password is directly entered on the key, so if the user forgets the password, there is a drawback that the target file, etc. cannot be used.

[Purpose of the invention]

The present invention is based on the above consideration, and as computers become more widely used, the amount of data increases, and in order to prevent personal assets (data) from being used by others without permission,
The entire purpose of this invention is to provide a method for externally transferring confidential information so that the confidential information can be stored in an external storage medium that can be managed by the individual and the personal data can be protected. [Structure of the invention] Therefore, the method of exporting confidential [+, %, i5 information] of the present invention is such that when the creation or reference of a file in the Dinuk volume is completed, the security protection information added to the file is is stored in an external memory (, t'j medium, and all passwords and other security information are deleted from the disk volume. When a file in the disk volume is referenced, the security information of the file is deleted. The entire feature is that the security information is read from the stored external storage medium, and the read security information is written in association with only those files whose passwords and passwords match the files in the disk volume. It is.

[Embodiments of the invention]

Hereinafter, the present invention will be explained with reference to all the drawings.

FIG. 1 is a diagram for explaining one embodiment of the present invention, and FIG. 2 is a diagram showing the structure of security information.

In FIG. 1, WK to WK3 are work stations, FPD and FPD are floppy disks, DS is a disk volume, A and B are files, and SD is security information.

2y, In Figure 1, file A on disk volume DSV is created by a user at work station WKl, and file B is created by a user at work station WKl.
It is assumed that it was created by user K. Third
If you want to completely prohibit someone from using File A,
The user of work station WK adds security information SD to this. Confidential reading information is stored in the second
As shown in the figure, the password is composed of a password, individual authorization information +d, and address information. This address indicates the entire storage location of file A within the disk volume. Users of work station WKt:
When the creation of file A is completed, mount it on the floppy disk FPDk device, specify the floppy disk FPDl, and send SCT OUT (5E
Enter the CRET OUT ) command. Then, the security information of file A is changed to the name of file A and l(
written to the floppy disk F P ]) I K,
■After the loading is completed, the password of file A is deleted from disk volume DSVO (the security information is deleted.If the user of work station WK wants to refer to file A in disk volume DSV, the user of work station WK, Mount the floppy disk FPD+ k device, specify the floppy disk FPD+ k, and enter the entire SCT IN (SECRET IN) command. Then, the passwords are checked and if they match, the security information of file A is is written to disk volume DSV and associated with file A. Once the file A has been referenced, the user at work station WK mounts the floppy disk in the device and specifies the floppy disk. Te SCT
Input OUT. In the security information of file A in the disk volume, workstation W
If the name of the user of Kt is registered as individual authorization information, the user of work station WKt can also use all of file A. However, the user of work station WK2 needs to be told the password for advance collection file A. 3rd use of file B
If the user of the work station WK, for example, wants to prohibit the user from using a floppy disk FPD2,
Mount it on the k device and save it to a floppy disk.
DI'! Specify r and input 5CTOUT'Th.

Then, if you want to refer to the file Btl-2, the work stage is set to WK. Specify all and SCT I
Enter the N command money. In the security information of file A, which resides on disk volume DSV, work station WK! (7) If the user's name is not registered as individual authorization information, even if the user of work station WK3 knows the bus word of file A, file A' cannot be used. The same applies to file B.

〔Effect of the invention〕

As is clear from the above explanation, since the confidential information of this file can be managed individually, personal data can be kept in a complete form.

[Brief explanation of drawings]

FIG. 1 fully explains one embodiment of the present invention. FIG. 2 is a diagram showing the structure of security information. W Kl 1 (II...work station, FPD+ and FPD2...floppy disk)
Disc, SD...Secret information, A and B...File 0 Patent applicant: Fujitsu Ltd. Representative Patent Attorney: Yobu Kyotani

Claims (1)

[Claims] When the creation or reference of a file in a disk volume is completed, the security information attached to the file is stored in an external storage medium, and the security information except the password is deleted from the disk volume. When referring to a file in a disk volume, the security information of the file is read from the external storage medium where the security information is stored, and the read security information is transferred to the disk volume. This is a method for externally exporting security information, which is characterized in that only those files whose passwords match the files are associated with the files.