JPS63155240A - Alternation preventive processing system for work station - Google Patents

Abstract

PURPOSE:To inhibit partial extraction and updating from being performed at work station and to prevent a printing result from being altered by adding alteration prevention information to output data from a host processor to the work station. CONSTITUTION:Data passed to the work station 11 is stored in an intermediate file 21 temporarily and edited, processed, and outputted according to an indication from a keyboard 22. An editor 37 which edits a document has an alteration prevention information check part 24A and an alternation inhibition processing part 25A and data to which the alteration prevention information is added is inhibited from being updata and extracted partially regardless of its format. A processing part 38 performs table calculation or processes data statistically and has an alternation prevention information check part 24B and an alternation inhibition processing part 25b as well to preclude alteration.

Description

[Detailed Description of the Invention] (Summary) To prevent falsification of various output data in a host/workstation cooperation system.

When adding tamper-prevention information to the output data from the host processing device to the workstation and editing/updating it on the workstation side.

This tamper-proofing information prohibits partial extraction and updating, and means is provided to perform tamper-proof printing to prevent tampering with printed results.

Assure the validity of the content output by the system.

[Industrial application field]

The present invention is directed to a tamper-proof processing method in a workstation, in particular, when data managed by a host processing device or data resulting from processing is sent to the workstation and printed on the workstation's printer, the system must guarantee the contents. This paper relates to a tamper-proof processing method in a workstation that prevents certain important data from being tampered with either before or after printing.

For example, 5 clinical data showing the effectiveness of a newly developed drug, etc.
Processing is performed by a computer and the analysis results are printed on a printer or the like.

This printed result may be used as a document to be submitted to a public organization, and it may be necessary to guarantee that the data written in the document is the correct result of computer analysis.

[Conventional technology]

For example, the output of a well-known program that analyzes and processes clinical data, etc. has gained great social credibility for its output results. Conventionally, through so-called batch processing,
In such cases, results are printed only within the computer center.

Through system operation management, we were able to prevent falsification of output.

However, recently, the results processed by the host processing device are
Online, it is imported into the work stage gin and used as the work station's reprinting device.

You can now print 9 more. Due to data coordination processing between a host processing device and a workstation, data can be edited freely at the workstation. In other words, the workstation has document creation/editing functions, etc., and processes the data sent from the host processing device in the form of various forms and reports.

The data can now be printed.

[Problems to be solved by the invention C] Since data operations can be easily performed by users on workstations, it is difficult for users to fabricate data or falsify processing results on workstations. This can be done with a simple editing function. Hitherto, commonly used security protection using passwords and memory protection cannot prevent such tampering at workstations.

On the other hand, if the editing function on the workstation were to be completely eliminated, it would be impossible to change the output format within the permitted range without changing the data content, resulting in a lack of flexibility.

The present invention aims to solve the above problems, and a host processing device outputs data to a workstation. The purpose is to provide comprehensive tampering prevention means for all or part of a certain set of data.

Measures to solve problem C] FIG. 1 shows an example of the basic configuration of the present invention.

In FIG. 1, 10 is a host processing device, 11 is a workstation (WS), 12 is a database, 13 is a data search processing unit that reads data from the database 12;
14 is an analysis processing unit that executes data analysis processing; 15 is a presentation processing unit that outputs data such as analysis results; 16 is a tampering prevention information setting unit; 17 is a printer;
B is an intermediate file where transfer data is stored, 19 is WS
An interface unit 20 is a host interface unit that transmits and receives data to and from the host processing device 10.

21 is an intermediate file in which data transferred from the host processing device 10 is stored; 22 is a keyboard; 23 is an editing/updating unit that edits and updates data in the intermediate file 21; 24 is a tamper-proof information checking unit; 25 is an A tampering prevention processing unit 2G is a presentation processing unit 2 that outputs data to various output devices of the workstation 11.
Reference numeral 7 represents a tamper-proof designating section, 28 a display, 29 a printing device with a tamper-proof printing mechanism, and 30 a line.

The presentation processing unit 15 receives data managed by the host processing device 10 or data of processing results in response to a request from the workstation 11.

Tamper prevention information setting unit 1 that calls the tamper prevention information setting unit 16 when transferring to the workstation II side.
6 performs a process of adding tampering prevention information to the data to be transferred. Setting of this tampering prevention information is performed depending on the importance of the data to be transferred.

Data with tamper prevention information added is intermediate file 1
8, and once from the WS interface unit 19 13
The data is transferred to the host ink interface unit 2'0 via 0 and stored in the intermediate file 21 of the workstation 11.

The workstation 11 performs three editing processes and an update process on the data stored in the intermediate file 21.
When the &I collection/update is instructed by input from the keyboard 22 having the update processing section 23, the tampering prevention information checking section 24 is called. The tampering prevention information checking unit 24 checks tampering prevention information regarding data designated as one editing/updating target.

The tampering prevention processing unit 25 includes the tampering prevention information checking unit 2
Depending on the check result of step 4, the process of partially extracting and updating the data stored in the intermediate file 21 is prohibited. That is, processing requests such as two-part extraction and updating are ignored.

Further, as a printing device that outputs the data of the intermediate file 21, a printing device 29 with a tamper-proof printing mechanism is used.

The printing device 29 with a tamper-proof printing mechanism is a printer having a tamper-proof printing mechanism, such as that used when printing amounts on checks, for example. , it is now possible to perform printing that leaves a mark on the paper even when the ink is removed.

The tamper-proof designation unit 27 in the presentation processing unit 26 controls the operation of the tamper-proof printing mechanism of the printing device 29 with a tamper-proof printing mechanism during printing, according to the tamper-proof information setting state of the data to be printed. conduct.

[Effect]

In the host processing device 10, tampering prevention information is set according to the importance of the data to be transferred.

The tamper-proof information is sent to the workstation along with data such as processing results. Therefore, the tamper prevention information checking section 24 in the workstation 11 checks the tamper prevention information.

Tampering with data using an editor etc. can be prohibited.

Further, the data printed at the workstation 11 is printed by the printing device 29 with a tamper-proof printing mechanism if tamper-proof information is set.

Since tamper-proof printing is performed, the printed results cannot be tampered with either.

That is, as an attribute of the data to be processed and printed.

Since selection information is added to prevent tampering, even if the data is in the form of a table in a data directory, or has been processed into a table or graph, Even for tables and graphs in documents, the tampering prevention mechanism according to the present invention works.

(Example〕 FIG. 2 is a diagram for explaining one embodiment of the present invention.

In FIG. 2, the same reference numerals as in FIG. 1 correspond to those shown in FIG. Reference numeral 31 denotes a tampering prevention/security protection main control section, 32 a security setting section for setting security information on data, 33 a security check section, and 34 a workstation usage qualification setting section.

35 is a host/workstation cooperation interface, 36 is communication data, 3°7 is an editor, 38 is a calculation/
A processing section 39 represents a log file.

The work stage engine usage qualification setting unit 34 sets usage qualifications based on a user identification number (user ID) for each workstation. As a result, the host processing device 1
The qualifications for accessing the data base 12 managed by 0 and the qualifications for starting the processing of the analysis processing unit 14 are checked.

The security setting unit 32 sets read prohibition, write prohibition, etc. for each data in the database 12. This setting information is checked by the security check unit 33 of the data search processing unit 13, and access to data that is protected is prohibited.

What are the eligibility checks and confidentiality protection for these services?

Although it has been used in the past, this method alone cannot prevent falsification in processing after data is transferred to a workstation and falsification of print results. The tamper prevention information setting unit 16 adds predetermined tamper prevention information to the information.

That is, the communication data 36 from the host-workstation cooperation interface 35 includes tamper-proof information and actual output data. This tampering prevention information is often a flag.9 For example, it instructs to prevent tampering of the whole data or prevent tampering of partial data.0 In the case of preventing tampering of partial data, it includes position information such as rows and columns. .

The data delivered to the workstation 11 in this manner is temporarily stored in the intermediate file 21, and becomes the subject of &g collection, processing, and output processing according to instructions from the keyboard 22.

The editor 37 performs processing such as editing one document, and has a tampering prevention information checking section 24A and a tampering prevention processing section 25A, and for data to which tampering prevention information is attached, it is , updating or partial extraction in any format is prohibited.

The arithmetic/processing section 38 performs processing using spreadsheet calculations, data statistical processing, etc.? This is also processed by the tampering prevention information checking unit 24B and the tampering prevention processing unit 25.
B, and similarly prevents tampering. Of course, data in the 9 intermediate file 21 that is not subject to tampering can be used for calculations and processing.

When printing data in the intermediate file 21.

In the presentation processing unit 26, the tamper prevention designation unit 27 checks the tamper prevention information, and according to the designation of the tamper prevention information, the tamper prevention printing mechanism in the printing device 29 with a tamper prevention printing mechanism is activated during printout. As a result, the printed characters cannot be erased/modified in the print result. Note that the tamper-proof printing mechanism may be the same as that used in printing checks and the like, so a detailed explanation thereof will be omitted.

In particular, in this embodiment, for the log file 39.

History information when editing data or processing results is automatically and forcibly recorded.

Depending on the contents of the log file 39, information such as who modified what and when can be determined.

The contents of the log file 39 are transferred to the host processing device 10 via the host/workstation cooperation interface 35 as necessary.

〔Effect of the invention〕

As described above, according to the present invention, it is possible to prevent falsification of data and falsification of output results at a workstation.

It becomes possible to guarantee that the printed content is a valid output result. Therefore, it becomes possible to prevent misuse of the computer, for example, by fabricating clinical data.

[Brief explanation of the drawing]

FIG. 1 shows a basic configuration example of the present invention, and FIG. 2 shows a detailed explanatory diagram of the invention. In the figure, 10 is a host processing device, 11 is a workstation, 12 is a database, 13 is a data search processing unit, 1
4 is an analysis processing section, 15 is a presentation processing section, 1
6 is a tamper-proof information setting section. 17 is a printer, 18 is an intermediate file, 19 is a WS interface section, 20 is a host interface section, 21 is an intermediate file, and 22 is a keyboard. 23 is an editing/update processing section, 24 is a tampering prevention information checker 7
25 is a tamper-proof processing section, 26 is a presentation processing section, 27 is a tamper-proof designation section, 28 is a display, 29 is a printing device with a tamper-proof printing mechanism, and 30 is a line.

Claims (1)

[Claims] Data managed by a host processing device (10) or data resulting from processing is transferred to a workstation (11) connected via a line (30), and the data is processed at the workstation (11). In the host/workstation cooperation system for outputting, a tampering prevention information setting means (16) for setting tampering prevention information in data transferred from the host processing device (10) to the workstation (11); 11) for editing/updating the received data, a tampering prevention information checking means (24) that checks the tampering prevention information, and extracting a portion of the received data according to the check result by the tampering prevention information checking means (24). and a tamper-proofing processing means (25) that prohibits updating; a printing device (29) having a tamper-proof printing mechanism; A tampering prevention processing method in a workstation, characterized in that the workstation is equipped with a tampering prevention designation means (27) that performs a process of operating and printing.