JPS63155252A - Quality check processing system by dyamic setting - Google Patents

Abstract

PURPOSE:To preclude wrong utilization by an improper process request part by deciding whether or not a password matches with dynamically determined control information. CONSTITUTION:When a quality check information registration part 14 is accessed by a quality registration request part 11, the quality check information registration part 14 combines a specified password 12 with various pieces of information on a process request origin 10 to generate quality check information, which is set and registered in a quality control table 15. A processing request part 13 when requesting a process execution part 18 to perform a process specifies a password having the same contents with those at the time of registration and control information which is reported at the time of the registration to call a quality check part 17. The quality check part 17 decides whether or not a processing functions can be used by the process execution part 18 according to the quality check information in the quality control table 15. Then the control is passed to the process execution part 18 according to the decision result.

Description

[Detailed Description of the Invention] (Summary) In a qualification check processing method using dynamic settings that checks qualifications that are dynamically set, qualification management is provided in which qualification check information is stored in response to a qualification registration request by specifying a password. Location information in the book is notified to the requester, and when a processing request that requires qualification is made, the validity of the requester is checked by searching the qualification management book using the specified position information and checking the password. Also.

This makes it possible to prevent destruction of the interface area between the system and the user program.

C. Industrial Application Field] The present invention dynamically registers usage qualifications for processing functions provided by a system, requests processing based on the registered usage qualifications, and activates the processing functions. In a data processing system.

The present invention relates to a qualification check processing method using dynamic settings that can guarantee the validity of a processing request source.

The processing functions provided by the system are applied to the application processing program (
When used by a user program, it is necessary to prevent other programs from being adversely affected by misuse.

[Conventional technology]

For example, when establishing a message communication means between an operating system, database management system, etc. and an application processing program.

It is necessary to provide some kind of usage qualification check means for the communication processing of the message.

Traditionally, when conducting such special qualification checks,
Pre-register. Set driving key restrictions.

In other words, static qualifications were set, such as setting driving mode restrictions. However, in order to provide flexibility in service operation, it is desired that the processing requester be able to register qualifications dynamically after system startup, rather than statically. in this case.

In order to be able to distinguish the qualifications from other processing requesters, it is considered that the processing requester should declare a password.

[Problem that the invention seeks to solve]

If a qualification check is performed by having the processing requester declare a password, then by other applied processing programs, etc.

If the password has been copied,
The problem is that the check itself is invalidated. Furthermore, if the qualification check information is registered in a so-called user region, the system may terminate abnormally if the region is destroyed due to an error in the application processing program.

The present invention aims to solve the above-mentioned problems, and prevents other processing request sources from misusing the entitlement to the processing functions of the system, and even if the region is destroyed,
The purpose is to provide a method to prevent the system from running out of control.

c.Means for solving problems] FIG. 1 shows an example of the basic configuration of the present invention.

In FIG. 1, 10 is a processing request source, 11 is a qualification registration requesting unit that dynamically requests qualification registration, 12 is a parameter area in which a password is specified, and 13 is a parameter area in which a password and control information are specified to perform a specific process. Requesting processing requesting unit, 14
is a qualification check information registration unit activated by the qualification registration request unit 11;

15 is a qualification management book 916 that stores registered qualification check information; and 17 is a control information notification unit that notifies the processing request source 10 of control information including registration position information of qualification check information;
1 is a qualification check unit that checks the usage qualification in response to a request from the processing request unit 13;

Reference numeral 18 represents a processing execution unit that executes requested processing, and reference numeral 19 represents a system common area that is an interface area between the system and the user program.

The processing execution unit 18 has a special service processing execution function provided by the system. When starting the processing execution unit 18, it is necessary to dynamically register qualifications in advance.
The qualification registration requesting unit 11 sets a password in the parameter area 12 and dynamically issues a registration request. This password is a character string prepared individually by each processing request source 10.

When the qualification registration request unit 11 calls the VT rating check information registration unit 14, the qualification check information registration unit 14
5 Specified password 12 (α) and processing request source 1
Qualification check information is generated by combining various information regarding 0. This qualification check information is then set and registered in the qualification management book 15. The control information notification section 16 is.

The control information N including the registration position information of the qualification check tfI information is set in the specified parameter area 12, for example.

When requesting processing to the processing execution unit 18, the processing requesting unit 13 specifies a password having the same content α as at the time of registration and the control information N notified at the time of registration, and calls the qualification checking unit 17 to perform a qualification check. The unit 17 uses the specified control information N.

By accessing the qualification check information in the qualification management 2!15 and comparing the password in the qualification check information with the password in the parameter area 12, it is determined whether the processing function by the processing execution unit 18 can be used.

If the passwords match, it is determined that it can be used.

Control is passed to the processing execution unit 18. Thereby, the processing by the processing execution unit 18 is performed. On the other hand, if the passwords do not match and the qualification is not met, the process is determined to be "unusable" and control is immediately returned to the request source without activating the processing execution unit 18.

[Effect]

A dynamically specified password is registered in the qualification management book 15, and control information including the registered position information is notified to the request source. When checking qualifications using a password, the qualification management book 15 is accessed using the control information specified together with the password.

Therefore, as shown in FIG. 1, even if a processing requesting source 10X different from the processing requesting source 10 specifies a copy of the password (α) and starts the qualification checking section 17, the control information Qualification management l115
The registration location of the qualification check information is different, and it will be determined that it is "unusable". I! Pchi, even if the passwords match.

If the control information is not valid, the qualification check will not pass.

As a result, only the process request source 10 with valid qualifications can enjoy the service provided by the process execution unit 18. Furthermore, if the region that is the user area is destroyed, correct control information will not be specified, so system abnormalities caused by the region destruction of the user area can be prevented.

〔Example〕

FIG. 2 shows an embodiment of the invention.

In FIG. 2, the same symbols as in FIG. 1 correspond to those shown in FIG. 1, and 20 is an applied processing task.

21 to 24 are macros that have a function of communicating with the system using so-called postal mail boxes, and 25 is a post office box opening section.

26 is a post office box (BOX), 27 is a queue terminal to which messages are connected, and 28 is a message.

29 is a message retrieval unit, 30 is a message sending unit, 31 is a post office box closing unit, and 32 is a system message f.
dl? Part W, 33 is the system console.

34A to 34C represent various processing tasks.

The system message control unit 32 sends a message such as ``Task abnormally terminated'' or ``File error occurred''.

Something like "system dataset full".

In this embodiment, the application processing program is run by dynamically opening the post office box 26 in advance. The application processing task 20 that performs the operations is configured to be able to send and receive these operation/operation messages.

rOPEN BOXJ 7cro 21 is a macro that requests the post office box opening unit 25 to open a post office box 26. At this time, by specifying a password in the parameter area 12, the qualification check information registration section 14 operates in the private box opening section 25.

By this qualification check information registration unit 14, 'R rating management W
i 15, various information such as the specified password (α) and the task ID and space ID of the applied processing task 20 are registered.

Qualification management record 15 is a private letter! It may be provided within 26 or may be provided in another area. The control information notifying unit 16 sets the control information N including the registered position information of the qualification check information including the password (α) in the parameter area 12.

When a message is generated after the opening of the post office box 26, the message is sequentially queued to the two queue terminals 27 by the system message control unit 32.

The rGET EV (event) comacro 22 is.

Application processing task 20 is a macro that requests retrieval of one message 28 from post office box 26 . When issuing this macro 22, the password (α) declared at the time of opening the post office box 26 and the control unit f[lN are specified. As a result, the qualification check unit 17 performs a comparison with the qualification check registered in the qualification management book 15. If the qualification check is passed, the qualification check unit 17 activates the message retrieval unit 29, and thereby the queue terminal 27
One message 28 is dequeued from the beginning.

rPUT EV (event)" macro 23.

rGET This is a macro that requests to write a message in contrast to the EVJ macro 22. Similarly, when the qualification checking section 17 performs a qualification check using the qualification management book 15 and the qualification is passed, the message sending section 30 checks the qualification.

A message is sent.

rcLO3E BOXJ macro 24 is “0PEN
P.O. Box 26 opened by BOXJ Macro 21,
This is a macro that requests closure.

Regarding this as well, the qualification check is performed based on the password (α) and the control information N, and only when the qualification is passed, the private office box closing unit 31 performs the qualification check.

Post office box 26 is closed.

Macro 21 and macro 24 can be considered to correspond to the 0PEN macro and CLO3E macro, respectively, which are well-known in data management etc. However, the password α and control information N specified as parameters are set in the control table in data management. etc., they do not need to be common to all related macros as long as their contents are the same. That is.

Macro 22. The macro 23 and the like can also use other parameter areas in which the password α and the control information N are copied. Note that by preparing a plurality of parameters, one processing task can obtain a plurality of qualifications.

〔Effect of the invention〕

As explained above, according to the second aspect of the present invention, if the password and the dynamically determined control information do not match, it is determined that the user is not qualified to use the password, thereby preventing incorrect use by other processing requesting units. can do. Due to region destruction,
When a password or dynamically configured control information is destroyed.

Because it can be checked out by the qualification check department.

This can prevent the system from running out of control.

[Brief explanation of the drawing]

FIG. 1 shows an example of the basic configuration of the present invention, and FIG. 2 shows an embodiment of the present invention. In the figure, 10 is a processing request source, 11 is a qualification registration request unit, and 12
13 is a parameter area, and 13 is a processing request section. 14 is a qualification check information registration section, 15 is a qualification management book, 1
Reference numeral 6 represents a control information notification section, 17 a qualification check section, 18 a processing execution section, and 19 a system common area.

Claims (1)

[Claims] A data processing system that dynamically registers entitlements for processing functions provided by the system, requests processing based on the registered entitlements, and activates the processing functions. In the qualification check processing method, there is a qualification management book (15) in which qualification check information is stored for each qualification registration request, and a qualification registration request means (11) for requesting qualification registration by specifying a password prepared by the processing requester. and a qualification check information registration means (14) for registering qualification check information including a designated password in the qualification management book (15) in response to a qualification registration request; control information notification means (16) for notifying the processing request source of the control information including the registration location information of the qualification check information in (15); A qualification check means (17) is provided for checking the validity of the request source by referring to the qualification management list (15) based on the location information included in the control information and checking the validity of the request source using the qualification check information including the password. Qualification check processing method with dynamic settings.