JPS63273151A - Access management system - Google Patents

Abstract

PURPOSE:To contrive the termination of the possibility of file destruction or the like by a 3rd party by storing key information relating to the access to an external storage medium and regulating the access to the file when no external storage medium is provided. CONSTITUTION:A prescribed input device 5 and a computer 3 are connected, an external storage medium 4 is connected to the input device 5 freely attachably and detachably, the key information required for the input device in accessing the file of the computer is registered in the external storage medium 4, which is mounted to the input device 5 and only when the key information is inputted from the input device 1, the access is constituted to be enabled. Thus, even when the user is identified from the operation input from the input device, the access to the file is disabled if the input personnel does not have a storage medium backing up the file access right, and the possibility of file destruction or the like by the 3rd party is terminated.

Description

DETAILED DESCRIPTION OF THE INVENTION [Object of the Invention (Field of Industrial Application) The present invention relates to an access management system between an input device and a computer.

(Prior Art) Generally, in a computer file system, in order to manage access from the outside, users are sometimes limited to each file, and access modes (limitations to reading, writing, updating, etc.) are set for each file. many.

Information regarding such access management is set within the file system, and the system is made to operate only when an authorized user specifies an authorized access mode.

Note that a specific user may be given the right to access all files in all access modes.

Such a user is called a superuser.

By the way, in this type of access management, a user or superuser is recognized by the computer only when the login name and password are entered and they match the login name and password preset in the computer. .

(Problems to be Solved by the Invention) However, conventional computers do not have a means to confirm whether the user or superuser recognized by the above method is the true user or superuser. For example, if a third party inputs a user's login password and password, the computer recognizes the third party as the user.

Therefore, if a user's login password and password are leaked to the outside, even a third party can easily access the system, and there is a risk that access management will become a mere skeleton.

In particular, if a third party were to know the superuser's login password and password, there was a problem in that it would be possible to destroy all files on that computer.

The present invention was made to solve these problems, and aims to provide an access management method that manages file access rights according to the facts and eliminates the possibility of file destruction by a third party. There is.

[Structure of the Invention] (Means for Solving Problems) The access management method of the present invention connects a predetermined input device to a computer, connects an external storage medium to the input device in a detachable manner, and The device registers key information necessary for accessing files on the computer in the external storage medium, and accesses only when the external storage medium is attached to the input device and the key information is input from the input device. It is configured so that it is possible.

(Function) The present invention is characterized in that key information related to file access rights, etc., which was conventionally owned by a computer, is registered in an external storage medium.

In other words, in conventional computers, once the person who entered the input was recognized as a user or superuser through an operation input from an input device, file access rights were automatically granted to the person who entered the input, but according to the access management method of the present invention, file access rights are automatically granted. Even if the user is recognized through input from the input device, if the person making the input does not have a storage medium that supports file access rights, the user will be unable to access the file at all.

(Example) Hereinafter, details of an example of the present invention will be described based on the drawings.

FIG. 1 is a block diagram illustrating an embodiment in which the method of the present invention is applied to a workstation.

In the figure, 1 is a key input section for inputting characters during a conversation between the operator and the computer, 2 is a display section such as a bitmap display that displays messages from the computer and input from the operator, and 3 is the main body of the computer. This is a processing unit (CPU).

4 is a removable storage medium such as an IC card in which the user's or super user's login password and password are written, as will be described later; Try using a reader/writer that writes data.

FIG. 2 is a diagram illustrating information written on the storage medium 4. As shown in FIG.

The storage medium 4 stores information indicating the user's or superuser's login password and password, and key information indicating the name of a file accessible to the owner of the storage medium 4 and the access right to the file. ing.

Next, the process by which an operator accesses files on a computer using this storage medium 4 will be explained.

(2) When an attempt is made to access a file, a message is displayed on the display section 2 asking the user to insert the storage medium 4 into the data input/output section 5.

(2) The operator inserts the storage medium 4 into the data input/output section 5.

(2) In order to check whether the operator is the true owner of this storage medium 4, a message prompting the user to enter a login name is displayed.

■The operator enters the login name.

(2) If the input login name matches the login name written in the storage medium 4, a message prompting the user to input the password is subsequently displayed on the display unit 2.

■The operator inputs the password.

(2) The processing unit 3 performs an access check on the file to be accessed. If the file is accessible, it can be accessed according to the access rights. This process is repeated each time another file is accessed.

Note that steps (1) to (2) above may be performed at the time of login.

Thus, according to the method of this embodiment, even if a third party accidentally or intentionally learns the user's or superuser's password, he or she will not be able to access any files unless he or she has the recording medium to back it up. This allows files to be protected from unauthorized access.

Furthermore, even if you obtain someone else's recording medium, you will not be able to access the files unless you know the login name and password written on the recording medium.

Therefore, ■ True users or super users must not divulge their login names and passwords; ■ True users or super users must keep their recording media secure;
If either one of these conditions is satisfied, there is no possibility that a third party will destroy the file.

In this embodiment, an example in which the present invention is applied to a workstation has been described, but the present invention can be widely applied to systems that manage file access according to login names and passwords.

[Effects of the Invention] As explained above, according to the present invention, when accessing a file on a computer, key information related to the access is stored in an external storage medium, and when the user does not have the external storage medium, Since the access to the file is restricted, the access rights to the file can be managed according to the facts, and the possibility of file destruction by a third party can be eradicated.

[Brief explanation of the drawing]

FIG. 1 is a block diagram for explaining an embodiment in which the method of the present invention is applied to a workstation, and FIG. 2 is a diagram for explaining data written to a storage medium used in the embodiment. 1... Key human power section 2... Display section 3... Processing section 4... Storage medium 5... Data input/output section Applicant Toshiba Corporation Representative Patent Attorney Sasa Suyama - Figure 1, Figure 20

Claims (3)

[Claims] (1) A predetermined input device and a computer are connected, an external storage medium is removably connected to the input device, and key information necessary when the input device accesses a file on the computer is stored in the external storage medium. An access management method characterized in that the access is possible only when the external storage medium is registered in the input device and key information is input from the input device. (2) The access management method according to claim 1, wherein the key information is login information and a password for the file. (3) The access management system according to claim 1 or 2, wherein the external storage medium is an IC card.