JP2776370B2 - Illegal command input prevention method - Google Patents

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a system for preventing a command input from a console or a terminal from being illegally input.

[0002]

2. Description of the Related Art A conventional method for preventing unauthorized input of a command input from a console or a terminal device checks whether or not a command input in connection with the console or the terminal device can be accepted. .

For this reason, if the input command is valid, even if the input command is incorrect, the command may be immediately regarded as valid. There was no.

[0004]

As described above, in the conventional system, if the input command is valid,
Even if the command has an input error, the command is regarded as valid, and as a result, the computer system may malfunction.

[0005] This is because the conventional illegal command input prevention system checks whether or not an input command can be accepted in relation to a console or a terminal device.

SUMMARY OF THE INVENTION Accordingly, it is an object of the present invention to solve the above-mentioned problems of the prior art, and an object of the present invention is to provide a method for preventing a command input error from occurring in advance. .

[0007]

In order to achieve the above object, according to the present invention, a command identifier of an inputted command is compared with a command identifier registered in an inspection table, and the command identifier of the command is checked. If the command does not exist in the inspection table, the command is rejected and invalidated. On the other hand, if the command matches the command identifier in the inspection table, the command corresponds to the command identifier in the inspection table. The information on presence / absence of a hold instruction provided is checked. If there is a hold instruction for the command, the command is temporarily stored in a command storage table and waits until a valid or invalid instruction of the command comes. A method for preventing unauthorized command input, which is characterized by the above, is provided.

[0008]

Embodiments of the present invention will be described below. The embodiment of the present invention is used by being connected to a command check unit (11 in FIG. 1) and a command execution unit (12 in FIG. 1) which operate on an operating system, and uses a command identifier (FIG. 4). 331) and a command hold instruction flag (332 in FIG. 4), read an input command permission / inhibition information file (31 in FIG. 1), and create an unauthorized command check table (33 in FIG. 1). Means (32 in FIG. 1) and a command which operates while being connected to the operating system and which is composed of a command identifier and a command text acquired from the operating system, the command identification name and the illegal command inspection table (FIG. 4) is compared with the command identifier (331 in FIG. 4), and based on the comparison result with the unauthorized command check table. , Disable the command, effective,
Or an illegal command inspection means (34 in FIG. 1) for performing control, called suspension.

Then, based on the command composed of the command identifier and the command text obtained from the operating system, an unauthorized command checking means (3 in FIG. 1)
4) compares the command identifier with the command identifier in the unauthorized command check table. If the command identifier does not match, an instruction to disable execution of the command is added to the command information together with the command information in the operating system. The command is notified to the command inspection unit, and the command is rejected as being unacceptable.

When the command identifier matches the command identifier in the unauthorized command check table, the command text of the command is checked, and if the command is executable information, the command stored in the command storage table is checked. The information is compared with the command identification name, and if they match, an instruction to enable or disable execution of the command stored in the command storage table is notified to the command check unit in the operating system together with the command information.

On the other hand, the command text of the command is
If it is not the command execution propriety information, the command suspension instruction flag in the unauthorized command check table (332 in FIG. 4)
Is checked, and if there is a suspension instruction, the command is temporarily stored in the command storage table 35, and waits until a valid or invalid instruction of the command comes. Then, if there is no hold instruction, it has a function of passing an instruction of execution execution of the command together with command information to a command check unit in the operating system and requesting execution of the command.

In addition, immediately after the illegal command input prevention system is activated, the illegal command inspection table registration unit operates and inputs an input command propriety information file.
Create an invalid command check table.

[0013]

DESCRIPTION OF THE PREFERRED EMBODIMENTS In order to explain the above-described embodiment of the present invention in more detail, embodiments of the present invention will be described below with reference to the drawings.

FIG. 1 is a block diagram showing the configuration of an embodiment of the present invention. FIG. 2 is a flowchart showing the details of the operation of the unauthorized command inspection table registration means in the embodiment of the present invention. FIG. 3 is a flowchart showing details of the operation of the unauthorized command checking means in the embodiment of the present invention. FIG. 4 is a diagram illustrating a configuration example of an input command availability information file according to the embodiment of the present invention.

Referring to FIG. 1, commands and the like input from console 2 are input to command check unit 11 of operating system 1 and executed by command execution unit 12. In the present embodiment, the command checking unit 11
The unauthorized command input prevention system 3 is connected to the input command permission / inhibition information file 31, the unauthorized command inspection table registration unit 32, the unauthorized command inspection table 33, and the unauthorized command inspection unit 3. 34 and command storage table 35
And is composed of

As shown in FIG. 4, the unauthorized command inspection table 33 is composed of a command identification name 331 and a command suspension instruction flag 332.

Next, referring to FIG. 2, an unauthorized command inspection table registration means 3 of the unauthorized command input prevention system 3 will be described.
Operation 2 will be described.

Unauthorized command inspection table registration means 32
Operates immediately after the unauthorized command input prevention system 3 is activated, for example, by an instruction from the operator.

When the unauthorized command check table registration means 32 is started, one record is read from the input command propriety information file 31 (step S11). When the record of the input command propriety information file 31 ends, the reading process ends (step S12).

The contents of one record of the input command propriety information file 31 are stored in the command identifier 331 and the command suspension instruction flag 332 of the unauthorized command check table 33 (step S13).

Next, the operation of the unauthorized command checking means 34 will be described with reference to FIG.

The unauthorized command checking means 34 obtains command information including the command identification name and the command text input from the console 2 from the command checking unit 11 of the operating system 1 (step S21).

Based on the command identifier of the acquired command information, the command is checked against the command identifier 331 of the unauthorized command inspection table 33 (step S22).

Then, it is determined whether or not the command identifier of the acquired command information matches the command identifier 331 of the unauthorized command inspection table 33 (step S2).
3).

If it is determined in step S23 that the command identifier of the acquired command information does not match the command identifier 331 of the unauthorized command inspection table 33, the command identifier 3 of the unauthorized command inspection table 33
It is determined whether or not all 31 have been searched (step S2).
4).

In the determination in step S24, if all of the commands have been searched, the command identification name obtained from the command inspection unit 11 of the operating system 1 did not match the command identification name 331 of the unauthorized command inspection table 33, so that the command Is requested to the command checking unit 11 together with the command information (step S
25).

If it is determined in step S23 that the command identifier of the command information acquired from the command inspecting unit 11 matches the command identifier 331 of the unauthorized command inspecting table 33, the command text acquired from the command inspecting unit 11 is deleted. It is determined whether or not the content is the execution availability information of the command (step S26).

If it is determined in step S26 that the command is executable information, it is determined whether the command identifier of the command matches the command identifier of the command information stored in the command storage table 35. Is performed (step S27).

If it is determined in step S27 that the command identifier matches the command identifier stored in the command storage table 35, the command information stored in the command storage table 35 and the command checker 1
Based on the content of the command text obtained from the command information 1, a request is issued to the command checking unit 11 together with an instruction to disable or execute the command information. At this time, the command storage table 35 is initialized (step S28).

On the other hand, if it is determined in step S 26 that the command is not executable information of the command, the command identification information of the command information acquired from the command The status of the presence or absence of suspension is determined (step S29).

If it is determined in step S29 that the command hold instruction is present, the command information acquired from the command check unit 11 is stored in the command storage table 35 (step 2A). The execution of the command stored in the command storage table 35 is suspended until the next execution status of the command is input.

If it is determined in step S29 that the command hold instruction is not present, a request is made to the command check unit 11 together with the command information obtained from the command check unit 11 and the execution valid instruction of the command (step 2B). .

[0033]

As described above, according to the present invention,
The following effects are obtained.

A first effect of the present invention is that even if a command that does not require input is input, the command can be invalidated, thereby preventing a malfunction of the computer system.

According to the present invention, by declaring a command that can be input in advance, even if a command that does not need to be input is input, the command is invalidated, thereby causing a malfunction of the computer system. This is because it can be prevented beforehand.

The second effect of the present invention is that if the input command is valid, even if the input command is incorrect,
Since the command is not considered to be immediately valid, malfunction of the computer system is prevented.

According to the present invention, even if a command can be input, even if the input time is wrong or the input command is valid, the command is temporarily suspended, so that the computer system Can be prevented from malfunctioning beforehand.

[Brief description of the drawings]

FIG. 1 is a diagram showing a configuration of an embodiment of the present invention.

FIG. 2 is a flowchart for explaining the processing operation of the embodiment of the present invention, and is a flowchart for explaining the processing of an unauthorized command inspection table registration unit;

FIG. 3 is a diagram for explaining the processing operation of the embodiment of the present invention, and is a flowchart for explaining the processing of the unauthorized command checking means.

FIG. 4 is a diagram illustrating a processing operation according to the embodiment of the present invention, and is a diagram illustrating a configuration example of an unauthorized command inspection table;

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 1 Operating system 2 Console 11 Command inspection part 12 Command execution part 3 Invalid command input prevention means 31 Input command availability information file 32 Invalid command inspection table registration means 33 Invalid command inspection table 34 Invalid command inspection means 35 Command storage table

Claims (4)

(57) [Claims] A command identifier of an inputted command is compared with a command identifier registered in a check table, and if the command identifier of the command does not exist in the check table, the command is rejected. On the other hand, if the command matches the command identifier in the inspection table, the information on the presence / absence of a hold instruction provided corresponding to the command identifier in the inspection table is checked. A command is temporarily stored in a command storage table and waited until an instruction to validate or invalidate the command is received. 2. The unauthorized command according to claim 1, wherein the command is compared with a command identifier in the inspection table, and when there is no instruction to suspend the command, execution of the command is requested. Input prevention method. 3. When the command text of the command is information indicating whether or not the command can be executed when the identifier of the command matches the command identifier stored in the inspection table, the command is stored in the command storage table. It is determined whether or not the command matches the stored command identifier. If the command matches, the command execution table stored in the command storage table is checked according to the command execution availability information.
2. The illegal command input prevention system according to claim 1, wherein an invalid instruction is notified to a command inspection unit. 4. A method for preventing unauthorized command input according to claim 1, wherein an input command is received from a command checking means for checking a command input from a console terminal, and the presence or absence of an error is determined. 2. A method for preventing unauthorized command input according to claim 1, wherein a notification is sent to a command inspection means and / or a command execution means.