JPH01263746A - Automatic control system for registerer list - Google Patents

Abstract

PURPOSE:To improve workability and to execute a correct control by automatically changing all access lists of a file server corresponding to the change when the registerer list of the certification server is changed. CONSTITUTION:An operator connects a terminal 2 of a work station or a personal computer to a certification server 5 and executes the change instruction of an individual name. For example, when the instruction to change a 'user 2' which is the individual name to a 'user 8' is executed, the certification server 5 wholly searches the 'user 2' in a list and changes it to the 'user 8.' Next, the certification server 5 further executes the connection to a file server 4. The access list in the file server 4 including the 'user 2' is wholly searched and changed to the 'user 8'.

Description

DETAILED DESCRIPTION OF THE INVENTION [Field of Industrial Application] The present invention relates to an automatic registrant list management system, and more particularly to a system for registering individual names and group names that can access a directory of a file server.

[Prior art and its issues]

Recently, workstations have been significantly developed mainly for office use.

In order to accommodate the division of work and cooperation that takes place in the office, efforts are being made to share information within the office and improve work productivity.

However, some information must remain confidential. In order to maintain the confidentiality of information,
A registration management system that has an authentication server that registers and manages the names of individuals and groups that can access each directory on the file server, and allows access only to groups and individuals on the access list registered on the authentication server. Proposed.

By the way, in such conventional systems, if you want to change or delete an individual name or group name registered and managed by an authentication server, you can change the name of all groups containing that individual (or group) in the authentication server. You must change (delete) the contents inside. Furthermore, if the individual or group managed by the authentication server is used for multiple directories on the file server, the access list for all directories that includes the individual (group) you want to change (delete) , same change (delete)
This requires a lot of time and effort, and there is a problem in that it is easy to miss work.

The present invention has been made in view of the above-mentioned circumstances, and aims to provide a registration management system that can easily and quickly respond to changes (or deletions) of registered names or registered group names. .

[Means to solve the problem]

Therefore, in the present invention, when there is a change in the registrant list of the authentication server, all access lists of the file server are automatically changed in accordance with the change.

Also, preferably, all changes to the list in the authentication server are automatically performed.

[Operation] According to the above configuration, in response to a change in the registrant list of the authentication server, all parts of the file server's access list including the person or group that have been changed are automatically found and changed. As a result, it is accurate and leak-free, and the workability is also extremely good.

(Example) Hereinafter, an example of the present invention will be described in detail with reference to the drawings.

FIG. 1 is a block diagram showing the system configuration of a registrant list automatic management system according to an embodiment of the present invention.

In this system, terminal devices such as a workstation 2 and a personal computer 3 are connected to a local area network 1, and a file server 4 and an authentication server 5 that provide information for providing information services to these devices are also provided. It's F! The authentication server 5 is configured such that only those who are authenticated and permitted to receive the information service of the directory in the authentication server 5 can receive the information service of the directory from the file server via a workstation, personal computer, etc. manages an individual registrant list 51 that lists the individual names of registrants and a group list 52 that lists group names, and each group can include individual names and other group names.

On the other hand, the file server maintains an access list of individual names and group names that are permitted to access each directory.

Then, when an instruction to change an individual name or group name is given, the authentication server searches all of the lists it maintains and automatically changes them, as well as automatically changes all the access lists in the file server. It is designed to be changed accordingly.

In addition, when a directory on a file server is accessed by an individual or small group name, the authentication server searches to see if that name is in the list, and if so, the file server A search is made to see if the name exists in the access list for that directory, and if so, access is allowed.

Next, this registered name list mortar! The operation of the IJ management system will be explained with reference to the flowchart shown in FIG.

First, the operator connects the workstation or personal computer terminal 2 to the authentication server (step 100), and issues an instruction to change the personal name (step 101). For example, if an instruction is given to change the personal name "User 2" to "User 8", the authentication server searches for all "User 2" in the list as shown in Figure 3 (step 1o2).
, is changed to "user 8" (step 1o3).

The authentication server then further performs a connection to the file server (step 104). and “User 2”
Find all the access lists in the file server, including
Step 106) (see Figure 4).

In this way, all the lists including the personal name for which change has been instructed are changed, and the personal name changing operation is completed.

Therefore, since the operator only needs to give instructions, changes can be made with extremely good work efficiency, and since no work is missed, there are no errors.

In the embodiment, the process of automatically changing the list in the authentication server and the access list in the file server is executed by the authentication server, but it may also be executed by a workstation.

〔Effect of the invention〕

As explained above, according to the registrant list automatic management system of the present invention, in response to a change in the registrant list of the authentication server, the access list of the file server also includes the individuals or groups that have undergone the change. Since all locations are searched and changed, workability is good and accurate and error-free management is possible.

[Brief explanation of the drawing]

FIG. 1 is a block diagram of the automatic registrant list management system according to the embodiment of the present invention, FIG. 2 is a flowchart of the system, and FIGS. 3 and 4 show authentication before and after the change, respectively. It is a diagram showing an example of the structure of a server and a file server. 1... Local area network, 2... Workstation, 3... Personal computer, 4... File server, 5... Authentication server. A... 11 Tonguchi Riichige Gou C... - Aku U Kai Henshi

Claims (1)

[Claims] A registrant list comprising a file server that stores and shares files, and an authentication server that manages a list of individuals or groups to permit access to each directory in the file server. Automatic management of registrant list, characterized in that the automatic management system is configured to automatically change or delete the access permission list of each directory in the file server when changing or deleting the list in the authentication server. system.