JPS5917650A - File security method - Google Patents

Abstract

(57) [Summary] This bulletin contains application data before electronic filing, so abstract data is not recorded.

Description

DETAILED DESCRIPTION OF THE INVENTION (a) Technical Field of the Invention The present invention relates to a file security system for controlling access to highly confidential files.

(b) Prior art and problems With the spread of on-twin systems, it has become easier to access (read/write) files on the center side from terminals.

In addition, the ministry of terminal equipment management has come to include not only full-time operators, but also people from many different ranks, including managers. Therefore, since anyone can update the data on the center 14117 isle, it is necessary to maintain the confidentiality of highly sensitive files. This rounding specific code should be informed to each user in advance, and when this code is input, A commonly used method is to allow access to important files only when the However, this conventional method has the disadvantage that the operating efficiency of the system is reduced because the code must be updated periodically (every short period) in order to prevent the leakage or theft of the code.

(c) Purpose of the invention The present invention has been made to solve the above-mentioned drawbacks.
The objective is to provide a file security protection method that facilitates security protection of center files.

(d) Structure of the Invention The present invention is characterized in that a processing device having a file and a terminal device having a card reading means are connected, and the processing device identifies the identification code of the card input from the terminal device. In a system that allows access to files, there is a first rank that allows reading/storage of the file, a second rank that only allows reading of the file, and a third rank that prohibits access to the dead file. In addition to assigning the rank to the card, when the type code of rank #11 is stored, the ID code corresponding to the assigned rank is stored, the above-mentioned rank is assigned to the sales terminal. Allows reading/writing of the file, or when the type of the second rank = - mode, only reading of the file is set to Ff, or when the third rank, access to the file is restricted to Vr prefecture. This is a file security protection method that is characterized by

Further, the present invention provides a type for indicating the rank; This is a security protection method for files.

(e) Examples of the invention The present invention will be explained below with reference to the drawings. The drawing is a block diagram illustrating an embodiment of the present invention, in which 1 is a display section, 2
Fi keyboard, 3 sticks, 4.4' card, 5+
'i display control section, 6 is a collation section, 7.11 is a table, 8
Erase file device, 9 is a control unit, 10 is a discrimination unit ~ A e
B-Cs D is type food, Fl, F□F island is file number, HyHt lHI eHs lH41HI s
Hn is 3-Password, I # Lt Its Ist Ill
Ill In is the identification code, K is the input key, 1R is the reading column, W is the Toyogome column, 61s ilg is the rank column, fl, f,
, f is a file. Table 7 in the drawing
The PIN numbers H1 to Hn and the corresponding identification codes E, -In are stored, and the rank column e1 shows the rank assigned to each card 4 (identification code E, -In). Type codes A-D are stored. On the other hand, table 11 includes data (g/no access to files F1 to Fg) corresponding to the type codes A to D.
"1" or "0") is written.

In the drawing, when the card 4 is inserted into the reading section 3 after inputting the password H1 by operating the keyboard 20 input key K, the read identification code, for example, is sent to the IxF'i verification section 6. Referring to the collation section 6 and table 7,
In addition to checking the password with the card H1 and the identification code 11, the user of the Gorge card is ranked "A" (type code: A).
), and the discrimination unit 10 identifies this type;
Send to. The discrimination unit 10#i checks the rank Kusunoki el of the table 11, and each column of the category 4-different code A, that is, 1ti4 R#Vb
Each data in fts it@ and f3 is read and determined. In this case, since data rlJ is written in all columns, the user of the card can access the file y, =Fl in the file storage f8, and can not only read the file but also access the file. Writing is also allowed. When the determination unit 10 notifies the control unit 9 of this, the display unit 1 displays permission to access the files F1 to Fs, so that the user can select the desired file by operating the keyboard 2. The data in this file can be called up and displayed on the display section 1, and the data in this file can also be updated. As shown in Table 7, in the embodiment, the identification code Is (1E111 am
) and construction (same <US) users are ranked "B",
Also, identification: -Doe◆ (PIN code 瓜)
6) user has 2nd link “C” and identification suit In(
A user with password Hn) is assigned rank rDJ. Therefore, as shown in Cheagle 11, rank rBJ
H-7-1 A/Fv (Jliil f
+ is "II) and rmeF, (llmf.

is "1") (column R is "1"), and if rank is "C", only file F1 is allowed to be read, and in the case of a 2-link rDJ, file F1 ~All access to F8 is restricted to M (mRIW#
fs r ft and f are all "0").

As other embodiments of the present invention, the above ranks "A" to r
There is a way to record the type codes A to D indicating DJ on the card in advance.In addition to Fi and identification code E, for example, Vf and type code A are recorded on card 4' in the drawing. ’ is input, the verification section 6F
After checking the i identification code (I) and the PIN number 0 (confirming that it is the correct user), the type code A from the card 4' is sent to the discrimination section 10, which determines whether the code is 0 or less. is the same as "↓" above, so the explanation will be omitted.

(f) Effects of the Invention As described above, the present invention has means for controlling access to files by card users of terminal devices by ranking them, thereby improving system operational efficiency and increasing confidentiality. It has the advantage of increasing

[Brief explanation of drawings]

The drawing is a block diagram illustrating an embodiment of the present invention,
The symbols used in the figure are as follows. 1 is the display section, 2Fi keyboard, 3 is the reading section, 4゜4'
is a card, 5 is a display control unit, 6 is a collation unit, 7.11 is a table, 8 is a file device, 9 is a company control unit, 10 is a cane discrimination unit, A, B, C, D are type codes, Fl+ Fts F8
is the file number, Ht H+ + Hs + Har
H4p L @ Hn is the password, I e Is *
11+ In+ I41 II r In is the identification code, K is the input key 1R grab/read, W is the write/write, ・8. e!
is a rank column, and fop ft@fl indicates file wandering.

Claims (2)

[Claims] (1) In a system in which a processing device having a file is connected to a terminal device having a card reading means, and the processing device identifies the identification code of the card input from the terminal device to allow access to the file. , a first rank that allows reading/writing of the file, a second rank that only allows reading of the file, and a third rank that prohibits access to the file; is assigned to the card, and a table storing a type code indicating the rank and a corresponding identification; The processing device determines,
When loading the first rank type, the terminal is allowed to read/write the file, and the first rank is 1g.
A file security protection system characterized in that when the type code is of rank 2, only reading of the file is permitted, and when the type code is of rank 3, access to the file is prohibited. (2) The file security system according to claim 1, characterized in that a type code indicating the rank is recorded on the card.