JPH0658651B2 - Security device - Google Patents

Description

DETAILED DESCRIPTION OF THE INVENTION Object of the Invention (Field of Industrial Application) The present invention relates to a security device suitable for use in a workstation or the like for which a semi-unlimited hierarchical file mechanism is accessed.

(Prior Art) Conventionally, when a file is specified in a workstation that has accessed a semi-unlimited hierarchical file mechanism, if a password is set for the file,
In order to prevent the password input from being seen by a third party, a method of separating the file designation field and the password designation field on the screen and making the password designation field a non-display attribute is generally adopted.

However, in the semi-unlimited hierarchical file system, since the password is specified for each hierarchy, the number of passwords must be specified for the level (depth) of the hierarchy. At this time, as described above, it is impossible to hide the password from a third party as a single hidden field different from the file specification.
The problem arises that password security cannot be established.

(Problems to be Solved by the Invention) As described above, in the conventional semi-unlimited hierarchical file system, the password is not shown to a third party as a single hidden field different from the file specification. Therefore, there is a problem that the password protection cannot be established.

According to the present invention, when a semi-unlimited hierarchical file is specified, even if a password is specified for each hierarchy, all of these can be protected from a third party, and in a semi-unlimited hierarchical file, confidentiality can be protected by a password. An object of the present invention is to provide a security device that can realize a reliable system that can be reliably performed.

[Structure of the Invention] (Means for Solving the Problems) According to the present invention, in a device for performing semi-unlimited hierarchical file designation by file designation information in which a file name and a password are mixed, input file designation information A means for retrieving the password from the, a means for converting the retrieved password into other specific character information, and a means for displaying the converted specific character information at a fixed position in the file designation field on the display screen. It has a structure.

(Function) When a semi-unlimited hierarchical file is specified, a password is retrieved from the input file specification information, this password is converted to other specific character information, and displayed at a fixed position in the file specification field on the display screen. . Therefore, when a semi-unlimited hierarchical file is specified from a device such as a workstation, even if a password is specified for each layer, it is not recognized by a third party and reliable confidential protection is established. It

(Embodiment) FIG. 1 is a block diagram showing a configuration according to an embodiment of the present invention.

In the figure, reference numerals 1 to 5 each constitute a component on the workstation side, and 1 is a CRT terminal main body with a keyboard (hereinafter simply referred to as a terminal). 1a is a character string (A $ P1 / B $ P2 in the figure) of the file designation information (file designation mixed type password) input from this terminal 1.
/ C $ P3 is shown as an example), and here, the specific character "$" indicating the beginning of the password is added to the beginning of the password, and the specific character "/" is added as a delimiter of the hierarchical file. ing.

Reference numeral 2 denotes a password search mechanism that searches for a password mixed in the file designation information 1a input from the terminal 1, and here, after the specific character "$", the specific character "/" indicating the delimiter of the hierarchical file is displayed. Alternatively, each character up to the last (blank) in the file specification is recognized as a password.

Reference numeral 3 is a password mask mechanism for replacing the password searched by the password search mechanism 2 with a special character. Here, the character string of each password is masked to a special one character "?" Common to each password and outputted. It

Reference numeral 4 denotes a password display mechanism for controlling output display of the password masked by the password mask mechanism 3 at a fixed position in a file designation field displayed on the display screen of the terminal 1.

Reference numeral 5 is a file designation transfer mechanism that transfers the file designation information input from the terminal 1 to the main body side that manages the file, and receives the information from the main body side and sends it to the terminal 1.

6 and 7 are components of the main body side, respectively.
Is a central control unit consisting of an application program and an OS (operating system), which receives the file designation information input from the terminal 1 through the file designation transfer mechanism 5 and decodes it to generate a semi-unlimited hierarchical file 7. to access.

The operation of the embodiment will now be described with reference to FIG.

When a file is designated, the input guide information and the file designation field are displayed in a predetermined form on the display unit (CRT) of the terminal 1, and a file with a password mixed from the keyboard (KB) is displayed according to the displayed input guide information. The specified information la is input. The password-specified file specification information 1a input from the terminal 1 is sequentially sent to the password retrieval mechanism 2 and the file specification transfer mechanism 5 for each character.

The password search mechanism 2 uses the input file specification information 1a
When the specific character "$" is searched from the character string of, the next character is recognized as the password. The recognition of the password is continued until the specific character "/" indicating the delimiter of the hierarchical file or the final space is detected.

The characters recognized as a password by the password search mechanism 2 in this manner are sent to the password mask mechanism 3.

The password mask mechanism 3 replaces the character string of the password received from the password search mechanism 2 with a special one character "?" Common to each password, and sends it to the password display mechanism 4.

When the password display mechanism 4 receives the above character "?" From the password mask mechanism 3, this character font is displayed at a fixed position in the file designation field displayed on the display screen of the terminal 1.

On the other hand, the password-specified file specification information 1a input from the terminal 1 is stored in the file specification transfer mechanism 5 and then transferred to the central controller 6 on the main body side. Central control unit 6
The application program receives the file designation information 1a, recognizes the designated file name and password, and accesses the hierarchical file 7 under the control of the file management system of the OS.

Also, the password-specified file specification information sent from the central control unit 6 is transferred to the file specification transfer mechanism 5 on the workstation side, and then sent to the password search mechanism 2 via the terminal 1 to output the password in the same manner as above. The string is searched. Further, the character string of the password retrieved by the password retrieval mechanism 2 is replaced with the special one character "?" Common to each password through the password mask mechanism 3 and the password display mechanism 4 as described above, and the display screen of the terminal 1 is replaced. Displayed above.

By thus controlling the display of the password associated with the file specification, the file can be smoothly specified without the third party knowing the password.

That is, in the semi-unlimited hierarchical file specification, it is necessary to be able to specify the password for each hierarchy.

However, if one field on the display screen is assigned to one password, the number of passwords is naturally limited. On the other hand, according to the password display control means according to the present invention as described above, a semi-unlimited hierarchical file can be designated in a single field on the display screen by specifying a file designation and a password and semi-unlimited number of files can be designated.
Moreover, the password is never known to a third party, and highly reliable confidentiality protection can be achieved.

[Effects of the Invention] As described in detail above, according to the security device of the present invention, an input file is input in a device that performs semi-unlimited hierarchical file designation by file designation information in which a file name and a password are mixed. Means for retrieving a password from designated information, means for converting the retrieved password into other specific character information, and means for displaying the converted specific character information at a fixed position in a file designation field on the display screen. With this configuration, when a semi-unlimited hierarchical file is specified, even if a password is specified for each hierarchy, all of these can be protected from a third party, which allows a semi-unlimited hierarchical file to be protected. It is possible to realize a highly reliable system that can securely protect confidentiality with a password.

[Brief description of drawings]

FIG. 1 is a block diagram showing a configuration according to an embodiment of the present invention. 1 ... Terminal (CRT terminal with keyboard), 2 ...
Password search mechanism, 3 ... Password mask mechanism, 4
...... Password display mechanism, 5 ...... File designated transfer mechanism, 6 ...... Central control unit, 7 ...... Hierarchical file, 1a ......
File specification information.

Claims (1)

[Claims] 1. A device having a hierarchical file mechanism as an access target, means for inputting file designation information in which a file name of each layer and a password are mixed, and a file having a specific character display digit of a masked password. A means for displaying a designated field, a means for retrieving the first character indicating the beginning of the password and a second character denoting the end of the password for each character from the input file designation information, and means for retrieving the password, and this retrieval A security device comprising means for converting the generated password into other specific character information and means for displaying the converted specific character information in a specific character display digit of the file designation field. .