Access rights control device, access rights control method, and program

Abstract

To provide a file access authority control technique that can prevent leaving access authority to a file in an effective state without depending on an individual user's usage state.SOLUTION: An access authority control server (200) can instruct a management server (103) managing access authority to a file to change the access authority, and the access authority control server has: a file access authority storage unit (202) that stores user information linked to a user and file access authority information in association with each other; and an access authority processing unit (203) that, when receiving a predetermined event occurrence signal (S1) from the other system (SYS), transmits, to the management server (103), an instruction to invalidate the authority to the file based on the user information and the corresponding file access authority information stored in the file access authority storage unit (202).SELECTED DRAWING: Figure 2

Description

Technical Field

[0001] The present invention relates to a technique for controlling a user's access right to a file.

Background Art

[0002] A file, which is a collection of data with a certain purpose, is stored in a storage medium. In general, to restrict users who can access this file, access rights are set for the storage medium. For example, authentication is performed using the user's account identification information, and file access is permitted only when the authentication is successful. Many techniques have been proposed for enhancing security through such access control.

[0003] For example, the access control method disclosed in Patent Document 1 cooperates with the entrance and exit management system of the terminal installation room, and determines whether access to a file is permitted by combining the permitted time zone and the terminal ID in addition to the user ID and password.

[0004] A system for managing accounts that enables the use of a terminal in cooperation with entrance and exit management has also been proposed. For example, in Patent Document 2, after user authentication, if it is within the permitted usage time, entry into the computer room is permitted, and the computer can be used by registering the account of the IC card in the computer. When the use of the computer ends, the registered account is invalidated, and when the invalidation of the account is confirmed, exit is permitted. Further, the management system disclosed in Patent Document 3 permits entry into the security area by user authentication and activates the account, and strengthens security by stopping the account when the return deadline of the key for entry has passed.

Prior Art Documents

Patent Documents

[0005]

Patent Document 1

Patent Document 2

[0006] The system described above reads the user's IC card to confirm their departure or termination of terminal use, and then disables access to files or deactivates the terminal user account. However, there is a possibility that a user may leave without using their IC card, such as if they are accompanied by someone else or in an emergency. In this case, the state in which files can be accessed or the account that allows the use of the terminal remains active will be left unchecked. In other words, file access control and account management linked to entry and exit management can result in situations where others can access files, and the possibility of information leakage due to unauthorized access cannot be eliminated.

[0007] Furthermore, while Patent Documents 1-3 attempt to improve security by imposing restrictions on entry / exit times and usage time, this is merely time management under entry / exit management, and the possibility remains that files may be accessible or terminal user accounts may be left active if users leave without using an IC card. Moreover, restrictions on usage time are a significant constraint for each user, and it is undesirable for the system as it increases the control load.

[0008] Therefore, the present invention aims to solve the above problems and provides a file access permission control device, an access permission control method, and a program that can prevent situations in which file access permissions are left enabled regardless of the usage status of individual users. [Means for solving the problem]

[0009] To achieve the above objective, the present invention disables a user's file access rights in the event of a predetermined event that is independent of the user's actions but affects security, thereby preventing situations where file access rights are left enabled.

[0010] An access rights control device according to a first aspect of the present invention is an access rights control device that instructs a management device that manages file access rights to change the access rights, and is characterized by comprising: a storage unit that stores user information and file access rights information associated with a user in association with each other; and an access rights processing unit that, when it receives a predetermined event occurrence signal from another system, sends a command to the management device to invalidate the access rights to the file based on the user information and the corresponding file access rights information stored in the storage unit.

[0011] An access rights control device according to a second aspect of the present invention further stores activation information indicating that the storage unit has transmitted a command to the management device to activate access rights to the file based on the user information and corresponding file access rights information stored therein, and the access rights processing unit, upon receiving the predetermined event occurrence signal, transmits a command to the management device to invalidate access rights to the file based on the user information and corresponding file access rights information, which the activation information in the storage unit indicates has transmitted a command to the management device to activate access rights to the file.

[0012] A third aspect of the present invention is an access rights control device characterized in that the predetermined event occurrence signal is a signal indicating the occurrence of an external event that is independent of the user's operation.

[0013] A fourth aspect of the present invention is an access control device that is a security system for a building where an information terminal is installed that allows the other system to access the file, and the predetermined event occurrence signal is a security start signal.

[0014] A fifth aspect of the present invention is an access rights control device that is a virus detection system for information devices located in a building where an information terminal used by the other system to access the file is installed, and the predetermined event occurrence signal is a virus detection signal.

[0015] A sixth aspect of the present invention is an access rights control method for instructing a management device that manages file access rights to change the access rights, characterized in that a storage unit stores user information and file access rights information associated with a user in association with each other, a communication unit receives a predetermined event occurrence signal from another system, and when the access rights processing unit receives the predetermined event occurrence signal, it transmits a command to the management device to invalidate the access rights to the file based on the file access rights information stored in the storage unit.

[0016] A program according to a seventh aspect of the present invention is a program that causes a computer to function as an access rights control device that instructs a management device that manages file access rights to change the said access rights, and is characterized in that the computer implements the following functions: a function to store user information and file access rights information associated with a user in a storage unit in association with each other; and a function to send a command to the management device to invalidate the access rights to the file based on the user information and the corresponding file access rights information stored in the storage unit when a predetermined event occurrence signal is received from another system.

[0017] According to the first, sixth, and seventh aspects of the present invention described above, when a predetermined event occurrence signal is received from another system, the user's access rights to files can be invalidated based on file access rights information, thereby preventing situations where file access rights are left enabled regardless of the usage status of individual users.

[0018] According to the second aspect of the present invention described above, when a predetermined event occurrence signal is received, a command to invalidate the access rights to a file is sent to the management device based on the user information and corresponding file access rights information of the user information and corresponding file access rights information that indicate that a command to validate access rights to a file has been sent to the management device, which are stored in the storage unit. This has the effect of invalidating only the access rights of users whose access rights are currently valid, streamlining the invalidation process and reducing the load on the management device.

[0019] According to the third aspect of the present invention described above, the predetermined event occurrence signal can be made into a signal indicating the occurrence of an external event that does not depend on the user's operation. This has the effect of preventing situations in which access rights to a file are left in an active state and the file is accessed illegally.

[0020] According to the fourth aspect of the present invention described above, the other system is a security system for a building where an information terminal for accessing the file is installed, and the security start signal can be used as the predetermined event occurrence signal. This ensures that access privileges are disabled when the user leaves work and security for the building is started, thereby preventing situations where access privileges to the file are left active and unauthorized access to the file is prevented.

[0021] According to the fifth aspect of the present invention described above, the other system is a virus detection system for information devices located in a building where an information terminal that accesses the file is installed, and a virus detection signal can be used as the predetermined event occurrence signal. As a result, when a virus is detected, access privileges are disabled, which has the effect of preventing the spread of viruses by leaving access privileges to the file enabled. [Effects of the Invention]

[0022] As described above, according to the present invention, since the invalidation of the file access authority is executed triggered by the occurrence of a predetermined event from another system, it is possible to surely prevent a situation where the file access authority is left valid.

Brief Description of the Drawings

[0023] [Figure 1] FIG. 1 is a block diagram showing a schematic configuration of a file access authority control system using an access authority control server according to an embodiment of the present invention. [Figure 2] FIG. 2 is a block diagram showing the configuration of the access authority control server according to the present embodiment. [Figure 3] FIG. 3 is a block diagram showing a configuration example of the management server in FIG. 1. [Figure 4] FIG. 4 is a diagram showing an example of storage information of a file access authority rule storage unit in the management server. [Figure 5] FIG. 5 is a flowchart showing the operation of the access authority control server according to the present embodiment. [[ID= XXI]] [Figure 6] FIG. 6 is a flowchart showing the operation of the access authority control server when a predetermined event occurs according to the present embodiment. [Figure 7] FIG. 7 is a sequence diagram showing the operation of the file access authority control system in the present embodiment. [Figure 8] FIG. 8 is a block diagram showing an example of a file access authority control system using an access authority control server according to the present embodiment. [Figure 9] FIG. 9 is a block diagram showing another example of a file access authority control system using an access authority control server according to the present embodiment.

Embodiments for Carrying Out the Invention

[0024] [[ID=XXIX]] Embodiments and examples of the present invention will be described in detail below with reference to the drawings. However, the components described in the following embodiments and examples are merely illustrative and are not intended to limit the technical scope of the present invention to them alone.

[0025] 1. One Embodiment 1.1) System Configuration As illustrated in Figure 1, the user possesses an IC card 101, such as an employee ID card, and user authentication is performed using the card information registered on the IC card 101. This allows for management of entry and exit to the office building, entry and exit to designated areas, terminal usage, and access to files. However, the input means for user authentication are not limited to the IC card 101 and card reader 102. In addition to the IC card, users may be authenticated using, for example, biometric authentication, facial recognition, a password, or a combination thereof.

[0026] An access rights control system according to one embodiment of the present invention comprises a card reader 102 as an input means for inputting card information, a management server 103 as a management device for managing file access rights, a file 104 for which access permission is to be obtained, an access terminal 105 for a user to access file 104, an access rights control server 200 as an access rights control device, and another system SYS that outputs a predetermined event occurrence signal that triggers a change in access rights.

[0027] The card reader 102 has the function of reading card information from the IC card 101 and the function of communicating with the access authority control server 200. The card reader 102 may be a standalone card reader installed at the entrance of a building or office, or it may be a mobile communication terminal such as a mobile phone owned by the user, or a card reader application installed on the access terminal 105 described later. The card reader 102 is connected to the access authority control server 200 via a communication network, and user authentication communication is performed as described later.

[0028] The management server 103 can communicate with the access rights control server 200 via a communication network. The management server 103 processes file access permission requests from the access terminal 105 and, as described later, has the function of coordinating with the access rights control server 200 to determine whether or not to grant each user file access permission to file 104.

[0029] File 104 is a collection of data with a specific purpose and is stored on any storage medium accessible from the access terminal 105. Furthermore, a rule ID is embedded in part of the data in File 104. This rule ID is used to identify a single definition from among multiple definitions of file access rights stored in the access control server 200 and management server 103 (described later) in combination with a user ID (described later). The access control server 200 is configured with user IDs (corresponding to the user information of this invention), and rule IDs and file access rights (corresponding to the file access rights information of this invention) associated with those user IDs. Multiple user IDs may be associated with a single rule ID. However, only one set of file access rights is associated with a single combination of rule ID and user ID. File 104 is, for example, a database that should be kept confidential for a certain company, and only authenticated users with valid access rights can access it through the access terminal 105.

[0030] The access terminal 105 is an information terminal that can communicate with the management server 103 and file 104 via a communication network, and can be a desktop / mobile computer, a smartphone or other portable communication terminal. Application software for using the data in file 104 is pre-installed on the access terminal 105. In addition, the user ID of the user who holds the license to use the application software is pre-stored in the access terminal 105. The user ID is, for example, the user's email address. The access terminal 105 may also have a function to identify the current user using an IC card 101, or it may be a computer or portable communication terminal equipped with the application for the card reader 102 as described above.

[0031] The access rights control server 200 has the function of enabling a user's access rights to files through communication with the management server 103, and the function of instructing the management server 103 to invalidate the user's access rights to files when it receives a predetermined event signal S1 from another system SYS. Further details will be described later.

[0032] The external system SYS is an external system that detects the occurrence of predetermined events that may affect file security, but which do not depend on the individual actions of the user. When a predetermined event occurs, the external system SYS sends a predetermined event occurrence signal S1 to the access rights control server 200 via the communication network, which triggers the revocation of access rights. Such predetermined event occurrence signals S1 may include, for example, a security activation signal for the entire building or office, a signal that all office staff have finished leaving work, a virus detection signal from antivirus software installed in the company or office, or an alarm signal indicating an emergency such as a fire in the building. It may be any one of these signals or a combination of multiple signals.

[0033] 1.2) Access Control As illustrated in Figure 2, the access rights control server 200 has a communication unit 201 and can communicate with the card reader 102, the management server 103, and other systems SYS. The access rights control server 200 further has a file access rights storage unit 202, an access rights processing unit 203, and a control unit 204, which implement the functions described later.

[0034] The file access permission storage unit 202 stores user information, including card information which is information from the IC card 101, the associated user ID (corresponding to the user information of the present invention; an email address is shown here as an example), username, file access permissions to be granted to the user, rule ID which is the identification ID of those file access permissions, and a final command representing the content of the permission activation / deactivation communication that was last performed to the management server 103.

[0035] For example, the card information "C001" stores the user ID "AA@xxx.jp", the username "AA", the rule ID "R01", and the file access permissions "Read: Allowed, Write: Not Allowed", and the fields are blank, indicating that no commands have yet been issued to the management server 103. In the diagram, "Read" is represented by "R" and "Write" by "W".

[0036] Furthermore, the card information "C002" stores "BB@xxx.jp" as the user ID, "BB" as the username, "R01" as the rule ID, and "Read: Allowed, Write: Allowed" as the file access permission, and is in a blank state, indicating that no commands have yet been issued to the management server 103.

[0037] Furthermore, the card information "C003" stores the user ID "CC@yyy.jp", the username "CC", the rule ID "R02", and the file access permissions "Read: Allowed, Write: Allowed", and the last command issued to the management server 103 is recorded as "Enabled", indicating that it was the permission activation command S2.

[0038] Thus, the file access permission storage unit 202 stores a set of file access permissions associated with one combination of rule ID and user ID.

[0039] Note that the functional configuration shown in Figure 2 is just one example. The access rights control server 200 has a storage unit and a processing unit (processor), and the functions of the access rights processing unit 203 and the control unit 204 can also be realized by executing a program stored in memory (not shown) on the processor.

[0040] As illustrated in Figure 3, the management server 103 has a communication unit 103a and can communicate with the access authority control server 200 and the access terminal 105. The control unit 103b updates the contents of the file access authority rule storage unit 103c based on the authority activation command S2 and authority deactivation command S3 received by the communication unit 103a from the access authority control server 200.

[0041] Furthermore, when the communication unit 103a receives a file access permission request from the access terminal 105, the control unit 103b sends a notification to the access terminal 105 indicating either file access permission or denial of access permission, based on the contents of the file access permission request and the contents of the file access permission rule storage unit 103c.

[0042] The file access permission rule storage unit 103c stores file access permissions associated with rule IDs and user IDs. When the management server 103 receives an permission activation command S2 from the access permission control server 200, it associates the rule ID, user ID, and file access permission contents included in the permission activation command S2 and stores them in the file access permission rule storage unit 103c.

[0043] For example, in Figure 3, the file access permission rule storage unit 103c stores the rule ID "R02", user ID "CC@yyy.jp", and file access permission "Read: Allowed, Write: Allowed" in association with each other. This information was stored in the file access permission storage unit 202 of the access permission control server 200 upon receipt of the permission activation command S2, which corresponds to the final command being stored as "enabled".

[0044] When the management server 103 receives a permission activation command S2 from the access permission management server 200, which includes the content of rule ID "R01", file access permission "Read: Allowed, Write: Not Allowed", and user ID "AA@xxx.jp", it associates rule ID "R01", user ID "AA@xxx.jp", and file access permission "Read: Allowed, Write: Not Allowed" with each other and stores them in the file access permission rule storage unit 103c.

[0045] Furthermore, when the management server 103 receives a permission activation command S2 from the access permission management server 200, which includes the contents of rule ID "R01", file access permission "Read: Allowed, Write: Allowed", and user ID "BB@xxx.jp", it associates rule ID "R01", user ID "BB@xxx.jp", and file access permission "Read: Allowed, Write: Allowed" with the file access permission rule storage unit 103c and stores them in addition. As a result, the file access permission rule storage unit 103c is in the state shown in Figure 4.

[0046] Furthermore, when the management server 103 receives a permission invalidation command S3 from the access permission management server 200, it deletes the file access permission and user ID included in the permission invalidation command S3 from the file access permission rule storage unit 103c, corresponding to the rule ID included in the permission invalidation command S3.

[0047] For example, when the file access permission rule storage unit 103c is in the state shown in Figure 4, and receives a permission invalidation command S3 for rule ID "R01", file access permission "Read: Allowed, Write: Not Allowed", and user ID "AA@xxx.jp", the control unit 103b deletes the corresponding content from the file access permission rule storage unit 103c. Furthermore, when receives a permission invalidation command S3 for rule ID "R01", file access permission "Read: Allowed, Write: Allowed", and user ID "BB@xxx.jp", the control unit 103b deletes the corresponding content from the file access permission rule storage unit 103c. As a result, the file access permission rule storage unit 103c is in the state shown in Figure 3.

[0048] The operation of the access rights control server 200 will be described below with reference to Figures 5 and 6.

[0049] In Figure 5, the control unit 204 checks whether it has received card information from the card reader 102 (step 301). If it has not received the information (NO in step 301), it terminates the process. On the other hand, if it has received card information from the card reader 102 (YES in step 301), it checks whether the user ID corresponding to the card information is stored in the file access authority storage unit 202 (step 302). If the user ID corresponding to the card information is stored (YES in step 302), it notifies the card reader 102 of successful user authentication and sends the authority activation command S2, which includes the rule ID and file access stored in association with the card information, to the management server 103 (step 303).

[0050] Subsequently, the system waits for a notification of successful authorization activation from the management server 103 (NO in step 304). Upon receiving the notification of successful authorization activation (YES in step 304), the system updates the last command stored in association with the card information to "enabled" and sends a file access permission notification, including the details of the file access permission, to the card reader 102 (step 305). On the other hand, if the user ID corresponding to the card information is not stored in step 302 (NO in step 302), the system notifies the card reader 102 that the card information is invalid (step 306) and terminates the process.

[0051] In Figure 6, the control unit 204 determines whether or not it has received a predetermined event signal S1 from another system SYS (step 401). If it has not received the signal (NO in step 401), it terminates the process. If it receives the predetermined event signal S1 (YES in step 401), the control unit 204 reads information from the file access permission storage unit 202 indicating that the final command is "enabled" (step 402). Based on the read information, the access permission processing unit 203 sends an authorization invalidation command S3 to the management server 103 to invalidate the corresponding file access permission (step 403). In the case of the file access permission storage unit 202 as illustrated in Figure 2, the information associated with card information C003 is read, and based on that information, an authorization invalidation command S3 is sent to invalidate the corresponding file access permission.

[0052] Subsequently, the system waits for a notification of successful authorization invalidation from the management server 103 (NO in step 404), and upon receiving the notification (YES in step 404), the process terminates. As a result, there are no longer any activated file access permissions associated with any of the card information registered in the file access permission storage unit 202, so after the predetermined event occurs, no user will be able to obtain permission to access file 104 from the management server 103.

[0053] The control unit 204 alternately repeats the processes shown in Figures 5 and 6 above.

[0054] 1.3) System Operation As illustrated in Figure 7, when the card reader 102 reads card information from the user's IC card 101, it sends an authentication request signal containing the card information to the access authority control server 200 (step 501). When the access authority control server 200 receives the authentication request signal from the card reader 102, it performs the processing consisting of steps 301 to 306 shown in Figure 5 based on the card information contained in the authentication request signal to check if the card information is stored, and if it is stored, it sends an authentication success notification to the card reader 102 (step 502). When the card reader 102 receives the authentication success notification, it may, for example, unlock a door or open a gate to allow the user to enter. At that time, it may also record the authenticated information on the user's IC card 101. After step 502, the access authority control server 200 sends an authorization activation command S2 containing the rule ID and file access rights associated with the card information to the management server 103 (step 503).

[0055] When the management server 103 receives the authorization activation command S2, it activates the access rights by storing the rule ID and file access rights included in the authorization activation command S2 in the file access rights rule storage unit 103c (step 504), and sends an authorization activation success notification to the access rights control server 200 (step 505). When the access rights control server 200 receives the authorization activation success notification from the management server 103, it sends an authorization activation success notification to the card reader 102 (step 506).

[0056] Next, when a user accesses file 104 using application software installed on access terminal 105, the application software reads the rule ID from file 104 (step 507) and sends a file access permission request to management server 103, which includes the rule ID and the user ID associated with the application software usage license stored on the access terminal (step 508).

[0057] When the management server 103 receives a file access permission request from the access terminal 105, it extracts an access permission from the access permissions stored in the file access permission rule storage unit 103c that matches both the user ID and the rule ID included in the file access permission request, and notifies the access terminal 105 of the file access permission based on that access permission (step 509). As a result, the user can access the file 104 using the application software on the access terminal 105 and use it for viewing, editing, etc. (step 510). Other users can also access the file 104 through other access terminals once their access permission is stored in the file access permission rule storage unit 103c of the management server 103 using the same procedure, and use it for viewing, editing, etc.

[0058] Next, when the system is running as described above, if the access rights control server 200 receives a predetermined event occurrence signal S1 from another system SYS (step 601), the access rights control server 200 reads from the file access rights storage unit 202 information consisting of a combination of user ID, rule ID, and file access rights whose final command is "enabled" indicating that file access rights have been enabled (step 602), and sends an access rights invalidation command S3 containing this information to the management server 103 (step 603).

[0059] When the management server 103 receives the authorization invalidation command S3, it invalidates the file access rights by deleting the user ID, rule ID, and information corresponding to the file access rights included in the authorization invalidation command S3 from the file access rights rule storage unit 103c (step 604), and sends an authorization invalidation completion notification to the access rights control server 200 (step 605).

[0060] When the access control server 200 receives a notification from the management server 103 that the privilege has been deactivated, it updates the final command stored in the user information storage unit 202, which corresponds to the information read in step 602, from "enabled" to "invalid" (step 606). As a result, even if a user or a third party subsequently accesses file 104 using the same IC card 101 and access terminal 105 and reads the rule ID (step 607), and requests file access permission from the management server 103 (step 608), a notification of no access permission will be returned (step 609), and they will not be able to view, edit, or otherwise use the contents of file 104.

[0061] 1.4) Effects As described above, according to one embodiment of the present invention, file access rights can be deleted in the event of an external event that may affect the security of file 104, without requiring any operation of the IC card 101 or access terminal 105 by the user, thereby preventing a situation in which file access rights are left in an active state.

[0062] Furthermore, this embodiment can also be applied to the conventional system already described. For example, if a conventional system controls user access rights to files by reading the user's IC card to confirm that the user has left the room where the terminal is installed or has finished using the terminal, and then disabling access to files thereafter, applying this embodiment to this conventional system can prevent situations where file access rights remain active even if, for example, the user forgets to perform the exit operation or intentionally fails to perform it. In addition, since an external event is used as the trigger for deleting access rights, it does not place an excessive load on the management server 103.

[0063] 2. Examples The aforementioned other system SYS only needs to be a system that can notify of the occurrence of specified external events that may affect security. Such specified external events include the activation of security systems, the detection of computer viruses, and the occurrence of emergencies such as fires. The following will explain the cases of security activation and computer virus detection as specified events.

[0064] As illustrated in Figure 8, the access control system equipped with the access control server 200 described above uses the office security system SYS1 as the other system SYS described above. The security system SYS1 is connected to the access control server 200 via a dedicated line of the network NW, which is an external network such as the internet or an internal network such as the company LAN.

[0065] The security system SYS1 can have a standard system configuration, for example, it may include multiple monitoring devices installed on office doors and windows to monitor for intruders, an operation panel for various settings, and a security control unit for controlling the entire system. When the security system SYS1 operates at night when the office is closed, it sends a security start signal S1, which is a signal indicating the occurrence of a predetermined event, to the access rights control server 200 via a dedicated line on the network NW when security begins.

[0066] For example, when all employees have left the office and the last person to leave locks the office and activates security, the security system SYS1 sends a security activation signal S1. The access rights control server 200 then executes the access rights invalidation control described above in response to the received security activation signal S1. Therefore, it is possible to prevent situations where an employee has obtained access permission to a file and used it, but the file access permission remains active even after the employee has left the office. Furthermore, since the activation of security is treated as an external event and access rights invalidation control is performed, it does not place an excessive load on the management server 103.

[0067] As illustrated in Figure 9, the access control system equipped with the access control server 200 described above uses the virus detection system SYS2 as the other system SYS described above. The virus detection system SYS2 performs virus detection using virus detection software installed on access terminals and network devices in office 106, for example, and sends a virus detection signal S1 when a virus is detected.

[0068] The access rights control server 200 executes the access rights invalidation control described above upon receiving the virus detection signal S1. Therefore, even if a user forgets to exit the room or intentionally fails to do so, it is possible to prevent the file access rights from remaining active and to prevent the spread of viruses through the use of access terminals. Since the access rights invalidation control is performed in response to virus detection as an external event, it does not place an excessive load on the management server 103.

[0069] 3. Other Embodiments In the embodiment illustrated in Figure 1, the card reader 102, management server 103, access terminal 105, and access authority control server 200 are configured as separate devices, but the present invention is not limited to this. These can be mounted on a single computer, or they can be distributed across multiple devices and connected to a network.

[0070] Furthermore, while the user was authenticated using an IC card 101 in this embodiment and example, the invention is not limited to this, and can be combined with password input, facial recognition, biometric authentication, etc.

[0071] Furthermore, the predetermined event occurrence signal S1 only needs to indicate the occurrence of an event that triggers the revocation of access privileges, and can also be the logout signal of the operating system (OS) of the access terminal 105 that has enabled access privileges. [Industrial applicability]

[0072] This invention is applicable to all computer systems that protect files by setting access permissions. [Explanation of Symbols]

[0073] 101 IC card 102 Card Reader 103 Management Server 104 files 105 Access Terminals 106 Office 200 Access Control Servers 201 Communications Department 202 File Access Permissions Storage 203 Access Rights Processing Unit 204 Control Unit SYS Other Systems SYS1 Security System SYS2 Virus Detection System

Claims

1. An access rights control device that instructs a management device that manages file access rights to change the access rights, A storage unit that stores user information and file access permission information associated with a user, An access rights processing unit, upon receiving a predetermined event occurrence signal from another system, sends a command to the management device to invalidate access rights to the file based on the user information and corresponding file access rights information stored in the storage unit. An access control device characterized in that it has the following: the other system is a virus detection system for information devices located in a building where an information terminal that accesses the file is installed, and the predetermined event occurrence signal is a virus detection signal.

2. The storage unit further stores activation information indicating that it has sent a command to the management device to activate access rights to the file based on the user information and corresponding file access rights information stored within itself. The access rights control device according to claim 1, characterized in that when the access rights processing unit receives the predetermined event occurrence signal, it transmits a command to the management device to invalidate the access rights to the file based on the user information and the corresponding file access rights information, which indicate in the storage unit that the activation information has transmitted a command to the management device to activate the access rights to the file.

3. An access permission control method for instructing a management device that manages file access permissions to change the access permissions, The memory unit stores user information and file access permission information associated with the user, The communications unit receives a signal indicating the occurrence of a predetermined event from another system. When the access rights processing unit receives the predetermined event occurrence signal, it sends a command to the management device to invalidate the access rights to the file based on the user information and corresponding file access rights information stored in the storage unit. The aforementioned other system is a virus detection system for information equipment located within a building where information terminals accessing the aforementioned file are installed, and the aforementioned predetermined event occurrence signal is a virus detection signal. A method for controlling access rights, characterized by the following features.

4. The storage unit further stores activation information indicating that it has sent a command to the management device to activate access rights to the file based on the user information and corresponding file access rights information stored within itself. When the access rights processing unit receives the predetermined event occurrence signal, it sends a command to the management device to invalidate the access rights to the file, based on the user information and the corresponding file access rights information, which indicate in the storage unit that the activation information has sent a command to the management device to activate the access rights to the file. The access control method according to feature 3.

5. A program that causes a computer to function as an access rights control device that instructs a management device that manages file access rights to change the said access rights, A function to store user information and file access permission information associated with a user in a storage unit, When a virus detection signal is received from a virus detection system of information equipment located in a building where an information terminal accessing the aforementioned file is installed, the system has a function to send a command to the management device to invalidate access rights to the aforementioned file based on the user information and corresponding file access rights information stored in the storage unit. A program characterized by causing the computer to implement the above.

Images