JPH0228741A - System for controlling state of input output device - Google Patents

Abstract

(57) [Summary] This bulletin contains application data before electronic filing, so abstract data is not recorded.

Description

DETAILED DESCRIPTION OF THE INVENTION "Field of Industrial Application" This invention is applicable to unauthorized access or issuance of erroneous input/output commands (secondarily, leakage of the contents of files stored in the input/output device). A state control method for input/output devices that prevents files from being destroyed (1).

"Prior Art" In computer systems, many jobs access many files. For this reason, methods have been taken to prevent file destruction and information leaks by setting passwords and access rights for important files (2) and managing them with software (2).

However, maintenance test programs for input/output devices are not managed by the software mentioned above (two people can access output devices). For this reason, particularly important files (two people can be accessed when transferring devices). This method involves manually locking the target device with the key used to secure the two operating parts, but in a large-scale system with hundreds of input/output devices, each device must be locked/unlocked every day. There were problems in that the lock required a lot of work, the locking/unlocking error by the key operator was likely to occur, and file destruction could not be reliably avoided.

There is also a method that maintains the accessible/inaccessible status of input/output devices and allows only specific input/output commands to be executed in the inaccessible state, but if a specific input/output command is used, all input/output devices can be accessed. Because of this, it was not possible to reliably prevent file destruction and information leaks.

This invention aims to solve the above-mentioned problems, and aims to solve the above-mentioned problems.
The device has key information and information for managing the access state (simply referred to below as the access state), and when access is disabled, input/output commands to the device are rejected, and changes to the access state match the unique key information held by the device. This ensures that file destruction and leakage of file contents can be prevented by making it possible only with a command to send people out using key data.

"Means for Solving the Problem" According to the present invention, the input/output control device or the input/output device retains information for managing the accessible/inaccessible state of each input/output device and key information, and transfers the key data. It has an input/output command that changes the accessible/inaccessible state, and the accessible/inaccessible state remains the accessible state (unless a change command using key data that matches the key information is issued).
Two, I can't.

"Embodiment" FIG. 1 shows an embodiment of the present invention, in which 1 indicates a central processing unit;
2 is an input/output control device, 3 is an input/output device, 4 is key information, 5 is a table representing the access status of each input/output device, 6 is an input/output command reading/analysis unit, 7 is an access status check unit, 8 is an Reference numeral 9 indicates an access state changing section, numeral 9 indicates an input/output instruction execution section, and numeral 10 indicates an input/output instruction issuing section.

In this embodiment, the input/output instruction issuing unit 1 of the central processing unit 1
When an input/output command is issued from 0, the type of the input/output command is first checked by the input/output command reading/analysis unit 6 (2), and if it is an access state change command, the access state change unit 8 A command is sent to the access state change unit 8
Then, the key data of the sent change command is compared with the key information 4 that the input/output control device 2 owns, and if they are the same, the contents of the access state table 5 are changed according to the change command. If the keys do not match, a report is made to the central processing unit 1 (2) that the input/output command cannot be executed.

If the input/output command is a general input/output command other than an access state change command, the input/output command reading/analysis unit 6
sends the command to the access status check section 7. The access state check section 7 checks the access state of the target device using the access state table 5, and if the device is in an accessible state, sends the command to the input/output command execution section 9 to execute the input/output operation. If this (2) is in an inaccessible state, a report that the input/output command cannot be executed is sent to the central processing unit 1.

In the above embodiment, the key information and the access status table are stored in the input/output control device (1), and the input/output control device performs operations such as access status check, key match check, access status change, etc. It is also possible to have an input/output device in the input/output device and allow the input/output device to perform various operations.

Further, the contents of the access state table when the power of the input/output control device or the input/output device is turned on may be set to an inaccessible state, or the state of the table when the power is turned off last time may be inherited.

Furthermore, in order to make it possible to use the device in the same way as a conventional device that does not have the mechanism shown in this invention, if special key information is set in the device, regardless of the contents of the access status table, It is also possible to provide access to the output device.

"Effects of the Invention" As explained above, the information on whether or not an input/output device can be accessed can only be changed by an input/output command using key data that matches the key information possessed by the device, and the key information can be changed. Centralized management by a system administrator can protect files from issuing incorrect input/output commands by control programs or maintenance test programs that issue specific input/output commands (2. By dividing the key information held by the system into several types according to the system operation, for example, a group of input/output devices used for online services during the day, and a group of human output devices used for offline processing at night, the system It is possible to reduce the burden on the operator and reduce operational errors.

[Brief explanation of the drawing]

FIG. 1 is a block diagram showing an embodiment of the invention.

Claims (1)

[Claims] (1) In an input/output system that interprets input/output commands from a central processing unit and inputs/outputs or stores data,
The control device or input/output device has an input/output command that holds information and key information for managing the accessible/inaccessible state of each input/output device, and changes the above-mentioned accessible/inaccessible state by transferring the key data. A state control method for an input/output device, characterized in that the accessible/inaccessible state cannot be changed to an accessible state unless a change command using key data that matches the key information is issued.