JPH04220714A - Output data protection process system - Google Patents

Abstract

(57) [Summary] This bulletin contains application data before electronic filing, so abstract data is not recorded.

Description

[Detailed description of the invention]

0001

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an output data protection processing method, and more particularly to an output data protection processing method that sets a protection level for each item of output data.

[0002] Data security protection is required in display terminals used by an unspecified number of people. In particular, there is a need for more detailed protection depending on the level of the user, that is, protection for each data item.

0003

2. Description of the Related Art A conventional output data protection process is schematically shown in FIG. In this example, protection of the output data is realized by not displaying the data on the display terminal 8 (hidden output). Output data is protected on an item-by-item basis (a set of characters or words that have meaning as data or are treated as a unit).

[0004] The application program determines the level based on the user's password and the like, and based on this determines which items are to be protected (or hidden). Then, the application program is notified of that item (for example, the second item).

[0005] Upon receiving this, the application program performs item protection processing and notifies the application program of its completion. The item protection process masks the display area of the second item on the display terminal as a protected item.

[0006] The application program that has received the completion notification sends output data to the application program. The application program that receives this performs data output processing. Through this process, data is output to the display terminal. At this time, the data "12345" and "ABCDE" are displayed in the first and third items, respectively.
In the second item, the data is output but is masked, so it is not displayed. That is, output data is protected according to the level of the user.

[0007]

According to the prior art described above, the determination as to which item to protect is made by the application program. Therefore, an application program must be aware of the level of protection required for each item it handles. For each item, it is necessary to provide a function to determine whether or not to hide it while referring to the user's level.

[0008] As described above, conventionally there has been a problem in that the load on the application program for output data protection processing is heavy. Additionally, this has led to the problem that the burden of developing application programs is heavy. That is, the size of one application program becomes large, and it is necessary to repeat the description for the same processing for each application program.

An object of the present invention is to provide an output data protection processing method that reduces the burden on application programs.

0010

[Means for Solving the Problems] FIG. 1 is a diagram showing the basic structure of the present invention, and shows a data processing apparatus according to the present invention.

[0011] This data processing device has an application program 5.
, an application program 2, a processing device 1, and a display terminal 8. The application program 5 and the application program 2 are provided in the processing device 1 consisting of a CPU (central processing unit) and a memory, and are realized by the presence of the programs in the memory. The application program 2 sends output data corresponding to the item to the application program 5 and requests its output. The application program 5 outputs output data to the display terminal 8 for each corresponding item. The display terminal 8 is for outputting (displaying) output data.

The application program 5 includes a data protection control unit 6 that performs processing to protect output data, and a process for outputting the output data to a display terminal 8 according to the result of this protection processing. and a data output processing section 7.

[0013]

[Operation] The application program 2 formats the output data in a format corresponding to each item and requests this output to the application program 5. In response to this, the data protection control unit 6 of the application program 5 uses the user level and the item protection level to determine for each item whether or not that item should be protected. The user level is the level of the user using the application program 2, and is determined in advance for each user. The item protection level is determined in advance for each item of output data. For example, if the user level is equal to or higher than the item protection level, the item is output and
Otherwise, the item is protected.

[0014] The data output processing unit 7 hides (does not output) items that are determined to be items that should be protected according to the judgment made by the data protection control unit 6, and hides (does not output) the items that should be protected. , and output (display) the corresponding output data to the display terminal 8.

As described above, the processing for protecting output data is performed mainly by the data protection control section 6 of the application program 5, not by the application program 2. Therefore, the burden on the application program 2 can be reduced, and thereby the burden on the development of the application program 2 can also be reduced.

[0016]

Embodiment FIG. 2 is a block diagram of an embodiment, showing a data processing device. The application program 2 is created or used by a user of the data processing device to perform a predetermined task. When the user inputs a predetermined instruction from an input device (not shown) such as a keyboard, the application program 2 performs a predetermined process in response to the input, and requests the application program 5 to display the result.

In this request, the application program 2 notifies the application program 5 of output data 3 and user level 4, which are the results of predetermined processing. Output data 3 consists of data 31, 32, and 33. Data 31, 32 and 33 are each displayed on the display terminal 8.
This corresponds to items 81, 82, and 83 displayed on the screen. For example, the first data 31 is a series of characters “123
45'' and corresponds to the first item 81. This correspondence is determined by the information that the screen definition body 9 has that defines the screen on the display terminal 8. As the user level 4, a predetermined level is used corresponding to the password etc. input by the user when starting creation/use of the application program 2.

When the application program 2 completes this request, it does not perform data output processing such as item protection processing. Therefore, the load on the application program 2 regarding data output is extremely small.

The application program 5 receives requests from various application programs 2 and performs processing for output (display) to the display terminal 8. At this time, the screen definition body 9 is referred to in order to perform an appropriate display according to the application program 2 that has made the request.

The screen definition body 9 has information that defines the screen on the display terminal 8 for outputting output data, defines the screen in a predetermined format, and sets the item protection level for each item on the screen. have The configuration of the screen definition body 9 is shown in FIG.

The screen definition body 9 consists of a fixed part and a variable part, and information 91 and 93 for each item is set in the variable part. The information 91, 93 corresponds to the items 81, 83 and defines the details thereof. Note that the fixed part includes information (eg, screen name, etc.) that defines the entire screen.

For example, in the information 91, "line position" indicates the line number of the item 81 on the screen. “Digit position” indicates the starting digit number of the item 81 on the screen. "Item size" indicates the size of the item 81 on the screen, and is expressed in the number of digits. As described above, the size (area) of the item 81 on the screen is determined. "Color" is the item 8
This indicates the color (background color) within one area, which is different from the background color of the entire screen. "Data area size" indicates the size of the storage area in the data area (memory) of the output data 31 corresponding to the item 81, and is expressed in bytes. The "data area offset" indicates the starting position of the storage area in the memory of the output data 31 corresponding to the item 81, and is expressed in bytes. For example, item 81
If the data area size of is "10" bytes, item 9
The data area offset of 2 is “10” bytes, and “
The data of item 92 starts from the beginning of the 11'' byte.

[0023] Also, the "item protection level" is the item 8
It indicates the degree of importance of 1 and is expressed as a value from 1 to n, and the larger the value, the more important it is. This item protection level is also set for each item like other information. Therefore, it is possible to protect detailed output data for each item according to its importance.

By defining the screen definition body 9 in this manner, a screen image 10 can be drawn. This screen image 10 is equivalent to the screen on the display terminal 8. Each item 101, 102 and 1 on screen image 10
03 is based on information 91, (92, not shown), and 93, and corresponds to each item 81, 82, and 83 on the display terminal 8.

Of the screen definitions 9, the "item protection level" in particular is referred to by the data protection control unit 6 of the application program 5. That is, the data protection control unit 6 retrieves the item protection level for a certain item from the screen definition body 9, uses this and the user level to search its own table 61, and determines whether the item should be protected. Decide whether or not. The table 61 predetermines whether or not each item protection level should be protected for each user level 4.

[0026] The user level 4 indicates the qualification of the user, and is expressed as a value from 1 to n, and the larger the value, the more advanced the user is.

For example, as shown in FIG. 2, user level 4
Assume that "2" is notified from the application program 2. On the other hand, the item protection levels for items 81, 82, and 83 are "2" and ", respectively, from the screen definition program 9.
3" and "1" are read. In this case, the data protection control unit 6 reads the user level "2" of the table 61.
column and learns that protection is not required for item protection levels "1" and "2" (○), and that protection is required for item protection level "3" (x). Therefore, it is determined that items 81 and 83 should not be protected (should be displayed) for this user, and item 82 is determined to be protected (should not be displayed).

Based on this judgment, the data output processing section 7
outputs (displays) the corresponding output data “12345” and “ABCDE” for items 81 and 83.
do. On the other hand, regarding item 82, the corresponding output data "9876543" is hidden. That is, this level "2" user can see items 81 and 83, but cannot see item 82. Therefore, it is possible to protect detailed output data for each user according to his/her qualifications.

As described above, when protecting output data for each user and each item, this can be achieved without increasing the number of pages in the screen definition body 9. That is, for example, item 8
There is no need to prepare definition bodies that do not allow the output of 2 and definition bodies that do not for each user level. Furthermore, since this increase in pages is not necessary, even if detailed output data protection is performed, a decrease in processing speed and an increase in memory can be avoided.

FIG. 4 shows the output data protection processing flow. First, the application program 2 stores the output data 3 and the user level 4 in a predetermined area of memory, and passes control to the application program 5. At this time, data 31
, 32 and 33, the data area size and data area offset thereof are notified.

■ The data protection control unit 6 searches for output items. That is, based on the information defining the screen of the screen definition body 9, it is determined to which item the data 31, 32, and 33 of the output data 3 should be output (displayed). For this purpose, the variable part of the screen definition body 9 is searched using the notified data area size and data area offset. Then, items 81, 82, and 83 corresponding to the data 31, 32, and 33 are obtained from the data area size and data area offset of the information 91, 93, etc.

■ The data protection control unit 6 determines the item protection level for the obtained items 81, 82, and 83.
Take it out from the screen definition body 9.

■ The data protection control unit 6 compares the retrieved item protection level with the user level 4. That is, the table 61 is searched.

■ If the user level is lower than the item protection level, the data protection control unit 6 sets a non-display attribute to a predetermined area corresponding to the item in the screen output buffer (memory). Here, the hidden attribute is an attribute that indicates that data is output but in an invisible output format. If the user level is equal to or higher than the item protection level, this process (■) is not performed.

(2) The data output processing section 7 stores the output data 3 in a predetermined area corresponding to each item of the screen output buffer. This storage is performed by copying the data of the item stored in a predetermined area of the memory to the screen output buffer. At this time, if the hidden attribute has already been set, no copying will be performed.

The above processes (1) to (2) are repeated for each item 81 to 83 in this order. As a result, in the screen output buffer, data 31 and 33 are stored in the areas corresponding to items 81 and 83, and data 32 is not stored in the area corresponding to item 82.

Thereafter, image data is generated according to the contents of the screen output buffer, and data 31 and 33 are displayed on the display terminal 8. On the other hand, data 32 is output as non-display. Although the data 32 that has been set as non-display output is not visible to the naked eye, it has been output (from the application program 2), so it can be made visible just by requesting the display, without having to perform the process of requesting the data 32 again. (display). It is desirable that the level of the user making this display request is higher than that of the previous user.

[0038] As can be seen from process ①, table 6
1 does not necessarily need to be provided, and whether or not protection is necessary can be determined by comparing the numerical value of the user level and the numerical value of the item protection level.

[0039]

[Effect of the invention] As explained above, according to the present invention,
In output data protection processing, by performing output data protection processing in the data protection control section of the application program,
In addition to reducing the burden on application programs,
It can also reduce the burden of creating it, and
Since detailed output data protection can be achieved for each user and each item, it is possible to avoid a decrease in processing speed and an increase in memory due to an increase in the number of pages in the screen definition program.

[Brief explanation of the drawing]

FIG. 1 is a diagram showing the principle configuration of the present invention.

FIG. 2 is a configuration diagram of an embodiment.

FIG. 3 is an explanatory diagram of a screen definition.

FIG. 4 is a flowchart of output data protection processing.

FIG. 5 is a diagram illustrating a prior art.

[Explanation of symbols]

1 Processing equipment 2 Application program 3 Output data 4 User level 5 Application program 6 Data protection control section 7 Data output processing section 8 Display terminal 9 Screen definition body 10 Screen image

Claims (5)

[Claims] Claim 1: An application program (2) that sends output data corresponding to an item to an application program (5) and requests its output, a display terminal (8) for outputting the output data, and the display terminal. (8) A data processing device comprising: an application program (5) that outputs the output data for each item; a data protection control unit (6) that performs processing for protecting the output data; The application program (5) is provided with a data output processing unit (7) that performs processing for the output according to the result of the processing for the output, and the data protection control unit (6) controls the user level and the item. The data output processing unit (7) determines whether or not to protect each item using the item protection level set in advance for each item.
) outputs the corresponding output data for items excluding items determined to be protected according to the judgment. 2. A screen definition body (9) having information defining a screen on the display terminal (8) for outputting the output data and having an item protection level for each item, The data protection control unit (6)
2. The output data protection processing method according to claim 1, wherein the item protection level for each item is extracted from the screen definition body (9). 3. The data protection control unit (6) determines in which item the output data should be displayed based on information defining the screen of the screen definition body (9), and determines in which item the output data should be displayed. 3. The output data protection processing method according to claim 2, wherein the item protection level is extracted from the screen definition body (9). Claim 4: The application program (2)
) notifies the application program (5) of the user level. 5. The data protection control unit (6) includes a table (61) that predetermines whether or not each of the item protection levels should be protected for each user level. The output data protection processing method described in 1.