Database access control method, database access control program, and database apparatus

Abstract

A user authenticating section receives an access request from any one of a plurality of users and authenticates the user. An access controller selects a file format to which an access has been permitted from among a plurality of file formats, based on the access route of the user. An access executing section obtains registration information of a file format that has been selected by the access controller, from a registration information database, and transmits this registration information to the user.

Description

BACKGROUND OF THE INVENTION

[0001] 1) Field of the Invention

[0002] The present invention relates to a database access control method, a database access control program, and a database apparatus that are suitable for application to an access control of a database. More particularly, the present invention relates to a database access control method, a database access control program, and a database apparatus that can achieve a flexible access control corresponding to an access environment like the access route and that can improve security.

[0003] 2) Description of the Related Art

[0004] FIG. 8 is a block diagram that shows a structure of a conventional database system. The database system shown in FIG. 8 is constructed of user terminals 101 to 10n, and a database apparatus 30. The user terminals 101 to 10n make an access to the database apparatus 30 via a network 20 and obtain the required information. Each of the user terminals, for example the user terminal 101, is a computer (e.g., a desktop computer, a portable computer, etc.). The user terminals make an access to the database apparatus 30 according to a predetermined communication protocol. Further, when each of the user terminals 101 to 10n has been authenticated after making access to the database apparatus 30, each of the user terminals 101 to 10n obtains desired information stored in the database apparatus 30.

[0005] The network 20 is a LAN (local area network), an intranet, the Internet, a dialup network, and the like. The network 20 is provided with a plurality of routers to efficiently select a data transfer route.

[0006] The database apparatus 30 is connected to the network 20, and is accessed from the user terminals 101 to 10n via the network 20. The database apparatus 30 carries out user authentication when an access has been made from the user, manages information to be transmitted to the user terminal, and transmit information in response to a request made from the user terminal.

[0007] In the database apparatus 30, a communication controller 31 is connected to the network 20, and controls communications with the user terminals 101 to 10n according to a predetermined communication protocol. When any one of the user terminals 101 to 10n has made access from the user terminal, a user authenticating section 32 collates authentication information (a user ID (identifier data) and a password) that has been received from this user terminal with an authentication information database 40, and carries out authentication as to whether the user is an authentic user (regular user).

[0008] The authentication information database 40 is a database that stores authentication information (user IDs and passwords) of regular users who have been permitted to make access. Specifically, the authentication information database 40 has fields of the “user ID” and “password”, as shown in FIG. 9.

[0009] The “user ID” is an identifier that identifies a regular user. The “password” is prepared using a plurality of digits, and is used together with the “user ID” at the authentication time.

[0010] Referring back to FIG. 8, an inquiry processor 33 carries out an inquiry to an access controller 34 regarding an access right level to be described later that is attached to a corresponding user, when a result of the authentication carried out by the user authenticating section 32 indicates that the user is authentic.

[0011] The access controller 34 controls an access made to information (a file) that has been requested from the user terminal, by referring to an access control information database 50. The access control information database 50 is a database that stores access control information. Specifically, the access control information database 50 has fields such as the “user ID”, “password”, and “access right level”, as shown in FIG. 10.

[0012] The “user ID” and “password” correspond to the “user ID” and “password” in the authentication information database 40 shown in FIG. 9. The “access right level” is a right level of the user terminal (user) that makes access to information (a file) that has been stored in a registration information database 60. In other words, this is a right level of the user that shows to what level of information the user has been permitted to make access.

[0013] For example, when the “access right level” is 1, the user can make access to all information (information to which the access right level 1 or 2 has been set). On the other hand, when the “access right level” is 2, the user can make access to only information (a file) to which the access right level 2 has been set, and the user has been prohibited from making access to information (a file) to which the access right level 1 has been set.

[0014] Referring back to FIG. 8, an access executing section 35 obtains information (a file) to which the user terminal (user) has been permitted to make access, based on the access control of the access controller 34, and transmits this information (the file) to the user terminal via the network 20 in response to the request.

[0015] When information (a file) that has been requested from the user terminal has been the information to which the user terminal has been prohibited from making access, the access executing section 35 notifies an access error to this user terminal.

[0016] A registration information database 60 is a database that stores registration information. Specifically, the registration information database 60 has fields of the “file” and “access right level”, as shown in FIG. 11.

[0017] The “file” is information to be accessed, and this is described with a file name. For example, 3D-A1 is three-dimensional information (stereographic information that can be turned by 360 degrees) of a product A, and 2D-A1 is two-dimensional information (plane image information) of the product A. The two-dimensional information 2D-A1 is lesser in quantity than the three-dimensional information 3D-A1.

[0018] The “access right level” corresponds to the “access right level” in the access control information database 50 shown in FIG. 10. In other words, a user terminal (user) with the “access right level” of 1 (see the access control information database 50 shown in FIG. 10) is permitted to make access to all files (information) with the “access right level” of 1 or 2 (see the registration information database 60 in FIG. 11).

[0019] A user terminal (user) with the “access right level” of 2 in the access control information database 50 is permitted to make access only to a file with the “access right level” of 2 in the registration information database 60. In other words, the user terminal with the “access right level” of 2 is not allowed to make access to files with the “access right level” other than 2.

[0020] The operation of the above conventional database system will be explained based on the following examples. First, a case when after the portable user terminal 101 shown in FIG. 8 has been connected to the network 20 via a company LAN, this user terminal 101 makes access to the database apparatus 30 via an access route L1. Then, a case when the user terminal 101 moves to a customer outside the company after disconnection from the company LAN, and the user terminal 101 makes access to the database apparatus 30 via an access route L2.

[0021] When the user terminal 101 is connected to the company LAN, the user operates to make access to the database apparatus 30, and then inputs a user ID, a password, and a file name following the screen.

[0022] After the user terminal 101 has made access to the database apparatus 30 via the network 20 (for example, the access route L1), the user terminal 101 transmits information of the user ID, the password, and the filename, to the database apparatus 30. A plurality of routers or a single router exists in the access route L1.

[0023] When there has been an access made from the user terminal 101, the communication controller 31 receives the information of the user ID, the password, and the file name, from the user terminal 101.

[0024] The user authenticating section 32 carries out user authentication by referring to the authentication information database 40 (refer to FIG. 9), using the user ID and the password as keys. When a result of the authentication is NG, the user authenticating section 32 notifies an authentication error to the user terminal 101.

[0025] When a result of the authentication is OK, the user authenticating section 32 delivers the information of the user ID, the password, and the file name from the user terminal 101 to the inquiry processor 33. The inquiry processor 33 delivers the user ID, the password, and the file name to the access controller 34, and makes inquiry about the access right level.

[0026] The access controller 34 confirms the access right level (for example, 1) of the user terminal 101 (the user) from the access control information database 50 (refer to FIG. 10), using the user ID and the password from the inquiry processor 33 as keys. The access controller 34 delivers the information of the file name and the access right level (=1) to the access executing section 35, to make the access executing section 35 execute access control.

[0027] In other words, the access executing section 35 confirms the file (3D-A1) and the access right level (=1) from the registration information database 60 that is shown in FIG. 11, using the file name (for example, 3D-A1) as a key.

[0028] The access executing section 35 compares the access right level (=1) from the access controller 34 with the confirmed access right level (=1), and decides whether the user terminal 101 has been permitted to make access to the file (3D-A1).

[0029] The access executing section 35 decides that the user terminal 101 has been permitted to make access, and obtains this file (3D-A1) from the registration information database 60. The access executing section 35 transmits this file to the user terminal 101 via the network (the access route L1). As a result, the user terminal 101 receives the desired file (3D-A1).

[0030] When the user terminal 101 has been prohibited from making access to the file (3D-A1), the access executing section 35 notifies the access error to the user terminal 101 via the network 20.

[0031] The user disconnects the user terminal 101 from the company LAN, and moves to a customer outside the company. Then, the user connects the user terminal 101 to the network 20 via the dialup network. After carrying out the operation to make access to the database apparatus 30, the user inputs a user ID, a password, and a file name (for example, 3D-A1) following the screen.

[0032] Based on this, the user terminal 101 makes access to the database apparatus 30 via the network 20 (for example, the access route L2), and then transmits information of the user ID, the password, and the file name, to the database apparatus 30. The access route L2 is a route different from the access route L1.

[0033] When there has been an access made from the user terminal 101, the user authenticating section 32 receives the information of the user ID, the password, and the file name from the user terminal 101.

[0034] Thereafter, through the above operation, the access executing section 35 decides that the user terminal 101 has been permitted to make access, and obtains this file (3D-A1) from the registration information database 60. The access executing section 35 transmits this file to the user terminal 101 via the network 20 (the access route L2). As a result, user terminal 101 receives the desired file (3D-A1) at the customer.

[0035] As explained above, according to the conventional database system, the access control of the registration information (a file) stored in the registration information database 60 has been carried out based on a choice between the two of whether making access has been permitted or prohibited.

[0036] Thus, a user terminal can obtain the registration information so long as the user terminal has been permitted to make access, even when the access route has changed (from the access route L1 to the access route L2) following the change in the access-making position (the company to a customer etc.).

[0037] However, when the access route has low security, there has been a problem that the registration information is stolen while the information is being obtained. For example, when the access route L2 shown in FIG. 8 has a low security level, there is a possibility that registration information (a file) is stolen while the user terminal 101 is obtaining this information from the database apparatus 30.

[0038] As the access control has been based on a choice between the two, regardless of the fact that various kinds of files have been utilized as multimedia information, it has not been possible to meet sufficiently the need to carry out a flexible access control according to an access environment (such as an access route, a time, a response speed, etc.).

SUMMARY OF THE INVENTION

[0039] It is an object of the present invention to provide a database access control method, a database access control program, and a database apparatus that can achieve a flexible access control corresponding to an access environment like the access route and that can improve security.

[0040] The database access control program according to one aspect of the present invention makes a computer function as follows. That is a receiving unit that receives an access request from a user terminal, selecting unit that selects data to which an access has been permitted from among pieces of data, based on an access route of the user terminal, and a transmitting unit that transmits registration information of the selected data to the user terminal.

[0041] The database access control method according to another one aspect of the present invention comprises a receiving step of receiving an access request from a user terminal, a selecting step of selecting data to which an access has been permitted from among pieces of data, based on an access route of the user terminal, and a transmitting step of transmitting registration information of the selected data to the user terminal.

[0042] The database apparatus according to still another aspect of the present invention comprises a receiving unit that receives an access request from a user terminal, a selecting unit that selects data to which an access has been permitted from among pieces of data, based on an access route of the user terminal, and a transmitting unit that transmits registration information of the selected data to the user terminal.

[0043] These and other objects, features and advantages of the present invention are specifically set forth in or will become apparent from the following detailed descriptions of the invention when read in conjunction with the accompanying drawings.

BRIEF DESCRIPTION OF THE DRAWINGS

[0044] FIG. 1 is a block diagram that shows a structure of a database system according to one embodiment of the present invention.

[0045] FIG. 2 is a diagram that shows the contents of an authentication information database 500 that is shown in FIG. 1.

[0046] FIG. 3 is a diagram that shows the contents of an access control information database 600 that is shown in FIG. 1.

[0047] FIG. 4 is a diagram that shows the contents of a registration information database 700 that is shown in FIG. 1.

[0048] FIG. 5 is a flowchart that explains a registration processing according to the embodiment.

[0049] FIG. 6 is a flowchart that explains an access processing according to the embodiment.

[0050] FIG. 7 is a block diagram that shows a structure of a modification of the database system according to the embodiment.

[0051] FIG. 8 is a block diagram that shows a structure of a conventional database system.

[0052] FIG. 9 is a diagram that shows the contents of an authentication information database 40 that is shown in FIG. 8.

[0053] FIG. 10 is a diagram that shows the contents of an access control information database 50 that is shown in FIG. 8.

[0054] FIG. 11 is a diagram that shows the contents of a registration information database 60 that is shown in FIG. 8.

DETAILED DESCRIPTIONS

[0055] The database access control method, the database access control program, and the database apparatus according to one embodiment of the present invention will be explained in detail below with reference to the attached drawings.

[0056] FIG. 1 is a block diagram that shows a structure of a database system according to one embodiment of the present invention. The database system shown in FIG. 1 is constructed of user terminals 1001 to 100n, and a database apparatus 400 that is accessed from the user terminals 1001 to 100n via a network 200 and that transmits information to the user terminals corresponding to requests.

[0057] Each of the user terminals 1001 to 100n is a computer terminal (a desktop type, a portable type, etc.) that is connected to the network 200 and makes access to the database apparatus 400 according to a predetermined communication protocol. Further, when each of the user terminals 1001 to 100n has been authenticated after making access to the database apparatus 400, each obtains desired information that has been stored in the database apparatus 400.

[0058] The network 200 is a LAN, an intranet, the Internet, a dialup network, or the like. The network 200 is provided with a plurality of routers including a router 3001, a router 3002, a router 3003, and a router 3004 to efficiently select a data transfer route.

[0059] In the network 200, positions of the routers 3001 to 3004 are specified by host names and IP (Internet Protocol) addresses that have been registered in a known DNS (Domain Name System). Host names and IP addresses of the routers 3001 to 3004 will be listed in the table below.

	Router	Host name	IP address
	router 3001	gw.fujitsu.com	61.120.10.12
	router 3002	gw.kawasaki.com	128.9.32.7
	router 3003	dialup.nif.com	198.172.176.7
	router 3004	gw.torihikisaki.com	129.9.176.32

[0060] Each of the user terminals 1001 to 100n checks an access route (access routes L1 and L2 in FIG. 1) to the database apparatus 400 based on a traceroute command at the time of making access to the database apparatus 400, and notifies information of the access route to the database apparatus 400. The information of the access route is expressed using a host name and an IP address that exist on the route from the user terminal to the database apparatus 400.

[0061] The traceroute command utilizes a system of TTL (time to live) in order to find each router that exists on the access route. The TTL is a live time that can be assigned to an IP package header. However, in actual practice, the TTL means a number of hops instead of time. In other words, the TTL assigns the number of hops in which the IP packet can exist.

[0062] Specifically, according to the traceroute command, a result of an access route is obtained after repeating a trial of sequentially increasing the TTL starting from 1. For example, the user terminal 1001 transmits the IP package to a host concerned (the database apparatus 400) starting from 1 for the TTL. At a point when the first (first hop) router has received the IP packet, a result of subtracting 1 from the TTL=1 becomes TTL=0. Therefore, the router notifies the information of a host name and an IP address as a first result to the user terminal 1001, as an error.

[0063] The user terminal 1001 then transmits the IP packet to the host (the database apparatus 400) by setting 2 to the TTL. At a point when the second (second hop) router has received the IP packet, a result of subtracting 1 from the TTL=1 becomes TTL=0. Therefore, the router notifies the information of a host name and an IP address as a second result to the user terminal 1001, as an error.

[0064] Thereafter, the user terminal 1001 sequentially transmits the IP address by increasing the TTL until when the IP packet reaches the host (the database apparatus 400). After a result (access route information) of the traceroute command has been obtained, the user terminal 1001 transmits this information to the database apparatus 400.

[0065] Each of the user terminals 1001 to 100n has been provided with a terminal ID to identify the user terminal. For the terminal ID, there are used a serial number of a processor, a MAC (media access control) address, etc. that are own to the terminal.

[0066] The database apparatus 400 is connected to the network 200, and is accessed from the user terminals 1001 to 100n via the network 200. The database apparatus 400 has a function of receiving information of a user ID, a password, a terminal ID, an access route, a file name and the like, when accessed.

[0067] The database apparatus 400 has a function of carrying out user authentication when accessed, a function of managing information to be transmitted to the user terminal, and a function of transmitting information to make response to a request made from the user terminal.

[0068] In the database apparatus 400, a communication controller 401 is connected to the network 200, and controls communications with the user terminals 1001 to 100n according to a predetermined communication protocol. A timer 402 functions as a clock unit, and delivers date and time information to a user authenticating section 403.

[0069] When there has been an access made from any one of the user terminals 1001 to 100n, the user authenticating section 403 collates information of a user ID, a password, and an access route that have been received from this user terminal with an authentication information database 500, and carries out authentication as to whether this user is a regular user.

[0070] The authentication information database 500 is a database that stores authentication information (user IDs, passwords, terminal IDs, access routes, and periods) of regular users who have been permitted to make access.

[0071] The authentication information database 500 has fields that are called “user ID”, “password”, “terminal ID”, “access route”, and “period”, as shown in FIG. 2.

[0072] The “user ID” is an identifier that identifies a regular user. The “password” is prepared using a number of a plurality of digits, and is used together with the “user ID” at the authentication time. The “terminal ID” is an identifier that identifies each of the user terminals 1001 to 100n.

[0073] The “access route” is information of a host name of the router on the network 200, and this access route is collated with the access route that has been notified from a user terminal when the access has been made. The “period” is information relating to a period (a time zone, and year, month, and day) when an access is permitted. When the “period” has not been set, this means that there is no time limit to the access permission.

[0074] Referring back to FIG. 1, an inquiry processor 404 carries out an inquiry to an access controller 405 regarding an access permission, when a result of the authentication carried out by the user authenticating section 403 has been OK.

[0075] The access controller 405 controls an access made to information (a file) that has been requested from the user terminal, by referring to an access control information database 600. The access control information database 600 is a database that stores access control information.

[0076] The access control information database 600 has fields that are called “user ID”, “password”, “terminal ID”, “access route”, “period”, “table”, “object”, and “access permission file format”, as shown in FIG. 3.

[0077] The “user ID”, the “password”, the “terminal ID”, the “access route”, and the “period” correspond to the “user ID”, the “password”, the “terminal ID”, the “access route”, and the “period” respectively in the authentication information database 500 shown in FIG. 2.

[0078] The “access route” has been set such that a file format of a quantity of information corresponding to security of the access route of a user terminal is selected from among a plurality of file formats, based on a result of checking the security of a plurality of access routes that has been carried out in advance.

[0079] The “access route” has been set as follows. When the security level of the access route is at or lower than a threshold value, a file format that has a smallest quantity of information is selected from among a plurality of file formats. On the other hand, when a security level of the access route of a user terminal is higher than the threshold value, a file format that has a largest quantity of information is selected from among the file formats.

[0080] The security level corresponds to a number of hops (a number of routers) in the access route. The security level is higher when the number of hops is smaller, and the securing level is lower when the number of hops is larger.

[0081] In the present embodiment, the “access route” may be set such that a file format of a quantity of information corresponding to a response speed of the access route of a user terminal is selected from among a plurality of file formats, based on a result of checking the response speed of a plurality of access routes that has been carried out in advance.

[0082] The “access route” is set as follows. When the response speed of the access route of a user terminal is at or lower than a threshold value, a file format that has a smallest quantity of information is selected from among a plurality of file formats. On the other hand, when a response speed of the access route of a user terminal is higher than the threshold value, a file format that has a largest quantity of information is selected from among the file formats.

[0083] The “table” shows to which one of a 3D (three-dimensional) table 710 and a 2D (two-dimensional) table 720 that are stored in a registration information database 700 (refer to FIG. 4) the user terminal (user) has been permitted to make access. The 3D table corresponds to the 3D table 710 (refer to FIG. 4), and the 2D table corresponds to the 2D table 720 (refer to FIG. 4).

[0084] The registration information database 700 shown in FIG. 4 is a database that stores registration information, and is constructed of the 3D table 710 and the 2D table 720.

[0085] The 3D table 710 is a table that stores a file (information) of a three-dimensional format (stereographic) that has length, width, and depth. On the other hand, the 2D table 720 is a table that stores a file (information) that shows a two-dimensional image. The three-dimensional shape means a shape that has three dimensions (like a perspective view) of a certain product. On the other hand, the two-dimensional image means an image that has two dimensions (like a plane diagram) of the product.

[0086] The 3D table 710 has fields that are called “file”, “updated date”, “object”, and “access permission file format”. The “file” is information to be accessed, and is described in a file name. The “updated date” is a date when the file (information) is updated.

[0087] The “object” shows whether the file (information) is in a three-dimensional shape or a two-dimensional image (a three-dimensional shape in the 3D table shown in FIG. 4). The “access permission file format” is a file format to which an access has been permitted among a plurality of file formats for the same file including a CAD (Computer Aided Design) format, a VRML (Virtual Reality Modeling Language) format, and a CG (Computer Graphic) format.

[0088] The CAD format is a format that shows a stereographic screen that is used in a design or a design system using a computer. The VRML format is a format that is used to support a three-dimensional graphic on the Internet. The CG format is a format that shows a three-dimensional graphic provided with a rendering.

[0089] As explained above, the 3D table 710 stores three kinds of files including the CAD format (A.cad), the VRML format (A.vrml), and the CG format (A.cg), for a certain file (a file A, for example). A file of the CAD format is a general-purpose file that is used to prepare files of the VRML format and the CG format based on a filtering to be described later.

[0090] The 2D table 720 has fields that are called “file”, “updated date”, “object”, and “access permission file format”. The “file” is information to be accessed, and is described in a file name. The “updated date” is a date when the file (information) is updated.

[0091] The “object” shows whether the file (information) is in a three-dimensional shape or a two-dimensional image (a two-dimensional image in the 2D table shown in FIG. 4). The “access permission file format” is a file format to which an access has been permitted among a plurality of file formats for the same file including a BMP (BitMap) format, and a GIF (Graphic Interchange Format) format.

[0092] The BMP format is one of formats to store two-dimensional image information. The GIF format is one of formats to store two-dimensional image information, and can handle up to 256 gradations in monochrome, and 256 colors in color.

[0093] As explained above, the 2D table 720 stores two kinds of files including the BMP format (A.bmp) and the GIF format (A.gif), for a certain file (a file A, for example). A file of the BMP format is a general-purpose file that is used to prepare files of the GIF format based on a filtering to be described later.

[0094] As a file stored in the 3D table 710 corresponds to three-dimensional information, this file has a larger quantity of information than a file stored in the 2D table 720. For example, a file A (A.cad, for example) that is stored in the 3D table 710 has three-dimensional information of length, width, and depth, as compared with a file A (A.bmp, for example) that is stored in the 2D table 720 that has two-dimensional information of length and width. Therefore, the file A has a larger quantity of information.

[0095] Referring back to FIG. 3, the “object” corresponds to the “object” in the 3D table 710 and the 2D table 720 (refer to FIG. 4) respectively. The “access permission file format” shown in FIG. 3 corresponds to the “access permission file format” in the 3D table 710 and the 2D table 720 (refer to FIG. 4) respectively.

[0096] Referring back to FIG. 1, an access executing section 406 has functions of obtaining information (a file) to which the user terminal (user) has been permitted to make access from the registration information database 700, based on the access control of the access controller 405, and transmitting this information to the user terminal via the network 200 in response.

[0097] When information (a file) that has been requested from the user terminal has been the information to which the user terminal has been prohibited from making access, the access executing section 406 notifies an access error to this user terminal.

[0098] Each of filters 4071 to 4073 has a function of preparing a file of a separate format from a file of a certain format, by filtering.

[0099] The filter 4071 has a function of preparing a file of the VRML format (A.vrml, for example) from a file of the CAD format (A.cad, for example) shown in the 3D table 710 in FIG. 4. The filter 4072 has a function of preparing a file of the CG format (A.cg, for example) from a file of the CAD format (A.cad, for example) shown in the 3D table 710.

[0100] The filter 4073 has a function of preparing a file of the GIF format (A.gif, for example) from a file of the BMP format (A.bmp, for example) shown in the 2D table 720.

[0101] The operation of the embodiment will be explained with reference to flowcharts shown in FIG. 5 and FIG. 6. FIG. 5 is a flowchart that explains a registration processing according to the embodiment. FIG. 6 is a flowchart that explains an access processing according to the embodiment.

[0102] A registration of registration information (a file) in the registration information database 700 will be explained with reference to the flowchart shown in FIG. 5. At step SA1 in FIG. 5, the access executing section 406 of the database apparatus 400 obtains a file A.cad of the CAD format (refer to the 3D table 710 in FIG. 4) as a general-purpose file, from an input apparatus not shown.

[0103] At step SA2, the access executing section 406 decides whether the format of the general-purpose file obtained at step SA1 is the CAD format. The access executing section 406 decides “Yes” in this example. At step SA3, the access executing section 406 selects the filter 4071 from among the filters 4071 to 4073, in order to prepare a file of the VRML format from the general-purpose file of the CAD format.

[0104] At step SA4, the filter 4071 prepares a file A.vrml of the VRML format from the file A.cad (the general-purpose file) of the CAD format that has been obtained at step SA1. At step SA5, the access executing section 406 stores the file A.vrml of the VRML format that has been prepared at step SA4, as registration information in the 3D table 710 of the registration information database 700, by relating the file A.vrml to the file (A, in this case), the updated date (2001/10/10), and the object (a three-dimensional shape).

[0105] At step SA6, the access executing section 406 selects the filter 4072 from among the filters 4071 to 4073, in order to prepare a file of the CG format from a general-purpose file of the CAD format.

[0106] At step SA7, the filter 4072 prepares a file A.cg of the CG format from the file A.cad (the general-purpose file) of the CAD format that has been obtained at step SA1. At step SA8, the access executing section 406 stores the file A.cg of the CG format that has been prepared at step SA7, in the 3D table 710 of the registration information database 700. At step SA9, the access executing section 406 decides whether there has been an instruction to end the registration, and sets “No” as a result of the decision made in this example.

[0107] Next, at step SA1, the access executing section 406 of the database apparatus 400 obtains a file B.cad of the CAD format (refer to the 3D table 710 in FIG. 4) as a general-purpose file, from an input apparatus not shown.

[0108] At step SA2, the access executing section 406 decides whether the format of the general-purpose file obtained at step SA1 is the CAD format. The access executing section 406 decides “Yes” in this example. At step SA3, the access executing section 406 selects the filter 4071 from among the filters 4071 to 4073, in order to prepare a file of the VRML format from the general-purpose file of the CAD format.

[0109] At step SA4, the filter 4071 prepares a file B.vrml of the VRML format from the file B.cad (the general-purpose file) of the CAD format by filtering that has been obtained at step SA1. At step SA5, the access executing section 406 stores the file B.vrml of the VRML format that has been prepared at step SA4, as registration information in the 3D table 710 of the registration information database 700, by relating the file B.vrml to the file (B, in this case), the updated date (2001/10/10), and the object (a three-dimensional shape).

[0110] At step SA6, the access executing section 406 selects the filter 4072 from among the filters 4071 to 4073, in order to prepare a file of the CG format from a general-purpose file of the CAD format.

[0111] At step SA7, the filter 4072 prepares a file B.cg of the CG format from the file B.cad (the general-purpose file) of the CAD format that has been obtained at step SA1. At step SA8, the access executing section 406 stores the file B.cg of the CG format that has been prepared at step SA7, in the 3D table 710 of the registration information database 700. At step SA9, the access executing section 406 decides whether there has been an instruction to end the registration, and sets “No” as a result of the decision made in this example.

[0112] Next, at step SA1, the access executing section 406 of the database apparatus 400 obtains a file A.bmp of the BMP format (refer to the 2D table 720 in FIG. 4) as a general-purpose file, from an input apparatus not shown.

[0113] At step SA2, the access executing section 406 decides whether the format of the general-purpose file obtained at step SA1 is the CAD format. The access executing section 406 decides “No” in this example.

[0114] At step SA10, the access executing section 406 stores the file A.bmp of the BMP format that has been obtained at step SA1, as registration information in the 2D table 720 of the registration information database 700, by relating the file A.bmp to the file (A, in this case), the updated date (2001/10/10), and the object (a two-dimensional image). At step SA9, the access executing section 406 decides whether there has been an instruction to end the registration, and sets “No” as a result of the decision made in this example.

[0115] Next, at step SA1, the access executing section 406 of the database apparatus 400 obtains a file B.bmp of the BMP format (refer to the 2D table 720 in FIG. 4) as a general-purpose file, from an input apparatus not shown.

[0116] At step SA2, the access executing section 406 decides whether the format of the general-purpose file obtained at step SA1 is the CAD format. The access executing section 406 decides “No” in this example.

[0117] At step SA10, the access executing section 406 stores the file B.bmp of the BMP format that has been obtained at step SA1, as registration information in the 2D table 720 of the registration information database 700, by relating the file A.bmp to the file (B, in this case), the updated date (2001/10/10), and the object (a two-dimensional image) At step SA9, the access executing section 406 decides whether there has been an instruction to end the registration. The access executing section 406 sets “Yes” as a result of the decision made in this example, and ends a series of the registration processing.

[0118] As explained above, in the registration processing, files of the VRML format and the CG format relating to the three-dimensional information are prepared at the registration time, as it takes time to filter these files because of a large quantity of information. On the other hand, files of the GIF format relating to the two-dimensional information have a relatively smaller quantity of information, and it does not take so much time to filter the files. Therefore, only the general-purpose file of the BMP format is stored in the 2D table 720, and the files of the GIF format are prepared at the time of making response to the user terminal.

[0119] The access processing of the embodiment will be explained with reference to the flowchart shown in FIG. 6.

[0120] The access processing will be explained based on the following examples. First, a case when after the portable user terminal 1001 shown in FIG. 1 has been connected to the network 200 via a company LAN, this user terminal 1001 makes access to the database apparatus 400 via the access route L1. Then, a case when the user terminal 1001 moves to a customer outside the company after disconnection from the company LAN, and the user terminal 1001 makes access to the database apparatus 400 via the access route L2.

[0121] At step SB1 shown in FIG. 6, the user authenticating section 403 of the database apparatus 400 decides whether there has been an access made from any one of the user terminals 1001 to 1003. The user authenticating section 403 sets “No” as a result of the decision made in this example, and repeats the same processing.

[0122] When the user terminal 1001 is connected to the company LAN, the user operates to make access to the database apparatus 400, and then inputs a user ID, a password, and a file name following the screen.

[0123] After the user terminal 1001 has made access to the database apparatus 400 via the network 200 (for example, the access route L1), the user terminal 1001 transmits information of the user ID (arita, for example), the password (3569, for example), the terminal ID (1, for example), and the file name (A, for example), to the database apparatus 400. The user authenticating section 403 of the database apparatus 400 sets “Yes” as a result of the decision made at step SB1 shown in FIG. 6.

[0124] The user terminal 1001 obtains information of the access route L1 based on the traceroute command. The access route L1 passes through only the router 3001. Therefore, the information of the access route L1 is the host name (gw.fuitsu.com) of the router 3001.

[0125] At step SB2, the user authenticating section 403 receives the authentication information (the user ID (=arita), the password (=3569), the terminal ID (=1), and the file name (=A)) from the user terminal 1001. At step SB3, the user terminal 1001 checks access route information (gw.fujitsu.com) corresponding to the access route L1. The user authenticating section 403 receives this access route information (gw.fujitsu.com).

[0126] At step SB4, the user authenticating section 403 executes the authentication processing by collating the authentication information database 500 (refer to FIG. 2) with the user ID, the password, the terminal ID, the access route, and the date and time information obtained from the timer 402 at the access time, as keys. It is assumed that the authentication information of a first record of the authentication information database 500 coincides with the obtained information.

[0127] At step SB5, the user authenticating section 403 decides whether a result of the authentication is OK (coincides). The user authenticating section 403 sets “Yes” as a result of the decision made in this example. When a result of the authentication is NG, the user authenticating section 403 sets “No” as a result of the decision made at step SB5, and notifies an authentication error to the user terminal 1001.

[0128] At step SB6, the user authenticating section 403 delivers the information of the user ID, the password, the terminal ID, the access route, the period, and the file name relating to the user terminal 1001, to the inquiry processor 404. The inquiry processor 404 delivers the information of the user ID, the password, the terminal ID, the access route, the period, and the filename, to the access controller 405, and inquires about the access permission.

[0129] At step SB7, the access controller 405 confirms the “table” (the 3D table, in this case), the “object” (a three-dimensional shape, in this case), and the “access permission file format” (the CAD, in this case) that have been permitted to the user terminal 1001 (user), at the first record of the access control information database 600 (refer to FIG. 3), using the information of the user ID (=arita) the password (=3569), the terminal ID (=1), the access route (gw.fujitsu.com), the period (no period, in this case), and the file name (=A), that have been received from the inquiry processor 404, as keys.

[0130] The access controller 405 delivers the information of the “table” (the 3D table, in this case), the “object” (a three-dimensional shape, in this case), the “access permission file format” (the CAD, in this case), and the file (A, in this case), to the access executing section 406, to make the access executing section 406 execute access control.

[0131] At step SB8, the access executing section 406 decides whether the “access permission file format” is the GIF, that is, whether it is necessary to carry out a filtering processing at the response time. As the “access permission file format” is the CAD in this case, the access executing section 406 sets “No” as a result of the decision made at step SB8.

[0132] At step SB9, the access executing section 406 obtains a file A.cad of the three-dimensional CAD format from the 3D table 710 of the registration information database 700 shown in FIG. 4, using the “table” (the 3D table, in this case), the“object” (a three-dimensional shape, in this case), the “access permission file format” (the CAD, in this case), and the file (A, in this case), as keys.

[0133] At step SB10, the access executing section 406 transmits the obtained file A.cad of the three-dimensional CAD format to the user terminal 1001. At step SB1, it is decided whether there has been an access made.

[0134] The user disconnects the user terminal 1001 from the company LAN, and moves to a customer outside the company. Then, the user connects the user terminal 1001 to the network 200. After carrying out the operation to make access to the database apparatus 400, the user inputs the user ID (=arita), the password (=3569), and the file name (=A), following the screen as before.

[0135] Based on this, the user terminal 1001 makes access to the database apparatus 400 via the network 200 (for example, the access route L2), and then transmits information of the user ID (=arita), the password (=3569), the terminal ID (=1), and the file (=A) to the database apparatus 400. The user authenticating section 403 of the database apparatus 400 sets “Yes” as a result of the decision made at step SB1 shown in FIG. 6.

[0136] The user terminal 1001 obtains information of the access route L2 based on the trace route command. This access route L2 is different from the access route L1. Specifically, the access route L2 passes through the router 3004 and the router 3001. Therefore, the information of the access route L2 is the host name (gw.torihikisaki.com) of the router 3004 and the host name (gw.fujitsu.com) of the router 3001. This access route L2 has a lower securing level than the access route L1.

[0137] At step SB2, the user authenticating section 403 receives the authentication information (the user ID (=arita), the password (=3569), the terminal ID (=1), and the file name (=A)) from the user terminal 1001. At step SB3, the user terminal 1001 checks access route information (gw.torihikisaki.com, gw.fujitsu.com) corresponding to the access route L2. The user authenticating section 403 receives this access route information (gw.torihikisaki.com, gw.fujitsu.com).

[0138] At step SB4, the user authenticating section 403 executes the authentication processing by collating the authentication information database 500 (refer to FIG. 2) with the user ID, the password, the terminal ID, the access route, and the date and time information obtained from the timer 402 at the access time, as keys. It is assumed that the authentication information of a second record of the authentication information database 500 coincides with the obtained information.

[0139] At step SB5, the user authenticating section 403 decides that a result of the authentication is OK (the date and time information is within the time zone), and sets “Yes” as a result of the decision made. At step SB6, the user authenticating section 403 delivers the information of the user ID, the password, the terminal ID, the access route, the period, and the file name relating to the user terminal 1001, to the inquiry processor 404. The inquiry processor 404 delivers the information of the user ID, the password, the terminal ID, the access route, the period, and the file name, to the access controller 405, and inquires about the access permission.

[0140] At step SB7, the access controller 405 confirms the “table” (the 2D table, in this case), the “object” (a two-dimensional image, in this case), and the “access permission file format” (the GIF, in this case) that have been permitted to the user terminal 1001 (user), at the second record of the access control information database 600 (refer to FIG. 3), using the information of the user ID (=arita) the password (=3569), the terminal ID (=1), the access route (gw.torihikisaki.com, gw.fujitsu.com), the period (08:30 to 20:00, in this case), and the file name (=A), that have been received from the inquiry processor 404, as keys.

[0141] The access controller 405 delivers the information of the “table” (the 2D table, in this case), the “object” (a two-dimensional image, in this case), the “access permission file format” (the GIF, in this case), and “the file” (A, in this case), to the access executing section 406, to make the access executing section 406 execute access control.

[0142] At step SB8, the access executing section 406 decides whether the “access permission file format” is the GIF, that is, whether it is necessary to carry out a filtering processing at the response time. As the “access permission file format” is the GIF in this case, the access executing section 406 sets “Yes” as a result of the decision made at step SB8.

[0143] At step SB11, the access executing section 406 obtains a file A.bmp as a general-purpose file from the 2D table 720 of the registration information database 700 shown in FIG. 4, using the “table” (the 2D table, in this case), the “object” (a two-dimensional image, in this case), the “access permission file format” (the GIF, in this case), and “the file” (A, in this case), as keys.

[0144] At step SB12, the access executing section 406 selects the filter 4073 from among the filters 4071 to 4073, in order to prepare a file of the GIF format from the general-purpose file of the BMP format.

[0145] At step SB13, the filter 4073 prepares a file A.gif of the GIF format from the file A.bmp (the general-purpose file) of the BMP format that has been obtained at step SB11. At step SB10, the access executing section 406 transmits the prepared file A.gif of the two-dimensional GIF format to the user terminal 1001.

[0146] As explained above, according to the present embodiment, a file format to which an access has been permitted is selected from among a plurality of file formats shown in FIG. 3, based on the access route (the access route L1 or L2) of the user terminal 1001, for example. The access executing section 406 transmits registration information (a file) of this file format to the user terminal 1001. Therefore, it is possible to carry out a flexible access control corresponding to an access environment like the access route.

[0147] According to the present embodiment, access routes to the authentication information database 500 (refer to FIG. 2) and to the access control information database 600 (refer to FIG. 3) are set respectively, based on a result of checking the security of a plurality of access routes that has been carried out in advance. A file format of the quantity of information corresponding to the security of the access route of the user terminal 1001 is selected from among the file formats shown in FIG. 3, for example. Therefore, it is possible to carry out a flexible access control corresponding to an access environment like the access route, and it is possible to improve security.

[0148] According to the present embodiment, the authentication information database 500 (refer to FIG. 2) and the access control information database 600 (refer to FIG. 3) are set respectively so that a file format of a smallest quantity of information (or a largest quantity of information) is selected from among a plurality of file formats, when the security level of the access route is at or lower than a threshold value (or when the security level of the access route is higher than a threshold value). Therefore, it is possible to carry out a flexible access control corresponding to an access environment like the access route, and it is possible to improve security.

[0149] According to the present embodiment, a file (registration information) of a selected file format is prepared from a general-purpose file (general-purpose registration information), using the filter 4073. The prepared registration information is transmitted to the user terminal 1001, for example. Therefore, it is not necessary to store the registration information of a plurality of file formats in the registration information database 700.

[0150] While one embodiment of the present invention has been explained in detail above with reference to the drawings, detailed structure examples are not limited to this one embodiment, and any design alteration within a range not deviating from the gist of the present invention is included in the present invention.

[0151] For example, in the above embodiment, a program that realizes the functions of the database apparatus 400 may be recorded on a computer-readable recording medium 900 shown in FIG. 7. Then, a computer 800 shown in FIG. 7 reads and executes the program recorded on this recording medium 900 to realize each function.

[0152] In FIG. 7, the computer 800 is constructed of a CPU (Central Processing Unit) 810 that executes the program, an input unit 820 like a keyboard and a mouse, a ROM (Read Only Memory) 830 that stores various kinds of data, a RAM (Random Access Memory) 840 that stores operation parameters, a reading apparatus 850 that reads the program from the recording medium 900, an output apparatus 860 like a display and a printer, and a bus 870 that connects between the apparatuses.

[0153] The CPU 810 reads the program that is stored on the recording medium 900 via the reading apparatus 850, and executes the program, thereby to realize the functions. For the recording medium 900, there may be used an optical disk, a flexible disk, a hard disk, etc.

[0154] As explained above, according to one aspect of the present invention, data to which an access has been permitted is selected from among pieces of data, based on an access route of a user terminal. Registration information of the data is transmitted to the user terminal. Therefore, there is an effect that it is possible to carry out a flexible access control corresponding to an access environment like the access route.

[0155] According to another aspect of the invention, data of a quantity of information corresponding to the security of the access route of the user terminal is selected from among pieces of data, based on a result of checking the security of a plurality of access routes that has been carried out in advance. Therefore, there is an effect that it is possible to carry out a flexible access control corresponding to an access environment like the access route and also to improve the security.

[0156] According to still another aspect of the invention, when a security level of an access route of a user terminal is at or lower than a threshold value, data of a smallest quantity of information is selected from among pieces of data. Therefore, there is an effect that it is possible to carry out a flexible access control corresponding to an access environment like the access route and also to improve the security.

[0157] According to still another aspect of the invention, when a security level of an access route of a user terminal is higher than a threshold value, data of a largest quantity of information is selected from among pieces of data. Therefore, there is an effect that it is possible to carry out a flexible access control corresponding to an access environment like the access route and also to improve the security.

[0158] Although the invention has been described with respect to a specific embodiment for a complete and clear disclosure, the appended claims are not to be thus limited but are to be construed as embodying all modifications and alternative constructions that may occur to one skilled in the art which fairly fall within the basic teaching herein set forth.

Claims

1. A database access control program that makes a computer function as: a receiving unit that receives an access request from a user terminal; a selecting unit that selects data to which an access has been permitted from among pieces of data, based on an access route of the user terminal; and a transmitting unit that transmits registration information of the selected data to the user terminal.

2. The database access control program according to claim 1, wherein the selecting unit selects data of a quantity of information corresponding to the security of the access route of the user terminal from among pieces of data, based on a result of checking the security of a plurality of access routes that has been carried out in advance.

3. The database access control program according to claim 2, wherein the selecting unit selects data of the smallest quantity of information from among pieces of data, when the security level of the access route of the user terminal is at or lower than a threshold value.

4. The database access control program according to claim 2, wherein the selecting unit selects data of the largest quantity of information from among pieces of data, when the security level of the access route of the user terminal is higher than a threshold value.

5. The database access control program according to claim 3, wherein the security level corresponds to a number of hops in the access route, and the security level is higher when the number of hops is smaller, and the security level is lower when the number of hops is larger.

6. The database access control program according to claim 1, wherein the selecting unit selects data of a quantity of information corresponding to a response speed of the access route of the user terminal from among pieces of data, based on a result of checking the response speed of a plurality of access routes that has been carried out in advance.

7. The database access control program according to claim 6, wherein the selecting unit selects data of a smallest quantity of information from among pieces of data, when the response speed of the access route of the user terminal is at or lower than a threshold value.

8. The database access control program according to claim 6, wherein the selecting unit selects data of a largest quantity of information from among pieces of data, when the response speed of the access route of the user terminal is higher than a threshold value.

9. The database access control program according to claim 1, wherein the selecting unit selects data to which an access has been permitted from among pieces of data, based on also an access time of the user terminal.

10. The database access control program according to claim 1, wherein the selecting unit selects data to which an access has been permitted from among pieces of data, based on also a terminal identifier of the user terminal.

11. The database access control program according to claim 1, wherein the computer is further made to function as a preparing unit that prepares registration information of data that has been selected by the selecting unit, from general-purpose registration information, and the transmitting unit transmits registration information that has been prepared by the preparing unit, to the user terminal.

12. A database access control method comprising: a receiving step of receiving an access request from a user terminal; a selecting step of selecting data to which an access has been permitted from among pieces of data, based on an access route of the user terminal; and a transmitting step of transmitting registration information of the selected data to the user terminal.

13. The database access control method according to claim 12, wherein the selecting step selects data of a quantity of information corresponding to the security of the access route of the user terminal from among pieces of data, based on a result of checking the security of a plurality of access routes that has been carried out in advance.

14. The database access control method according to claim 13, wherein the selecting step selects data of a smallest quantity of information from among pieces of data, when the security level of the access route of the user terminal is at or lower than a threshold value.

15. The database access control method according to claim 13, wherein the selecting step selects data of a largest quantity of information from among pieces of data, when the security level of the access route of the user terminal is higher than a threshold value.

16. The database access control method according to claim 14, wherein the security level corresponds to a number of hops in the access route, and the security level is higher when the number of hops is smaller, and the security level is lower when the number of hops is larger.

17. The database access control method according to claim 12, wherein the selecting step selects data of a quantity of information corresponding to a response speed of the access route of the user terminal from among pieces of data, based on a result of checking the response speed of a plurality of access routes that has been carried out in advance.

18. The database access control method according to claim 17, wherein the selecting step selects data of a smallest quantity of information from among pieces of data, when the response speed of the access route of the user terminal is at or lower than a threshold value.

19. The database access control method according to claim 17, wherein the selecting step selects data of a largest quantity of information from among pieces of data, when the response speed of the access route of the user terminal is higher than a threshold value.

20. The database access control method according to claim 12, wherein the selecting step selects data to which an access has been permitted from among pieces of data, based on also an access time of the user terminal.

21. The database access control method according to claim 12, wherein the selecting step is for selecting data to which an access has been permitted from among pieces of data, based on also a terminal identifier of the user terminal.

22. The database access control method according to claim 12, further comprising: a preparing step of preparing registration information of data that has been selected at the selecting step, from general-purpose registration information, wherein the transmitting step is for transmitting registration information that has been prepared at the preparing step, to the user terminal.

23. A database apparatus comprising: a receiving unit that receives an access request from a user terminal; a selecting unit that selects data to which an access has been permitted from among pieces of data, based on an access route of the user terminal; and a transmitting unit that transmits registration information of the selected data to the user terminal.

24. The database apparatus according to claim 23, wherein the selecting unit selects data of a quantity of information corresponding to the security of the access route of the user terminal from among pieces of data, based on a result of checking the security of a plurality of access routes that has been carried out in advance.

25. The database apparatus according to claim 24, wherein the selecting unit selects data of a smallest quantity of information from among pieces of data, when the security level of the access route of the user terminal is at or lower than a threshold value.

26. The database apparatus according to claim 24, wherein the selecting unit selects data of a largest quantity of information from among pieces of data, when the security level of the access route of the user terminal is higher than a threshold value.

27. The database apparatus according to claim 25, wherein the security level corresponds to a number of hops in the access route, and the security level is higher when the number of hops is smaller, and the security level is lower when the number of hops is larger.

28. The database apparatus according to claim 23, wherein the selecting unit selects data of a quantity of information corresponding to a response speed of the access route of the user terminal from among pieces of data, based on a result of checking the response speed of a plurality of access routes that has been carried out in advance.

29. The database apparatus according to claim 28, wherein the selecting unit selects data of a smallest quantity of information from among pieces of data, when the response speed of the access route of the user terminal is at or lower than a threshold value.

30. The database apparatus according to claim 28, wherein the selecting unit selects data of a largest quantity of information from among pieces of data, when the response speed of the access route of the user terminal is higher than a threshold value.

31. The database apparatus according to claim 23, wherein the selecting unit selects data to which an access has been permitted from among pieces of data, based on also an access time of the user terminal.

32. The database apparatus according to claim 23, wherein the selecting unit selects data to which an access has been permitted from among pieces of data, based on also a terminal identifier of the user terminal.

33. The database apparatus according to claim 23, further comprising: a preparing unit that prepares registration information of data that has been selected by the selecting unit, from general-purpose registration information, wherein the transmitting unit transmits registration information that has been prepared by the preparing unit, to the user terminal.