Security management apparatus, security management method, and security management program

• US 20030061166A1
• Filed: 01/29/2002
• Published: 03/27/2003
• Est. Priority Date: 09/26/2001
• Status: Abandoned Application

• Current Assignee: Fujitsu Limited
• Original Assignee: Fujitsu Limited
• Inventors: Kihara, Michisaburou, Mizutani, Kayo, Ono, Satoko, Saito, Masahiro, Oura, Shigeaki
• Application Number:
  US10/057,865
• Publication Number:
  US 20030061166A1
• Time in Patent Office: Days
• US Class Current: 705/54
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/88 Detecting or preventing theft or loss
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: G06F 2221/2113 Multi-level security, e.g. mandatory access control

Abstract

A security management apparatus, a security management method and a security management program are provided which are capable of performing access control to files, folders, etc., according to a current position of a prescribed device such as a portable terminal to be managed, In order to perform security control on a portable terminal, etc., security levels of the portable terminal are stored in advance in a predetermined table in association with the positions of the portable terminal. The current position of the portable terminal is detected by means of a GPS or the like, and a security level corresponding to the current position of the portable terminal detected is acquired from the predetermined table, so that booting of programs and/or access control to files, folders, etc., in the portable terminal are carried out based on the security level thus acquired.

Claims

1. A security management apparatus for managing the security of a prescribed device, said apparatus comprising:

a position detecting section detecting a position of said prescribed device; and

a control unit changing a security level of said prescribed device according to the position of said prescribed device detected by said position detecting section.

2. The security management apparatus according to claim 1, further comprising a security information storing section storing security levels of said prescribed device in association with positions of said prescribed device, wherein said control unit changes the security level of said prescribed device into one of the security levels stored in said security information storing section based on the position of prescribed device detected by said position detecting section.

3. The security management apparatus according to claim 2, wherein said security levels stored in said security information storing section are associated with users, and said control unit changes the security level of said prescribed device into one of the security levels stored in said security information storing section based on the position of said prescribed device detected by said position detecting section and one of said users.

4. The security management apparatus according to claim 3, wherein said apparatus has a login function capable of receiving and setting said users as corresponding user identifiers.

5. The security management apparatus according to claim 2, further comprising a security information setting section inputting information to be stored in said security information storing section, or changing or deleting contents stored in said security information storing section.

6. The security management apparatus according to claim 1, wherein said security levels each include an object on which security control is performed by said control unit, and a content of the security control.

7. The security management apparatus according to claim 6, wherein said object on which security control is performed comprises at least one of files, folders, directories and programs handled by said prescribed device.

8. The security management apparatus according to claim 6, wherein said content of security control on said object comprises a kind of an access right.

9. The security management apparatus according to claim 1, wherein said apparatus is installed in said prescribed device.

10. The security management apparatus according to claim 1, wherein said control unit comprises an OS, and said prescribed device comprises a personal computer.

11. A security management method for managing the security of a prescribed device, said method comprising:

detecting a position of said prescribed device; and

controlling to change a security level of said prescribed device according to the position thereof detected in said position detecting step.

12. A security management program for managing security of a prescribed device, said program adapted to make a computer execute detecting a position of said prescribed device, and controlling to change a security level of said prescribed device according to the position thereof detected in said position detecting step.

13. The security management program according to claim 12, wherein said control step is executed by an OS.

14. A program stored in a prescribed device for making, upon detection of a position of said prescribed device, a computer perform security control on said prescribed device while referring to security levels, which are stored in advance in association with positions of said prescribed device, based on said position of said prescribed device detected.

15. The program according to claim 14, wherein said program is an OS, and the security control of said prescribed device is performed as a part of functions of said OS.

16. A data storage medium readable by a computer, said medium storing data for the processing of managing the security of a prescribed device, said medium further storing positions and security levels of said prescribed device in association with each other, said security levels being information which is referred to based on a detected position of said predetermined device, whereby security control on said prescribed device is performed based on a result of the reference.

17. The data storage medium readable by a computer according to claim 16, wherein said positions and said security levels are variable.

18. A security level editing program for inputting or deleting or changing the information stored in said computer-readable data storage medium as set forth in claim 16.