Access control apparatus and access control method

• US 7,752,408 B2
• Filed: 12/18/2006
• Issued: 07/06/2010
• Est. Priority Date: 02/18/2006
• Status: Active Grant

• Current Assignee: Konica Minolta Business Technologies Incorporated (Konica Minolta Inc.)
• Original Assignee: Konica Minolta Business Technologies Incorporated (Konica Minolta Inc.)
• Inventors: Sawada, Kenichi, Kawabata, Kazuyuki, Hibino, Takeshi, Hashimoto, Hideyuki
• Primary Examiner(s): Peugh; Brian R
• Assistant Examiner(s): Bertram; Ryan
• Application Number:
  US11/640,223
• Publication Number:
  US 20070199055A1
• Time in Patent Office: 1,296 Days
• Field of Search: 711/164
• US Class Current: 711/164
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/80 in storage media based on magnetic or optical technology, e.g. disks with sectors preventing unauthorised reproduction or copying of disc-type recordable media G11B20/00
• CPC Class Codes: G06F 2221/2113 Multi-level security, e.g. mandatory access control
• CPC Class Codes: H04N 1/44 Secrecy systems
• CPC Class Codes: H04N 1/4406 Restricting access, e.g. according to user identity mechanisms actuated y cards, PIN or the like in apparatus for dispensing G07F7/08
• CPC Class Codes: H04N 1/444 to a particular document or image or part thereof
• CPC Class Codes: H04N 2201/0094 Multifunctional device, i.e. a device capable of all of reading, reproducing, copying, facsimile transception, file transception

Abstract

Disclosed is an access control apparatus controls access to a storage device and includes an access password input device that receives an input of an access password; an access control information acquiring unit that acquires access control information indicating an access password to be inputted for access; an access controller that controls access to a file stored in a file storage region, based on the inputted access password and the access control information, wherein the access controller is operable when different region access passwords are set for accessing a first file storage region and a second file storage region, respectively, to control access after a file stored in the first file storage region has been transported to the second file storage region so that at least one password that could be used to access the file in the first file storage region is inherited after transportation.

Claims

1. An access control apparatus that controls access to a storage device containing a plurality of file storage regions that are respectively capable of storing a plurality of files, the access control apparatus comprising:

an access password input device that receives an input of an access password;

an access control information acquiring unit that acquires access control information indicating an access password to be inputted for accessing to a file stored in a file storage region in the case where a region access password is set for the file storage region; and

an access controller that controls access to a file stored in a file storage region, based on the inputted access password and the access control information,

wherein the access controller is operable when different region access passwords are set for accessing a first file storage region and a second file storage region, respectively, to control access after a file stored in the first file storage region has been moved or copied to the second file storage region so that at least one password that could be used to access the file in the first file storage region is inherited after the file has been moved or copied to the second file storage region.

2. The access control apparatus according to claim 1, further comprising

an access control information updating unit that updates the access control information so that the file that has been moved or copied to the second file storage region can be accessed using at least one password that could be used to access the file in the first file storage region after the file stored in the first file storage region has been moved or copied to the second file storage region.

3. The access control apparatus according to claim 1, further comprising

a default password input device that receives an input of a default password set for a file storage region for which a region access password has not been set.

4. The access control apparatus according to claim 3,

wherein the default password can be updated after being set.

5. The access control apparatus according to claim 1,

wherein the access controller controls access so that after the file stored in the first file storage region has been moved or copied to the second file storage region, the file that has been moved or copied to the second file storage region can be accessed using the region access password set for the first file storage region.

6. The access control apparatus according to claim 1,

wherein the access controller controls access so that every file inside the second file storage region can be accessed using the region password set for the first file storage region after the file stored in the first file storage region has been moved or copied to the second file storage region.

7. The access control apparatus according to claim 1, further comprising

an inherited password designation input device that receives an input designating a password to be inherited after moving or copying.

8. The access control apparatus according to claim 1, further comprising

an inheritance cancellation input device operable to receive an input designating that passwords that could be used to access the file in the first file storage region are not to be inherited after the file has been moved or copied to the second file storage region.

9. The access control apparatus according to claim 1, further comprising

a file modification determining unit operable when a file with the same name as the file is present in the second file storage region, to determine whether the files have different contents,

wherein the access controller switches an access control method after the file has been moved or copied to the second file storage region according to a determination result of the file modification determining unit.

10. The access control apparatus according to claim 1, further comprising

a file existence history determining unit that determines whether a file with the same name as the file has ever existed in the second file storage region,

wherein the access controller switches an access control method after the file has been moved or copied to the second file storage region according to a determination result of the file existence history determining unit.

11. The access control apparatus according to claim 1, further comprising

an instruction user identification unit that identifies a user who instructed moving or copying of the file,

wherein the access control information acquiring unit acquires a user password set for each user as the access control information, and

the access controller controls access so that the file that has been moved or copied to the second file storage region can be accessed using the user password set for the user identified by the instruction user identification unit after the file stored in the first file storage region has been moved or copied to the second file storage region.

12. The access control apparatus according to claim 11,

wherein a plurality of the user passwords can be set together with respective priority rankings.

13. The access control apparatus according to claim 12,

wherein the access controller controls access so that the file after moving or copying to the second file storage region can be accessed using user passwords with priority rankings up to one of the priority rankings.

14. The access control apparatus according to claim 13, further comprising

an effective user password priority input device that receives an input designating an effective priority ranking, wherein the file after moving or copying to the second file storage region is accessible using user passwords with priority rankings up to the effective priority ranking.

15. The access control apparatus according to claim 14, further comprising

an access control information updating unit that updates the access control information, wherein the access control information updating unit updates the access control information for the file after moving or copying in accordance with an input received by the effective user password priority input device.

16. An access control method of controlling access to a storage device containing a plurality of file storage regions that are respectively capable of storing a plurality of files, the access control method comprising the steps of:

receiving an input of an access password;

acquiring access control information indicating an access password to be inputted for accessing to a file stored in a file storage region in the case where a region access password is set for the file storage region;

controlling access to a file stored in a file storage region, based on the inputted access password and the access control information; and

controlling access to a file that has been moved or copied from a first file storage region to a second file storage region so that at least one password that could be used to access the file in the first file storage region is inherited when different region access passwords are set for accessing the first file storage region and the second file storage region, respectively.

17. The access control method according to claim 16, further comprising the step of:

updating the access control information so that the file that has been moved or copied to the second file storage region can be accessed using at least one password that could be used to access the file in the first file storage region after the file stored in the first file storage region has been moved or copied to the second file storage region.

18. A recording medium on which an access control program is stored, the access control program causing a processor to execute the steps of:

acquiring an input of an access password;

acquiring access control information indicating an access password to be inputted for accessing to a file stored in a file storage region in the case where a region access password is set for the file storage region;

controlling access to a file stored in a file storage region, based on the inputted access password and the access control information; and

controlling access to a file that has been moved or copied from a first file storage region to a second file storage region so that at least one password that could be used to access the file in the first file storage region is inherited when different region access passwords are set for accessing the first file storage region and the second file storage region, respectively.

19. An image processing apparatus including a storage device in which a plurality of file storage regions that are respectively capable of storing a plurality of files can be allocated, the image processing apparatus comprising:

a scanner unit that reads a document image to obtain image data;

an image data processing unit that stores the image data obtained by the scanner unit in one of the file storage regions as an image file;

a printer unit that prints an image data file stored in one of the file storage regions;

an access password input device that receives an input of an access password;

an access control information acquiring unit that acquires access control information indicating an access password to be inputted for accessing to a file stored in a file storage region in the case where a region access password is set for the file storage region;

an access controller that controls access to a file stored in a file storage region, based on the inputted access password and the access control information; and

an access control information updating unit operable when different region access passwords are set for accessing a first file storage region and a second file storage region, respectively, to update the access control information so that the file that has been moved or copied to the second file storage region can be accessed using at least one password that could be used to access the file in the first file storage region after the file stored in the first file storage region has been moved or copied to the second file storage region.