Communication device, communication system and method for managing access authority data

• US 7,865,942 B2
• Filed: 08/01/2006
• Issued: 01/04/2011
• Est. Priority Date: 12/13/2001
• Status: Expired due to Fees

• Current Assignee: Sony Corporation (Sony Group Corp.)
• Original Assignee: Sony Corporation (Sony Group Corp.)
• Inventors: Kotani, Hiroki, Kumagai, Naoko, Mimura, Atsuhiko
• Primary Examiner(s): Pich; Ponnoreay
• Application Number:
  US11/497,103
• Publication Number:
  US 20060265600A1
• Time in Patent Office: 1,617 Days
• Field of Search: None
• US Class Current: 726/6
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: H04L 63/104 Grouping of entities

Abstract

A communication device including an access authority data managing DB device for managing access authority data with which access authority for at least one of storage area defined logically or physically in a storage device. File data stored in the storage area is defined while at least one of a user making the access and a group to which the user concerned belongs is set as a unit. A non-open WWW device controls access to the storage device on the basis of the access authority data achieved from the access authority data managing DB device in accordance with an access from a terminal device.

Claims

1. A communication system which accepts an access from a single or plural other communication devices through a network in accordance with the operation of plural users, comprising:

storage means;

an open segment comprising a first controller for access via a public network;

a non-open segment comprising a second controller for access via a dedicated line, the second controller being separate from, and not directly connected to, the first controller;

a common router for managing access to the open segment and access to the non-open segment, the common router coupled to at least one of the single or plural other communication devices by a dedicated line and the common router coupled to at least another one of the single or plural other communication devices by a public network, and the common router routing the access received from the public network to the open segment, and routing the access received through the dedicated line to one of the open segment and the non-open segment;

managing means for managing access authority data that defines access authority for at least one of first and second areas logically or physically defined in a storage area of said storage means and file data stored in the first and second storage areas related to at least one of a user who makes the access or a group to which the user belongs;

a first computing device, which is located in the open segment, for inquiring to said managing means in accordance with the access to the first storage area and controlling the access to the first storage area on the basis of the access authority data received from said managing means in response to the inquiry concerning every user or group; and

a second computing device, which is located in the non-open segment, for inquiring to said managing means in accordance with the access to the second storage area and controlling the access to the second storage area on the basis of the access authority data received from said managing means in response to the inquiry concerning every user or group.

2. The communication system as claimed in claim 1, wherein,

the first controller is adapted to perform user authentication to judge whether a user has access authority for the open segment, and is adapted to permit an access from the single or plural other communication devices to the open segment under the condition that the authentication of the user concerned is accepted;

and

the second controller is adapted to perform user authentication to judge whether a user has access authority for the non-open segment, and is adapted to permit an access from the single or plural other communication device to the non-open segment under the condition that the authentication of the user concerned is accepted.

3. The communication system as claimed in claim 2, wherein said first controller is adapted to permit a prescribed user making an access through a public network and a prescribed user making the access through a specific dedicated line to make the access to the open segment, and second controller is adapted to permit a prescribed user making the access through a specific dedicated line to make an access to the non-open segment.

4. A communication method for receiving an access from single or plural other communication devices through a network in accordance with operations of plural users, comprising:

a step of managing access authority data which defines access authority for at least one of first and second storage areas defined logically or physically in a storage means and file data stored in the first and second storage areas related to at least one of a user who makes the access and a group to which the user belongs,

a first control step of controlling access from a public network to an open segment via a first controller;

a second control step of controlling access from a dedicated line to a non-open segment via a second controller, the second controller being separate from, and not directly connected to, the first controller;

a step of receiving access request from either the public network or the dedicated line through a common router common to the public network and the dedicated line, the common router coupled to at least one of the single or plural other communication devices by a dedicated line and coupled to at least another one of the single or plural other communication devices by a public network, and the common router routing access received from the public network to the open segment and routing access received through the dedicated line to one of the open segment and the non-open segment;

a first computing step, in the open segment, of inquiring to the step of managing access authority data in accordance with access to the first storage area and controls the access to the first storage area on the basis of access authority data received from the step of managing access authority data in response to inquiry concerning every user or group, and

a second computing step, in the non-open segment, of inquiring to the managing means in accordance with access to the second storage area, and controlling the access to the second storage area on the basis of access authority data received from the step of managing access authority data in response to inquiry concerning every user or group.

5. The communication method as claimed in claim 4, wherein:

the first control step performs user authentication to judge whether a user has access authority for the open segment, and permitting an access from the single or plural other communication devices to the open segment under the condition that the authentication of the user concerned is accepted, and

the second control step performs user authentication to judge whether a user has access authority for the non-open segment, and permitting an access from the single or plural other communication devices to the non-open segment under the condition that the authentication of the user concerned is accepted.

6. The communication method as claimed in claim 5, wherein

the first control step permits a prescribed user making an access through a public network and a prescribed user making the access through a specific dedicated line to make the access to the open segment, and

the second control step permits a prescribed user making the access through a specific dedicated line to make an access to the non-open segment.