A method of controlling a file system driver of an electronic computer connected with a plurality of devices, including a storage device, and operated by an operating system, wherein when access is made from an input device of said electronic computer or an application program to a specific file in a file system of said electronic computer, said access is controlled;
- wherein said electronic computer has a common interface operating in a kernel mode that is an operating mode in which all commands of said operating system are executable,
- wherein said common interface is located between a device driver layer and fundamental programs, said device driver layer including device drivers for controlling said plurality of devices respectively, and said fundamental programs being provided in the kernel mode by said operating system,
- wherein said common interface has functions (I) for being a common window of said device drivers and for performing communication between said device driver and said application program, (II) for sending and receiving data between said plurality of device drivers or between said application program and said device driver when a request is made by said application program, (III) when an access is made from said application program to said specific file stored in said storage device of said electronic computer, for receiving an access request from said application program to said specific file through a standard interface of said OS, and for providing data communication between said application and said storage device,
- wherein said common interface comprising:
- an interface portion for receiving said access,
- a flow control portion for controlling a flow of data by receiving said access, obtaining said specific file and an access method by analyzing said access, and transmitting said specific file and said access method to a data processing portion,
- a referencing potion for referencing an access control database comprising a column of a file name of a file in said file system and a column of said access method defining a condition of said access for said file name of said file, and for outputting a referencing result,
- said data processing portion (1) for receiving said specific file and said access method from said flow control portion, (2) for passing information concerning said specific file and said access method to said referencing portion, (3) for receiving said referencing result relative to said access method from said referencing portion, (4) for performing judgment whether said referencing result is normal, (5) for cancelling said access when the result of said judgment is abnormal, and (6) for passing said access to a file system supervising driver portion when the result of said judgment is normal;
- and
- said file system supervising driver portion (a) for receiving said access from said data processing portion, (b) for passing said access to a file system driver for controlling said file system, (c) for receiving a result of execution of said access from said file system driver and (d) for passing said result of execution to said flow control portion;
- wherein said flow control portion passes said result of execution to said interface portion,
- wherein said interface portion passes said result of execution to said input device or said application program,
- wherein said method comprising the steps of:
- receiving, by said common interface, said access in the kernel mode;
- referencing, by said common interface, said access control database to judge whether or not said access to said specific file conforms to said condition defined in said access control database;
- and
- canceling, by said common interface, said access if said access does not conform to said condition.