PURPOSE: To enable data base recovery for the illegal data processing of a designated program while operating on-line processing by providing a journal file equipped with information before and after a data base is updated.

CONSTITUTION: At the time of updating the data base, updated data base name information, updated program name information, updating instruction information, data contents before update and data after update are outputted to a journal file 5. A data base recovery program 6 retrieves the data base name information and the updated program name information from the journal file 5 and updates a data base file 4 with the data information before update by performing erase processing in the case of data registration, performing registration processing in the case of data erase or performing correction processing in the case of correction corresponding to the updating instruction information. At such a time, when the contents of the data base are different from the updated data information of the program to be recovered and the program is forcedly recovered, any conflict is generated in the data base system. Therefore, propagation processing is skipped, and the alarm message of disabling recovery is outputted to an alarm data list 7.