JPH11282803A - Illegal access prevention system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To double decide the propriety of connection and accordingly to improve the security. SOLUTION: A schedule management device 7 receives a user ID and the telephone number of an originator from a server 3A, compares the received telephone number with the telephone number of the originator previously registered and informs the server 3A of the comparison result. Receiving the comparison result from the device 7, the server 3A notifies a portable terminal of the permission and rejection of access when coincidence and no coincidence are confirmed between both telephone numbers of the originator respectively.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an access to an internal network of a company or the like via a public network.
The present invention relates to an unauthorized access prevention system for preventing unauthorized access from a third party.

[0002]

2. Description of the Related Art A conventional unauthorized access prevention system will be described with reference to the drawings. FIG. 19 is a diagram showing a configuration of a conventional unauthorized access prevention system.

In FIG. 19, reference numeral 1 denotes a portable terminal, 2 denotes a public network, 3 denotes an access server of an organization network, 4 denotes a client of the organization network, and 5 denotes a server of the organization network.

When a portable terminal 1 is connected to an internal network via a public network 2 and uses an internal computer, it is determined whether or not a connection request from an authorized user is made when connecting to the internal network. Security must be ensured. This security is achieved by controlling access by the access server 3 of the in-house network.

[0007] As shown in FIG. 19, a “user ID” and a “password” are set for each user who is previously permitted to access the intra-organization network. The access server 3 requests the user for a user ID and a password at the start of access, and permits access to the network in the organization when the permitted user ID and password match.

[0006]

In the conventional unauthorized access prevention system as described above, the password may leak to a third party, and the password may be abused to connect to an internal network. There was a point.

SUMMARY OF THE INVENTION The present invention has been made to solve the above-mentioned problems, and is a schedule management device for managing an individual's action schedule when a terminal outside the organization is connected to an internal network via a public network. The purpose of the present invention is to obtain an unauthorized access prevention system that can enhance security by determining whether a connection can be made in accordance with a user ID, a password, a number of a calling telephone, and individual behavior by linking a server with an access server. .

[0008]

An unauthorized access prevention system according to the present invention receives a user ID and a password from a portable terminal when an access request is received from the portable terminal, compares the received user ID and password with registered contents, and when the user ID and password match each other, matches. An unauthorized access prevention system including an access server that notifies an access permission to the mobile terminal and notifies an access rejection to the mobile terminal when they do not match, further receives a user ID and first user identification information from the access server. A schedule management device that compares the first user identification information with second user identification information registered in advance in a schedule table and notifies a result of the comparison to the access server; If there is a request, the user ID and password are sent from the portable terminal. Receiving the word and the first user identification information, and comparing the user ID and the password with the registered contents, and when they match, passes the user ID and the first user identification information to the schedule management device, and the access server Receiving the comparison result from the schedule management device, when the first and second user identification information match, notifies the portable terminal of access permission, and when not matching, notifies the portable terminal of access rejection. Notify.

In the unauthorized access prevention system according to the present invention, when an access request is made from a portable terminal, a user ID and a password are received from the portable terminal and compared with registered contents. In an unauthorized access prevention system including an access server for notifying the portable terminal of an access rejection when they do not match, further, a user ID is received from the access server, and a user ID is registered in advance from a schedule table based on the user ID. And a schedule management device that reads out the user identification information of the second and notifies the access server of the information, wherein the access server receives a user ID, a password, and a first user from the mobile terminal when the mobile terminal receives an access request. Receiving the identification information, When the ID and the password are compared with the registered contents and match, the user ID is passed to the schedule management device, and the access server receives the second user identification information from the schedule management device, and receives the first and the second user identification information. When the second user identification information matches, the access permission is notified to the portable terminal, and when the second user identification information does not match, the access denial is notified to the portable terminal.

[0010] In the unauthorized access prevention system according to the present invention, the first and second user identification information are a source telephone number of the portable terminal.

Further, in the unauthorized access prevention system according to the present invention, the first user identification information is the position information of the portable terminal, and the second user identification information is the registered position information. It is.

Further, in the unauthorized access prevention system according to the present invention, the first user identification information is a caller telephone number and location information of the portable terminal, and the second user identification information is a password of the portable terminal. This is the source telephone number and the registered location information.

[0013]

DESCRIPTION OF THE PREFERRED EMBODIMENTS Embodiment 1 An unauthorized access prevention system according to Embodiment 1 of the present invention will be described with reference to the drawings. FIG. 1 is a diagram showing a configuration of an unauthorized access prevention system according to Embodiment 1 of the present invention. In the drawings, the same reference numerals indicate the same or corresponding parts.

In FIG. 1, 1 is a portable terminal, 2 is a public network, 3A is an access server of an organization network, 4 is a client of the organization network, 6 is a file device in which a user ID and a password are registered for each user. ,
Reference numeral 7 denotes a schedule management device for an in-house network, and reference numeral 8 denotes a file device in which a personal schedule table is registered.

FIG. 2 is a diagram showing a configuration of a schedule table of the unauthorized access prevention system according to the first embodiment of the present invention.

As shown in FIG. 2, the schedule table is configured for each user (individual), and for each user, a “user number”, a “user ID”, a “stay place” corresponding to time, Similarly, it is composed of “access right which is a source telephone number” corresponding to time.

Next, the operation of the unauthorized access prevention system according to the first embodiment will be described with reference to the drawings. 3 and 5 are flowcharts showing the operation of the access server of the unauthorized access prevention system. FIG. 4 is a flowchart showing the operation of the schedule management device of the unauthorized access prevention system.

As shown in FIG. 2, the user sets each item of the action schedule, that is, the “user ID” in the schedule table and the “stay place” corresponding to the time of day.
And "access right (source telephone number)" are registered in the file device 8 via the schedule management device 7. During the time when the access right is set to “prohibited” in the schedule table, access from the public network 2 is prohibited. On the other hand, when "telephone number" is registered in the access right of the schedule table, only the outgoing call from the telephone number is transmitted to the public network 2.
Allow access from.

As described above, the user registers an action schedule in the schedule management tool in advance. Then, when receiving a connection request from the public network 2, the access server 3 </ b> A receives the telephone number (source telephone number) used by the mobile terminal 1 from the public network 2. At this time, the “user ID” and the “source phone number” are passed to the schedule management tool.

The schedule management tool searches for an action schedule corresponding to the received "user ID", determines whether or not the time zone permits access from the telephone number, and returns a result to the access server 3A.

If the determination result of the schedule management tool is “approved”, the access server 3A holds the connection (communication) between the portable terminal 1 and the in-house network until a disconnection request from the portable terminal 1 is received, If the result of the determination is "denial", the communication is immediately disconnected.

That is, in step 10 of FIG.
The access server 3A receives an access request from the mobile terminal 1.

Next, in step 11, the access server 3A receives the "user ID", "password" and "source telephone number" from the portable terminal 1.

Next, in step 12, the received "user ID" and "password" are
Is compared with the user ID and the password registered in.

Next, in steps 13 and 14, if the registered contents match the "user ID" and "password" received from the portable terminal 1, the access server 3A
Sends the “user ID” and the “source phone number” to the schedule management device 7.

In steps 15 and 16, the access server 3A sends the "user ID"
If the registered contents do not match the “password” and the “password”, the portable terminal 1 is notified of access rejection, and the connection with the portable terminal 1 is cut off.

Subsequently, in step 20 of FIG.
The schedule management device 7 receives the “user ID” and the “source phone number” from the access server 3A.

Next, in steps 21 to 22, the schedule management device 7 reads the date and time from the clock in the organization network, and searches the schedule table in the file device 8 based on the "user ID" and the current time.
Read out the registered caller phone number.

Next, in step 23, the "source telephone number" received from the access server 3A is compared with the source telephone number read from the file device 8.

Next, in steps 24 and 25, when the registered contents match the "source telephone number" received from the access server 3A, the schedule management device 7 notifies the access server 3A of the access authorization.

In step 26, when the registered contents do not match the "source telephone number" received from the access server 3A, the schedule management device 7 notifies the access server 3A of denial of access.

Subsequently, in step 30 of FIG.
The access server 3A receives the access availability determination result from the schedule management device 7.

Next, in steps 31 to 33, when an access permission is received from the schedule management device 7, the access server 3A notifies the portable terminal 1 of the access permission and permits communication with the organization network.

In steps 34 to 35, when the access server 3A receives the access denial from the schedule management device 7, the access server 3A notifies the portable terminal 1 of access rejection and disconnects the connection with the portable terminal 1.

The unauthorized access prevention system according to the first embodiment has access to the schedule management device 7 for managing an individual's behavior schedule when a terminal 1 outside the organization connects to the internal network via the public network 2. By linking the server 3A and determining twice whether connection is possible based on the user ID and password and the telephone number of the mobile terminal 1A, security can be enhanced.

Embodiment 2 An unauthorized access prevention system according to Embodiment 2 of the present invention will be described with reference to the drawings. In the first embodiment, the schedule management device 7 compares the source telephone number with the registered contents to determine whether access is permitted. In the second embodiment, the access server 3B determines whether access is permitted.

The configuration of the unauthorized access prevention system according to the second embodiment is substantially the same as that of the first embodiment, and is not shown. However, the codes of the access server and the schedule management device are 3B and 7A.

FIGS. 6 and 8 are flowcharts showing the operation of the access server of the unauthorized access prevention system. FIG. 7 is a flowchart showing the operation of the schedule management device of the unauthorized access prevention system.

In step 40 of FIG. 6, access server 3B receives an access request from portable terminal 1.

Next, in step 41, the access server 3B receives the “user ID”, the “password”, and the “source telephone number” from the portable terminal 1.

Next, in step 42, the received "user ID" and "password" are
Is compared with the user ID and the password registered in.

Next, in steps 43 to 44, if the registered contents match the "user ID" and "password" received from the portable terminal 1, the access server 3B
Sends the "user ID" to the schedule management device 7A.

In steps 45 to 46, the access server 3B transmits the “user ID” received from the portable terminal 1.
If the registered contents do not match the “password” and the “password”, the portable terminal 1 is notified of access rejection, and the connection with the portable terminal 1 is cut off.

Subsequently, in step 50 of FIG.
The schedule management device 7A receives the “user ID” from the access server 3B.

Next, in steps 51 to 52, the schedule management device 7A reads the date and time from the clock in the organization network and searches the schedule table in the file device 8 based on the "user ID" and the current time. The access right data such as the registered caller telephone number is read.

Next, in step 53, the schedule management device 7A notifies the read access right data to the access server 3B.

Subsequently, in step 60 of FIG.
The access server 3B receives the access right data from the schedule management device 7A.

Next, in step 61, if the “source telephone number” received from the portable terminal 1 matches the source telephone number, which is the content of the access right data, the access server 3B determines that the access is authorized. . On the other hand, if the “source phone number” received from the mobile terminal 1 does not match the source phone number that is the content of the access right data, it is determined that access is denied. Further, the access server 3B determines that access is denied when the content of the access right data is prohibited.

Next, if it is determined in steps 62 to 64 that the access is permitted, the access server 3B notifies the portable terminal 1 of the access permission and permits communication with the network in the organization.

In steps 65 to 66, when the access server 3B determines that the access is denied, the access server 3B notifies the portable terminal 1 of access rejection and disconnects the connection with the portable terminal 1.

The unauthorized access prevention system according to the second embodiment has an access to a schedule management device 7A that manages an individual's action schedule when a terminal 1 outside the organization connects to an internal network via the public network 2. By linking the server 3B, a user ID and a password
By judging whether connection is possible twice based on the telephone number of the portable terminal 1, security can be enhanced.

Embodiment 3 FIG. An unauthorized access prevention system according to Embodiment 3 of the present invention will be described with reference to the drawings. FIG. 9 is a diagram showing a configuration of an unauthorized access prevention system according to Embodiment 3 of the present invention.

In FIG. 9, 1A is a portable terminal having a GPS function, 2 is a public network, 3C is an access server of an organization network, 4 is a client of the organization network, 6 is a user ID and password registered for each user. 7B is a schedule management device of the in-house network, and 8 is a file device in which a personal schedule table is registered.

FIG. 10 is a diagram showing a configuration of a schedule table of an unauthorized access prevention system according to Embodiment 3 of the present invention.

As shown in FIG. 10, the schedule table is configured for each user (individual), and for each user, a “user number”, a “user ID”, a “stay place” corresponding to time, Similarly, it is composed of "address (position information)" corresponding to time.

Next, the operation of the unauthorized access prevention system according to the third embodiment will be described with reference to the drawings. FIGS. 11 and 13 are flowcharts showing the operation of the access server of the unauthorized access prevention system. FIG. 12 is a flowchart showing the operation of the schedule management device of the unauthorized access prevention system.

As shown in FIG. 10, the user sets each item of the action schedule, that is, “user ID” in the schedule table, and “stay place” corresponding to the time of day.
And "address (location information)" in the schedule management device 7B
Is registered in the file device 8 via the.

As described above, the user registers an action schedule in the schedule management tool in advance, and has the portable terminal 1A having the GPS function. And
When receiving the connection request from the public network 2, the access server 3C receives the "location information" recognized by the GPS function and passes the "user ID" and "location information" to the schedule management tool.

The schedule management tool searches for an action schedule corresponding to the received "user ID", determines whether or not it is a time zone in which access from a region corresponding to the position information is permitted, and sends it to the access server 3C. Returns the judgment result. In this case, there is a possibility that an error may occur in the position information, so that an area where access is permitted is given a margin as necessary.

The access server 3C holds the connection (communication) between the mobile terminal 1A and the in-house network if the determination result of the schedule management tool is approved until a disconnection request is received from the mobile terminal 1A. If it is denied, the communication is immediately disconnected.

That is, in step 70 of FIG. 11, the access server 3C receives an access request from the portable terminal 1A.

Next, in step 71, the access server 3C sends a “user ID” from the portable terminal 1A,
"Password" and "location information" are received.

Next, in step 72, the received "user ID" and "password" are
Is compared with the user ID and the password registered in.

Next, in steps 73-74, if the registered contents match the "user ID" and "password" received from the portable terminal 1A, the access server 3C
Sends the "user ID" and "position information" to the schedule management device 7B.

In steps 75 to 76, the access server 3C transmits the “user I” received from the portable terminal 1A.
When the registered contents do not match the "D" and the "password", the access denial is notified to the mobile terminal 1A, and the connection with the mobile terminal 1A is cut off.

Subsequently, in step 80 of FIG. 12, the schedule management device 7B receives the “user ID” and “location information” from the access server 3C.

Next, in steps 81 to 82, the schedule management device 7B reads the date and time from the clock in the organization network, and searches the schedule table in the file device 8 based on the "user ID" and the current time. Read the registered position information.

Next, in step 83, the “location information” received from the access server 3C is compared with the location information read from the file device 8.

Next, in steps 84 to 85, if the registered information matches the "position information" received from the access server 3C, the schedule management device 7B notifies the access server 3C of the access authorization.

In step 86, when the registered information does not match the "position information" received from access server 3C, schedule management device 7B notifies access server 3C of denial of access.

Subsequently, in step 90 of FIG. 13, the access server 3C receives the access permission / non-permission judgment result from the schedule management device 7B.

Next, in steps 91 to 93, when the access permission is received from the schedule management device 7B, the access server 3C makes the access permission
A is notified, and communication with the organization network is permitted.

In steps 94 to 95, when the access server 3C receives the access denial from the schedule management device 7B, the access server 3C denies the access to the portable terminal 1A.
And disconnects from the mobile terminal 1A.

In the unauthorized access prevention system according to the third embodiment, when the terminal 1A outside the organization connects to the network within the organization via the public network 2, it accesses the schedule management device 7B that manages the personal action schedule. By linking the server 3C and judging whether connection is possible twice based on the user ID and password and the position information of the mobile terminal 1A, security can be enhanced.

Embodiment 4 An unauthorized access prevention system according to Embodiment 4 of the present invention will be described. In the third embodiment, the schedule management device 7B compares the location information with the registered contents to determine whether or not access is possible.
In the fourth embodiment, the access server 3D determines whether access is permitted.

The configuration of the unauthorized access prevention system according to the fourth embodiment is substantially the same as that of the third embodiment, and is not shown. However, the codes of the access server and the schedule management device are 3D and 7C.

The operation of the unauthorized access prevention system according to the fourth embodiment is basically the same as the operation of the access server and the schedule management device of the second embodiment shown in FIGS. Is omitted. The difference is only the position information instead of the access right data.

The unauthorized access prevention system according to the fourth embodiment has access to a schedule management device 7C that manages an individual's action schedule when a terminal 1A outside the organization connects to an internal network via the public network 2. By linking the server 3D and determining twice whether connection is possible based on the user ID and password and the position information of the mobile terminal 1A, security can be enhanced.

Embodiment 5 FIG. Embodiment 5 An unauthorized access prevention system according to Embodiment 5 of the present invention will be described with reference to the drawings. FIG. 14 is a diagram showing a configuration of an unauthorized access prevention system according to Embodiment 5 of the present invention.

In FIG. 14, 1A is a portable terminal having a GPS function, 2 is a public network, 3E is an access server of an organization network, 4 is a client of the organization network, 6 is a user ID and password registered for each user. 7D is a schedule management device of the in-house network, and 8 is a file device in which a personal schedule table is registered.

FIG. 15 is a diagram showing a configuration of a schedule table of the unauthorized access prevention system according to Embodiment 5 of the present invention.

As shown in FIG. 15, the schedule table is configured for each user (individual), and further includes, for each user, a “user number”, a “user ID”, a “stay place” corresponding to time, Similarly, it is composed of “address (position information)” corresponding to time and “access right (source telephone number)” corresponding to time.

Next, the operation of the unauthorized access prevention system according to the fifth embodiment will be described with reference to the drawings. FIGS. 16 and 18 are flowcharts showing the operation of the access server of the unauthorized access prevention system. FIG. 17 is a flowchart showing the operation of the schedule management device of the unauthorized access prevention system.

As shown in FIG. 15, the user sets each item of the action schedule, that is, “user ID” in the schedule table, “stay place”, “address (position information)” corresponding to time of day, and The “access right (source telephone number)” is registered in the file device 8 via the schedule management device 7D. In the schedule table,
During the time when the access right is “prohibited”, access from the public network 2 is prohibited. On the other hand, if the "telephone number" is registered in the access right of the schedule table and the location is registered in the address (position information) of the schedule table, only the call from the telephone number and from the registered location is transmitted from the public network 2. Allow access.

As described above, the user registers an action schedule in the schedule management tool in advance, and has the portable terminal 1A having the GPS function. And
When receiving a connection request from the public network 2, the access server 3 </ b> E receives from the public network 2 the telephone number (source telephone number) of the mobile terminal 1 </ b> A being used. Further, the “location information” recognized by the GPS function is received, and “user I
D, "source telephone number" and "location information" are passed to the schedule management tool.

The schedule management tool searches for an action schedule corresponding to the received “user ID” and determines whether or not the time zone permits access from the area corresponding to the telephone number and the location information. The determination result is returned to the access server 3E. In this case, there is a possibility that an error may occur in the position information, so that an area where access is permitted is given a margin as necessary.

The access server 3E holds the connection (communication) between the mobile terminal 1A and the in-house network if the determination result of the schedule management tool is approved, until the disconnection request is received from the mobile terminal 1A. If it is denied, the communication is immediately disconnected.

That is, in step 100 of FIG. 16, access server 3E receives an access request from portable terminal 1A.

Next, in step 101, the access server 3E sends the “user ID” from the portable terminal 1A to
"Password", "source telephone number", and "location information" are received.

Next, in step 102, the received “user ID” and “password” are compared with the user ID and password registered in the file device 6.

Next, in steps 103 to 104,
When the registered contents match the "user ID" and "password" received from the mobile terminal 1A, the access server 3E sends the "user ID", "source telephone number" and "location information" to the schedule management device 7B. .

In steps 105 to 106, if the registered contents do not match the “user ID” and “password” received from portable terminal 1A, access server 3E notifies portable terminal 1A of access rejection, The connection with the mobile terminal 1A is disconnected.

Subsequently, in step 110 of FIG. 17, the schedule management device 7D sets “user ID”,
The “source telephone number” and the “location information” are received from the access server 3C.

Next, in steps 111 to 112,
The schedule management device 7D reads the date and time from the clock in the organization network, searches the schedule table in the file device 8 based on the “user ID” and the current time, and reads out the registered source telephone number and location information. .

Next, in step 113, the "source telephone number" and "position information" received from the access server 3E are compared with the source telephone number and position information read from the file device 8.

Next, in steps 114 to 115,
"Source phone number" received from access server 3E
If the registered content matches the “location information” and the registered content, the schedule management device 7D issues an access authorization to the access server 3.
Notify E.

In step 116, if the registered contents do not match the "source telephone number" and "location information" received from access server 3E, schedule management device 7D notifies access server 3E of denial of access. I do.

Subsequently, in step 120 of FIG. 18, the access server 3E receives the access permission / non-permission judgment result from the schedule management device 7D.

Next, in steps 121 to 123,
When the access permission is received from the schedule management device 7D, the access server 3E notifies the mobile terminal 1A of the access permission and permits the communication with the network in the organization.

In steps 124 to 125, when the access server 3E receives the access denial from the schedule management device 7D, it notifies the portable terminal 1A of the access rejection and disconnects the connection with the portable terminal 1A.

In the unauthorized access prevention system according to the fifth embodiment, when a terminal 1A outside the organization connects to a network within the organization via the public network 2, an access to the schedule management device 7D for managing an individual's action schedule is made. The server 3E is linked, and based on the user ID and the password, the telephone number and the location information of the mobile terminal 1A,
By repeatedly determining whether connection is possible, security can be enhanced.

Embodiment 6 FIG. An unauthorized access prevention system according to Embodiment 6 of the present invention will be described. In the fifth embodiment, the schedule management device 7D compares the source telephone number and the location information with the registered contents to determine whether access is possible. In the sixth embodiment, the access server 3F determines whether access is possible. Things.

The configuration of the unauthorized access prevention system according to the sixth embodiment is substantially the same as that of the fifth embodiment, and therefore is not shown. However, the codes of the access server and the schedule management device are 3F and 7E.

The operation of the unauthorized access prevention system according to the sixth embodiment is basically the same as the operation of the access server and the schedule management device according to the second embodiment shown in FIGS. Is omitted. The only difference is that location information is added to the access right data.

In the unauthorized access prevention system according to the sixth embodiment, when connecting from a terminal 1A outside the organization to a network within the organization via the public network 2, an access to the schedule management device 7E for managing an individual's action schedule is made. The server 3F is linked, and based on the user ID and password, and the telephone number and location information of the mobile terminal 1A,
By repeatedly determining whether connection is possible, security can be enhanced.

[0106]

As described above, the unauthorized access prevention system according to the present invention, when receiving an access request from a portable terminal, receives a user ID and a password from the portable terminal, compares the received user ID and password with the registered contents, and matches Informs the mobile terminal of access permission, and if the passwords do not match, an access server that notifies the mobile terminal of access rejection, further comprising: a user ID and first user identification information from the access server. Receiving the first user identification information and second user identification information registered in advance in a schedule table, and notifying the result to the access server, wherein the access server comprises:
When there is an access request from the portable terminal, a user ID, a password and first user identification information are received from the portable terminal, and the user ID and the password are compared with the registered contents. 1
Passing the user identification information to the schedule management device,
Further, the access server receives the comparison result from the schedule management device, notifies the portable terminal of access permission when the first and second user identification information match, and accesses the mobile terminal when the first and second user identification information do not match. Since the refusal is notified to the portable terminal, whether connection is possible is determined twice and an effect that security can be enhanced can be achieved.

As described above, the unauthorized access prevention system according to the present invention receives a user ID and a password from a portable terminal when an access request is received from the portable terminal, compares the received user ID and password with the registered contents, and, when the contents match, the access. An unauthorized access prevention system including an access server for notifying permission to the portable terminal and notifying access to the portable terminal when they do not match, further comprising:
A schedule management device that receives a user ID from the access server, reads out second user identification information registered in advance from a schedule table based on the user ID, and notifies the access server of the second user identification information. When there is an access request, a user ID, a password, and first user identification information are received from the portable terminal, and when the user ID and the password match the registered contents, the user ID is transmitted to the schedule management device. Handover, the access server receives the second user identification information from the schedule management device, and notifies the mobile terminal of access permission when the first and second user identification information match, and does not match Sometimes notifies access denial to the mobile terminal In, it will be determining whether connection is possible to double an effect that it is possible to strengthen security.

Further, as described above, in the unauthorized access prevention system according to the present invention, since the first and second user identification information are the source telephone numbers of the portable terminal, it is determined whether the connection is possible twice. As a result, the security can be enhanced.

Further, as described above, the unauthorized access prevention system according to the present invention uses the first user identification information as the position information of the portable terminal and the second user identification information as the registered user. Since we used location information,
It is necessary to determine whether connection is possible or not, and it is possible to enhance security.

Further, as described above, in the unauthorized access prevention system according to the present invention, the first user identification information is used as the originating telephone number and the location information of the portable terminal, and the second user identification information is used as the second user identification information. , The source phone number of the mobile terminal and the registered location information,
Since the connection is determined twice, the security can be strengthened.

[Brief description of the drawings]

FIG. 1 is a diagram showing a configuration of an unauthorized access prevention system according to Embodiment 1 of the present invention.

FIG. 2 is a diagram showing a configuration of a schedule table of the unauthorized access prevention system according to the first embodiment of the present invention.

FIG. 3 is a flowchart showing an operation of the access server of the unauthorized access prevention system according to the first embodiment of the present invention.

FIG. 4 is a flowchart showing an operation of the schedule management device of the unauthorized access prevention system according to the first embodiment of the present invention.

FIG. 5 is a flowchart showing an operation of the access server of the unauthorized access prevention system according to the first embodiment of the present invention.

FIG. 6 is a flowchart showing an operation of the access server of the unauthorized access prevention system according to Embodiment 2 of the present invention.

FIG. 7 is a flowchart showing an operation of the schedule management device of the unauthorized access prevention system according to Embodiment 2 of the present invention.

FIG. 8 is a flowchart showing an operation of the access server of the unauthorized access prevention system according to Embodiment 2 of the present invention.

FIG. 9 is a diagram showing a configuration of an unauthorized access prevention system according to Embodiment 3 of the present invention.

FIG. 10 is a diagram showing a configuration of a schedule table of an unauthorized access prevention system according to Embodiment 3 of the present invention.

FIG. 11 is a flowchart showing an operation of the access server of the unauthorized access prevention system according to Embodiment 3 of the present invention.

FIG. 12 is a flowchart showing the operation of the schedule management device of the unauthorized access prevention system according to Embodiment 3 of the present invention.

FIG. 13 is a flowchart showing the operation of the access server of the unauthorized access prevention system according to Embodiment 3 of the present invention.

FIG. 14 is a diagram showing a configuration of an unauthorized access prevention system according to Embodiment 5 of the present invention.

FIG. 15 is a diagram showing a configuration of a schedule table of an unauthorized access prevention system according to Embodiment 5 of the present invention.

FIG. 16 is a flowchart showing an operation of the access server of the unauthorized access prevention system according to Embodiment 5 of the present invention.

FIG. 17 is a flowchart showing an operation of the schedule management device of the unauthorized access prevention system according to Embodiment 5 of the present invention.

FIG. 18 is a flowchart showing an operation of the access server of the unauthorized access prevention system according to Embodiment 5 of the present invention.

FIG. 19 is a diagram showing a configuration of a conventional unauthorized access prevention system.

[Explanation of symbols]

1 mobile terminal, 1A mobile terminal with GPS function, 2
Public network, 3A, 3B, 3C, 3D, 3E, 3F access server, 4 clients, 6 file devices,
7, 7A, 7B, 7C, 7D, 7E Schedule management device, 8 File device.

Continuing on the front page (72) Inventor Takuma Saito 2-3-2 Marunouchi, Chiyoda-ku, Tokyo Mitsubishi Electric Corporation (72) Inventor Keiichi Matsuhira 2-3-2 Marunouchi 2-chome, Chiyoda-ku, Tokyo Mitsubishi Electric Co., Ltd. In company

Claims (5)

[Claims] 1. When an access request is made from a portable terminal, a user ID and a password are received from the portable terminal and compared with registered contents. If the contents match, the access permission is notified to the portable terminal. An unauthorized access prevention system including an access server for notifying rejection to the portable terminal, further comprising receiving a user ID and first user identification information from the access server and registering the user ID and the first user identification information in a schedule table in advance. A schedule management device for notifying the access server of the result compared with the second user identification information, wherein the access server receives a user ID from the mobile terminal when an access request is received from the mobile terminal; Receiving the password and the first user identification information;
D and the password are compared with the registered contents, and when they match, the user ID and the first user identification information are passed to the schedule management device, and the access server receives the comparison result from the schedule management device, An unauthorized access prevention system, wherein when the first and second user identification information match, an access permission is notified to the mobile terminal, and when the first and second user identification information do not match, an access rejection is notified to the mobile terminal. 2. When there is an access request from a portable terminal, a user ID and a password are received from the portable terminal and compared with registered contents. If the contents match, an access permission is notified to the portable terminal. An unauthorized access prevention system comprising an access server for notifying the portable terminal of refusal, further comprising: receiving a user ID from the access server, reading out second user identification information registered in advance from a schedule table based on the user ID, A schedule management device for notifying the access server, wherein the access server receives a user ID, a password, and first user identification information from the mobile terminal when there is an access request from the mobile terminal;
When the D and the password are compared with the registered contents and match, the user ID is passed to the schedule management device, and the access server receives the second user identification information from the schedule management device, and receives the first and the second user identification information. An unauthorized access prevention system, wherein when the second user identification information matches, an access permission is notified to the mobile terminal, and when the second user identification information does not match, an access denial is notified to the mobile terminal. 3. The first and second user identification information,
3. The unauthorized access prevention system according to claim 1, wherein the originating telephone number of the portable terminal is the originating telephone number. 4. The method according to claim 1, wherein the first user identification information is position information of the mobile terminal, and the second user identification information is the registered position information. Described unauthorized access prevention system. 5. The first user identification information is a source phone number and location information of the mobile terminal, and the second user identification information is a source phone number of the mobile terminal and the registered phone number. The unauthorized access prevention system according to claim 1, wherein the information is position information.