JP2000250860A - Access limit system for terminal equipment - Google Patents

Abstract

PROBLEM TO BE SOLVED: To permit the strict management of a card and to prevent security from being lowered in the case of access from a plurality of users to terminal equipment with one IC card. SOLUTION: Concerning this access limit system, when a user connects an IC card 9 to an IC card reader/writer(R/W) 3 of terminal equipment 1 and inputs personal identification information from a keyboard 7 or the like, this personal identification information is sent to the IC card 9 and collated with plural kinds of personal identification information registered in an auxiliary storage device. Then, level information registered in a data area corresponding to the matched personal identification information is sent from the IC card 9 to the terminal equipment 1 and the terminal equipment 1 can be utilized within the access authority based on this level information.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a technology for restricting access rights of terminal devices used by a plurality of users for each user. It is about.

[0002]

2. Description of the Related Art As a terminal device for various kinds of business use, there is a terminal device in which only a user who has been given a use qualification in advance can perform an operation. As one example, a counter terminal device that is qualified to be operated only by a specific user (operator) at a counter of a financial institution such as a bank is known. In such a terminal device, cash management and confidentiality are maintained. Since it is necessary to prevent anyone other than a specific user from accessing the data to be managed, personal identification information such as a personal identification number, a password or a fingerprint is registered in the IC card, and based on the personal identification information. A system that authenticates a user is adopted.

This IC card is constructed by embedding an IC chip having a computer function composed of a single CPU, a memory and a data file in a card made of plastic or the like, and personal identification information is previously stored in the data file. Register and qualify by comparing the personal identification information entered by the user when using the terminal device with the personal identification information registered in the data file of the IC card connected to the terminal device via the IC card reader / writer. Although authentication is performed, in a conventional system of this type, when a plurality of users who have different access rights and use the same terminal device in a conventional system, one I
Only one piece of personal identification information with a fixed access right is assigned to the C card, and the user can use the terminal device within the range of the access right.

[0004]

However, in the above-mentioned conventional technique, since a plurality of users individually hold IC cards, it is difficult to perform strict card management. Since the situation described above is likely to occur, there is a problem that security is reduced.

As a countermeasure, if a plurality of users can use the terminal device with one IC card, the management of the IC card becomes easy, but users having different access rights use the same IC card. Therefore, it is difficult to set an access right for each user, which also causes a problem in security. SUMMARY OF THE INVENTION Accordingly, an object of the present invention is to provide a terminal device access restriction system capable of setting an access right for each user with one IC card and using the terminal device.

[0006]

SUMMARY OF THE INVENTION Therefore, the present invention is a terminal device provided with various input / output devices, various data, various programs, and the like as resources, and one of the input / output devices of the terminal device. A plurality of data areas are set in one IC card in a terminal device access restriction system which comprises an IC card connected to an IC card reader / writer and authenticates a use qualification of the terminal device using the IC card. Registering access level information for determining the use range of the resource in each data area; registering personal identification information of each of a plurality of users; and registering each personal identification according to the access right of each user. The information is associated with the data area, and when the terminal device is used, the personal identification information input to the terminal device and the information registered in the IC card are used. By matching personal identification information, matching the access restriction system of a terminal device the level information registered in the data area corresponding to the personal identification information and notifies the terminal device from the IC card.

[0007]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS An embodiment of a terminal device access restriction system according to the present invention will be described below with reference to the drawings. FIG. 1 is a block diagram showing an embodiment, and FIG.
FIG. 3 is a side view showing an appearance of a main part. In the figure, reference numeral 1 denotes a terminal device, which is a central control device (CPU) 2,
IC card reader / writer (hereinafter abbreviated as IC card R / W) 3, main storage device 4 such as RAM, auxiliary storage device 5 such as hard disk, display 6 such as CRT or LCD, keyboard 7, mouse (pointing device) 8 and so on.

Here, the IC card R / W3 is an I / O
This device reads and writes data to and from the C card, and relays data input and output between the terminal device 1 and the IC card. The CPU main storage device 4 is a memory that stores programs read from the auxiliary storage device 5 and various data. The auxiliary storage device 5 stores data handled by the terminal device 1 and programs such as various applications.

A display 6 is a display means for displaying a screen corresponding to a program, input guidance, input data, and the like. A keyboard 7 is an input means for inputting data by key. A mouse 8 is a data display by moving a cursor on the display 7. Is selected. These three to eight components are connected to the central control unit 2 via a bus, and the central control unit 2 serves to control the whole.

The IC card R / W 3, the display 6, the keyboard 7, and the mouse 8 are input / output devices of the terminal device 1, but are provided with input / output devices such as a printer and a scanner. In addition, if it is a counter terminal device of a financial institution, a banknote or coin depositing / dispensing machine is also provided. Reference numeral 9 denotes an IC card constituted by providing an IC chip inside a card base material such as plastic. The IC chip is constituted by a central control device 10, a main storage device 11, and an auxiliary storage device 12.

Here, the main storage device 11 is a central control device 10
Is a memory for storing programs and various data read from the auxiliary storage device 11 by the auxiliary storage device 11.
It is a non-volatile memory that stores data handled by the C card 3 and programs such as various applications and registers data such as personal identification information of a user who accesses the terminal device 1.

FIG. 3 is a diagram showing an example of information registered in the auxiliary storage device 12 of the IC card 3. As shown in this figure, in the present embodiment, a plurality of data areas are provided in the auxiliary storage device 12, one level information is registered in each data area, and a plurality of personal identification information registration areas are provided. In the personal identification information registration area, personal identification information of each user who is qualified to use the terminal device 1 is registered.

Here, the level information is information for limiting the use range of various input / output devices of the terminal device 1 and various data and resources such as various programs based on the access authority given to each user. And
The personal identification information of each user corresponds to the level information of the data area. The level information is ranked as level 1, level 2,..., And in this example, the one with the larger numerical value is ranked higher.

A data area which always has one level information cannot be used unless personal identification information is input (hereinafter referred to as a lock).
That is, in FIG. 3, each data area shows a locked state. When the personal identification information sent from the terminal device 1 matches the personal identification information registered in the auxiliary storage device 12, the personal identification information is Is unlocked for the data area corresponding to.

By doing so, in the present embodiment, not only one personal identification information is assigned to one data area, but the same data area can be unlocked by a plurality of personal identification information. A plurality of data areas can be unlocked with one piece of personal identification information.
That is, the personal identification information and the data area do not need to correspond one to one, and one personal identification information can correspond to a plurality of data areas.

For example, in the example of FIG. 3, the personal identification information D is associated with the data areas 3 and 4, so that the respective levels 1 and 3 can be obtained. Based on such personal identification information, the terminal device 1 executes access right switching software in units of level information. The level unit access right switching software mentioned here means IC
It is software that limits accessible resources using the level information passed from the card 3, and the correspondence between the level information and the access right for each resource is set in advance.

FIG. 4 is a diagram showing an example of the configuration of software for this access management. As shown in FIG.
The access right switching software determines the access right for each resource based on the level information from the C card 9.
When an application accesses a resource, if there is an access right, the access right switching software passes the resource to the application. That is, in FIG.
→ It becomes the flow.

On the other hand, when the application accesses the resource, if there is no access right, the access right switching software does not pass the resource to the application, and therefore, in this case, the flow becomes as shown in FIG. The present invention relates to an IC card 9 in which a plurality of personal identification information is registered.
Is connected to the IC card R / W3, the access authority is restricted based on the personal identification information assigned to each user by inputting the personal identification information, and the terminal device 1 can be used within the restriction. The details will be described below with reference to flowcharts.

FIG. 5 is a flowchart showing the operation of the above-described configuration. A series of operations of this embodiment will be described with reference to this flowchart. First, in a state where the IC card 9 is not connected to the IC card R / W3 of the terminal device 1, the central processing unit 2 of the terminal device 1 does not accept any other processing, and the IC card R / W3 is sent to the IC card R / W3. Wait for connection No. 9 (S1).

[0020] All other processing here means information input from input devices such as a keyboard 7 and a mouse 8 other than the IC card R / W3. Then, a user
When the C card 3 is connected to the IC card R / W2, the central processing unit 2 of the terminal device 1 displays a login screen for prompting input of personal identification information such as a password on the display 6 and inputs the personal identification information. Wait for.

When the user operates the keyboard 7 or the like to input personal identification information (S3), the central processing unit 2 attempts to connect to the information in the IC card 9 via the IC card R / W3. . That is, the central processing unit 2 of the terminal device 1 sends the personal identification information input by the user to the central processing unit 10 of the IC card 9 and requests qualification authentication.

In response to this, the central processing unit 10 checks the personal identification information registered in the auxiliary storage device 12 to determine whether or not there is matching personal identification information (S4). As a result, if there is a matching personal identification information, the data area corresponding to the personal identification information is unlocked assuming that the qualification has been authenticated, the level information of this data area is read out, and the terminal device 1 Is sent to the central processing unit 4, but if the locks of a plurality of data areas are released,
The highest level information among the level information in the plurality of data areas is selected and the central processing unit 4 of the terminal device 1 is selected.
(S5).

FIG. 6 is a diagram showing a state in which the data area is unlocked. FIG. 6A shows a state in which only one data area is unlocked, and FIG. 6B shows a state in which two data areas are locked. It is a figure which shows the state which was cancelled. In the example of FIG. 3A, since only the data area 1 is unlocked by input of the personal identification information A, the level 1 information is sent to the central processing unit 2 of the terminal device 1.

In the example shown in FIG. 2B, since both the data area 1 and the data area 2 are unlocked by inputting the personal identification information B, the upper level of the level 1 and level 2 information is released. 2 is sent to the central processing unit 2 of the terminal device 1. Upon receiving the level information from the IC card 9, the central processing unit 1 of the terminal device 1 performs access management to the resources described in FIG. 4 based on the level information, and executes a process using accessible resources (S6). ).

In this processing, the central processing unit 2 determines whether or not the processing termination conditions such as the removal of the IC card 9 from the IC card R / W 3 and the termination of the access state by a user logout procedure are fulfilled. Is determined (S7), and if the termination condition is satisfied, the process returns to S1, and
If the end condition is not satisfied, the process returns to S6 to continue the processing.

On the other hand, if there is no matching personal identification information as a result of the collation in S4, the data area is not unlocked and a notification to the effect that certification cannot be performed is sent to the central processing unit 2 of the terminal device 1. (S7), whereby the processing is S
Return to 1. Although not shown in FIG. 5, the number of retries for inputting the personal identification information is determined in advance, and S1 to S1 are connected while the IC card 3 is connected to the IC card R / W3.
By repeating the processing of S4 and S8, when the number of times of inputting the personal identification information exceeds the retryable number of times, a predetermined manager may be warned with an alarm or the like.

By using one IC card 3 in which a plurality of pieces of personal identification information are registered by the above operation, the terminal device 1 can execute various processes under the access restriction by the user level information. . In other words, by setting the level of access authority in accordance with a plurality of personal identification information, it is possible to restrict the access of the terminal device 1 for each user, so that a plurality of users can access the terminal device with one IC card. In this case, it is possible to prevent a decrease in security.

As described above, a single IC card 3 in which a plurality of pieces of personal identification information are registered is used, the access authority based on the level information of each user is restricted, and the terminal device 1 is used. Processing can be executed. That is, by registering the level of the access right in association with a plurality of personal identification information, it becomes possible to restrict the access right of the terminal device 1 for each user.
When a plurality of users use a terminal device with one IC card, card management becomes easy and security of the terminal device can be prevented from lowering.

Next, another operation example of the embodiment will be described. This operation example is an expansion of the previous operation. In a state where the terminal device is used by the access authority of one user performed in the previous operation, the access authority is changed by inputting personal identification information of another user. This is an operation that adds The operation in this case will be sequentially described with reference to the flowchart of FIG.

First, the operations in S1 to S8 are the same as those in FIG. 5, and a description thereof will be omitted. If the condition for terminating the process is not satisfied in S7, the central processing unit 2 of the terminal device 1 determines whether or not new personal identification information has been input (S9). Return and continue the process.

When new personal identification information is input, the input personal identification information is sent to the central processing unit 10 of the IC card 9 to request qualification authentication (S10). In response to this, the central processing unit 10 checks the personal identification information registered in the auxiliary storage device 12 to determine whether there is any matching personal identification information (S11). As a result, if there is matching personal identification information, it is determined that the qualification has been authenticated, the new data area corresponding to the personal identification information is unlocked, and the lock is released by the previously input personal identification information. The highest level information among the level information in all data areas including the selected data area is selected and sent to the central processing unit 2 of the terminal device 1 (S1).
2).

FIG. 8 is an explanatory view showing a case where a new data area is unlocked by newly input personal identification information. FIG. 8A shows a state before new personal identification information is input.
FIG. 6B shows the state after the input. In this example,
Prior to the input of new personal identification information, only the data area 1 was unlocked as shown in FIG. 9A, and access was restricted by level 1.
As shown in (b), when the personal identification information D is newly input, the lock of the data area 3 and the data area 4 is released, and the access restriction of the level 3 having higher authority registered in the data area 4 is performed. Thus, the terminal device 1 can be used.

Even if the new data area is not unlocked, if the matching personal identification information corresponds to the already unlocked data area, the level information of the data area is changed to the terminal device 1. Is sent to the central processing unit 4. After that, the processing shifts to S6 to execute the process using the accessible resource. On the other hand, if there is no matching personal identification information, the level information before the new personal identification information is input is sent to the central processing unit 2 of the terminal device 1 (S
13) Return to S6.

Using one IC card in which a plurality of pieces of personal identification information are registered by the above operation, while another terminal is being used while the terminal device is being used under the access restriction by the level information of a certain user. The access authority can be changed and expanded by the high level information. That is, 1
When multiple pieces of personal identification information are registered in a single IC card, the number of data areas unlocked by the plurality of pieces of personal identification information increases, so that the authority above the level information already assigned is different. , And the access right can be expanded without the trouble of newly assigning a data area and a level in the IC card.

When the present invention is applied to a counter terminal device of a financial institution, it is assumed that the person in charge always possesses the IC card, and a high access right is assigned to this person in charge, and the terminal device is actually used. The access authority of the operator (user) who executes various processes is individually registered within a lower level than the responsible person. In this way, since only the registered operator becomes unusable, the security is enhanced, and the authority can be individually transferred as needed, thereby realizing a flexible use form. .

As another use form, it is conceivable that a family member uses an IC card compatible with electronic money. In that case, it is possible to set the upper limit of the usage amount by individually restricting the use of each family member with one card, so that it is possible to prevent the situation where children spend too much money by mistake It is possible, and if necessary, the amount set by the parent can be transferred to the child, so that the funds can be used flexibly.

[0037]

As described above, the present invention is a terminal device provided with various input / output devices and various data and various programs as resources, and one of the input / output devices of the terminal device. A plurality of data areas are set in one IC card in a terminal device access restriction system which comprises an IC card connected to an IC card reader / writer and authenticates a use qualification of the terminal device using the IC card. Then, while registering the level information of the access authority to determine the use range of the resource in each data area,
Register the personal identification information of each of the plurality of users, associate each personal identification information with the data area according to the access authority of each user, and in using the terminal device,
The personal identification information input to the terminal device is compared with the personal identification information registered in the IC card, and the level information registered in the data area corresponding to the matched personal identification information is compared from the IC card to the terminal device. To notify.

Therefore, according to this, even when the terminal device is used by a plurality of users by using the IC card, only one IC card is required, so that strict card management becomes possible and each user can use Since the terminal device can be used at the set access authority level, 1
An advantage is obtained in that a decrease in security when a plurality of users access the terminal device with a single IC card can be prevented.

[Brief description of the drawings]

FIG. 1 is a block diagram showing an embodiment of the present invention.

FIG. 2 is a side view of a main part of the embodiment.

FIG. 3 is a diagram illustrating an example of information registered in an IC card.

FIG. 4 is a diagram illustrating a configuration example of software for access management.

FIG. 5 is a flowchart showing the operation of the embodiment.

FIG. 6 is a diagram showing a state in which a data area is unlocked.

FIG. 7 is a flowchart illustrating another operation example of the embodiment;

FIG. 8 is an explanatory diagram when a lock on a new data area is released.

[Explanation of symbols]

 Reference Signs List 1 terminal device 2 central control device 3 IC card reader / writer 4 main storage device 5 auxiliary storage device 6 display 7 keyboard 8 mouse 9 IC card 10 central control device 11 main storage device 12 auxiliary storage device

Claims (3)

[Claims] A terminal device provided with various input / output devices, various data, various programs, and the like as resources;
An IC card is connected to an IC card reader / writer which is one of the input / output devices of the terminal device.
In a terminal device access restriction system that authenticates a use qualification of a terminal device using a C card, a plurality of data areas are set in one IC card, and a use range of the resource is determined in each data area. In addition to registering the level information of the access authority, registering the personal identification information of each of the plurality of users, and making each personal identification information correspond to the data area according to the access authority of each user. The personal identification information input to the terminal device is compared with the personal identification information registered in the IC card, and the level information registered in the data area corresponding to the matched personal identification information is compared from the IC card to the terminal. An access restriction system for a terminal device, wherein the terminal device is notified. 2. A terminal device having various input / output devices, various data and various programs as resources,
An IC card connected to an IC card reader / writer which is one of input / output devices of the terminal device.
In a terminal device access restriction system that uses a card to authenticate the use qualification of a terminal device, an access that sets a plurality of data areas on one IC card and determines the use range of the resource in each data area While registering the level information of the authority, registering the personal identification information of each of the plurality of users, and corresponding each personal identification information to the data area according to the access authority of each user, in using the terminal device, The personal identification information input to the terminal device is compared with the personal identification information registered in the IC card, and the level information registered in the data area corresponding to the matched personal identification information is compared from the IC card to the terminal device. When new personal identification information is input during use of the terminal device with access authority based on the level information, By matching personal identification information personal identification information and registered in the IC cards, said matching personal identification level information registered in the data area corresponding to the information IC
An access restriction system for a terminal device, wherein the access right is changed by notifying the terminal device from a card. 3. The system according to claim 1, wherein, when there are a plurality of data areas corresponding to the personal identification information matched by the collation, the highest level of the level information registered in the plurality of data areas. An access restriction system for a terminal device, wherein information is notified from the IC card to the terminal device.