JP2002140301A - Cooperative security system between systems - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a system which enables to cooperatively operate information systems by connecting introduced business systems by a network without uniting different platforms, different makers, etc. SOLUTION: After the staff authentication and the acquisition of the right to use an information system are done by reading a user information storage medium stored with staff information for the staff authentication, a system which has the right to log in respective information systems connected to the network is moved through a total window system, so that the respective information systems in an agency can be executed.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a system for processing information systems in different environments in cooperation with each other, and more particularly to authentication of a user set between different systems and conversion of protocols and character codes between the systems. And a secure server that performs processing cooperation.

[0002]

2. Description of the Related Art In a company or a local government, an environment introduced in each department is not uniform with different platforms such as a host system and a C / S system, different manufacturers, and it is difficult to cooperate between systems. It is in. In particular, host systems and C /
Direct cooperation with the S system has been difficult to cooperate with, for example, the specifications of the host system are not open. In the conventional countermeasures, coordination between systems is attempted by customizing each information system with enormous cost and time.

As a technique for linking different types of systems, a method for sharing a disk array by linking a host with a UNIX (registered trademark) server and a PC server and reducing the number of man-hours for managing a computer system are disclosed in JP-A-2000-29635. It is stated in the report. Regarding the linking method between the host and the WWW server, refer to JP-A-2000-187630,
The cooperative system with the B server and the emulator server is described in JP-A-2000-57091, respectively.

[0004]

SUMMARY OF THE INVENTION As described above, the cost and the number of man-hours are large when individual customization is performed.
In some cases, it was not always possible to cooperate completely. Also,
Even after improving the functions and responding to changes in processing, it is necessary to check the cooperation again after correcting the program of each system, and there is a problem that the burden on maintenance is large.
In addition, from the viewpoint of data security, there is a problem such as leakage of confidential data in the mere cooperation between information systems. Therefore, every time a transition between information systems is performed, staff authentication using an ID, a password or the like is performed. It is an object of the present invention to solve these problems and to provide a system for performing cooperation between systems that is secure and easy to maintain.

[0005]

In order to solve the above-mentioned problems, the present invention provides a secure server for performing a cooperative process between information systems in different environments. Here, systems of different environments refer to systems in which the manufacturer, OS, language, character code, infrastructure, and the like are different from each other. The secure server has
OS for each system connected to information for authenticating the user,
A means for storing environment information such as a protocol, a language, and a character code system, and a means for authenticating a user, and a means for converting data into a format used at a destination based on the environment information of each system when cooperating between systems; and Means for establishing a protocol between them and transferring data.

[0006] The user first accesses the secure server and performs user authentication processing. At this time, authentication may be performed by acquiring information from a storage medium in which information necessary for personal authentication and business authority are recorded. The secure server receives the user authentication information, authenticates the user by comparing it with the user table stored in the server, and then obtains the business authority of the user and information for selecting a system to be used. The business authority may be acquired from the storage medium at the time of authentication, and only the target system may be selected by menu selection, key input, or the like.
Connect to the target business system only if it is confirmed that the user has the authority to use the system by checking it against the business right table stored in the server. The business authority table is a table indicating correspondence between users and available systems. By performing such processing, it is possible to prevent unauthorized use of unauthorized systems and data leakage. At this time, the obtained user authentication information, the user's business authority, and the information for selecting the target system are stored in the temporary storage area of the server in association with each user. A table related to personal information, such as a user table and a business authority table, may be separately managed by the backbone system, and referred to from the secure server as needed.

[0007] When the user connects to another information system on the network after logging in to the target information system and performing business while ensuring security, the system performs the following processing. First, after the processing in the first information system,
Transit to the secure server again and select the job to be processed next. For the task selection, a series of multiple tasks may be selected in advance based on the information for selecting the use target system, or an inquiry may be issued at the transition stage. Check whether the business selected from the user information stored in the temporary storage area of the server is available. If it is confirmed that the user is the correct user, acquire the user authority of the target information system, activate the target information system from the secure server, and transition to the target business. Hereafter, this process is repeated when a transition is made to another information system on the network. Also, it is assumed that information can be passed from the pre-transition system to the post-transition system only when the secure server can confirm that the user is the correct user. By performing such processing, it is not necessary to temporarily end the information system before the transition and then to start the information system after the transition, and also to perform data cooperation between the security-secured information systems. As a result, illegal use of data can be prevented, and business efficiency can be greatly improved. In addition, when a user accesses each system having a different platform and a different character code system through a secure server, a plurality of systems can be used as if a single system were used.

[0008]

FIG. 1 shows an example of the configuration of each system that cooperates with an inter-system cooperation security system according to the present invention. Here, it is assumed that the maker and the OS are not unified or a plurality of local government systems having different platforms are linked.

[0009] A core system 1 for centrally managing key information such as a resident record system of a local government, a resident information system supporting a tax system, a business system 2 for supporting peripheral businesses other than a resident information system in business within an agency, and a business system 3 , Business system 4, business client 5 performing business using various information systems in the agency,
A secure server 6 that supports an integrated counter system that has the function of authenticating the user, granting the authority to use the information system, and transiting to another information system connected by a network, a LAN that connects various information systems via a network, and realizes cooperation between systems. And WAN 8, a user information storage medium 9 in which staff numbers and passwords are used for staff authentication when logging in to various information systems in the agency, and business authority information, and a storage medium reading device 1 for performing staff authentication
0.

Information registered in the user information storage medium 9 for performing staff authentication includes personal information such as a name, a staff number, and a password required for personal authentication. It is assumed that login authority can be registered. As a storage medium, an IC card, a magnetic medium, or the like is used.

The secure server 6 refers to personal information from information stored in a user information storage medium when accessing various information systems connected through a network in the agency, and performs a staff authentication and a login authority. And stores a database for registering names, staff numbers, passwords, and login authority of each information system as shown in FIG. By referring to the user information storage medium and searching the above database using the staff number as a key, personal identification is performed,
Grant login authority to available information systems.
Further, the secure server 6 has a system-business authority table and a reference table for transitioning to each information system having a system name and a code for each system as shown in FIG. After the login authority is confirmed in the secure server 6, the target information system is activated by comparing the use target system information acquired from the user with this table.

A series of business processes using the inter-system security system of the present invention will be described with reference to FIG. Here, the user table such as the staff table and the business authority table are placed on the secure server. First, the user sets the storage medium storing the user information in the client, accesses the secure server, and requests a login to the core system 1 (401). The secure server 6 receives a request from the general counter system program, acquires user information, performs user authentication by referring to the user table, and simultaneously refers to the business authority table to use the core system 1. Confirm that it is possible and grant usage rights
(402). The user information acquired here is stored in the temporary storage area of the server in association with the user identification code. The secure server 6 logs in to the core system 1 (40
3), perform the process specified by the user (404). At this time, the integrated counter system may select a menu as a task including a series of processes or select one or more processes.
Here, it is assumed that the processing of the core system and the processing of the business system are required for the specified business. After the processing of the backbone system 1, the control is returned to the counter system (405). From the business code selected earlier, select the next transition system as the business system from the business-system correspondence table (40
6). The secure server confirms and grants the use right from the temporary storage information in the same manner as in (402) (407). The secure server 6 logs in to the business system (408). At this time, the window system converts data necessary for processing sent from the core system into a character code system and protocol that can be used in the business system, and transmits the data together with the processing request to the business system. The business system performs a process specified by the user (409), and sends information for updating data in the core system 1 (410). The secure server 6 converts the character code system and protocol of the data in the same manner as in (408) (411), and transmits the updated data to the core system 1. In the core system 1, the update process is performed (412), and the processing result is “No error / End”
Is sent to the C / S system 2 (413). Upon receiving the processing end, the C / S system 2 transmits a result to that effect to the client.
(414), the personal information stored in the temporary storage area is deleted.

[0013]

As described above, according to the present invention, different platforms such as a host system and a C / S system for each department, and different business systems which are introduced unifiedly by different manufacturers in a company or a local government. By using the general contact system, it is possible to start and transition to any information system connected to the network without having to terminate the information system currently in use. In addition, seamless conversion between information systems is realized by performing protocol conversion and character code conversion in the general contact system.

When performing a business transition between information systems,
It is possible to prevent unauthorized use of staff by giving personal authentication and information system use authority without fail through the secure server.

[Brief description of the drawings]

FIG. 1 is a diagram showing a configuration of an entire system.

FIG. 2 is a processing diagram showing staff authentication and granting of system use authority using a secure server.

FIG. 3 is a processing diagram showing cooperation between systems using a general contact system.

FIG. 4 is a flowchart of a process of the general counter system using the general counter system and the secure server.

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 1 Core system 2 Business system 3 Business system 4 Business system 5 Business client 6 Secure server 7 General counter server 8 Office LAN 9 User information storage medium 10 User information storage medium reading device

Claims (3)

[Claims] An inter-system security system that cooperates with information systems of different environments to provide a secure server that authenticates a user and cooperates with each other, and establishes a protocol between the systems in the server. And a means for transitioning between heterogeneous environment information systems for converting to a character code system used in a cooperation destination system. 2. The system-to-system cooperation security system according to claim 1, wherein the secure server which cooperates between the systems acquires information required for authentication from a user and checks the information with user information registered in the server. To authenticate the user,
Obtain the system user authority information of the authenticated user and the information identifying the target system, and if the target system has the right to use, give the login authority to the relevant system and log in to the target system to perform the transition between systems. An inter-system security system characterized by performing: 3. The inter-system security system according to claim 2, wherein the authentication information acquired from the user, the system use authority information of the user, the information for identifying a plurality of use target systems, and the use order are used. After storing the information in the temporary storage area of the server and finishing the processing of a certain system, referring to the information of the server, determining the next target system, confirming the authority to use the system, and granting the authority to log in to the system. An inter-system cooperation security system characterized by logging in to a system and performing transition between systems.