JP2003229848A - Cryptographic communication apparatus and method for network system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To easily provide cryptography methods different in user's level available of a network. <P>SOLUTION: In a system that has a plurality of cryptography methods and is connected to the network, user authentication information received in logging in the network is stored. In performing transmission to another device on the network, a cryptography method to be used for transmission is selected among the plurality of cryptography methods on the basis of access right information included in the user authentication information, and transmission is performed by using the selected cryptography method. <P>COPYRIGHT: (C)2003,JPO

Description

Detailed Description of the Invention

[0001]

TECHNICAL FIELD The present invention relates to cryptographic communication in a network.

[0002]

2. Description of the Related Art In a system connected to a network, encrypted communication is used to prevent leakage of confidential information flowing through the network. Since each encryption method has advantages and disadvantages and the encryption strength is different, it is not desirable to use only one encryption method in encrypted communication. For example, when converting processed data to another form, the optimal encryption method may differ. Therefore, for example, the information conversion apparatus disclosed in Japanese Unexamined Patent Application Publication No. 10-257046 includes an encryption information library in which information of a plurality of encryption methods is registered, and when processing data is converted into a predetermined form, it is optimized based on the conversion result. Select an appropriate encryption method from the encryption information library and perform encryption processing.

[0003]

In the above-mentioned cryptographic communication method, when the processed data is converted into another form, the most suitable encryption processing system for the converted form of the processed data is selected from the encrypted information library. To do. That is, the encryption processing method is selected for the data to be encrypted. However, it is desirable to select the encryption method according to the level of the user who uses the network.

It is an object of the present invention to easily provide different encryption methods depending on the level of users who use the network.

[0005]

A data transmission program executed by a computer according to the present invention includes a step of storing user authentication information received when logging in to a network and a step of transmitting the user authentication information to another device on the network. , A step of selecting an encryption method to be used for transmission from a plurality of encryption methods based on the access authority information included in the user authentication information, and a step of transmitting using the selected encryption method .

Preferably, the plurality of encryption methods include encryption methods having different encryption strengths.

[0007] Preferably, the plurality of encryption methods include an encryption-free method.

The data transmitting apparatus according to the present invention stores the user authentication information received when logging in to the network, and the access authority information included in the user authentication information when transmitting to another device on the network. On the basis of the above, it comprises a selection means for selecting an encryption method to be used for transmission from a plurality of encryption methods, and a transmission means for performing transmission using the selected encryption method.

The data transmission method according to the present invention includes the step of storing the user authentication information received when logging in to the network, and the access authority information included in the user authentication information when transmitting to another device on the network. On the basis of this, the method includes the step of selecting an encryption method used for transmission from a plurality of encryption methods and the step of performing transmission using the selected encryption method.

[0010]

BEST MODE FOR CARRYING OUT THE INVENTION Embodiments of the present invention will be described below with reference to the accompanying drawings. FIG. 1 shows an example of a wired or wireless network system including a server 10.
The server 10 is a wired or wireless network (LA
N, Internet, etc.) 12 and a plurality of client computers 14 and a plurality of shared resources (facsimile device 16, printer 18, etc.).
The server 10 is, for example, a document server, a protocol server, or a print server. In this system, the client computer 14 has a plurality of encryption processing methods used in communication with other devices (server, other client computer, etc.) on the network 12. The encryption processing method is selected according to the level of the user who uses the network. Specifically, the level (access right) of the user who uses the network is determined by using the result of login authentication to the network, and the encryption processing method is selected using the result. As a result, the security of the communication data of the user is secured by providing the necessary user with the encrypted communication means having a higher encryption strength for the communication means such as the wireless communication that is likely to be intercepted. .

FIG. 2 shows the configuration of the client computer 14. In the client computer 14,
An input device 142 such as a keyboard and a mouse is connected to the CPU 140, and a monitor 144 is connected as a display device. Further, for example, a hard disk device is provided as the external storage device 146, and the recording medium (for example, hard disk) 148 stores the OS and other programs. A communication program is also included in it. Further, it is connected to the network 12 via the communication device 150.

The selection of the encryption method in the encrypted communication will be described. The client computer 14 is provided with a plurality of encryption methods. Different encryption methods are prepared depending on the transmission destination, and further, different encryption strengths are also prepared. Network 12
In communicating with the other devices above, user authentication is required when the client computer 14 logs into the network 12. Client computer 14
Receives the login authentication result from the server 10 when logging in. The authentication result includes access authority information (login availability). Therefore, the correspondence between the access authority and the encryption method having different encryption strength is determined in advance, and the client computer 14 determines the level of the login user based on the received access authority. Then, for encryption of communication data, the encryption strength is selected according to the user level (access authority information), destination information, etc., and the encryption method is selected from the multiple encryption methods held by the client computer. To do. (The selection also includes a method without encryption.) Then, encrypted communication is performed using the selected encryption method. Thus, by determining the level of the logged-in user in encrypted communication,
For a specific user, a high security level of network communication required by the user is secured. This ensures the security of communication data. on the other hand,
For a user who does not require a particularly high level of security, a normal encrypted communication method or a normal communication method without encryption is provided to facilitate communication processing.

3 and 4 are flow charts of the communication of the client computer 14. When the client computer logs in to the network (S10),
User authentication is performed by the server 10. When the login authentication result is received from the server (YES in S12), the login authentication result is stored (S14). Based on that,
The authority to use the resource (access authority) is confirmed (S
16). If you have access authority (YE in S18
S), receiving the selection setting of the communication destination by the user (S2
0). When the confirmation of the communication destination is completed (YES in S22),
The encryption strength is selected from the access authority information and the communication destination information, and the encryption method is selected (S24). When the selection of the encryption method is completed (YES in S26), encryption processing is performed (S28). Data encryption is completed (YE at S30
S) When the communication can be started (YES in S32), data transmission is performed (S34). Data transmission is completed (S3
If YES in step 6), logoff is instructed (YES in step S38).
S), the process ends.

If the login authentication result is not received from the server (NO in S12) or if there is no access authority (NO in S18), it is next determined whether or not encrypted communication is performed (S40). When performing encrypted communication (for users who exchange important information), encryption processing is performed (S
42). Therefore, a user who communicates important information cannot be intercepted by others. When the encrypted communication is not performed, normal communication processing is performed (S44). Next, the selection of the communication destination is received from the user (S46). When the confirmation of the communication destination is completed (YES in S48), the process proceeds to step 32 and the communication process is continued.

[0015]

As a means for determining the encryption method of the encrypted communication in the network communication, the simple configuration of utilizing the result of login authentication to the network enables
It is possible to provide a communication method capable of selecting an optimum one from a plurality of encryption processing methods via a network.

[Brief description of drawings]

FIG. 1 is a block diagram of a wired / wireless network system.

FIG. 2 is a block diagram showing the configuration of a client computer.

FIG. 3 is a flowchart of communication processing.

FIG. 4 is a flowchart of communication processing.

[Explanation of symbols]

10 server, 12 network, 14 client computer, 140 CPU, 1
46 External storage device.

Claims (5)

[Claims] 1. A step of storing the user authentication information received when logging in to the network, and an encryption used for the transmission based on the access authority information included in the user authentication information when transmitting to another device on the network. A data transmission program executed by a computer, which comprises a step of selecting an encryption method from a plurality of encryption methods and a step of transmitting using the selected encryption method. 2. The plurality of encryption methods include encryption methods having different encryption strengths.
The data transmission program described in. 3. The data transmission program according to claim 1, wherein the plurality of encryption methods include a method without encryption. 4. Storage means for storing user authentication information received when logging in to a network, and transmission to another device on the network, which is used for transmission based on access authority information included in the user authentication information. A data transmission device comprising: a selection unit that selects an encryption method from a plurality of encryption methods; and a transmission unit that performs transmission using the selected encryption method. 5. The step of storing the user authentication information received when logging in to the network, and the encryption used for the transmission based on the access authority information included in the user authentication information in the transmission to the other device on the network. A data transmission method comprising a step of selecting an encryption method from a plurality of encryption methods and a step of transmitting using the selected encryption method.