JP2003263418A - Security system, security server and program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To realize a security system for securing high security hardly subjected to intrusion and an attack from the outside. <P>SOLUTION: A terminal 2 charged with a security card 21, a security server 3 and an information system 4 are connected with a network 1. The security card is provided with a means 22 for generating security information; a means 23 for storing a connection menu and a connection place address from the server on the basis of the security information; and a means 24 for displaying the connection menu for selecting a required information system. The security server is provided with a means for storing the connection menu and connection place address besides the security information for determination, referring, to the security information for determination on the basis of the security information from the terminal, and transmitting the connection menu and the connection place address to the terminal when authenticated to have legal use authority. <P>COPYRIGHT: (C)2003,JPO

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an information system existing on a network and a security system, a security server and a program for ensuring the security of information handled by the system.

[0002]

2. Description of the Related Art In an advanced information society, there is a strong demand for security of information processing systems and information contents handled by the systems.

In recent years, from the viewpoint of ensuring security, only a specific user is notified of the connection destination address (IP destination address) of the system so that the user can use the system, thereby restricting access by general external users and performing authentication. Under such conditions, measures are taken such as granting usage rights only to specific users.

In addition, a network system for connecting an intranet, which is a corporate network, to the Internet is also increasing. In this case, in addition to the IP address for the intranet, a global IP that can be connected to the outside is also used.
Destination address (hereinafter, IP address for intranet,
The IP destination address is called a connection destination address), and a firewall is provided between the intranet and the Internet to prevent unauthorized intrusion from an external network, and only a specific user is provided. Is available.

[0005]

However, in the above network system, a general user obtains a connection destination address of an information system in a company by using various illegal means, and the information in the system is externally supplied. In addition to the illegal acquisition and vandalism of the above, there is a problem that information that is prohibited to be taken outside the company is taken out through the network. This is the same even in a network system provided with a fire wall.

There is also a network system in which a security card for generating specific identification data is inserted into a specific terminal, the identification data sent from the terminal is authenticated, and use is permitted. Even the connection destination address is not concealed, and there is a problem that an external general user can easily invade or receive an external failure. This is because the process of security authentication and the process of acquiring the connection destination address to the system you want to use are not processed while cooperating in a series.

The present invention has been made in view of the above circumstances, and an object of the present invention is to provide a security system, a security server, and a program that ensure high security that is not easily intruded or attacked from the outside.

Another object of the present invention is to provide a security server which realizes fine operation management for each user.

[0009]

[Means for Solving the Problems] (1) In order to solve the above problems, a security system according to the present invention comprises:
A terminal loaded with a security card, a security server, and at least one information system are connected to a network, and the security card is means for transmitting security information, and the security server is based on the transmission of the security information. A connection menu relating to the information system transmitted from the device, means for storing a connection destination address, and means for displaying the connection menu for selecting a required information system are provided, and the security server is provided for each terminal. In addition to the issued security information for determination, a connection menu and a connection destination address are stored, the security information for determination is referred to based on the security information from the terminal, and when it is authenticated that the user has an authorized use right, Includes connection menu and destination address Is a structure in which a means for transmitting authorization information to the terminal.

According to the present invention having the above-mentioned configuration, when the security card is loaded in the terminal, the security information already stored in the card is automatically read out according to a predetermined instruction and transmitted to the security server. .

This security server is related to an information system which is pre-registered when it receives the security information from the terminal, refers to the pre-registered security information for judgment, and is authenticated as a terminal having a proper use authority. The request source terminal is operated with the connection menu and the connection destination address as the permission information.

The request source terminal stores the received connection menu and connection destination address, and displays the connection menu related to the information system to be selected by the user. Then, when the user selects one from the connection menu, the information system is accessed using the corresponding connection destination address, so the process of security authentication and the process of acquiring the connection destination address of the system to use Since the processing can be performed in cooperation with each other and the information system cannot be directly accessed, it is possible to prevent an intruder from an outside general user or an obstacle from the outside.

Further, since the connection menu and the connection destination address are managed by the security server, and only the connection menu is displayed on the request source terminal, it is possible to connect to the information system while being hidden from the user. So
The possibility of being intruded or attacked from outside is dramatically reduced, and higher security can be secured.

When the terminal or the security card receives a selection instruction based on the displayed connection menu, the connection corresponding to the selected connection menu is newly added to the configuration of the above item (1). A connection menu stored in the security card after executing required processing between the means for accessing the required information system using the destination address and the information system connected by this access. By providing a means for erasing the connection destination address, it is possible to connect to the information system based on the connection destination address in the hidden state, and after the processing is completed, the connection menu and the connection destination address are erased, so the user can connect. It is possible to reduce the worry that the destination address is known.

(2) The security server according to the present invention is connected to a network in which a terminal equipped with a security card and at least one information system are installed, and functionally, a determination issued for each terminal In addition to the security information for connection, a connection menu related to the information system, a storage unit for storing the connection destination address, and the security information for determination based on the security information transmitted from the terminal are referred to to determine whether or not the user has a proper use authority. Since there is provided an authentication processing means for authenticating whether or not, and a means for transmitting the permission information including the connection menu and the connection destination address to the terminal when it is authenticated that the terminal has the proper use authority, the information for each terminal is provided. It is possible to change the connection menu related to the system and the authority to use the connection destination address, and it is possible to make detailed adjustments. Operation management can be realized.

(3) It is also easy to realize each function performed by the terminal and the security server described in (1) above by a program.

[0017]

BEST MODE FOR CARRYING OUT THE INVENTION Embodiments of the present invention will be described below with reference to the drawings.

FIG. 1 is a system configuration diagram showing an embodiment of a security system according to the present invention.

This security system is provided with a network 1 such as the Internet or an intranet, and a plurality of terminals 2, ...
A security server 3 that authenticates security information transmitted from each terminal 2 and at least one information system 4 that performs required information processing are connected.

The terminal 2 is not a general user terminal possessed by a large number of users, both inside and outside the company, but generates predetermined security information when the security card 21 is loaded, and the security server 3 gives permission information. It can be said that the terminal is a specific terminal having the required authority to use the information system 4 when receiving the information.

The security card 21 loaded in the specific terminal 2 stores security information such as personal identification data and password, and transmits the security information when the card is loaded or according to a transmission instruction from the input means. The generation means 22, the permission information storage means 23 for receiving and storing the permission information such as the connection menu and the connection destination address relating to the information system transmitted from the security server 3 after the generation of this security information, and the permission information storage means. Of the permission information stored in 23,
When a specific user is prompted to make a selection based on the display of the connection menu related to the information system and an instruction to select one from the connection menus is received, the selection menu corresponding to one selection menu stored in the permission information storage unit 23 is obtained. A connection destination display selecting means 24 for transmitting the connection destination address and accessing the required information system 4 is provided.

Further, the terminal body 2 or the security card 21 is connected to the information processing means for executing necessary processing based on the information handled by the information system 4 and the connection stored in the permission information storing means 23 upon completion of the processing. An erasing means for erasing the menu and the connection destination address is provided.

Reference numeral 25 is a program memory for storing a program to be processed on the specific terminal 2 side.

The security server 3 is a connection destination information table that stores security information issued for each specific terminal 2 as well as information related to the information system 4 assigned to each individual, such as a connection menu and connection destination address. 31, security means 32 for transmitting and receiving security information and permission information transmitted from the specific terminal 2, security information for determination in the connection destination information table 31, which is preset based on the security information transmitted from the specific terminal 2. Referring to the above, according to the classification of which information processing system can be used for each individual who is the specific terminal 2, it is authenticated whether or not the specific terminal 2 has the proper usage right, and it is authenticated that the specific terminal 2 has the usage right. At this time, permission information such as a connection menu for each terminal and a connection destination address is transmitted to the request source specific terminal 2, It is constituted by security permissions means 33 and program memory 34 stores the variable information storage means 23.

Next, the operation of the above security system will be described with reference to FIGS.

(1) Processing on the side of a specific terminal (see FIG. 2)
reference).

The specific terminal 2 executes the following series of processing based on the program stored in the program memory 34 when the operation is started.

That is, the specific terminal 2 determines whether or not the security card 21 is loaded in the predetermined insertion portion of the specific terminal 2 (S1). Here, the security card 21
When it is determined that the password has been loaded, the security information such as the personal identification data or the password held in the security information generating means 22 is transmitted to the security server 3 (S2).

After the transmission of the security information, it is determined whether or not there is permission information such as a connection menu and a connection destination address at predetermined intervals (S3), and if there is permission information, the permission information is stored in the permission information storage means 23 ( S4).

Thereafter, of the permission information stored in the permission information storage means 23, the connection menu associated with the information system is read out and displayed on the terminal display section (not shown) (S5) to connect to the specific user. It is urged to select one connection destination from the menu (S6). Here, when there is a selection instruction, a connection destination address corresponding to one connection destination selected from the permission information storage means 23 is fetched and the information system 4 is accessed (S7).

When the specific terminal 2 is connected to the information system 4, it executes the required information processing (S8), and after the processing is completed, the connection menu is continuously displayed and the next information system 4 is selected. This is repeated (S9), and if the next connection destination is not selected, it is determined that the process is complete, and the permission information information stored in the permission information storage means 23 is erased (S1).
0).

(2) Processing on the security server 3 side (see FIG. 3).

At the start of operation, the security server 3 executes the following series of processing based on the program stored in the program memory 34.

The security server 3 judges whether or not the security information is received from the terminal 2 side every predetermined period (S11), and when it is judged that the security information is received, the security information is stored in an appropriate memory. After the temporary storage (S12), the authentication process is executed (S13).

This authentication processing refers to the security information of the connection destination information table 31 based on the security information from the specific terminal 2 and classifies which information processing system can be used for each individual who is the specific terminal 2. According to the division, it is authenticated whether or not the specific terminal 2 has the proper use authority (S14), and when it is authenticated that the use authority is available, the connection menu for each individual, the permission information such as the connection destination address, etc. 2 (S15) and stored in the permission information storage means 23.

As a result of the authentication process, if the security information is not valid from the terminal 2, or if the security information is normal, but the connection menu, connection destination address, etc. are not assigned to the individual, information for rejecting the permission request is given. Is transmitted to the request source specific terminal 2 (S16). Therefore, according to the above-described embodiment, at least the security information generating means 22 and the permission information storing means 23 in the security card 21 loaded in the specific terminal 2, A connection destination display selection means 24 is provided, and a security permission means 33 for executing an authentication process is provided on the side of the security server 3 connected to the network 1. This security permission means 33 generates security information sent from the specific terminal 2. Stored in the security information held in the means 22 and the connection destination information table 31 Based on the judgment security information issued for each terminal, it is judged whether or not the terminal is a specific terminal 2 (individual) having a legitimate usage right. Since permission information such as a connection menu and connection destination address assigned for each is transmitted to the request source specific terminal 2 and stored in the permission information storage means 23, the process of security authentication and connection to the system to be used Since the process of acquiring the destination is performed in a series of processing, the security card 21
Unless there is security information on the security card 21, the security server 3
Unless the security information is stored in the connection destination information table 31 as the issuer, high security can be ensured because the specific terminal 2 having the proper use authority is not authenticated.

Although the security server 3 transmits permission information such as a connection menu and a connection destination address to the specific terminal 2, only the connection menu is displayed on the display unit of the specific terminal 2, so that the user can input the connection destination address. It can be concealed, and direct invasion / attack to the information system 4 from the outside can be avoided.

Further, since the security permitting means 33 of the security server 3 receives the connection menu and connection destination address of the information system assigned to each specific terminal 2 when a permission request is made, each specific terminal is received. It is possible to efficiently and centrally control the system usage authority and change the system connection destination address according to 2, and it is possible to significantly reduce the operation management man-hours.

In addition, the present invention is not limited to the above-described embodiment, and various modifications can be carried out without departing from the scope of the invention. Further, the respective embodiments can be implemented in combination as much as possible, and in that case, the effect of the combination can be obtained. Furthermore, each of the above-described embodiments includes various inventions of higher and lower stages, and various inventions can be extracted by appropriately combining a plurality of disclosed constituent elements. For example, when the invention is extracted by omitting some of the constituent elements from all the constituent elements described in the means for solving the problem, the omitted part when implementing the extracted invention. Are appropriately supplemented by well-known techniques.

[0040]

As described above, according to the present invention, it is possible to provide a security system, a security server, and a program that ensure a high level of security against external intrusions and attacks.

Further, according to the security server of the present invention, fine operation management can be realized for each user.

[Brief description of drawings]

FIG. 1 is a system configuration diagram showing an embodiment of a security system according to the present invention.

FIG. 2 is a flowchart illustrating a series of processing operations of the specific terminal shown in FIG.

FIG. 3 is a flowchart illustrating a series of processing operations of the security server shown in FIG.

[Explanation of symbols]

1 ... Network 2 ... Specific terminal 3 ... Security server 4 ... Information system 21 ... Security card 22. Security generation means 23 ... Permission information storage means 24 ... Connection destination display selection means 25, 34 ... Program memory 31 ... Connection destination information table 33 ... Security permission means

Claims (5)

[Claims] 1. A terminal in which a security card is loaded, a security server, and at least one information system are connected to a network, and the security card is a means for transmitting security information and a means for transmitting this security information. And a connection menu relating to the information system transmitted from the security server, means for storing a connection destination address, and means for displaying the connection menu for selecting a required information system are provided, and the security server is In addition to the judgment security information issued for each terminal, a connection menu and a connection destination address are stored, and the judgment security information is referred to based on the security information from the terminal, and it is authenticated that the user has an authorized use right. Connection menu, if connected Security system characterized in that a means for transmitting authorization information including the address to the terminal. 2. The security system according to claim 1, wherein, when the terminal itself or the security card receives a selection instruction based on a displayed connection menu, the connection corresponding to the selected connection menu. A connection menu stored in the security card after executing required processing between the means for accessing the required information system using the destination address and the information system connected by this access. , A security system provided with means for erasing a connection destination address. 3. A security server connected to a network in which a security card is loaded and at least one information system is installed, the security server including a determination security information issued for each terminal, and information. A storage unit that stores a connection menu and a connection destination address related to the system, and an authentication processing unit that authenticates whether or not the user has a proper use authority by referring to the determination security information based on the security information transmitted from the terminal. And a means for transmitting permission information including the connection menu and a connection destination address to the terminal when it is authenticated that the terminal has a proper use right. 4. The security information is stored in a user-side computer that stores the security information and is authorized to use at least one control system on the network based on permission information from a security server installed on the network. The function to read and send, the connection menu sent from the security server after sending this security information, the permission information storage function to receive and store the connection destination address, and the stored connection menu and connection destination address Display the connection menu and access the required information system using the display selection function that prompts you to select the required information system and the connection destination address that corresponds to the connection menu selected under the selection instruction from the outside. Function and the required information system connected by this access. Using the beam, the stored connected menu after its termination, the user side computer readable program for causing to realize the function of erasing the destination address. 5. In addition to the determination security information issued for each terminal, a connection menu and a connection destination address are stored, and authentication processing is performed based on the security information transmitted from the terminal installed on the network. A function of receiving security information transmitted from the terminal to the security server side computer, and referring to the determination security information based on the received security information, determines whether or not the user has an authorized use right. An authentication processing function and a function of transmitting a connection menu and a connection destination address related to an information system installed on the network when it is determined that the user has a proper use right by the authentication processing function. The computer program readable by the security server.