JP2003333039A - Client device, server apparatus, command processing result acquiring method, command process result providing method, command processing result acquiring program and command processing result providing program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a communication technology which transfers commands and their process results between a client device and a server apparatus in a simple system, while ensuring security. <P>SOLUTION: A client adds a user ID and a password to a command to be sent and encrypts and sends it, using an encryption key acquired from a server. The server decrypts the encrypted command to extract the user ID and the password, using a decryption key corresponding to the encryption key given notice to the client, then decides therefrom if the command is valid, and encrypts and sends the process results for the valid command, using the encryption key composed of the user ID and the password. The client decrypts the encrypted processing results, using a decryption key corresponding to the encryption key composed of the user ID and the password. <P>COPYRIGHT: (C)2004,JPO

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a client device for transmitting an encrypted command to a server device and receiving a processing result for the encrypted command, and a command processing result acquisition method executed by the client device. A command processing result acquisition program used to implement the command processing result acquisition method, and a server device that receives an encrypted command transmitted from the client device and returns a processing result to the command. ,
The present invention relates to a command processing result providing method executed by the server device and a command processing result providing program used to realize the command processing result providing method.

[0002]

2. Description of the Related Art As a method of collecting data of facilities such as plants and facilities from a remote place, a method of using mail communication has been studied.

By using the mail communication, it becomes possible to collect data of facilities such as plants and facilities from a remote place by using ordinary telephone lines, and data of facilities such as plants and facilities can be obtained without laying a dedicated line. It will be possible to collect from a remote place.

However, security cannot be realized by ordinary mail communication. On the other hand, data on equipment such as plants and facilities is usually data that should be kept secret for companies.

Therefore, when such data is sent and received using mail, the sender encrypts the mail using the public key known from the receiver and sends it to the receiver. , The received mail is decrypted using the private key.

[0006]

Certainly, if the encryption method using the public key and the secret key is used, the security can be realized even in communication used in an open environment such as mail communication.

However, special keys such as a public key and a secret key must be prepared, and this is not something that can be realized by a simple mechanism.

[0008] Against this background, in the case of collecting data of facilities such as plants and facilities from a remote location, the collection can be realized with a simpler mechanism while ensuring security. There is a call for the construction of new communication technology to do so.

The present invention has been made in view of the above circumstances, and is applied to a system in which a command is transmitted to a server device and a processing result for the command is received by a client device. It is an object of the present invention to provide a new communication technique that enables a command and a processing result thereof to be exchanged with a device with a simple mechanism while ensuring security.

[0010]

In order to achieve this object, the client device of the present invention transmits the encrypted command to the server device and receives the processing result for the server device. Means for adding a user ID and password to the command to be sent to the device,
Means for encrypting the command to which the user ID and password are added using the encryption key acquired from the server device;
Means for transmitting the encrypted command to the server device,
A means for decrypting the processing result of the command encrypted by using the encryption key composed of the user ID and password returned from the server device, by using the decryption key associated with the encryption key. Configure to prepare.

Here, each of the above processing means provided for realizing the client device of the present invention can be realized by a computer program, and this computer program is provided by being recorded in a recording medium such as a semiconductor memory. can do.

In order to achieve this object, the server device of the present invention receives the encrypted command transmitted from the client device and returns the processing result to the encrypted command. Means for decrypting the received encrypted command using a decryption key associated with the encryption key notified to the client device, means for extracting the user ID and password added to the decrypted command, and the extracted user By determining whether or not the ID and password are legitimate, it is possible to determine whether or not the decrypted command is legitimate, and the processing result for the legitimate command is displayed by the user I.
It is configured to include means for encrypting using an encryption key composed of D and a password, and means for transmitting the encrypted processing result to the client device.

Here, each of the above processing means provided for realizing the server device of the present invention can be realized by a computer program, and the computer program is provided by being recorded in a recording medium such as a semiconductor memory. can do.

In the present invention thus constructed, when transmitting a command to the server device, the client device adds the user ID and password to the command and uses the encryption key acquired from the server device. Encrypted and transmitted to the server device.

In response to this, when the server device receives the encrypted command transmitted from the client device, the decryption key (corresponding to the encryption key notified to the client device of the encrypted command) Decrypt using the decryption key used to decrypt the data encrypted with the encryption key), extract the user ID and password added to the decrypted command, and check whether it is a legitimate one. By determining, it is determined whether the decoded command is a legitimate command.

When the processing result for the regular command is obtained, the processing result is encrypted using the encryption key composed of the user ID and the password and transmitted to the client device.

In response to this, when the client device receives the encrypted processing result transmitted from the server device, the client device uses the processing result as the user I using the server device.
The processing result from the server device is obtained by decrypting using the decryption key associated with the encryption key composed of D and the password (the encryption key composed of the user ID and the password notified from the client device).

In this way, according to the present invention, the validity of the command transmitted from the client device to the server device is checked using the user ID and password registered in the system, and at the same time, the server device transfers the command to the client device. Since the processing result for the command to be transmitted is encrypted, the command and the processing result can be exchanged between the client device and the server device with a simple mechanism while ensuring security. Like

[0019]

BEST MODE FOR CARRYING OUT THE INVENTION Hereinafter, the present invention will be described in detail according to embodiments.

FIG. 1 illustrates an embodiment of the present invention.

In the figure, 1 is a client apparatus having the present invention, 2 is a server apparatus having the present invention, and 3 is an electronic mail server for connecting the client apparatus 1 and the server apparatus 2.

The client device 1 of the present invention transmits the encrypted command to the server device 2 of the present invention,
A command issuing unit 10 and an e-mail transmitting / receiving unit 11 are provided to perform a process of receiving a processing result for the command.
A user ID / password storage unit 12, an encryption key storage unit 13, a decryption key storage unit 14, and a command encryption unit 15
And a processing result decoding unit 16.

This command issuing unit 10 is used by the server device 2
Issue a command to. E-mail transmission / reception unit 11
Exchanges e-mail with the server device 2 via the e-mail server 3.

The user ID / password storage unit 12 manages the user ID and password of the user who operates the device. The encryption key storage unit 13 stores the encryption key acquired from the server device 2. The decryption key storage unit 14 stores the user I
A decryption key (a decryption key used for decrypting data encrypted with the encryption key) associated with the encryption key composed of D and a password is stored.

The command encryption unit 15 includes the encryption key storage unit 1
The command issued by the command issuing unit 10 is encrypted by using the encryption key stored in the electronic mail transmitting / receiving unit 1
Ask 1 to send. The processing result decryption unit 16 uses the decryption key stored in the decryption key storage unit 14 to decrypt the processing result for the command transmitted from the server device 2.

Here, the user ID / password storage unit 1
2 stores a user ID and password of a user who is permitted to access the server device 2.

The encryption key storage unit 13 is used by the server device 2
The encryption key presented by is stored. The client device 1
When this encryption key is stored in the map file 22 of the server device 2, it is stored in the encryption key storage unit 13 by acquiring it, or when this encryption key is notified by mail or the like, it is stored in the map file 22. By acquiring the encryption key storage unit 1
It will be stored in 3.

The decryption key storage unit 14 stores the user ID
The decryption key associated with the encryption key composed of the user ID and the password stored in the password storage unit 12 is stored.

As will be described later, the server device 2 encrypts the processing result for the command using the encryption key composed of the user ID and the password, and transmits the encrypted result.
The decryption key storage unit 14 stores the decryption key associated with the encryption key. Since this decryption key is associated with the encryption key composed of the user ID and the password, it can be set without exchanging with the server device 2.

On the other hand, the server device 2 of the present invention receives the encrypted command transmitted from the client device 1 of the present invention, and returns the processing result to the encrypted command. The processing unit 20, the email transmitting / receiving unit 21, the map file 22, and the user I
The D / password storage unit 23, the decryption key storage unit 24, the encryption key storage unit 25, the command decryption unit 26, and the processing result encryption unit 27 are provided.

The command processing section 20 processes the command issued from the client device 1 and obtains the processing result. The email sending / receiving unit 21
E-mail is exchanged with the server device 2 via the e-mail server 3.

The map file 22 manages information necessary for the client device 1 to access the server device 2. The user ID / password storage unit 23 stores the user ID and password of a legitimate user registered from the client device 1.

The decryption key storage unit 24 is used by the client device 1
Stores the decryption key associated with the encryption key presented in.
The encryption key storage unit 25 stores an encryption key including a user ID and a password.

The command decryption unit 26 includes a decryption key storage unit 24.
The encrypted command transmitted from the client device 1 is decrypted using the decryption key stored in. The processing result encryption unit 27 uses the encryption key stored in the encryption key storage unit 25 to encrypt the processing result of the command obtained by the command processing unit 20 and requests the electronic mail transmission / reception unit 21 to transmit it.

Here, the map file 22 stores the encryption key presented to the client device 1 (the encryption key stored in the encryption key storage unit 13 of the client device 1) as one of the information necessary for access. Sometimes.

Further, the user ID / password storage unit 23
Stores the user ID and password of a user who is permitted to access the server device 2.

Further, the decryption key storage unit 24 stores the decryption key associated with the encryption key presented to the client device 1. That is, the encryption key storage unit 1 of the client device 1
The decryption key associated with the encryption key stored in No. 3 is stored.

Further, the encryption key storage unit 25 stores an encryption key composed of a user ID and a password. That is, instead of preparing a special encryption key, the user ID
And an encryption key composed of a password.

Here, regarding the encryption key stored in the encryption key storage unit 25, the user I registered in the server device 2 based on a normal server-client type system.
It is composed of D and a password, and can be set without special exchange with the client device 1.

FIG. 2 shows an embodiment of the processing flow executed by the client device 1 of the present invention thus configured, and FIG. 3 shows the server device 2 of the present invention configured as described above. 3 illustrates an example embodiment of a process flow for execution.

Next, the present invention will be described in detail according to these processing flows. First, the processing executed by the client device 1 of the present invention will be described according to the processing flow of FIG.

The client device 1 of the present invention, when a command transmission request is issued in response to a user operation or the like,
As shown in the process flow of FIG. 2, first, in step 1, the user ID and password of the user are added to the command to be transmitted.

For example, for the server device 2, the variable AB
"1" is set to C and an inquiry is made as to what the value of the variable BBC is. "ABC = 1,
When issuing the command "BBB ,:"
D, paa! ABC = 1, BBB ,: ”,
The user ID and password are added to this command.

Subsequently, in step 2, the command to which the user ID and password are added is encrypted using the encryption key stored in the encryption key storage unit 13.

That is, when the encryption key (for example, AAA) is stored in the map file 22 of the server device 2 so that the encryption key (for example, AAA) is stored in the encryption key storage unit 13, This encryption key (for example, AAA)
Is used to encrypt the command to which the user ID and password are added, for example, in the form of multiplication processing.

Then, in step 3, the encrypted command is transmitted to the server device 2.

In response to the transmission of this command, the encrypted processing result is returned from the server device 2 according to the processing flow of FIG.
Then, wait for this reply to be notified, and in step 5,
When it is determined that the waiting time exceeds the predetermined time, the process proceeds to step 6, the command transmission failure is output, and the process ends.

On the other hand, when it is determined in step 4 that the encrypted processing result is returned from the server device 2, the process proceeds to step 7 to receive the encrypted processing result.

Subsequently, in step 8, the received processing result is decrypted using the decryption key stored in the decryption key storage unit 14.

As will be described later, the server device 2 encrypts the processing result in the form of, for example, a multiplication process using an encryption key (for example, ID / PW) composed of the user ID and password registered from the client device 1. Therefore, the decryption key storage unit 14 stores the decryption key (for example, 1 / ID · PW) associated with this encryption key (for example, ID / PW). There is.

From this, in step 8, the received processing result is decrypted in the form of, for example, a multiplication process using this decryption key (for example, 1 / ID.PW) stored in the decryption key storage unit 14. .

Then, in step 9, it is judged whether or not the decoding is successful (the processing result is sent, so it is possible to judge whether or not the decoding is successful). When it is determined that the decoding is not successful, the process proceeds to step 6, the command transmission failure is output, and the process ends.

On the other hand, when it is determined in step 9 that the decryption is successful, the process proceeds to step 10, the decrypted process result is output, and the process ends.

In this way, when the command transmission request is issued, the client device 1 of the present invention adds the user ID and password to the command to be issued and sends it as shown in FIG. The encrypted processing result that is encrypted by using the encryption key (for example, AAA) acquired from the server device 2 and transmitted to the server device 2 and that is returned in response to the transmission is composed of the user ID and the password. The decryption key (for example, 1 / ID / PW) associated with the encryption key (for example, ID / PW) is used to perform the decryption.

Next, the processing executed by the server device 2 of the present invention will be described according to the processing flow of FIG.

When the encrypted command is transmitted from the client device 1, the server device 2 of the present invention firstly executes step 2 as shown in the processing flow of FIG.
At 0, the encrypted command is received.

Subsequently, in step 21, the received command is decrypted using the decryption key stored in the decryption key storage section 24.

As described above, the decryption key storage unit 24 stores the encryption key (for example, A
Decryption key (eg, 1 / AAA) associated with AA)
Is remembered.

From now on, in this step 21, the received command is decrypted by using this decryption key (for example, 1 / AAA) stored in the decryption key storage section 24, for example, in the form of multiplication processing.

Then, in step 22, the user ID and password added to the decrypted command are extracted.

That is, since the client device 1 transmits the command with the user ID and password added as described in the processing flow of FIG. 2, the user ID and the password added to the decrypted command are sent. The password is extracted.

Subsequently, in step 23, it is judged whether or not the extracted user ID and password are legitimate ones registered in the user ID / password storage unit 23, and it is determined that they are not legitimate. When judging,
Proceed to step 24, discard the received command,
The process ends.

On the other hand, in step 23, the extracted user I
If it is determined that D and the password are valid, the process proceeds to step 25, the process according to the received command is executed, and the process result is obtained.

Subsequently, in step 26, the processing result obtained in step 25 is encrypted using the encryption key stored in the encryption key storage unit 25.

That is, the encryption key storage unit 25 stores an encryption key (for example, ID
.PW) is stored, the processing result obtained in step 25 is used for this encryption key (for example, ID.PW).
For example, encryption is performed in the form of multiplication processing.

Subsequently, in step 27, the encrypted processing result is transmitted to the client device 1, and the processing is ended.

In this way, the server device 2 of the present invention
When the encrypted command is received from the client device 1, the encryption key (for example, 1 / AAA) associated with the encryption key (for example, AAA) used for the encryption is received as shown in FIG. It is used for decryption, and it is determined whether it is a legitimate command according to the user ID and password added to the decrypted command. If it is a legitimate command, the processing result is obtained, and it is
And an encryption key composed of a password (for example, ID / P
W) is used for encryption and is transmitted to the client device.

As described above, in the present invention, the user ID and password generally used in the server / client type system are used to perform the encryption / decryption.

Although the present invention has been described with reference to the illustrated exemplary embodiments, the present invention is not limited thereto. For example, although the present invention has been described by taking the mail communication as a specific example in the embodiment, the present invention is not limited to the application to the mail communication.

[0070]

As described above, in the present invention, the user ID and password registered in the system are used to check the validity of the command transmitted from the client device to the server device, and Since the processing result for the command transmitted to the client device is encrypted, a simple mechanism can be used between the client device and the server device.
It is possible to exchange commands and their processing results while ensuring security.

[Brief description of drawings]

FIG. 1 is an example of an embodiment of the present invention.

FIG. 2 is an exemplary embodiment of a processing flow executed by a client device.

FIG. 3 is an exemplary embodiment of a processing flow executed by a server device.

FIG. 4 is an explanatory diagram of processing of the present invention.

[Explanation of symbols]

1 Client device 2 Server device 3 E-mail server 10 Command issuing section 11 E-mail sending and receiving unit 12 User ID / password storage 13 Encryption key storage 14 Decryption key storage unit 15 Command encryption part 16 Processing result decoding unit 20 Command processing unit 21 E-mail transmission / reception section 22 map files 23 User ID / password storage 24 Decryption key storage unit 25 Cryptographic key storage 26 Command Decoding Unit 27 Processing result encryption unit

Claims (6)

[Claims] 1. A client device for performing a process of transmitting an encrypted command to a server device and receiving a processing result for the encrypted command, comprising means for adding a user ID and a password to the command transmitted to the server device. , The command with the above user ID and password added,
A means for encrypting using the encryption key obtained from the server device, a means for transmitting the encrypted command to the server device, and an encryption key composed of the user ID and password returned from the server device are used. And a means for decrypting a processing result of the command encrypted by means of a decryption key associated with the encryption key. 2. A server device for receiving an encrypted command transmitted from a client device and returning a processing result for the encrypted command, wherein the client device is notified of the encrypted command. Means for decrypting using the decryption key associated with the encrypted key, means for extracting the user ID and password added to the decrypted command, and whether the user ID and password are legitimate. By making a judgment, a means for judging whether or not the decrypted command is a legitimate command, and a processing result for the legitimate command by using an encryption key composed of the user ID and password. A server device comprising: an encryption unit; and a unit for transmitting the encrypted processing result to a client device. 3. A method for acquiring a command processing result by transmitting an encrypted command to a server device and receiving a processing result for the encrypted command, wherein the command transmitted to the server device includes a user ID and a password. Is added, encrypted using the encryption key acquired from the server device, transmitted to the server device, and encrypted using the encryption key composed of the user ID and password returned in response to the transmission. A command processing result acquisition method characterized by decrypting a processing result for the encrypted command using a decryption key associated with the encryption key. 4. A method for providing a processing result of a command by receiving an encrypted command transmitted from a client device and returning a processing result for the encrypted command, the method comprising: , Decrypts using the decryption key associated with the encryption key notified to the client device, extracts the user ID and password added to the decrypted command, and determines whether or not it is a legitimate one By doing so, it is determined whether or not the decrypted command is legitimate, and the processing result for the legitimate command is encrypted using the encryption key composed of the user ID and password, and the client is encrypted. A method for providing a command processing result, which is characterized by transmitting to a device. 5. A command processing result acquisition program for transmitting an encrypted command to a server device and receiving a processing result for the encrypted command to acquire the processing result of the command, which is transmitted to the server device. The process of adding the user ID and password to the command, and the command with the above user ID and password added,
A process of encrypting using the encryption key obtained from the server device, a process of transmitting the encrypted command to the server device, and an encryption key composed of the user ID and password returned from the server device are used. And a command processing result acquisition program for causing a computer to execute processing of decrypting a processing result of the encrypted command by using a decryption key associated with the encryption key. 6. A command processing result providing program for receiving an encrypted command transmitted from a client device and returning a processing result for the encrypted command to provide a processing result of the command. A process of decrypting the encrypted command using a decryption key associated with the encryption key notified to the client device, a process of extracting a user ID and a password added to the decrypted command, and the user ID And a process for determining whether or not the decrypted command is legitimate by determining whether or not the password is legitimate, and a processing result for the legitimate command A process of encrypting using an encryption key composed of an ID and a password, and the encrypted process result to the client device. Command processing result providing program for executing the processing of signals to the computer.