JP2007233723A - Maintenance device, remote maintenance system, its method, and program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To perform remote maintenance safely without receiving unauthorized accesses from a public line or the Internet. <P>SOLUTION: A maintenance computer 100 dials a dial-up router device 130 by a password issued by a one-time password device 110. After one-time password authentication and telephone number authentication are performed, the maintenance computer 100 is called back by the dial-up router device 130 and further authenticates a worker according to face authentication by a user authentication computer 140 and authenticates according to a MAC address. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to a remote maintenance service, and more particularly to a technique for maintaining a customer's environment through a public line.

  An example of a conventional remote maintenance system is disclosed in Patent Document 1. This conventional remote maintenance system is composed of a maintenance PC device, a public line, and a maintenance target device.

  The conventional remote maintenance system having such a configuration operates as follows. That is, the maintenance PC device logs in to the target device by dial-up through the public line.

In addition, when a user purchases a product on the Internet shopping, etc., the user operates the homepage browsing terminal and enters a telephone number and a one-time password for callback on the homepage. When the user responds and re-enters the same one-time password entered on the homepage with a push button, the application server 1 authenticates the user, and does not require pre-registration to the server. Has also been proposed that can narrow the range of abuse and can be freely set (see, for example, Patent Document 2).
JP 2004-015680 A JP 2003-186837 A

  However, the conventional example described above has the following problems.

  The first problem is that there is a possibility of login from an unspecified number of opponents. The reason is that the user can log in if the telephone number of the public line, the dial-up ID and password are known.

  The second problem is that the worker and the work terminal cannot be specified. The reason is that there is no countermeasure against impersonation in the current authentication method.

  The present invention has been made in view of the circumstances described above, and its purpose is to allow only a registered person who has been registered in advance to log in and perform work, and unauthorized access from a public line or the Internet. It is to perform remote maintenance safely without receiving.

In order to solve the above problem, the present invention is a maintenance device for performing remote maintenance of a maintenance target device by dial-up,
After the one-time password authentication and phone number authentication,
Furthermore, a maintenance device is provided in which worker authentication by face authentication and authentication by a MAC address are performed.

Further, the present invention is a maintenance device that performs remote maintenance of a maintenance target device through the Internet VPN,
Provided is a maintenance device in which VNP authentication is performed, and further, worker authentication by face authentication and authentication by a MAC address are performed.

Further, the present invention is a remote maintenance system including a maintenance computer for performing remote maintenance of maintenance target devices by dial-up, a one-time password device, a dial-up router device, and a user authentication device,
The maintenance computer dials up to the dial-up router device with the password issued by the one-time password device, and after receiving the callback from the dial-up router device after the one-time password authentication and telephone number authentication are performed,
Furthermore, the maintenance computer provides a remote maintenance system in which worker authentication in face authentication by a user authentication device and authentication by a MAC address are performed.

The present invention also provides a remote maintenance system including a maintenance computer that performs remote maintenance of a maintenance target device through an Internet VPN, a firewall device, and a user authentication device.
The maintenance computer provides a remote maintenance system in which VNP authentication is performed by a firewall device, and further, worker authentication and authentication by MAC address are performed by face authentication by user authentication device face authentication.

In addition, the present invention provides a maintenance device that performs remote maintenance of a maintenance target device by dial-up, and after receiving one-time password authentication and telephone number authentication, receives a callback,
Furthermore, a remote maintenance method is provided in which worker authentication by face authentication and authentication by a MAC address are performed.

  According to another aspect of the present invention, a maintenance device that performs remote maintenance of a maintenance target device through an Internet VPN performs VNP authentication, and further performs worker authentication by face authentication and authentication by a MAC address. Provide a method.

  According to the present invention, remote maintenance can be performed safely without receiving unauthorized access from a public line or the Internet.

  Hereinafter, a first embodiment of the present invention will be described in detail with reference to the drawings.

  Referring to FIG. 1, the remote maintenance system according to the present embodiment includes a maintenance computer 100, a one-time password device 110, a camera device 120, a dial-up router device 130, and a user authentication computer 140.

  Next, the overall operation of the present embodiment will be described in detail with reference to the flowcharts of FIGS.

  First, in step A1, a password is generated using a one-time password device. Next, in step A2, the maintenance computer 100 dials up to the dial-up router device 130 using this password.

  The dial-up router 130 confirms that the telephone number used in the maintenance computer in step A3 is registered in advance, and once disconnects the session, performs a callback in step A4, Is established (step A5).

  Next, in step A6, an operator's face image is photographed from the camera device 160, the image is transmitted to the customer administrator's portable terminal in step A7, and there is no problem with the operator of the image sent in step A8. The customer administrator determines whether or not

  If there is no problem, the face image and the Mac address of the maintenance computer 100 are transmitted to the user authentication computer 140 in step A9.

  Upon receiving this, the user authentication computer 140 performs face authentication and terminal authentication of the worker in step A10. If confirmation is obtained, access to the maintenance target device is permitted (step A11).

  According to the present embodiment described above, the dial-up destination can be specified. The reason is that it is impossible to dial up from an unregistered site by combining a plurality of authentication methods.

  Moreover, an operator and a work terminal can be specified. The reason is that the face authentication of the worker and the authentication of the work terminal are performed.

  In addition, it is configured to be able to identify the other party of the connection destination, and since the customer's visual confirmation of the worker is also included, unauthorized access through the public line can be prevented.

  Furthermore, since the operator and the work terminal can be identified, the cause can be pursued and dealt with when an unexpected situation occurs during the maintenance work.

  Next, the best mode for carrying out the second invention of the present invention will be described in detail with reference to the drawings.

  The present embodiment is different from the first embodiment in that the user logs on to the user's environment through the Internet VPN instead of the public line.

  Referring to FIG. 3, the present embodiment includes a maintenance computer 200, a camera device 210, firewall devices 220 and 230, and a user authentication computer 240.

  Next, the overall operation of the present embodiment will be described in detail with reference to the flowcharts of FIGS.

  First, in step B1, the maintenance computer 200 connected to the Internet makes a connection request to the maintenance site in step B2.

  In step B3, VPN authentication is performed by the firewall devices 220 and 230 to establish a connection (step B4).

  Next, in step B5, the operator's face image is photographed from the camera device 210, the image is transmitted to the mobile terminal of the customer administrator in step B6, and there is no problem with the operator of the image sent in step B7. The customer administrator determines whether or not

  If there is no problem, in step B8, the face image and the Mac address of the maintenance computer are transmitted to the maintenance computer 200 to the user authentication computer 240.

  Upon receiving this, the user authentication computer 240 performs face authentication and terminal authentication of the worker in step B9. If confirmation is obtained, access to the maintenance target device is permitted (step B10).

  According to the present embodiment described above, the connection partner can be identified, and the operator's visual confirmation by the customer is also included, so that unauthorized access through the Internet can be prevented.

  In addition, since the operator and the work terminal can be identified, the cause can be pursued and dealt with when an unexpected situation occurs during the maintenance work.

  Each of the above-described embodiments is a preferred embodiment of the present invention, and various modifications can be made without departing from the scope of the present invention. For example, the functions of the maintenance computer 100, the one-time password device 110, the camera device 120, the dial-up router device 130, the user authentication computer 140, and the firewall devices 220 and 230 in the above embodiments are realized. The processing for realizing the function of each device may be performed by causing each device to read and execute a program for doing so. Further, the program is transmitted to another computer system by a transmission wave via a computer-readable recording medium such as a CD-ROM or a magneto-optical disk, or via a transmission medium such as the Internet or a telephone line. Also good.

  In each of the above-described embodiments, the maintenance computer 100, the one-time password device 110, the camera device 120, the dial-up router device 130, the user authentication computer 140, and the firewall devices 220, 230 are separately connected. However, it is needless to say that the present invention can be applied to a configuration in which each function is realized as one computer system and a configuration in which a plurality of devices are added for each function.

  The present invention can also be applied to the use of a remote maintenance system through a public line. Furthermore, it can be applied to an authentication method for accessing the internal environment from the outside by mobile.

[BRIEF DESCRIPTION OF THE DRAWINGS] It is a block diagram which shows the structure of the best form for implementing 1st invention of this invention. It is a flowchart which shows the operation | movement of the best form in the 1st Embodiment of this invention. It is a block diagram which shows the structure of the best form for implementing 2nd invention of this invention. It is a flowchart which shows the operation | movement of the best form in the 2nd Embodiment of this invention.

Explanation of symbols

100, 200 Maintenance computer 110 One-time password device 120, 210 Camera device 130 Dial-up router device 140, 240 User authentication computer 220, 230 Firewall device

Claims (10)

A maintenance device that performs remote maintenance of maintenance target devices by dial-up,
After the one-time password authentication and phone number authentication,
Further, a maintenance device, wherein worker authentication by face authentication and authentication by a MAC address are performed. A maintenance device that performs remote maintenance of maintenance target devices via the Internet VPN,
A maintenance apparatus, wherein VNP authentication is performed, and further, worker authentication by face authentication and authentication by a MAC address are performed.   The maintenance device according to claim 1, wherein the face image data of the worker used for the face authentication is transmitted to a user terminal. A remote maintenance system including a maintenance computer for remote maintenance of a maintenance target device by dial-up, a one-time password device, a dial-up router device, and a user authentication device,
The maintenance computer dials up to the dial-up router device with a password issued by the one-time password device, and after performing one-time password authentication and telephone number authentication, receives a callback from the dial-up router device,
Furthermore, the maintenance computer performs worker authentication in face authentication by the user authentication device and authentication by a MAC address. A remote maintenance system including a maintenance computer that performs remote maintenance of a maintenance target device through an Internet VPN, a firewall device, and a user authentication device,
The remote maintenance system is characterized in that the maintenance computer is subjected to VNP authentication by a firewall device, and is further subjected to worker authentication in face authentication by the user authentication device face authentication and authentication by a MAC address.   6. The remote maintenance system according to claim 4, wherein the face image data of the worker used for the face authentication is transmitted to a user terminal. The maintenance device that performs remote maintenance of the maintenance target device by dial-up receives a callback after performing one-time password authentication and telephone number authentication,
Furthermore, the remote maintenance method is characterized in that worker authentication by face authentication and authentication by a MAC address are performed.   A remote maintenance method characterized in that a maintenance device that performs remote maintenance of a maintenance target device through the Internet VPN performs VNP authentication, and further performs operator authentication by face authentication and authentication by a MAC address.   9. The remote maintenance method according to claim 7, wherein the face image data of the worker used for the face authentication is transmitted to a user terminal.   A program for causing a computer to realize the function according to any one of claims 1 to 3.

Images