JP2007310686A - Application execution system, application execution method, and authentication server and authentication program for use in the same - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an application execution system, an application execution method, and an authentication server and an authentication program therefor that shorten waiting time while ensuring security without modifications to an existing system. <P>SOLUTION: The authentication server 30 of the application execution system 1 stores in advance an authentication information storage part 320 for storing authentication information permitting remote connection; and receives identification information sent from a terminal 10, detects information about an application client 20 corresponding to the received identification information by reference to the information in the authentication information storage part 320, and sends it back to the terminal 10. The terminal 10 then establishes a remote connection to the application client 20. During the remote connection from the terminal 10 to the application client 20, the authentication server 30 makes the application client 20 exclusive to the remote connection. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to a technique that requires security and efficiency particularly in a network of a client server system.

A business system such as a public system that uses a client server has a basic specification of one login per person for the business system because of its security. Also, in municipalities such as municipalities that handle public systems, there are many cases where only one terminal is installed at a window in a small area such as a rural area or a branch office. The current situation is that staff members share multiple tasks.
Therefore, when a staff member responds to a visitor, he / she first asks the visitor about the business at the window and knows that he / she will use the business system. Log out the local account of the active business system, then start the business system of the terminal (counter terminal) installed at the counter, log in with the local account, and use the business system. When the correspondence is completed, the user's own account of the business system of the window terminal is logged out, the business system is terminated, and the user is returned to his / her seat and re-logged in to the business system of his / her own terminal with his / her account.

Patent Document 1 discloses a technique for efficiently performing business by managing user management additional information with a server. Patent Document 2 discloses a technology of a business system using a WWW (World Wide Web) browser.
Japanese Patent Laying-Open No. 2005-4499 (FIG. 7) JP-A-10-171755 (FIG. 3)

  Conventionally, in a business system in a public system, a staff member who uses the system takes a lot of time to log out / log in, terminate / activate, etc. between the self-seat terminal and the counter terminal many times. It is also connected to make you wait. Further, in a small scale, there is a problem in terms of wasting time and security due to the use of a single counter terminal shared by a plurality of staff members for a plurality of operations.

  In addition, the counter terminal is installed in a place where outside visitors such as visitors can easily approach, and in order to shorten the waiting time, for example, if it is left in a logged-in state, information by an outside malicious person is used. Is likely to be stolen. In addition, there is a possibility that the window terminal itself is physically stolen, and there is a great risk of data leakage or information leakage in that case.

  The technology of Patent Document 1 has a risk of data leakage when a terminal is physically stolen. Moreover, the technique of patent document 2 has a problem which can be utilized only for the system limited to the WWW browser.

  In addition, it is desired that the above effects can be obtained without modifying an existing system that is currently in operation.

  Therefore, in view of the above problems, the present invention provides an application execution system, an application execution method, and an authentication server and an authentication program used therefor that reduce standby time while maintaining security without modifying an existing system. This is the issue.

The present invention that solves the above-described problems includes a terminal operated by a user, an application client to which the terminal is remotely connected, an application server that executes an application according to an instruction from the application client, and a remote connection to the application client by the terminal In a system in which an authentication server that authenticates authentication is communicated via a network, the authentication server stores authentication information that permits remote connection, receives the identification information acquired by the terminal, and receives the received identification information and The application information corresponding to the identification information is detected by comparing with the authentication information, the application client information is transmitted to the terminal, and the remote connection from the terminal to the application client is performed. During this period, the terminal is exclusively connected remotely to the application client by executing remote connection to the application client exclusively, and the application is executed on the application server via the application client. It is characterized by making it.
The present invention includes other application execution methods, and an authentication server and an authentication program used therefor.

  According to the present invention, it is possible to provide an application execution system, an application execution method, an authentication server, and an authentication program used for reducing the waiting time while maintaining security without modifying an existing system.

Hereinafter, the best mode for carrying out the present invention (hereinafter referred to as “embodiment”) will be described with reference to the drawings.
In the present embodiment, an example will be described in which a staff (user) uses a public system, which is a business system, in a municipal office in a municipality.

<System configuration>
First, a system configuration according to an embodiment of the present invention will be described with reference to FIG. FIG. 1 is a diagram showing a configuration of an application execution system in the present embodiment and functions of elements constituting the system.
The application execution system 1 in this embodiment includes a window terminal (terminal) 10, a business network 12, a business terminal (application client) 20 (20A, 20B, 20C), an authentication server 30, and a business server (application server) 40 (40A, 40B, 40C). The “business system” in the present embodiment is a concept realized by a function provided by the business program (application) 400 of the business server 40.

The window terminal 10 is a computer that performs remote connection to the work terminal 20 when using the work system for responding to visitors at the window. The window terminal 10 is implemented by, for example, a terminal such as a thin client having a function such as a remote desktop.
The window terminal 10 includes an identification information reading unit 100 having a function of reading unique information written in a predetermined storage medium, a connection processing unit 101 that performs remote connection with the business terminal 20, a keyboard, a mouse, and the like. An input unit 110, an output unit 111 such as a screen, a transmission unit 120 for transmitting information to the business network 12, and a reception unit 121 for receiving information from the business network 12 are provided.
The identification information reading unit 100 may be connected to the outside of the window terminal 10 as an identification information reading device.
The connection processing unit 101 receives the output result (screen image) of the business terminal 20 via the receiving unit 121 and outputs it to the output unit 111. In addition, operation information input to a staff member (user) via the input unit 110 is transmitted to the business terminal 20 via the transmission unit 120. Thereby, remote connection to the business terminal 20 is performed.

  An authentication device 11 is a reading destination from which the identification information reading unit 100 of the window terminal 10 reads information. The authentication device 11 includes a device ID that is unique information for identifying a staff member (user) who owns the authentication device 11, and includes, for example, an IC (Integrated Circuit) card, a USB (Universal Serial Bus). Keys can be considered. Further, the identification information reading unit 100 may acquire information by reading a user's fingerprint, finger vein, and the like. In this case, the authentication device 11 is unnecessary.

  The business network 12 is an independent computer network in a specific organization, for example, a business network within a local government agency.

The business terminal 20 is a terminal installed at the staff's seat, to which the window terminal 10 is remotely connected, and a general computer may be used. Also, a blade type computer or a server type computer such as a metaframe may be used. The business terminal 20 executes the business program 400 of the business server 40, thereby providing a business system function.
FIG. 1 shows an example in which a plurality of business terminals 20A, 20B, and 20C are connected to the business network 12.

The business server 40 is a general computer, and is a server that performs business-related processing by operating a business program 400 that is operated in a business system within a local government office. The business server 40 includes a business program 400 and a business log information storage unit 410 that appropriately acquires access to the business server 40, operation logs, and the like. Examples of the business system provided by the business program 400 include a family register system, a tax payment system, a national health insurance system, and the like.
Note that the business terminal 20 is in a state where it can communicate with the business server 40 in advance, and a business system functioning by the business program 400 can be used.
FIG. 1 shows an example in which a plurality of business servers 40A, 40B, and 40C are connected to the business network 12, and the business server 40A provides a family register system to the business terminal 20A, and the business server 40B The tax payment system is provided to the business terminal 20B, and the business server 40C is described as providing the national health insurance system to the business terminal 20C.

The authentication server 30 is a general computer, and performs authentication when the window terminal 10 is remotely connected to the business terminal 20.
The authentication server 30 transmits information to the authentication unit 300 that authenticates the identification information received from the window terminal 10, the storage unit 310 such as an HDD (Hard Disk Drive), the window terminal 10, and the business terminal 20 via the business network 12. A transmission unit 340 for receiving identification information and the like from the window terminal 10 via the business network 12.
The storage unit 310 of the authentication server 30 includes an authentication information storage unit 320 that manages information used for authentication, and a log information storage unit 330 that stores information such as a connection history. Further, the authentication information storage unit 320 includes authentication user information 321 and connection destination authentication information 322.

  The encryption key generation server 50 is a general computer and is connected to the authentication server 30. The encryption key generation server 50 includes an encryption key generation unit 500 that generates an encryption key and a decryption key used for connection between the window terminal 10 and the business server 40, and an encryption key information storage unit that stores the generated encryption key and decryption key. 510.

  The connection processing unit 101, the authentication unit 300, the business program 400, and the encryption key generation unit 500 are developed in a memory such as a computer, and function by operating a CPU (Central Processing Unit). Here, the memory includes, for example, a RAM (Random Access Memory) and a flash memory.

  The window terminal 10, the business terminal 20, the authentication server 30, and the business server 40 are physically connected via the business network 12, and communication is performed via the business network 12.

<Data>
FIG. 2 is a diagram illustrating an example of a data configuration held in the authentication information storage unit.
The authentication information storage unit 320 includes two pieces of information. FIG. 2A illustrates authentication user information, which manages identification information permitted to be used and user information corresponding thereto. FIG. 2B illustrates connection destination authentication information, and manages information on business terminals that can be authenticated as connection destinations for each user.

The items of the authentication user information 321 include an item number for uniquely identifying each authentication user information, a device type and device ID as authentication device information, and a user ID (user information) as information indicating a user corresponding to the authentication device information. An example is shown that is configured with information such as biometric authentication and password corresponding to the user ID.
The device ID is information that uniquely identifies the authentication device 11 stored in the authentication device 11.
By referring to the authentication user information 321, a user ID corresponding to identification information such as a device ID, a password, and biometric authentication is detected.

The items of the connection destination authentication information 322 include an example configured with information such as an item number for uniquely identifying each connection destination authentication information, a user ID, business terminal information, a belonging organization, and a business system permitted to be used. It is shown.
By referring to the information of the connection destination authentication information 322, the business terminal corresponding to the user ID is detected.
Note that items such as the organization to which the user belongs and the business system that is permitted to use are not essential and may be changed as appropriate.
In the authentication information storage unit 320, the user ID of the authentication user information 321 is linked to the user ID of the connection destination authentication information 322.

FIG. 3 is a diagram illustrating an example of a data configuration held in the log information storage unit.
The log information storage unit 330 stores processing information of the authentication server 30 related to transmission / reception between the window terminal 10 and the business terminal 20. The items of the log information storage unit 330 include an item number for uniquely identifying log information, a date and time when the log was collected, a user ID indicating a staff member (user) who instructed processing, terminal information indicating a terminal instructing processing, It includes connection destination terminal information indicating the connection destination, network information, encryption key generation ID indicating the generated encryption key and decryption key, and information such as an event.
The user ID is linked to the user ID of the authentication user information 321 (see FIG. 2A) and the connection destination authentication information 322 (see FIG. 2B), and the encryption key generation ID is described later. To the encryption key generation ID of the encryption key information storage unit 510 (see FIG. 4).

  FIG. 4 is a diagram illustrating an example of a data configuration held in the encryption key information storage unit of the encryption key generation server. The encryption key information storage unit 510 generates an item number for uniquely identifying the encryption key information, the date and time of generation, the encryption key generation ID, the encryption key, and the decryption key for the encryption key and the decryption key generated by the encryption key generation unit 500. Manage key and information. The encryption key generation ID is information for uniquely identifying a combination of the encryption key and the decryption key, and is linked to the encryption key generation ID of the log information storage unit 330 as described above.

<Remote connection processing>
FIG. 5 is a flowchart showing the flow of remote connection processing in the application execution system according to the embodiment of the present invention.

  This embodiment demonstrates as an example the case where the staff (user) of a local government uses a business system (family register system).

  First, the business terminal 20A activates the business program 400A (business system) of the business server 40A and logs in beforehand (S501). As a result, the business terminal 20A can use the function provided by the business program 400A of the business server 40A, that is, the business system.

  The window terminal 10 acquires the identification information via the identification information reading unit 100 (S502). Specifically, the window terminal 10 acquires the device ID registered in the authentication device 11 (for example, an IC card) owned by the staff through the identification information reading unit 100 of the window terminal 10. The authentication device 11 used at this time is not limited to an IC card, and a USB key or the like may be used. Then, in addition to the information of the device ID, the staff is made to input a password as appropriate through the input unit 110. It is also possible to use a biometric technology that does not require the authentication device 11. Furthermore, each may be combined, thereby increasing security. Information acquired here, such as a device ID and an appropriately input password, is identification information.

  Subsequently, a staff member who is a user of the window terminal 10 inputs information indicating the business terminal 20 </ b> A as a connection destination via the input unit 110 of the window terminal 10. Connected terminal information indicating whether to connect is acquired (S503). The connection destination terminal information may be information that can uniquely identify the connection destination terminal, and a terminal name, an IP address, and the like are conceivable.

  The window terminal 10 transmits the identification information acquired in step S502 and the connection destination terminal information acquired in step S503 to the authentication server 30 via the transmission unit 120 (S504).

FIG. 7 is a diagram illustrating an example of a screen displayed when the counter terminal is remotely connected to the business terminal. Here, the window terminal 10 acquires the identification information in step S502 and the connection destination terminal information in step S503.
As the identification information, the staff causes the identification information reading unit 100 of the window terminal 10 to read the device ID of the authentication device 11 and inputs the password. Further, the connection destination business terminal 20A is selected as the connection destination terminal information, and the “remote connection” button is pressed. Thereby, the window terminal 10 acquires the identification information and the connection destination terminal information, and transmits the acquired information to the authentication server 30 in step S504.

The authentication server 30 receives the identification information and the connection destination terminal information transmitted from the window terminal 10 via the receiving unit 341 (S505).
At this time, the authentication server 30 stores processing information in the log information storage unit 330. The information stored here will be specifically described. According to the log information storage unit 330 illustrated in FIG. 3, as indicated by the item number “1”, the staff member with the user ID “X123456” at the date “2006/01/01 00:00:00” Using the window terminal 10 corresponding to the terminal information “IP address of the window terminal”, the event to the service terminal 20A corresponding to the service terminal information “IP address of the service terminal” via the network information “business network” A “connection request” is made and the fact that the authentication server 30 has received the request is stored as a log.
Similarly, the authentication server 30 stores the information of the process in the log information storage unit 330 every time the process via the authentication server 30 that is the authentication server 30 is performed.

  The authentication server 30 collates the received identification information with the information stored in the authentication information storage unit 320 and detects the connection destination business terminal 20.

More specifically, for example, in steps S502 to S503, the window terminal 10 acquires device ID = “A123456” and password “****” as identification information, and “business terminal 20A” as connection destination terminal information. Assume that the authentication server 30 receives these pieces of information in step S505.
In that case, in step S506, the authentication server 30 first collates the received identification information with the authentication user information 321, and the information of the item number “1” in FIG. 2A, the received device ID information, and It is determined that the password information matches, and the user ID = “X123456” is detected. In addition, when the identification information reading unit 100 of the window terminal 10 acquires the device ID, the authentication server 30 can also perform verification including the device type information by acquiring the device type information. Good.
Subsequently, the authentication server 30 permits connection according to the user ID stored in the connection destination authentication information 322 (FIG. 2B) based on the detected user ID = “X123456” information. The information of the business terminal information (IP address of the business terminal 20A) is detected, and the detected business terminal information is compared with the connection destination terminal information received in step S505. ), Information indicating collation match is stored in the log information storage unit 330 (item number “2” in FIG. 3).

  On the other hand, as a result of the collation, when the identification information or the connection destination terminal information does not match the information in the authentication information storage unit 320 (S506 → mismatch), the process returns to step S505. Although not shown in the figure, at this time, the authentication server 30 may store information indicating inconsistency in the log information storage unit 330 and display a message notifying that authentication has failed on the screen of the window terminal 10. You may display suitably.

  The authentication server 30 transmits the IP address of the business terminal 20A detected in step S506 as connection destination terminal information to the window terminal 10 via the transmission unit 340 (S507), and the window terminal 10 passes through the reception unit 121. The connection destination terminal information (IP address of the business terminal 20A) is received (S508). As a result, the screen of the business terminal 20A is displayed on the screen of the window terminal 10 and the input information of the window terminal 10 is reflected on the business terminal 20A. That is, the window terminal 10 can be remotely connected to the business terminal 20A. It becomes possible. The authentication server 30 stores information indicating the successful remote connection in the log information storage unit 330 (item number “3” in FIG. 3).

  In the processing of steps S502 to S508, the authentication terminal 30 transmits the identification information including the device ID, which is unique information for identifying the staff (user), to the authentication server 30. The information is checked against authentication user information 321 registered in advance to determine whether remote connection is possible. This realizes reliable authentication that prevents remote connection from an unauthorized user who is not authenticated by the authentication information storage unit 320, for example, the identification information is unauthorized.

Note that while the remote connection from the window terminal 10 to the business terminal 20A is performed by the staff (user) who has transmitted the authenticated identification information, the authentication server 30 remotely connects to the business terminal 20A from the other. The control right of the business terminal 20A is made exclusive so that processing is not performed.
Specifically, the authentication server 30 is a connection destination indicating a connection request from another window terminal 10 to the business terminal 20A during remote connection from the window terminal 10 to the business terminal 20A by an authenticated staff member (user). When terminal information and identification information are received (step S505 in FIG. 5), the processing after step S506 is not performed. At this time, the authentication server 30 may appropriately display a message notifying that the process associated with the remote connection has not been performed on the screen of the other window terminal 10. As a result, the business terminal 20A can be used only by an authenticated staff member (user), and security is ensured.
Further, for example, during remote connection from the window terminal 10, the business terminal 20A does not accept an operation by locking its own keyboard or the like, and displays a screen indicating that the remote connection is being performed, or hides the screen itself. By displaying it, operations other than the staff and viewing the screen may be prevented. Thereby, security is further improved.

The authentication server 30 causes the encryption key generation server 50 to generate an encryption key and a decryption key, and receives the generated encryption key and decryption key. The received encryption key is transmitted to the window terminal 10 (S509), and information indicating the encryption key transmission is stored in the log information storage unit 330 (item number “4” in FIG. 3).
The window terminal 10 receives and stores the transmitted encryption key (S510).
The authentication server 30 transmits the received decryption key to the business terminal 20A (S511), and stores information indicating the decryption key transmission in the log information storage unit 330 (item number “5” in FIG. 3).
The business terminal 20A receives the transmitted decryption key (S512) and stores it.
The authentication server 30 instructs the encryption key generation unit 500 of the encryption key generation server 50 to store the generated encryption key and decryption key in the encryption key information storage unit 510 (S513). FIG. 4 illustrates the encryption key and decryption key information stored in the encryption key information storage unit 510.

  The encryption key generation unit 500 and the encryption key information storage unit 510 may be included in the authentication server 30. In that case, the encryption key generation server 50 becomes unnecessary, and the authentication server 30 performs the process of generating the encryption key in step S509 and the process of generating the decryption key in step S511.

Thereafter, the window terminal 10 encrypts the data to be transmitted and its route based on the encryption key information received in step S510, and the business terminal 20A based on the decryption key information received in step S512. The data transmitted from the window terminal 10 and its route are decrypted. Thereby, transmission / reception of confidential information is attained.
In addition, the encryption key and the decryption key may be used as a secret key and a public key for a signature and a certificate. In this case, the window terminal 10 transmits the data to be transmitted to the business terminal 20A with a signature, a certificate, and the like, and the business terminal 20A verifies the signature, the certificate, and the like given to the received data. This makes it possible to confirm the transmission source.

  FIG. 8 is a diagram illustrating a screen example in which the business system can be used via the business terminal at the window terminal. According to FIG. 8, the screen image of the business terminal 20 </ b> A selected in step S <b> 503 is displayed on the screen of the window terminal 10, and the family register system which is a function provided by the business server 40 </ b> A using the window terminal 10. It is available.

<Remote disconnection processing>
FIG. 6 is a flowchart showing a flow of remote connection disconnection processing of the application execution system according to the embodiment of the present invention.
The staff inputs a request for disconnecting the remote connection between the window terminal 10 and the business terminal 20A via the input unit 110 of the window terminal 10, and the window terminal 10 acquires the request. The window terminal 10 transmits information on a disconnection request for remote connection with the business terminal 20A to the authentication server 30 via the transmission unit 120 (S521), and the authentication server 30 transmits the disconnection request information via the reception unit 341. Receive (S522). The authentication unit 300 of the authentication server 30 disconnects the remote connection between the window terminal 10 and the business terminal 20A (S523). Thereby, the remote connection from the window terminal 10 to the business terminal 20A is completed.
The authentication server 30 stores information indicating disconnection of the remote connection between the window terminal 10 and the business terminal 20A in the log information storage unit 330 (item number “6” in FIG. 3).

  According to the present embodiment, the authentication server 30 determines whether or not it is an authenticated staff member (user) using identification information such as the authentication device 11 transmitted from the window terminal 10, and permits remote connection. By adopting this method, for example, security is further strengthened as compared with identity verification by simply inputting a password.

By using a thin client for the window terminal 10 and not storing data, it is possible to prevent information leakage even in the event of physical theft or data being stolen by a malicious person. . It is desirable that the window terminal 10 does not have functions such as data storage and printing in an external portable storage medium. Thereby, information leakage prevention is further strengthened.
Further, since the necessity and frequency of performing upgrade, bug handling, virus handling, etc. on the OS (Operating System) and programs used for work on the window terminal 10 are reduced, the overall management cost can be reduced. .

  By adopting a configuration in which the staff is remotely connected from the window terminal 10 to the business terminal 20 used by the staff at his / her desk, the staff can use the terminal environment of his / her desk at the window, and the work efficiency is improved.

Since the business system of the business server 40 is activated and usable in advance at the business terminal 20, the time required for using the business system at the window terminal 10 is a remote connection from the window terminal 10 to the business terminal 20. Only the time required, and the time to wait for visitors at the counter is shortened.
In FIG. 1, the use of the business server 40B (tax payment system) connected remotely from the window terminal 10 to the business terminal 20B, or the use of the business server 40C (national health insurance system) connected remotely to the business terminal 20C. Is also possible. Even in such a case, according to the present embodiment, since the business terminal 20 has been activated and logged in to the business system of the business server 40 in advance, the time required for using the system using the window terminal 10 is shortened, and the customer visits at the window. Time can be reduced as much as possible, improving efficiency.

  Since the communication between the window terminal 10 and the business terminal 20 is encrypted by the encryption key sent from the authentication server 30, safety is ensured. In addition, this encryption key can be used for signing and giving certificates in various situations.

Conventionally, the contents and format of logs of business system usage (when referring to and operating a database, etc.) depend on the acquisition timing and log format of each business system, and are not managed in a unified manner. For this reason, a great deal of time and effort is required for log tracking in the event of a failure.
However, according to the present embodiment, the window terminal 10 always connects / disconnects to / from the business terminal 20 via the authentication server 30, so all the information related to the remote connection is stored in the log information storage unit 330 and the log There is no missing information and reliability is improved. Furthermore, according to the present embodiment, it is possible to acquire remote connection information logs in a unified format without changing the configuration and settings of the existing system (business server 40, business terminal 20, business network 12). It is possible to reduce the time and labor required for log tracking.
In addition, connection and operation logs acquired in the business server 40 are appropriately stored in the business log information storage unit 410, and a log of the business system (business log information storage unit 410) and a log of the authentication server 30 (logs) By matching with the information storage unit 330), it is possible to obtain a consistent log from login to business to logout even in the case of investigations such as unauthorized access.

  In the authentication server 30, the authentication unit 300 authenticates using the authentication information storage unit 320 stored in itself, so that the existing configuration can be utilized without changing the existing business terminal 20 and the business server 40. The security is further strengthened by the authentication using the identification information, and the authentication information can be centrally managed.

  The business server 40 may be configured to allow only connection from a specific business terminal 20 and the business terminal 20 may be configured to permit only connection from a specific window terminal 10 to prevent access from other terminals. preferable. This further improves security.

  According to the above, cost, time, and labor are minimized by adding the devices of the window terminal 10 and the authentication server 30 to the current network and business system without having to review the currently used system. In the above, the above-described effect can be obtained. In other words, it is possible to shorten the waiting time while maintaining security and to improve the resident satisfaction.

<Modification>
FIG. 9 shows a modification in which the application execution system according to the present invention is applied. FIG. 9 shows an example in which the company network 17 of the company intranet is used in combination with the business network 12 of the application execution system 1 described above. The same elements as those in FIG. 1 are denoted by the same reference numerals, and description thereof is omitted.

In FIG. 9, in addition to the business network 12, an in-house network 17 is provided. The in-house network 17 is an independent network in a specific organization, for example, an OA (Office Automation) network within a local government agency, and is a network that is not physically connected to the business network 12.
The in-house OA server 40a connected to the in-house network 17 instead of the business server 40 has, for example, a document management system and a storage function.

  The business terminal 20a is connected to the internal network 17 and has the same function as the business terminal 20A in the business network 12. The authentication server 30 a is connected to the in-house network 17 and has the same function as the authentication server 30 in the business network 12. An encryption key generation server 50a may be provided as appropriate.

  With this configuration, even if there are a plurality of networks (business network 12 and in-house network 17) that are not connected to each other, both can be used at the window terminal 10 with a minimum required time.

Further, the business terminal 20A and the business terminal 20a may be collected and installed in a place (for example, a terminal storage room) where a visitor cannot physically touch and locked from the outside.
According to this, about business terminal 20A and business terminal 20a, security against physical theft including not only crimes by outsiders but also internal crimes and internal frauds is improved.

Since the staff can operate the business terminals 20 of both the in-house network 17 and the business network 12 at the window terminal 10, the business efficiency is further improved. In this modification, a plurality of authentication servers 30 and authentication servers 30a are installed. However, the present invention is not limited to this, and one authentication server 30 is installed, and two or more network cards are mounted on the authentication server 30. Thus, the business network 12 and the in-house network 17 may be physically separated and connected to both networks.
By doing so, for example, when a change in user information occurs, such as when personnel changes, the information in the authentication information storage unit 320 of the authentication server 30 only needs to be corrected, so that the operation management becomes easy.

  Further, the authentication unit 300, the authentication information storage unit 320, the log information storage unit 330, and the like executed by the authentication server 30 shown in FIGS. 1 and 9 are recorded on a computer-readable recording medium and recorded on this recording medium. The application execution system 1 according to the embodiment of the present invention may be realized by causing the computer system to read and execute the program (authentication program).

As mentioned above, although an example was shown about suitable embodiment of this invention, this invention is not limited to the said embodiment, In the range which does not deviate from the meaning of this invention, it can change suitably.
For example, the number of window terminals 10 installed in the window is not limited to one, and a plurality of window terminals 10 are installed so that staff can remotely connect to each business terminal 20 (20A, 20B, 20C) as necessary from each window terminal 10. It may be.
The business terminal 20 may include functions such as the authentication unit 300 and the storage unit 310 provided in the authentication server 30. Thereby, the above-described effect can be obtained by connecting the window terminal 10 to the business network 12 and setting the business terminal 20.
Furthermore, the present invention can be applied to an industrial use destination such as a bank or a travel agency where two or more kinds of operations such as customer service and other operations are performed in parallel.

It is a figure which shows the structure of the application execution system in this embodiment, and the function of each element which comprises this system. It is a figure which shows an example of the data structure hold | maintained at an authentication information storage part. FIG. 2A illustrates authentication user information, which manages identification information permitted to be used and user information corresponding thereto. FIG. 2B illustrates connection destination authentication information, and manages information on business terminals that can be authenticated as connection destinations for each user. It is a figure which shows an example of the data structure hold | maintained at a log information storage part. It is a figure which shows an example of a data structure hold | maintained at the encryption key information storage part of an encryption key generation server. It is a flowchart which shows the flow of the remote connection process of the application execution system which concerns on embodiment of this invention. It is a flowchart which shows the flow of a remote connection cutting | disconnection process of the application execution system which concerns on embodiment of this invention. It is a figure which shows the example of a screen at the time of connecting remotely to a business terminal in a window terminal. It is a figure which shows the example of a screen in which the business system can be utilized via a business terminal in a window terminal. It is a figure which shows the modification which applied the application execution system in this invention.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Application execution system 10 Counter terminal 11 Authentication device 12 Business network 20 Business terminal 30 Authentication server 300 Authentication part 310 Storage part 320 Authentication information storage part 330 Log information storage part 40 Business server 400 Business program 410 Business log information storage part 50 Encryption key Generation server 500 Encryption key generation unit 510 Encryption key information storage unit

Claims (8)

A terminal operated by the user;
An application client to which the terminal remotely connects;
An application server that executes an application according to an instruction of the application client;
In a system in which an authentication server that authenticates a remote connection to the application client by the terminal is communicated via a network,
The authentication server is
Identification information that permits the remote connection, user information indicating a user corresponding to the identification information, and an authentication information storage unit that associates and stores information of the application client corresponding to the user information as authentication information;
A receiving unit for receiving the identification information transmitted from the terminal;
An authentication unit that detects information on the application client corresponding to the received identification information using information in the authentication information storage unit, and transmits the detected application client information to the terminal that has transmitted the identification information; Have
The terminal
Based on the information of the application client received from the authentication server, by remotely connecting to the application client, the application server is caused to execute the application via the application client,
The authentication server is
During the remote connection from the terminal to the application client, the remote connection to the application client is exclusive. The application execution system according to claim 1, wherein the terminal is a thin client terminal that does not include a hard disk. The authentication server generates an encryption key and a decryption key, and transmits the encryption key to the terminal and the decryption key to the application client,
The terminal
Storing the encryption key received from the authentication server;
Send data to the application client after giving a signature or certificate using the encryption key or encrypting the data to the data to be transmitted,
The application client is
Storing the decryption key received from the authentication server;
2. The signature or the certificate attached to the data received from the terminal or the decryption of the encrypted data is performed using the decryption key. Item 3. The application execution system according to Item 2. The authentication server is
The application execution system according to claim 1, further comprising a log information storage unit that stores processing information of remote connection between the terminal and the application client. A terminal operated by the user;
An application client to which the terminal remotely connects;
An application server that executes an application according to an instruction of the application client;
In an application execution method in a system in which an authentication server that authenticates a remote connection to the application client by the terminal is communicated via a network,
The authentication server is
Identification information that permits the remote connection, user information indicating a user corresponding to the identification information, and information of the application client corresponding to the user information are stored in the authentication information storage unit as authentication information,
Receiving the identification information transmitted from the terminal via the receiving unit;
Detecting application client information corresponding to the received identification information using the information in the authentication information storage unit, and transmitting the detected application client information to the terminal that has transmitted the identification information;
The terminal
Based on the information of the application client received from the authentication server, by remotely connecting to the application client, the application server is caused to execute the application via the application client,
The authentication server is
During the remote connection from the terminal to the application client, the remote connection to the application client is exclusive. A terminal operated by the user;
An application client to which the terminal remotely connects;
An application server that executes an application according to an instruction of the application client;
A system in which an authentication server for authenticating remote connection to the application client by the terminal is communicated via a network, and the terminal exclusively connects remotely to the application client and causes the application server to execute the application An application execution method of an authentication server used for
Identification information that permits the remote connection, user information indicating a user corresponding to the identification information, and information of the application client corresponding to the user information are stored in an authentication information storage unit in association with each other,
Receiving the identification information transmitted from the terminal via the receiving unit;
Detecting application client information corresponding to the received identification information using the information in the authentication information storage unit, and transmitting the detected application client information to the terminal that has transmitted the identification information;
During the remote connection from the terminal to the application client, the remote connection to the application client is exclusive. A terminal operated by the user;
An application client to which the terminal remotely connects;
An application server that executes an application according to an instruction of the application client;
A system in which an authentication server for authenticating remote connection to the application client by the terminal is communicated via a network, and the terminal exclusively connects remotely to the application client and causes the application server to execute the application An authentication server used for
Identification information for permitting the remote connection, user information indicating a user corresponding to the identification information, and an authentication information storage unit that stores information on the application client corresponding to the user information in association with each other;
A receiving unit for receiving the identification information transmitted from the terminal;
Information on the application client corresponding to the received identification information is detected using the information in the authentication information storage unit, and the detected application client information is transmitted to the terminal that has transmitted the identification information. An authentication server comprising: an authentication unit that makes exclusive remote connection to the application client exclusive during remote connection to the application client. A terminal operated by the user;
An application client to which the terminal remotely connects;
An application server that executes an application according to an instruction of the application client;
A system in which an authentication server for authenticating remote connection to the application client by the terminal is communicated via a network, and the terminal exclusively connects remotely to the application client and causes the application server to execute the application And the computer as the authentication server,
Identification information for permitting the remote connection, user information indicating a user corresponding to the identification information, and an authentication information storage unit that stores information on the application client corresponding to the user information in association with each other;
A receiving unit for receiving the identification information transmitted from the terminal;
Information on the application client corresponding to the received identification information is detected using the information in the authentication information storage unit, and the detected application client information is transmitted to the terminal that has transmitted the identification information. An authentication program that functions as an authentication unit that exclusively makes remote connection to the application client during remote connection to the application client.

Images