JP2008181437A - Method for controlling external output of information - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To solve the problem that when a temporary staff uses a rental terminal for operation, operation screens for regular staff and temporary staff must be separately prepared for prohibiting undelegated operation, and when delegating a data withdrawing operation using an external data output device, unauthorized use of data must be suppressed. <P>SOLUTION: A second computer determines, upon receipt of authentication information from a first computer through a network, a user's class based on the authentication information and user class information stored in a first storage means, reads screen control information corresponding to the determined user class information in reference to a second storage means, transmits the screen control information to a third computer through the network, and controls, upon receipt of an external output request of the information from the first computer through the network, external output of the information based on the user class information and device limitation information stored in the second storage means. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  A method of controlling the connection destination server environment of client terminals used in general business operations based on user attributes.

The connection destination server control of the client terminal used for general work is controlled according to the user authority during normal user authentication. This user authority check is performed by the OS of the client terminal and depends on the function of the OS. In addition, setting the server connection authority for each of a large number of users complicates data management, so the server authority can be selected by replacing the user authority with the authority of the client terminal and setting a server that can be connected to each client terminal. Many operations are restricted. In this case, since the connection server is determined by the client terminal, there is a problem that the same client terminal cannot be connected to another business server.
As a method for solving this problem, a method disclosed in Patent Document 1 has been proposed. In this method, a relay server is provided between the client terminal and the server, the client terminal creates and transmits a transmission frame with header information including an identifier for identifying a business group based on the user setting, and the relay server transmits the transmission frame. By determining the header information and using the server of the corresponding business as the connection destination, it is possible to change the connection destination server by business in the same client terminal.

JP 2002-269059 A

  According to the above conventional method, the user terminal is first authenticated by the client terminal, and then the connection destination server is determined by the job, so that the client terminal can be operated without being fixed to the job. When there are a lot of temporary employees involved in work, it is desirable to separate the work that can be granted to regular staff and work that can be granted to temporary staff within the same work. In the conventional method, it is possible to select a server, but the work contents It is impossible to select up to.

  In addition, it may be necessary to connect an external data output device to the client terminal for business purposes, and it is necessary to perform data withdrawal work, but when entrusting this work to temporary staff, human monitoring is performed to prevent information leakage. It is necessary to provide some countermeasures not only for the system.

  An object of the present invention is to solve the above-mentioned problems, and to externally output information that allows a user to change a connection destination server by business in one client terminal and that can control work contents according to user attributes It is to provide a control method. Another object of the present invention is to provide an information external output control method capable of automatically monitoring a work history of a user having a specific attribute.

  In order to solve the above problems, the information external output control method of the present invention is realized as follows. First, it is assumed that the user attributes are classified as regular employees and temporary workers, and the regular employees have previously registered biometric information in the system. The client terminal assumed in the present invention includes a biometric authentication function and an authentication function using a portable medium, authentication information is provided in an authentication server provided separately from the business server, and the client terminal is connected to the authentication server through the network. Suppose you connect to one business server.

  In the user authentication method, a regular employee authenticates with biometric information such as a fingerprint or finger vein, and a temporary employee authenticates with an authentication medium lent in advance. The association information between temporary staff and authentication media is stored in the authentication server, and at the time of recruitment, the authentication information in the media is registered in association with the personal information of the temporary staff and attribute information such as contract work, and is retained for the duration of the contract. I will do it. It is possible to associate the returned authentication medium with the information of the newly contracted temporary worker after the contract period of one temporary worker is over.

Further, the authentication server stores user attribute information in association with user personal information, user environment information that is an accessible business server and usable processing program contents. The authentication server identifies user environment information at the time of authentication, sets a business screen corresponding to the user environment information, and establishes a connection between the client terminal and a business server corresponding to the permitted business. The business server stores business application programs, databases used for business, and business screen information corresponding to the user environment. As a result, even if the client terminal used by the regular staff and the temporary staff is the same, the operation screens are different, so that unauthorized operations cannot be performed.
In addition, when the user attribute is a temporary employee and the permitted business process includes a data output process to the external output device in the authentication server, the connection of the external output device is performed when the temporary employee performs the output process. By providing the function of recording the situation and operation record information (log), it is possible to automatically monitor a work history that may be taken out of data. Furthermore, the function of displaying a message on the screen indicating that the processing content is recorded has an effect of psychologically preventing data from being taken out.

  As described above, according to the information external output control method of the present invention, it is possible to prevent unauthorized operations by changing the user's attributes and the business screen used depending on the business. Can perform appropriate business operations.

  In addition, by recording the operation record information (log) when outputting the external data of the temporary staff, it is possible to identify the person who brought out after the fact, and to display illegal messages by displaying a message on the screen. effective.

  Hereinafter, a processing method in the information external output control method of the present invention will be described in detail with reference to the drawings. In this embodiment, the user is classified into regular staff and temporary staff. A thin client terminal is used as the client terminal, regular employees perform personal authentication using IC cards such as employee ID cards and biometric information, and temporary employees perform personal authentication using key mobile, an authentication medium that is lent only during the contract period. .

  FIG. 1 is a diagram showing the overall system configuration for implementing the information external output control method of the present embodiment. The network includes a client terminal 10 and an authentication device 110 used by a user, an authentication system 4 including an authentication server 2 and an authentication database 3 for authenticating the user, business servers 5 and 6 for storing business applications, and an external output device 7 such as a printer. Connect with 1. Here, although a plurality of client terminals and business servers are connected to the network, the description will be given focusing on one client terminal 10.

  FIG. 2 is a diagram illustrating configurations of the client terminal 10 and the authentication device 110. The authentication device 110 includes a key mobile interface 111, an IC card interface 112, and a biometric authentication interface 113. The authentication device 110 acquires authentication medium information through each interface and transmits the information to the client terminal 10. The client terminal 10 includes an input unit 11 that acquires information received from the interface and information acquired from an input device 114 such as a keyboard, a communication unit 14 that transmits and receives information to and from the server via the network 1, and information acquired from the server. Are output to the display 140 or the like, and a control unit 12 that controls information transmission / reception between the units. Since the client terminal 10 used here is assumed to be a thin client terminal without a hard disk, the client terminal 10 does not have a storage unit, and outputs information by connecting an external device to the output unit 13 as necessary. And

  FIG. 3 is a diagram showing the configuration of the authentication system 4. The authentication server 2 controls the input unit 22, the output unit 23, the storage unit 24 such as a hard disk or a memory, the communication unit 25 that transmits / receives information to / from the client terminal 10 and the business servers 5 and 6 through the network 1, and the authentication database 3. A DB control unit 26 that controls the information transmission / reception control and authentication processing of each unit. The authentication database 3 includes an authentication information database 200 for storing IC card information and biometric authentication information for regular employees, and key mobile information for temporary employees, and a user classification information database 300 for storing attributes for each user as user classifications. A user environment information database 400 that stores a user classification and a business server to be accessed and a screen control program in association with each other, and an operation history database 500 that stores an operation history log in association with client terminal identification information and user information. .

  The control unit 21 of the authentication server 2 includes a user authentication function 211 for authenticating a user based on information in the authentication information database 200, and a user environment acquisition function 212 for identifying a user usage classification and connecting the client terminal 10 to a corresponding business server. A business control information transmission function 213 for notifying the business server 5 of a screen control program corresponding to the user usage classification, a database management function 214 for registering / updating information in each database, and an operation history log of a specific classification user And an operation history monitoring function 215 for controlling whether or not external output is possible.

  FIG. 4 is a diagram illustrating the configuration of the business server 5. The business server is a blade type computer or a server type computer such as a metaframe to which the client terminal 10 is remotely connected. Similarly to the authentication server 2, an input unit 52 and an output unit 53, a storage unit 54 such as a hard disk and a memory, a communication unit 55 that transmits and receives information to and from the client terminal 10 and the authentication server 2 through the network 1, and a business database 50 A DB control unit 56 for controlling and a control unit 51 for controlling information transmission / reception control and business processing of each unit are provided. The business database 50 includes a business information database 501 that is information necessary for business processing, a business application program 502, and a screen control program group 503 corresponding to the user usage category. The program control database 600 stores the business application programs 502 and the screen control program group 503 in association with each other. The control unit 51 of the business server 5 includes a client terminal connection function 511 that establishes communication with the client terminal 10 and transmits / receives information necessary for the business, and a screen corresponding to the user usage classification from the authentication server 2. A control information acquisition function 512 for acquiring a control program, a control screen selection function 513 for selecting a screen control program based on the acquired information and transmitting it to a client terminal, a business processing function 514 for executing a business process by a business application program, A database management function 515 for managing the business database 50 is provided. The business server 6 has the same configuration.

  FIG. 5 to FIG. 7 show examples of database data related to the processing of the present invention in the database group. 5A and 5B are diagrams showing the configuration of the authentication information database 200. FIG. FIG. 5A shows an example of a regular staff table, and FIG. 5B shows an example of a temporary staff table. In FIG. 5A, personal information such as a staff number and name is used as a key and stored in association with the user ID and biometric information of the IC card. If the security strength may be slightly low, information such as a password may be used instead of the biological information. Fig. 5 (b) assumes that a large number of temporary employees will be replaced in a short period of time, and stores the key mobile identification information lent instead of personal information as a key in association with encryption information and password in the mobile, and this information is fixed. Keep it. Information such as the expiration date (contract expiration date) and name of the record corresponding to the key mobile ID lent at the time of hiring temporary workers is updated. When returning the key mobile, delete the deadline and name information after migrating the data to the temporary staff history table installed separately (saving the temporary staff's usage history). Note that the database update process assumes a format in which a regular employee who has administrator authority is updated every time a temporary employee is employed by an operation terminal directly connected to the authentication server 2.

  FIG. 6 is a diagram showing a configuration of the user classification information database 300. In the item of the user name, a user name (user personal information) is entered for a regular employee, and a mobile ID is entered for a temporary employee. This information will be updated for changes in regular employees, but temporary employees will rent key mobiles that are adapted to the contracted work, so this information is fixed. It is a database in which user classifications corresponding to each user are linked. Note that, as in the authentication information database 200, the regular employee use classification information and the temporary employee use classification information may be held in separate tables.

  FIG. 7 is a diagram showing the configuration of the user environment information database 400. The business server to which the client terminal 10 is connected, the screen control information, and other restriction items are stored in association with the categories in the user category information database 300. Here, this information is held in the authentication server 2 and the corresponding screen control program designation and other control information are transmitted to the business server 5 to perform processing control on the client terminal 10. A method may be adopted in which the business servers 5 and 6 hold the information and control is performed by transmitting only the user classification code from the authentication server 2.

  FIG. 8 is a diagram showing the configuration of the program control database 600. Information that associates the business application programs 502 with the screen control program group 503 is stored. This information is held on the business server 5.

  FIG. 9 shows the configuration of the operation history database 500.

  Next, the flow of processing in the information external output control method of the present invention will be described with reference to FIG.

When the user is a regular employee, the portable medium is an IC card. The IC card interface 112 of the authentication device 110 of the client terminal 10 acquires IC card information (user personal information and user ID in FIG. 5) from the IC card, and then the biometric authentication interface 113 acquires the user's biometric information from the IC card. To do. When the user is a temporary employee, the portable medium is key mobile, the key mobile interface 111 of the authentication device 110 of the client terminal 10 acquires the encryption information in the key mobile, and then the user from the input device 114 of the client terminal 10 The password is acquired by the password input operation. (Step 1001)
The client terminal 10 transmits the information acquired from the authentication device 110 acquired by the input unit 11 to the authentication server 2 through the network 1 by the communication unit 14 (step 1002). The information transmitted at this time is information in which the interface identification information and the acquired authentication information are associated with each other. The user authentication function 211 of the control unit 21 of the authentication server 2 allows the client terminal interface to be the IC card interface 112. 5A of the authentication information DB 200 is accessed through the DB control unit 26. When the key mobile interface 111 is used, the temporary staff table of FIG. 5B is accessed to determine whether authentication is possible (step). 1003). It is assumed that the interface identification information includes information in the IC card and key mobile. In the case of the regular staff table of FIG. 5A among the information transmitted from the client terminal, whether or not authentication is possible is determined by determining whether or not it matches the user ID and the authentication information, and the temporary staff table of FIG. 5B. In this case, it is determined whether or not it matches the medium information and the authentication information. If the authentication information in the table and the transmitted information are incompatible, the user authentication function 211 transmits an inaccessibility notification to the client terminal 10 by the communication unit 25 (step 1004).

If the user authentication is appropriate in step 1003, the user environment acquisition function 212 accesses the user category information DB 300 through the DB control unit 26, acquires the user category corresponding to the authenticated user, and accesses the user environment information DB 400. The business server name, device restriction information, and screen control information corresponding to the user classification are acquired and associated with the client terminal identification information (user name) and transmitted to the corresponding business server 5 by the business control information transmission function 213. (Step 1005).
Here, it is assumed that the business server to be connected is fixed according to each user category.

  The business server 5 acquires the information by the control information acquisition function 512 of the control unit 51 through the communication unit 55, and the screen from the screen control program 503 by the corresponding screen control information through the DB control unit 56 by the DB control screen selection function 513. The control program is extracted (step 1006), the connection with the client terminal 10 is established by the client terminal connection function 511, the screen control program is started, and the screen information is transmitted to the client terminal 10 (step 1007). The screen information displayed on the display 140 through the output unit 13 of the client terminal 10 has a data input BOX necessary for business, a processing button, etc., and is limited by the screen control program so that only processing according to the user classification can be performed. ing. The subsequent business processing is executed by starting the business application program associated with the program control DB 600 of FIG. 8 by the business processing function 514 of the business server 5 (step 2001).

Next, a process for automatically monitoring a user's work history will be described. Here, in step 1005, the client terminal connection function 511 of the business server 5 sets a connection route for transmitting / receiving information to / from the client terminal 10 via the authentication server 2.
Information transmitted from the client terminal 10 to the business server 5 is acquired by the operation history monitoring function 215 of the authentication server 2, and the operation history is associated with the user information of the regular staff or the mobile ID information of the temporary staff acquired in Step 1003. Store in the database 500 (step 2002). Transmission information from the business server 5 to the client terminal 10 is transmitted via the authentication server 2 (step 2003). This process is repeated until the connection is completed, and a series of operation history logs are acquired and stored in the operation history database 500 of the authentication server 2.
Next, a method for restricting data output to an external medium in the process of automatically monitoring the work history of a user having a specific attribute will be described. In step 1005, the operation history monitoring function 215 monitors whether or not the transmission information to the business server 5 is an external output request in the operation history storage in step 2002, and when there is an external output request from the client terminal 10 (Step 3001) The user environment information DB 400 is accessed using the user category held by the authentication server 2 as a key, and device restriction information corresponding to the user category is obtained (Step 3002). It is determined whether or not the restriction information has an external output prohibition (step 3003). If the restriction information is an external output prohibition, the authentication server 2 does not send an output request to the business server 5 and the client terminal 10 Information indicating permission is transmitted (step 3004).
If the external output restriction is log output, the authentication server 2 sends an external output request to the business server 5 after storing the operation history (step 3005), and the business server 5 outputs the output permission and output information addressed to the external output device 7. It transmits via the authentication server 2. For the external output request, the operation history monitoring function 215 stores the output permission from the business server 5 in the operation history database 500 (step 3006), and transmits an alert message to be displayed on the screen of the client terminal 10 (step 3007). The authentication server 2 transmits the output permission and output information addressed to the external output device 7 to the external output device 7 (step 3008), and the external output device 7 performs external data output (step 3009).

  In the external output monitoring process, the authentication server 2 holds the user information and control information acquired in steps 1003 and 1005 in the user category and the restriction information while the session between the client terminal 10 and the business server 5 continues. The determination process of step 3003 may be performed based on the retained information, omitting the process of 3002.

  FIG. 11 is a screen display example of an external output prohibition message displayed on the screen of the client terminal 10 in the process of step 3004. A message such as “Information output to an external output device is not permitted. Recorded as operation information. Unauthorized information output is prohibited.” Is displayed at the top of the display screen of the display device 140.

  FIG. 12 is a screen display example of an alert message displayed on the screen of the client terminal 10 in the process of step 3007. A message such as “Information output to an external output device is recorded as operation information. Unauthorized information output is prohibited” is displayed at the top of the display screen of the display device 140, and the data of restricted users can be taken out. Prevent it.

It is a figure which shows the whole structure of the system which implements the external output control method of information. It is a figure which shows the structure of the client terminal 10 and the authentication apparatus 110. It is a figure which shows the structure of the authentication system. 2 is a diagram illustrating a configuration of a business server 5. FIG. 3 is a diagram illustrating a configuration of an authentication information database 200. FIG. It is a figure which shows the structure of the user classification information database. It is a figure which shows the structure of the user environment information database. It is a figure which shows the structure of the program control database. The figure which shows the structure of the operation history database. It is a figure which shows the flow of a process in the external output control method of information. It is a figure which shows the example of a screen display of a message (output prohibition). It is a figure which shows the example of a screen display (attention alert) of a message.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 ... Network, 2 ... Authentication server, 3 ... Authentication database, 4 ... Authentication system, 5, 6 ... Business server, 7 ... External output device, 10 ... Client terminal, 100 ... Key mobile, 101 ... IC card, 110 ... Authentication apparatus

Claims (3)

An external output control method of information in a system configured by connecting a plurality of computers via a network,
The first computer transmits authentication information to the second computer via the network, receives screen information from the third computer and displays it on the display means, and sends an external output request for information via the network. Sending to the second computer,
When the second computer receives the authentication information from the first computer, the second computer determines the user classification based on the authentication information and the user classification information stored in the first storage means, and the second computer The screen control information corresponding to the determined user classification information is read with reference to the storage means, the screen control information is transmitted to the third computer via the network, and the network is transmitted from the first computer to the network. When the external output request for the information is received via the device, the output to the outside of the information is controlled based on the user restriction information and the device restriction information stored in the second storage means,
Upon receiving the screen control information from the second computer, the third computer generates screen information based on the screen control information and transmits the screen information to the first computer via the network. An external output control method for information characterized by: The said 2nd computer transmits the information showing an external output prohibition to the said 1st computer via the said network, when the said device restriction information is the information showing an external output prohibition. The external output control method of the information described in 1. When the device restriction information is information representing log output, the second computer stores user operation history information from the first computer in a fourth storage unit, and receives information from the first computer. Transmitting the external output request to the third computer via the network, transmitting information indicating output permission from the third computer and output information to the first computer via the network,
When the third computer receives the external output request from the second computer via the network, the third computer transmits information indicating the output permission and the output information to the second computer. The information external output control method according to claim 1.

Images