JP2008243028A - Terminal to be connected to network - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To smoothly operate a shared terminal and to provide a terminal to be connected to a network for enhancing security by preventing unauthorized intrusion to the terminal. <P>SOLUTION: The terminal 12 connected to the network 22 is provided with a screen saver starting means for monitoring an input part 14 to detect the existence/absence of an input of information to the terminal 12 and starting a screen saver when a non-input period exceeds a first set period, and a screen saver releasing means for releasing the operation of an active screen saver when new information input from the input part 14 during the operation of the screen saver coincides with a password for logging in the terminal 12, and automatically logs off when the elapsed time from the operation release of the screen saver exceeds the set period. <P>COPYRIGHT: (C)2009,JPO&INPIT

Description

  The present invention relates to a terminal connected to a network for smooth operation of a shared terminal using a screen saver.

  Conventionally, in an information processing terminal, a screen saver is activated when nothing is input from a keyboard or the like for a predetermined time so that information displayed on the screen is not easily viewed by a third party. Information security management is performed by requesting a password when the activated screen saver is terminated to return to the original screen (see Patent Document 1). The screen saver is software that makes the screen black or displays a simple animation while the terminal user is not using the terminal.

  By the way, an information processing terminal for which security management using a screen saver is performed may be used as a shared terminal. In such a case, the ID and password given to the user of the shared terminal are usually input from a keyboard or the like, and are often operated so as to be usable after receiving the use authentication (login) of the shared terminal. . In such an operation, when another user wishes to use the shared terminal, the user of the shared terminal cancels (logs off) the use authentication with the server, and then the user wishes to log in. It becomes possible to use a shared terminal.

JP 2006-133595 A

  However, when the user of the shared terminal is away from the user for a long time, a user who wants to use another shared terminal cannot use the shared terminal because the user is logged in. In addition, simply allowing users who wish to use other shared terminals to log in may allow unauthorized access to terminals connected to the network, and in the middle of the work of previous terminal users. If the user can log in, the information that the previous terminal user has worked on may be accessed and the information may be falsified.

  The present invention has been made in consideration of the above-described problems, and provides a terminal connected to a network that enhances security by facilitating the smooth operation of a shared terminal and preventing unauthorized entry into the terminal. For the purpose.

  The terminal connected to the network according to the present invention is connected via the network, and the terminal includes an input unit, a main body unit, and a display unit. The terminal receives an ID and a first password from the input unit. After logging in, the input unit is monitored to detect the presence / absence of information input, and the no-input time timing means for counting the time when the information is not input, and the no-input time exceeds the first set time The screen saver activation means for activating the screen saver, and when the information newly input from the input unit during the operation of the screen saver matches the second password for logging in to the terminal Screen saver canceling means for canceling the screen saver operation, and an elapsed time for measuring the elapsed time since the screen saver operation was canceled Timing means, automatically, comprising a logoff means for logging off, the when the elapsed time exceeds a second set time.

  The screen saver canceling means displays the remaining time of the second set time until logging off on the display unit, and information on the user of the terminal who has logged in by inputting the ID and the first password. Is displayed on the display unit.

  According to the present invention, when the information newly input during the operation of the screen saver matches the second password for logging in to the terminal, the operation of the operating screen saver is canceled and the set time has elapsed. In this case, the terminal is automatically logged off to facilitate the smooth operation of the shared terminal, prevent unauthorized intrusion, and tamper with the information that the user who previously used the terminal has been working on Can be prevented. In addition, after the screen saver is canceled, the remaining time of the set time until logoff is displayed on the display. Furthermore, it is possible to confirm whether or not the terminal can be logged off by displaying the information of the previous terminal user who has been using the ID and the first password on the display unit.

  Embodiments of the present invention will be described below with reference to the drawings. FIG. 1 is an explanatory diagram of an entire network management system 10 using a terminal connected to a network according to an embodiment of the present invention.

  The network management system 10 includes a plurality of terminals 12, 12a, 12b and a server 20, and the terminals 12, 12a, 12b and the server 20 are connected to a network 22 that is an intranet, and the server 20 includes the terminals 12, 12a. 12b and the network 22 are managed. The terminals 12, 12a, and 12b are connected to an input unit 14 such as a keyboard and a mouse for inputting characters and symbols, and a display unit 18 such as a display, respectively. A scanner 50 which is a specific input / output device is connected to the terminal 12 which is a shared terminal, and a shared printer 52 is connected to the network 22.

  FIG. 2 is a diagram illustrating the main part of the network management system 10. The terminal 12 included in the network management system 10 has a main body 16 inside.

  The main body unit 16 is a login determination unit that determines the use authentication of the user who desires to use the terminal 12 by using the ID / password table 36 in the server 20 and the interface 32 to which the scan code output from the input unit 14 is input. 34, a non-input time measuring means 38 for measuring the time of no input of characters or the like at the input unit 14, a screen saver starting means 40 for starting the screen saver according to the time measured by the non-input time measuring means 38, and an operation The screen saver canceling means 42 for canceling the operation of the screen saver, the elapsed time measuring means 44 for measuring the elapsed time from the cancellation of the screen saver operation by the screen saver canceling means 42, and the elapsed time counting means 44 according to the elapsed time Logoff means 46 for automatically logging off, login to the terminal 12, and log Off, and a display control unit 48 for controlling the display such as a screen saver.

  The login determination unit 34 compares the ID and password input from the input unit 14 via the interface 32 by the user of the terminal 12 with the ID and password stored in the ID / password table 36. If the verifications match, the user 12 who has entered the ID and password is authenticated for use, and the use of the terminal 12 is permitted as a regular user thereafter. On the other hand, if the verification does not match, the ID and password are requested to be input from the input unit 14 again. In addition, when the use authentication is performed, the login determination unit 34 stores the matched password together with the matched ID in the internal storage unit 34a as the first password.

  The ID / password table 36 is provided in the server 20 and records an ID and a password for identifying a person who is permitted to use the terminal 12 and a shared password (second password) which is a common password for all IDs. ing. However, the shared password can be recorded in the terminal 12.

  The no-input time counting means 38 monitors the scan code input from the input unit 14 via the interface 32, and the time from when the scan code is input until the next scan code is input (no input time) Time.

  The screen saver activation means 40 outputs an activation signal related to activation of the screen saver to the screen saver release means 42 and the display control means 48 when the non-input time exceeds a preset first set time.

  The screen saver canceling means 42 outputs a signal for displaying a dialog box for requesting input of a password from the input unit 14 to the display control means 48 when characters or the like are input from the input unit 14 during operation of the screen saver. .

  Further, the password input from the input unit 14 and the first password are collated, and if they match, a release signal for canceling the operation of the screen saver is output to the display control unit 48.

  Furthermore, when the password input from the input unit 14 is different from the first password and matches the shared password, a release signal for temporarily canceling the operation of the screen saver is output to the display control unit 48, and A time measurement start signal for starting the time measurement of the elapsed time from the cancellation of the screen saver operation is output to the elapsed time measurement means 44. The elapsed time counting means 44 to which this timing start signal has been input starts counting the elapsed time since the screen saver operation was canceled.

  Furthermore, the screen saver canceling means 42 outputs a signal for displaying the remaining time (remaining time) in which the terminal 12 can be used based on the elapsed time to the display control means 48. This remaining time is a time during which the terminal 12 who has temporarily canceled the screen saver can use the terminal 12, and the elapsed time is subtracted from the second set time set by the logoff means 46 described later. Required as time. By limiting the use time of the temporary releaser as the remaining time, unauthorized intrusion into the server 20 via the terminal 12 can be minimized.

  Furthermore, the screen saver canceling means 42 outputs a signal for displaying the personal information of the authorized user to the display control means 48. This personal information can be obtained by extracting the name, department, contact information, login time, and the like from the personal information database 54 stored in the server 20 based on the ID of the authorized user.

  The logoff means 46 logs off the terminal 12 when the time counted by the elapsed time counting means 44 exceeds a preset second set time.

  The main body 16 of the embodiment of the present invention is basically configured as described above. Next, the operation will be described with reference to the flowchart shown in FIG.

  In the following, a case where a user who wants to use the terminal 12 takes a photograph as image data with the scanner 50 connected to the terminal 12 and performs image processing with software stored in the server 20 will be described as an example.

  A user who wants to use the terminal 12 inputs an ID and a password for logging in to the dialog box as shown in FIG. The login determination unit 34 collates the input ID and password with the ID and password stored in the ID / password table 36 (steps 1 and 2).

  If the verifications match, the user 12 who uses the terminal 12 is authenticated for use. Thereafter, the use of the terminal 12 is permitted as a regular user, and the use of the scanner 50 and the execution of image processing in the server 20 are permitted. It is done. On the other hand, if the verification does not match, the input of ID and password is requested again.

  When the collation matches, the matched password together with the matched ID is stored as the first password in the storage unit 34a inside the login determination unit 34 (step 3).

  Next, the non-input time measuring means 38 measures the non-input time of characters and the like at the input unit 14 when the input of the characters and the like from the input unit 14 is lost due to the absence of a regular user or the like, The measured time is output to the screen saver activation means 40 (step 4).

  The screen saver activation means 40 compares the time measurement time with the first set time until the time measurement time exceeds a first preset time, and when the time measurement time exceeds the first set time, the screen saver release means An activation signal relating to the activation of the screen saver is output to 42 and the display control means 48 (step 5).

  The display control unit 48 activates the program in the display control unit 48 based on the activation signal output from the screen saver activation unit 40, and a screen saver as shown in FIG. 5 is displayed on the display unit 18 (step 6). .

  After the screen saver activation signal is input from the screen saver activation unit 40, the screen saver release unit 42 starts monitoring whether or not characters or the like are input from the input unit 14 (step 7). Next, when the screen saver canceling means 42 detects the input of characters or the like from the input unit 14 during the operation of the screen saver, it outputs a detection signal to the display control means 48 and the program in the display control means 48 is activated. A dialog box for requesting input of a password from the input unit 14 as shown in FIG. 6 is displayed on the display unit 18 (step 8). FIG. 6 shows a state in which the password input is requested in a state where the terminal user whose ID is “ABC12345” is used.

  Next, the screen saver canceling means 42 collates the password input from the input unit 14 with the first password or the shared password (steps 9 and 11).

  When the password input from the input unit 14 matches the first password, a cancel signal for canceling the screen saver is output to the display control means 48, and the screen saver displayed on the display unit 18 is canceled (step S1). 10). After canceling the screen saver, the authorized user can continue to use the scanner 50 and perform image processing on the server 20 via the terminal 12.

  On the other hand, when the password input from the input unit 14 matches the shared password, a cancel signal for canceling the screen saver is output to the display control means 48, and the operation of the screen saver displayed on the display unit 18 is temporarily canceled. (Step 12).

  When the screen saver canceling means 42 temporarily cancels the screen saver operation, the screen saver canceling means 42 outputs a timing start signal to the elapsed time counting means 44, and the elapsed time counting means 44 starts from the temporary cancellation of the screen saver operation. The elapsed time is counted (step 13).

  When the operation of the screen saver is temporarily canceled, a window in which personal information of the authorized user and the remaining time in which the terminal 12 can be used is displayed as shown in FIG. 7 is displayed (step 14). In FIG. 7, the name of the authorized user, the department to which the authorized user belongs, and the extension number of the department to which the contact belongs are displayed from the database unit 54 using the ID of the authorized user as a search key.

  The logoff means 46 compares the time measured with the second set time until the time measured by the elapsed time counter 44 exceeds the preset second set time (step 15). If the time is exceeded, log off from the terminal 12 (step 16).

  As described above, the terminal 12 connected to the network according to the embodiment of the present invention has the input unit 14, the main body unit 16, and the display unit 18, and the ID and the first password are input by the input unit 14. After logging in, the input unit 14 is monitored to detect the presence / absence of information input, and the no-input time of the information is measured by the no-input time timer 38, and the no-input time exceeds the first set time. In this case, the screen saver is activated by the screen saver activation means 40. When the information newly input from the input unit during the operation of the screen saver matches the shared password (second password) for logging in to the terminal 12, the operation of the screen saver that is operating is canceled. In addition to being canceled by the means 42, the elapsed time from the cancellation of the operation of the screen saver is counted by the elapsed time counting means 44, and when the elapsed time exceeds the second set time, the terminal 12 is automatically logged off by the logoff means 46 To do.

  In the terminal 12, when the information newly input during the operation of the screen saver matches the second password, the operation of the operating screen saver is temporarily canceled by the screen saver release means 42, and the elapsed time after the temporary release Automatically logs off the terminal 12 when the second set time elapses, thereby facilitating the smooth operation of the shared terminal, preventing unauthorized intrusion, and information such as information the authorized user was working on Tampering can be minimized.

  Further, the screen saver canceling means 42 displays the remaining time of the second set time until the logoff and the personal information of the authorized user on the display unit 18. Therefore, after the window shown in FIG. 7 is displayed, even if the regular user has been away from the desk for a long time, the temporary release person can use the regular use by contacting the contact displayed in the window. The user can be inquired about the usage status of the terminal 12, availability of logoff, and the like. Then, by shutting down the terminal 12 after inquiring, etc., when a regular user has been performing calculation processing on the terminal 12 for a long time, the calculation processing up to that point is wasted without shutting down without confirmation. Can be prevented.

  In addition, by displaying the message of the authorized user in the dialog box shown in FIG. 6 and the window shown in FIG. 7, it is possible to prevent the temporary releaser from shutting down the terminal 12 against the intention of the authorized user. Can do.

  Also, in step 8, the terminal user who wishes to use the terminal is allowed to cancel the temporary password by entering the shared password. Therefore, it is possible to identify the person who has temporarily canceled, and as a result, security can be improved.

  Further, as the ID / password table 36, user management information managed in a directory service executed on the server 20 may be used. The database unit 54 may also use the user management information of the directory service.

  In addition, the present invention is not limited to the above-described embodiment, and it is needless to say that various configurations can be adopted without departing from the gist of the present invention.

It is explanatory drawing of the whole network management system using the terminal connected to the network which concerns on embodiment of this invention. It is a figure explaining the principal part of a network management system. It is a flowchart for demonstrating operation | movement of a network management system. It is a figure which shows the example of a display of the dialog box for logging in. It is a figure which shows the example of a display of a screen saver. It is a figure which shows the example of a display of the dialog box for logging in during the action | operation of a screen saver. It is a figure which shows the example of a display of the window after temporary cancellation | release.

Explanation of symbols

DESCRIPTION OF SYMBOLS 10 ... Network management system 12, 12a, 12b ... Terminal 14 ... Input part 16 ... Main-body part 18 ... Display part 20 ... Server 22 ... Network 32 ... Interface 34 ... Login determination means 34a ... Memory | storage part 36 ... ID / password table 38 ... Non-input time measuring means 40 ... Screen saver starting means 42 ... Screen saver releasing means 44 ... Elapsed time measuring means 46 ... Log off means 48 ... Display control means 50 ... Scanner 52 ... Printer 54 ... Database section

Claims (3)

In a terminal connected through a network and having an input unit, a main unit, and a display unit,
The terminal
No-input-time measuring means for monitoring the input unit to detect the presence / absence of information input after the ID and the first password are input by the input unit and logging in, and counting the time when the information is not input. ,
Screen saver activation means for activating a screen saver when the non-input time exceeds a first set time;
Screen saver canceling means for canceling the operation of the screen saver that is operating when the information newly input from the input unit during the operation of the screen saver matches the second password for logging in to the terminal;
An elapsed time measuring means for measuring an elapsed time from the cancellation of the operation of the screen saver;
Logoff means for automatically logging off when the elapsed time exceeds a second set time;
A terminal connected to the network. The terminal connected to the network according to claim 1,
The screen saver canceling means is:
A terminal connected to the network, characterized in that the remaining time of the second set time until logoff is displayed on the display unit. In the terminal connected to the network according to claim 1 or 2,
The screen saver canceling means is:
A terminal connected to a network, characterized in that information on a user of the terminal who has logged in by inputting the ID and the first password is displayed on the display unit.

Images