JP2010128884A - Network management system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To improve security remarkably, without impairing network advantages. <P>SOLUTION: A waveguide sheet 6 functioning as a radio antenna of a LAN is arranged at many tables 1, 3 and 4. The waveguide sheet 6 is connected to a server 12 via a connector 8 and the repeater 11. A floor used by many waveguide sheets 6 are divided into a manager area 15, a general area 16 and a business negotiation area 17, and the respective areas 15, 16 and 17, with each having the hardness or ease of access to a network. The general area 16 and the business negotiation area 17 cannot be accessed to specific information of the network, regardless of the existence/absence of the authentication of a personal computer P. High security which is not conventionally available can be secured, because a person must go to a seat in the manager area and use an authorized personal computer, in order to access the specific information. <P>COPYRIGHT: (C)2010,JPO&INPIT

Description

  The present invention relates to a network management system using a waveguide sheet that functions as an antenna of a wireless LAN system.

In recent years, network systems using personal computers have become established in offices, but network systems also have a risk of security leaks. Therefore, in order to maintain confidentiality, organizations such as corporations and government agencies restrict access to the network for each user or manage only specific people who are permitted to use a specific medium. Yes. In order to restrict or permit access such as browsing and editing, electronic key means such as authentication by an ID card and input of a password are generally used (for example, Patent Document 1).
JP 2002-259225 A

  Conventionally, various security measures have been taken as network management and confidential information management, but these are generally performed in units of personal computers and media. Therefore, it can be said that if the user is proficient in unauthorized operation, the network can be illegally accessed from his / her desk, or the network can be illegally accessed from a personal computer at home via a public line. In addition, media (files) where confidential information is stored are strictly managed, such as by placing them in a safe, but those displayed on the screen of a personal computer can be viewed by those who do not have viewing authority. Or may be lost and misused by a third party.

  Conventional security measures give a specific PC or a specific person the right to use (or limit use), and thus effectively prevent unauthorized use, unauthorized access, and negligence due to human intent. It can be said that it was not possible. This can be said to be a problem inherent in the network of “accessible from anywhere”.

  The present invention has been made in view of such a current situation, and is intended to provide an epoch-making system capable of remarkably improving security without losing the advantages of the network.

  The general evaluation is that wireless LANs are inferior in security due to the interception of radio waves, but this is because radio waves leak outside or outdoors. Is virtually impossible. Therefore, Japanese Patent Laid-Open No. 2007-082178 discloses a waveguide sheet (signal transmission device) that can communicate with a personal computer with weak radio waves, and by using this waveguide sheet, security is achieved. Wireless LAN system can be constructed. The inventors of the present application have paid attention to this waveguide sheet, and have completed the present invention by utilizing this feature.

  The invention of the present application has a multi-layered spread. First, the invention of claim 1 includes a waveguide sheet that functions as a wireless antenna for an electronic apparatus with a wireless communication function represented by a wireless personal computer, and the electronic apparatus comprises: Use management means capable of managing the use of the waveguide sheet, wherein the use management of the electronic appliance by the use management means is performed by a plurality of waveguide sheets, one waveguide sheet, or one guide. This is done in units of a wave sheet.

  According to a second aspect of the present invention, in the first aspect, the use management means is a server, and the server is managed so that only an electronic device to which a use authority is given in advance can be used in a specific area. ing.

  According to a third aspect of the present invention, in the first aspect, the use managing means is a server, and the server manages the specific information of the network so that it can be accessed only from a specific area. According to a fourth aspect of the present invention, in the first aspect of the present invention, the floor having a plurality of waveguide sheets is divided into a plurality of areas having different degrees of restriction on the use of the electronic apparatus.

  Invention of Claim 5 in any one of Claims 1-4 WHEREIN: Management of the said electronic appliance prohibits use of all, prohibition of using a specific file, prohibition of access to a server, accumulation | storage in a server It is characterized by any one or more of prohibiting access to the specified information area and prohibiting access to other devices or databases via the server.

  In the invention of claim 6, in any of claims 1 to 5, when an electronic device that is not authorized to be used in a specific area is to be used, a warning is issued to the electronic device in text or sound or both. It has become.

  The present invention limits the areas where electronic devices such as personal computers can be used and accessed, such as “can only be used here” and “can only be accessed from here”. Such area management (or zoning) Management) can eliminate fraudulent acts with a blind spot in the network, "accessible from anywhere", and ensure high security. Specifically, for example, an illegal act such as accessing and browsing important information (file on the network) from his / her desk can be prevented accurately.

  In other words, in order to access specific information, you must go to a seat in a specific area where you have been granted authority and use an authorized computer. This is highly psychologically intimidating and is not usually done. For this reason, unprecedented high security can be secured.

  The wired LAN and the conventional wireless LAN are managed in units of personal computers, and it is not possible to limit the places where the personal computers are used or accessible, but in the present invention, a stationary waveguide sheet is used. This makes area management possible.

  How to manage the area as a unit can be developed in various ways as described in claims 2-5. As can be understood from this description, it is possible not only to manage files but also to manage the use of devices such as personal computers. Of course, other management modes can be adopted according to the user's request. In addition, the present invention does not exclude a conventional measure that manages a personal computer or the like as a unit, and can secure higher security by using it together with a conventional measure.

  Next, an embodiment of the present invention will be described with reference to the drawings.

(1) Configuration of First Embodiment FIG. 1 is a plan view (image diagram) of a floor (office) embodying the present invention, and a large number of tables (desks) are arranged on one floor. That is, first, four table units 2 are arranged in parallel, with one table unit 2 having two facing large tables 1 used by people facing each other.

  Further, on one wall of the floor, a single-sided table 3 that a person uses only from one side is arranged side by side with the table unit 2, and further, three units are arranged in parallel with the row of table units 2. A face-to-face small table 4 is arranged.

  In the face-to-face large table 1, two top plates 5 are arranged with a wiring space in between, and on the two top plates 5, waveguide sheets 6 having substantially the same left and right length as the top plate 5 are arranged. ing. The waveguide sheet 6 is narrower and narrower than the top plate 5, and is arranged in a state biased to the wiring space.

  A waveguide sheet 6 is also disposed on the top plate 5 of the single-sided table 3 so as to be close to the back surface thereof. On the other hand, the face-to-face small table 4 has one top plate 5, and a waveguide sheet 6 is disposed in the middle.

  FIG. 2 is a partial side cross-section of the facing large table 1 cut at a location in the wiring space. As shown in FIG. 2, the end faces of the two waveguide sheets 6 are arranged so as to cross the wiring space. The intermediate waveguide 7 is in contact, and the connector 8 is bonded to the lower surface of the intermediate waveguide 7. A cable 9 is connected to the connector 8, and the cable 9 is connected to a repeater (access point device: frequency converter) 11 mounted on the wiring duct 10.

  The waveguide sheet 6 has a structure in which a grid-like metal foil is embedded in a resin layer so that radio waves pass through the waveguide sheet 6. The lower surface is shielded by the metal foil and the upper surface is a communication surface. The intermediate waveguide 7 uses the same material as the waveguide sheet 6, and the lower surface is a communication surface. In the single-sided small table 3 and the face-to-face small table 4, the connector 8 is abutted (adhered) to the upper surface of the waveguide sheet 6. A connector 8 used in the single-sided small table 3 and the facing-side small table 4 is also connected to the relay machine 11. In FIG. 1, a plurality of connectors 8 are connected to one repeater 11, but one connector 8 and one repeater 11 can be used as a set.

  Each repeater 11 is connected to the server 12 by a LAN cable. An important file box 13 is stored in a storage room or storage room indoors or outdoors. The contents stored in the important file box 13 may be an electronic medium such as a CD or a memory, or may be a paper document. An identification tag such as an IC chip is fixed to the bottom surface of the important file box 13 so that information can be read from the waveguide sheet 6. In addition, a storage / removal management device 14 is provided in the storage or the storage room, and it is confirmed whether the user is an authorized user by a confirmation means such as an ID card, a password, and fingerprint authentication. Also, the lending / return history is recorded in the server 12.

(2). Management Mode In this embodiment, a large number of groups of tables are divided into three areas according to the ease of access to information managed by the network. That is, the two table units 2 are the manager area 16, the two table units 2 and the two single-sided tables 3 near the wall are the general area 17, and the group of the face-to-face small tables 4 is the negotiation area 18. The general area 17 and the negotiation area 18 are partitioned by a partition.

  In the administrator area 16, access and browsing to the inside of the network is basically a free pass for the personal computer P having permission authority, and in the general area 17, the personal computer P having permission authority can be used. Access to information is restricted or prohibited. Furthermore, in the negotiation area 18, there is no restriction on the use of the personal computer P, but access and browsing to the in-house network are greatly restricted or prohibited, and only access to the public line can be freely performed.

  In this embodiment, area management is performed in units of one waveguide sheet 6 or one repeater 11, and what use restrictions are attached to which waveguide sheet 6, and each personal computer. The contents of authentication given to P are stored.

In the administrator area 16, access to the network is in principle free, but the PCs that can be used are limited, and if the PC P cannot be authenticated, the file will not be opened and another authentication such as an ID card will be used. It is also possible to set so that all files are not opened unless the means is placed on the waveguide sheet 6 and the double authentication is passed. It is preferable to issue a warning if it is determined that the use is unauthorized. Since the manager's personal computer P often stores important information, it is also one idea to set it so that it cannot be used in the general area 17 or the negotiation area 18 (therefore, the personal computer P for the manager is physically (It may be limited to the desktop type to make it difficult to move easily.)
As specific examples of warnings, a message “This computer cannot be used here” is displayed on the screen of the personal computer, a lamp installed in an appropriate place such as the table 1 is lit, or the table 1 is provided. It is conceivable to display sound with a speaker. It is also possible to configure the surveillance camera to operate when the personal computer P starts up in the manager area regardless of whether or not it is illegally used.

  Setting the important file box 13 so that it can be used only in the manager area 16 is useful in terms of security measures. As a specific measure, the waveguide sheet 6 in the manager area 16 and the IC tag information in the important file box 13 are managed as a pair of information, and the medium is used on a personal computer only when two pieces of information are collected ( Opening, reading, editing, etc.). Of course, the usage history is recorded in the memory of the server 12.

  Although it does not dare to say, even if it is used in the administrator area 16, it is possible to make the condition of authentication such as a password for specific information in the network. When browsing specific information, the same contents can be displayed on the screens of other managers to confirm the fact.

(3). Others In the above embodiment, a large number of waveguide sheets are set and managed in three areas. However, it is also possible to manage by dividing into two areas or four or more areas. Further, the area management does not need to be fixed, and the management state can be changed as necessary. That is, taking FIG. 1 as an example, it is possible to change only one table unit 2 as an administrator area or change all table units 2 into general areas according to time, time, season, etc. is there. Such a change can be easily performed only by changing the setting of the server 12, and this is one of the advantages of the present invention.

  It is also possible to divide one waveguide sheet into a plurality of areas and manage the usable state for each area. In other words, it is possible to know where the personal computer is used in the waveguide sheet by calculating the communication distance from the connector, and it is possible to manage a part of one waveguide sheet as a unit. It becomes. This is also one of the features of the present invention.

  In addition, FIG. 1 shows a state in which area management is performed on one floor, and it can be said that the present invention demonstrates its true value with such a management system, but it is of course possible to perform management for a plurality of rooms. It is. Also in this case, there is an advantage in that it is possible to centrally manage accessibility in a plurality of rooms.

It is a top view of the floor which materialized this invention. It is a partial sectional side view of the facing type large table currently displayed in FIG. It is a partial front view of the single-sided table and the face-to-face small table displayed in FIG.

Explanation of symbols

P A personal computer which is a typical example of electronic equipment 1 Face-to-face large table 2 Table unit 3 Single-sided table 4 Face-to-face small table 5 Top plate 6 Waveguide sheet 8 Connector 11 Relay machine (access point)
12 server 13 important file 15 administrator area 16 general area 17 negotiation area

Claims (6)

A waveguide sheet that functions as a wireless antenna for an electronic instrument with a wireless communication function represented by a wireless personal computer, and a use management means that can manage the use of the waveguide sheet by the electronic instrument, The use management of the electronic appliance by the use management means is performed in units of a plurality of waveguide sheets, one waveguide sheet or one waveguide sheet.
Network management system. The use management means is a server, and is managed by the server so that only electronic appliances for which use authority is granted in advance in a specific area can be used.
The network management system according to claim 1. The use management means is a server, and is managed by the server so that network specific information can be accessed only from a specific area.
The network management system according to claim 1. A floor having a plurality of waveguide sheets is divided into a plurality of areas with different degrees of use restriction of the electronic apparatus,
The network management system according to claim 1. Management of the electronic appliances is prohibited to use at all, prohibiting the use of a specific file, prohibiting access to a server, prohibiting access to a specific information area stored in the server, other devices via the server Or any one or more of prohibiting access to the database,
The network management system according to claim 1. When an electronic device that is not authorized for use in a specific area is to be used, a warning is issued to the electronic device in text and / or sound.
The network management system according to any one of claims 1 to 5.

Images