JP2015069523A - Authentication processing system and authentication processing method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To enhance user's convenience and also inhibit the user from performing unauthorized acts.SOLUTION: An authentication processing system comprises an authentication unit which, when a user requests to be authenticated by a first authentication device that authorizes a user to pass a boundary of a facility, authorizes the user to pass the boundary if the user is registered with user registration information, and registers a position of the user as user position information. Further, the system comprises a verification unit which, when the user requests to be authenticated by a second authentication device that authorizes the user to operate an apparatus in the facility, performs first determination of whether the user is registered with the user registration information, second determination of whether a position of the user corresponds to the user position information, third determination of whether the user can execute operation of the apparatus, and forth determination of whether the user is scheduled to execute operation of the apparatus, and authorizes the user to operate the apparatus when determination results of the first to forth determination are affirmative.

Description

  Embodiments described herein relate generally to an authentication processing system and an authentication processing method.

  In general, in an important social infrastructure facility such as a nuclear power plant, an entry / exit person is authenticated by an entry / exit management system so that an unauthorized person does not enter the facility. In such a facility, user authentication is performed by the plant monitoring system so that an unauthorized person cannot operate the equipment in the facility.

  In addition, in nuclear power plants, the site of the plant is divided into multiple areas because of the need for advanced security measures. Authentication is performed by the entrance / exit management system.

JP 2001-305226 A

  As a means for user authentication in the plant monitoring system, a combination of a user ID and a password is often employed, but there is a risk of unauthorized use (spoofing) due to inadequate user password management. In addition, when there are a plurality of plant monitoring systems in one plant, user authentication is required for each system, which not only impairs user convenience but also increases system maintenance costs. . Furthermore, in a nuclear power plant in which authentication of persons entering and leaving between areas is performed, the number of authentications imposed on the user is further increased, and user convenience is further impaired.

  Although it is possible to unify the user authentication mechanisms of a plurality of plant monitoring systems, the unification (impersonation) risk may increase due to the unification. Also, when a user authenticated by the system tries to leak internal information maliciously, it is difficult to prevent the act.

  Then, this invention makes it a subject to provide the authentication processing system and authentication processing method which can suppress a user's fraud while improving a user's convenience.

  According to one embodiment, the authentication processing system is configured such that when a user requests authentication by a first authentication device for permitting or denying passage of a facility boundary, the user is registered in the user registration information. And an authentication unit that permits passage of the boundary when the user is registered in the user registration information and registers the position of the user as user position information. Furthermore, the system determines whether or not the user is registered in the user registration information when the user requests authentication by a second authentication device for permitting or denying operation of the equipment in the facility. A first determination for determining whether or not the user's position corresponds to the user position information, and whether or not the user can operate the device. A third determination that is determined based on operable information indicating an operation that can be performed by the user, and whether or not the user is scheduled to perform an operation on the device are included in the operation schedule information that indicates an operation scheduled by each user. A verification unit that performs a fourth determination based on the determination, and permits the operation of the device when all of the first, second, third, and fourth determinations indicate a positive determination result.

  ADVANTAGE OF THE INVENTION According to this invention, it becomes possible to suppress a user's fraudulent act, improving a user's convenience.

It is the schematic which shows the structure of the authentication processing system of 1st Embodiment. It is the schematic which shows the example of the area in the facility of 1st Embodiment. It is a flowchart for demonstrating operation | movement of the collation part of 1st Embodiment. It is the schematic which shows the structure of the authentication processing system of 2nd Embodiment. It is the schematic which shows the structure of the authentication processing system of 3rd Embodiment.

  Embodiments of the present invention will be described below with reference to the drawings.

(First embodiment)
FIG. 1 is a schematic diagram illustrating a configuration of an authentication processing system according to the first embodiment. The facility provided with the authentication processing system of FIG. 1 is, for example, a nuclear power plant.

  The authentication processing system shown in FIG. 1 includes an entrance / exit management system 1 that manages entrance / exit persons and a plant monitoring system 2 that monitors the plant. Hereinafter, the operation of the authentication processing system of FIG. 1 will be described by taking the behavior of an arbitrary user A who uses the present system as an example.

  In this embodiment, the site of the facility is divided into a plurality of areas. The facility boundary 3 indicates a boundary between the inside and the outside of the facility and a boundary between areas in the facility. When the user A passes through a certain facility boundary 3, the user A requests authentication by the first authentication device 4 installed at the gate of the facility boundary 3. In this case, information from the first authentication device 4 is transmitted to the entrance / exit management system 1, and the user A is permitted or denied to pass the facility boundary 3.

  The facility of this embodiment has a central control room 5 that supervises control of the plant, and a site 6 where workers in the plant work. When the user A operates a certain device in the facility, the user A requests authentication by the second authentication device 7 for authentication processing of the device. In this case, information from the second authentication device 7 is transmitted to the plant monitoring system 2, and the user A is permitted or denied to operate the device.

  Examples of the first and second authentication devices 4 and 7 include a card reader, a password input device, and a biometric authentication device. Although the authentication processing system of FIG. 1 includes only one plant monitoring system 2, it may include a plurality of plant monitoring systems 2.

  The entrance / exit management system 1 includes an authentication unit 11 and manages user registration information 21 and user location information 22. Further, the plant monitoring system 2 includes a collation unit 12 and a notification unit 13 and manages the operable information 23 and the operation schedule information 24.

  The user registration information 21 is information for registering users who can pass through the facility boundary 3. Examples of the user registration information 21 include a user ID, a password, an authentication validity period, user personal information (name, date of birth, biometric data, address, organization name). The user registration information 21 is, for example, “User A can pass the first facility boundary 3 but cannot pass the second facility boundary 3” “User A can enter the first area but enter the second area It may be managed for each facility boundary 3 or for each area whether each user can pass through the facility boundary 3 or not.

  The user position information 22 is information indicating the position of each user. The user position information 22 of this embodiment is registered when each user passes the facility boundary 3. Examples of the user position information 22 include an area where the user has entered, an area where the user has left, the position of the facility boundary 3 where the user has passed, and the position of the first authentication device 3 used by the user. The user position information 22 of the present embodiment includes current position information of each user and past entry / exit information of each user.

  The operable information 23 is information indicating operations that can be performed by each user (operations having execution authority). Examples of the operable information 23 include the name of a device having an operation authority and the name of a work having an execution authority. The operable information 23 is, for example, “User A can operate device B from April 1, 2013 to September 30, 2013” “User A can perform operation C from 10 am to 6 pm” , May include a time limit of operations that can be performed.

  The operation schedule information 24 is information indicating an operation scheduled by each user (operation with an execution plan). Examples of the operation schedule information 24 include the name and operation period of a device scheduled to be operated, the name and execution period of work scheduled to be performed, and the like.

  Next, the operations of the authentication unit 11, the verification unit 12, and the notification unit 13 will be described by taking user A's behavior as an example.

  When the user A passes through the facility boundary 3, the user A requests authentication by the first authentication device 4 at the gate of the facility boundary 3. In this case, information from the first authentication device 4 is transmitted to the entry / exit management system 1, and the authentication unit 11 executes an authentication process based on this information.

  First, the authentication unit 11 determines whether or not the user A is registered in the user registration information 21 as a person who can pass through the facility boundary 3. When the user A is registered in the user registration information 21, the authentication unit 11 permits the user A to pass the facility boundary 3 and transmits the passage permission information to the first authentication device 4. As a result, the user A is allowed to pass the facility boundary 3. Next, the authentication unit 11 registers the position of the user A permitted to pass as the user position information 22.

  On the other hand, when the user A is not registered in the user registration information 21, the authentication unit 11 rejects the user A from passing through the facility boundary 3 and transmits the passage refusal information to the first authentication device 4. To do. As a result, the user A is refused to pass the facility boundary 3.

  The above processing by the authentication unit 11 is performed every time the user A passes the facility boundary 3.

  Further, when the user A operates the equipment in the facility, the user A requests authentication by the second authentication device 7 for the equipment. In this case, information from the second authentication device 7 is transmitted to the plant monitoring system 2, and the verification unit 12 executes an authentication process based on this information.

  First, the collation unit 12 performs a first determination for determining whether or not the user A is registered in the user registration information 21. For example, when the user ID specified by the information from the second authentication device 7 matches the user ID registered in the user registration information 21, the user A is registered in the user registration information 21. To be judged.

  Next, the collation unit 12 performs a second determination for determining whether or not the position of the user A corresponds to the user position information 22. For example, when the current area of the user A specified by the information from the second authentication device 7 matches the current area of the user A registered in the user registration information 22, the position of the user A is It is determined that it corresponds to the user position information 22.

  Next, the collation unit 12 performs a third determination for determining whether the user A can perform the operation of the device based on the operable information 23. For example, when it is confirmed from the operable information 23 that the user A has the authority to perform work using the device, it is determined that the user A can operate the device.

  Next, the collation unit 12 makes a fourth determination based on the operation schedule information 24 whether or not the user A is scheduled to perform the operation of the device. For example, when it is confirmed from the operation schedule information 24 that the user A has an operation plan using the device, it is determined that the user A is planning to operate the device. At this time, it is also determined whether or not the time at the time of determination is within the scheduled execution period of this work.

  When the first, second, third, and fourth determinations all indicate a positive determination result, the collation unit 12 permits the user A to operate the device, and displays the operation permission information. Transmit to the second authentication device 7. As a result, the user A is permitted to operate the device.

  On the other hand, when any of the first, second, third, and fourth determinations indicates a negative determination result, the collation unit 12 rejects the operation of the device by the user A and rejects the operation. Is sent to the second authentication device 7. As a result, the user A is refused to operate the device.

  In addition, when any of the first, second, third, and fourth determinations indicates a negative determination result, the notification unit 13 notifies the administrator terminal 8 of information related to the user A and the device. In this case, the administrator recognizes that an unauthorized operation request for the device has been made, goes to the location of the device, pays attention to the monitoring camera at the location of the device, and locks the gate at the facility boundary 3 Can be taken.

  The above processing by the collation unit 12 and the notification unit 13 is performed every time the user A makes an operation request for a device that requires authentication. Note that the first to fourth determinations may be performed in any order.

  FIG. 2 is a schematic diagram illustrating an example of an area in the facility according to the first embodiment.

  The facility of the present embodiment is, for example, a nuclear power plant, and includes a peripheral protection area 31, a protection area 32, a radiation management area 33, a central control room area 34, and other security areas 35.

  The peripheral protection area 31 is an area in the fence surrounding the turbine building and the reactor building on the site of the nuclear power plant. The protection area 32 is an area in a turbine building or a reactor building. The radiation management area 33 is an area where the radiation dose is high, and is further divided in stages. The radiation management area 33 in FIG. 2 is divided into an A area 33a, a B area 33b, a C area 33c, and a D area 33d in stages. The central control room area 34 is an area where the central control room 5 is provided.

  Generally, in a nuclear power plant, security measures corresponding to the area in the facility are required. For example, the C area 33c and the D area 33d in the radiation management area 33 require higher entry / exit management and equipment operation management than the A area 33a and B area 33b in the radiation management area 33. Further, the central control room area 34 is required to have higher entry / exit management and equipment operation management than the protection area 32.

  For this reason, in the present embodiment, the first authentication device 4 is installed not only at the boundary between the inside and outside of the facility but also at the boundary between areas in the facility. Therefore, the user A is required to be authenticated by the first authentication device 4 not only when entering or leaving the facility but also when moving between areas within the facility. Therefore, according to the present embodiment, it is possible to take security measures according to the area in the facility. In the former case and the latter case, the authentication process by the authentication unit 11 is an example of the first and second authentication processes, respectively.

  Further, the collation unit 12 of the present embodiment determines whether or not the area where the user A is located corresponds to the area indicated by the user position information 22 in the second determination. Therefore, when the user A enters the area where the facility boundary 3 is illegally passed, the operation is rejected by the second determination when the user A operates the device in the area. . Therefore, according to this embodiment, the security measures according to the area in the facility can be further enhanced.

  In addition, when registering the operable information 23 and the operation schedule information 24 of the present embodiment, the operation authority and the operation schedule of the devices in the area where high management is required (for example, the central control room area 34) The operation conditions may be set stricter, such as by reducing the number of authorized persons or shortening the scheduled operation period compared to the operation authority and operation schedule of the device. As described above, in the present embodiment, the operation condition of the device can be set according to the area in the facility.

  FIG. 3 is a flowchart for explaining the operation of the matching unit 12 of the first embodiment.

  When the user A requests authentication by the second authentication device 7 for a certain device in the facility, information regarding the user A is transmitted from the second authentication device 7 to the verification unit 12.

  First, the collation part 12 judges whether the user A is registered into the user registration information 21 as 1st judgment (step S1). Next, the collation unit 12 determines whether or not the position of the user A corresponds to the user position information 22 as a second determination (step S2).

  Next, as a third determination, the collation unit 12 determines whether or not the user A can perform the operation of the device based on the operable information 23 (step S3). Next, the collation unit 12 determines, as a fourth determination, whether or not the user A is scheduled to perform the operation of the device based on the operation schedule information 24 (step S4).

  Next, the collation part 12 permits the user A to operate the said apparatus, when all the 1st-4th judgment shows a positive judgment result (step S5). On the other hand, when any of the first to fourth determinations indicates a negative determination result, the collation unit 12 rejects the user A operating the device (step S6).

  As described above, the collation unit 12 of this embodiment uses the same user registration information 21 as the authentication unit 11 as authentication information. Therefore, according to this embodiment, it becomes possible to unify the authentication information of the plant monitoring system 2 with the authentication information of the entrance / exit management system 1 and improve user convenience. This is effective, for example, when the authentication processing system according to the present embodiment includes a plurality of plant monitoring systems 2. The authentication information of the plurality of plant monitoring systems 2 is unified with the authentication information of the entrance / exit management system 1. Can do.

  In addition, when the collation unit 12 of the present embodiment determines whether or not to allow the user A to operate the equipment in the facility, the first determination as to whether or not the user A is registered in the user registration information 21. In addition, the second determination as to whether or not the position of the user A corresponds to the user position information 22, the third determination as to whether or not the user A can perform the operation of the device, and the user A A fourth determination is made as to whether or not the operation of the device is scheduled to be performed. Therefore, according to the present embodiment, it is possible to suppress user fraud by the second, third, and fourth determinations while improving user convenience by unifying authentication information.

  For example, if the user A enters an area that has illegally passed through the facility boundary 3, when the user A operates the device in the area, the operation is rejected by the second determination. Therefore, according to the present embodiment, unauthorized passage of the facility boundary 3 can be suppressed.

  Further, even if user B impersonating user A tries to operate the device illegally, the operation of the device for which user A has no operation authority or operation schedule is rejected by the third and fourth determinations. Therefore, according to the present embodiment, unauthorized use of the device due to impersonation can be suppressed.

  Further, even if the user A registered in the user registration information 21 tries to operate the device with malicious intent, the operation of the device for which the user A has no operation authority or operation schedule is rejected by the third and fourth determinations. Will be. Therefore, according to this embodiment, the opportunity of the fraudulent act by a malicious user can be reduced.

  The operable information 23 and the operation schedule information 24 according to the present embodiment can be edited by an operation from the administrator terminal 8, but may be edited by other methods.

  The authentication processing system of this embodiment is suitable for, for example, a nuclear power plant that requires advanced security measures. In a nuclear power plant, authentication is also imposed on a user who moves between areas in a facility. However, according to the present embodiment, it is possible to improve the convenience of such a user by unifying authentication information. . In addition, in nuclear power plants, security measures are required according to the area in the facility. However, according to the present invention, illegal intrusion into each area or unauthorized intrusion into each area is made according to the second judgment. It becomes possible to suppress fraud by the user.

  As described above, according to the present embodiment, it is possible to perform an authentication process capable of suppressing user fraud while improving user convenience.

(Second Embodiment)
FIG. 4 is a schematic diagram illustrating a configuration of an authentication processing system according to the second embodiment. 4 that are the same as those in FIG. 1 are given the same reference numerals, and redundant descriptions are omitted.

  The plant monitoring system 2 of the present embodiment includes a collation unit 12, a notification unit 13, and a progress management unit 14, and manages the operable information 23, the operation schedule information 24, and the operation history information 25.

  The operation history information 25 is information indicating the operation history of each user. Examples of the operation history information 25 include the name and operation date / time of a device operated by each user, the name of the work performed by each user, the work date / time, and the like. When the user A is permitted to operate a certain device, the collation unit 12 records information regarding the operation of this device and work using this device as the operation history information 25 of the user A.

  Next, the operation of the progress management unit 14 will be described by taking user A's action as an example.

  When the user A operates the equipment in the facility, the user A requests authentication by the second authentication device 7 for authentication processing of the equipment. In this case, information from the second authentication device 7 is transmitted to the plant monitoring system 2, and the verification unit 12 executes an authentication process based on this information.

  First, the collation unit 12 performs first to fourth determinations. Next, when all of the first to fourth determinations indicate a positive determination result, the collation unit 12 permits the user A to operate the device, and the operation permission information is second authentication information. Transmit to device 7. As a result, the user A is permitted to operate the device.

  While the user A continues to operate the device (that is, while the login by the user A is continued), the collation unit 12 continues to record the operation history information 25 of the user A. Then, based on the operation history information 25 and the operation schedule information 24 of the user A, the progress management unit 14 associates the operation history of the user A and the operation schedule and outputs them to the administrator terminal 8.

  The progress management unit 14 outputs, for example, a list, a graph, a table, and the like in which the operation history of the user A and the operation schedule are associated with each other to the administrator terminal 8. Further, the progress management unit 14 outputs data in which the operation history of the user A and the operation schedule are associated with each other to the administrator terminal 8, and the administrator terminal 8 processes the data into a list, a graph, a table, and the like. Also good. Further, data output from the progress management unit 14 to the administrator terminal 8 may be performed every time one login by each user is completed, or may be performed at regular intervals. Further, the progress management unit 14 may collectively output data of a plurality of users to the administrator terminal 8.

  According to the present embodiment, the administrator can recognize whether or not each user has operated the device as scheduled for operation. For example, the administrator can perform management (progress management) as to whether or not each user's work is proceeding according to the work plan. Further, the administrator can grasp whether or not work not included in the work plan has been performed.

(Third embodiment)
FIG. 5 is a schematic diagram illustrating a configuration of an authentication processing system according to the third embodiment. Regarding the components in FIG. 5, the same components as those in FIG. 1 and FIG.

  The plant monitoring system 2 of the present embodiment includes a collation unit 12, a notification unit 13, a progress management unit 14, and an operation verification unit 15, as well as operable information 23, operation schedule information 24, operation history information 25, and plant operation. Data 26 is managed.

  The plant operation data 26 is data indicating the operation status of the plant. Examples of the plant operation data 26 include analog values indicating the flow rate, temperature, and pressure of the working fluid flowing through various locations in the plant, and digital values indicating on / off of devices and alarms in the plant. The plant operation data 26 is collected and recorded by the plant monitoring system 2.

  Next, the operation of the operation verification unit 15 will be described by taking user A's action as an example.

  When the user A operates the equipment in the facility, the user A requests authentication by the second authentication device 7 for authentication processing of the equipment. In this case, information from the second authentication device 7 is transmitted to the plant monitoring system 2, and the verification unit 12 executes an authentication process based on this information.

  First, the collation unit 12 performs first to fourth determinations. Next, when all of the first to fourth determinations indicate a positive determination result, the collation unit 12 permits the user A to operate the device, and the operation permission information is second authentication information. Transmit to device 7. As a result, the user A is permitted to operate the device.

  While the user A continues operating the device, the collation unit 12 continues to record the operation history information 25 of the user A. The operation verification unit 15 then associates the operation history of the user A with the operation status of the plant based on the operation history information 25 of the user A and the plant operation data 26 and outputs the operation history to the administrator terminal 8.

  The operation verification unit 15 outputs, for example, a list, a graph, a table, and the like in which the operation history of the user A is associated with the operation state of the plant to the administrator terminal 8. Further, the operation verification unit 15 outputs data in which the operation history of the user A is associated with the operation state of the plant to the administrator terminal 8, and the administrator terminal 8 processes this data into a list, a graph, a table, and the like. May be. Further, data output from the operation verification unit 15 to the administrator terminal 8 may be performed every time one login by each user is completed, or may be performed at regular intervals. Further, the operation verification unit 15 may collectively output data of a plurality of users to the administrator terminal 8. In addition, the operation verification unit 15 may output data to the administrator terminal 8 in a form that clearly shows the difference in the operation status of the plant before and after the operation by the user A.

  According to the present embodiment, the administrator can recognize whether or not the operation state of the plant has been affected by the operation by each user. For example, the administrator can grasp whether or not each user's operation gives an abnormality to the operation of the plant, and can verify the negligence of the operation or the presence or absence of malicious intention.

  Note that the progress management unit 14 and the operation verification unit 15 of the present embodiment are based on the operation history information 25 of the user A, the operation schedule information 24 of the user A, and the plant operation data 26. The operation schedule of the user A and the operation state of the plant may be associated with each other and output to the administrator terminal 8.

  Although several embodiments have been described above, these embodiments are presented as examples only and are not intended to limit the scope of the invention. The novel systems and methods described herein can be implemented in a variety of other forms. Various omissions, substitutions, and changes can be made to the system and method embodiments described in the present specification without departing from the scope of the invention. The appended claims and their equivalents are intended to include such forms and modifications as fall within the scope and spirit of the invention.

1: Entrance / exit management system, 2: Plant monitoring system,
3: Facility boundary, 4: First authentication device,
5: Central control room, 6: On-site, 7: Second authentication device, 8: Administrator terminal,
11: Authentication unit, 12: Verification unit, 13: Notification unit,
14: Progress management unit, 15: Operation verification unit,
21: User registration information, 22: User location information,
23: Operation possible information, 24: Operation schedule information,
25: Operation history information, 26: Plant operation data,
31: Surrounding protection area, 32: Protection area, 33: Radiation control area,
33a: A area, 33b: B area, 33c: C area, 33d: D area,
34: Central control room area, 35: Other security areas

Claims (7)

When a user requests authentication by a first authentication device for permitting or denying passage of a facility boundary, it is determined whether or not the user is registered in user registration information, and the user is registered in the user An authentication unit that permits passage of the boundary when registered in the information and registers the position of the user as user position information;
A first determination is made as to whether or not the user is registered in the user registration information when the user requests authentication by a second authentication device for permitting or denying operation of the equipment in the facility. Operations that can be performed by each user based on the determination, a second determination that determines whether or not the position of the user corresponds to the user position information, and whether or not the user can operate the device And a third determination that determines whether or not the user is scheduled to perform an operation on the device based on operation schedule information that indicates an operation scheduled to be performed by each user. A collation unit that permits operation of the device when all of the first, second, third, and fourth judgments show a positive judgment result;
An authentication processing system comprising:   The information processing apparatus according to claim 1, further comprising a notification unit configured to notify an administrator terminal of information related to the user when any of the first, second, third, and fourth determinations indicates a negative determination result. Authentication processing system.   Based on the operation schedule information indicating the operation scheduled for each user and the operation history information indicating the operation history of each user, the operation history of the user and the operation schedule of the user are associated with each other in the administrator terminal. The authentication processing system of Claim 1 or 2 provided with the progress management part to output.   Based on operation history information indicating the operation history of each user and operation data indicating the operation status of the facility, operation verification that associates the operation history of the user with the operation status of the facility and outputs it to the administrator terminal The authentication processing system of any one of Claim 1 to 3 provided with a part.   The authentication unit permits or denies passage of a boundary between the inside and outside of the facility, and second authentication processing permits or denies passage of a boundary between areas in the facility. The authentication processing system according to any one of claims 1 to 4, wherein:   The authentication processing system according to claim 5, wherein in the second determination, the verification unit determines whether an area where the user is located corresponds to an area indicated by the user position information. When a user requests authentication by a first authentication device for permitting or denying passage of a facility boundary, it is determined whether or not the user is registered in user registration information, and the user is registered in the user Allow the passage of the boundary when registered in the information, register the user's location as user location information,
A first determination is made as to whether or not the user is registered in the user registration information when the user requests authentication by a second authentication device for permitting or denying operation of the equipment in the facility. Operations that can be performed by each user based on the determination, a second determination that determines whether or not the position of the user corresponds to the user position information, and whether or not the user can operate the device And a third determination that determines whether or not the user is scheduled to perform an operation on the device based on operation schedule information that indicates an operation scheduled to be performed by each user. And when the first, second, third, and fourth determinations all indicate a positive determination result, the operation of the device is permitted.
Authentication processing method.

Images