JP2590732B2 - Security control method - Google Patents

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a security control system, and more particularly to a computer system in which a server computer (hereinafter referred to as a server) and various client computers (hereinafter referred to as clients) are connected via a network. The present invention relates to a security control method for controlling a client who does not have a use right to use a service provided by a server.

[0002]

2. Description of the Related Art In a conventional security control system, when a client and a server having a reliable relationship exchange data with each other during communication via a network,
When the data sent to the server is data transmitted by a third client having no valid use right, a known publicly known data can be distinguished from data transmitted by a valid client with a certain degree of certainty. Technology exists.

[0003] An example of such a conventional security control system will be described below. First, when sending data to the server, the client attaches identification information for identifying the client and attaches a selected random number. This number is selected each time the client attempts to transfer data to the server, and a number not used so far is selected. Then, the pair of the identification information and the number is regarded as one item, and this item is encrypted using the encryption key. In other words, a pair of the client identification information and the number is attached to the data sent to the server in an encrypted format, and a different number is hidden in the data each time.

[0004] Since the server has a key for correctly decrypting the cipher, the server decrypts the encrypted content of the pair of the identification information and the number sent from the client using the key. Become In addition, the client confirms whether the client of the identification information is a valid client, and confirms that the attached number is not a number used in the past. By going through these two checks, it is determined whether the client is legitimate.

[0005] For example, an illegal client reads data in the middle of being sent from a legitimate client to a server using some method, and attempts to complete the legitimate client using the data read by the illegal client. It is assumed that the identification information and the number of the valid client accompanying the data are taken out, and the other part is replaced with the data of the invalid client and sent to the server.

At this time, when the server receives data from such an invalid client, it performs similar decoding to confirm the identification information, and the identification information is regarded as that of the legitimate client. However, since the accompanying number has already been used by a legitimate client, the data is determined to be from an unauthorized client.

[0007]

In the conventional security control method described above, the security processing executed by the server is a set of encryption processing and decryption processing, and the amount of calculation is extremely large. There is a possibility that the performance of the service by the server may be significantly hindered due to the application of a load, and there is a disadvantage that the ability of the server to execute the original service is reduced.

In the conventional security control method, generally, a request message from a plurality of clients arrives at a server, and the server appropriately schedules the request messages, thereby executing the plurality of request messages in a multiplexed manner and proceeding. However, if the multiplicity increases too much, processing switching and the like frequently occur, and the processing load on the server further increases. In such a case, the server may forgo execution of some requests and reduce the load. And

[0009] However, the security process is a pre-process of the server's original process for the server, and is not considered as a factor of the load scheduling in the server. Therefore, the server appropriately schedules the process. Even so, the load of the server may abnormally increase due to the load of the security processing which is the pre-processing.

[0010] This problem becomes more pronounced when the server can handle various levels of security. In other words, stronger security may be applied or lighter security may be applied depending on the client's request and the type of service provided, and the stronger the security, the more effective The amount of calculation is large, and the amount of communication between the server and the client also increases. Therefore, if the server does not recognize what kind of security is used, the load on the server cannot be properly controlled.

An object of the present invention is to provide a security control method that can appropriately reflect what kind of security is used in controlling the load on a server.

[0012]

According to a first aspect of the present invention, there is provided a security control method in a computer system in which a server computer and each client computer are connected via a network, wherein the client computer sends out. The request message includes client identification data for identifying the request source, security designation data indicating a security method to be applied to the request, and service request data for designating the service request. The server computer checks the contents of the request message by (A) receiving means for receiving the request message, and (B) a security method indicated by security designation data of the request message received by the receiving means. A calculating means for calculating the amount of processing because,
(C) monitoring means for monitoring the current level of the load of the vehicle and acquiring the load of the vehicle; (D)
Based on the processing amount obtained from the calculation means and the load amount obtained from the monitoring means, it is determined whether or not the request message can be input at that time. The following is sent out, and when it cannot be inserted, a schedule means for repeating the same judgment again after a predetermined time has passed, and (E) the request message is received from the schedule means and received by the reception means. Using the security scheme indicated by the security designation data of the request message, examine the client identification data of the request message to determine whether the request message has been issued from a valid client computer. And (F) when the inspection means makes a valid determination, It is constructed and a service unit for performing the processing of the service request data of the request message.

A security control method according to a second invention is a security control method in a computer system in which a server computer and each client computer are connected via a network.
(A) calculating means for calculating the processing amount for checking the request message according to the security scheme indicated by the security designation data in the received request message; and (B) what level the load status of the self is currently at (C) whether or not the request message can be input at that time based on the processing amount obtained from the calculating means and the load amount obtained from the monitoring means. If the input is possible, the request message is sent to the following, and if the input is not possible, a schedule means that repeats the same judgment after a predetermined time has elapsed, and (D) the schedule means In response to the request message, the security method indicated by the security designation data of the request message received by the receiving unit is changed. Means for checking the client identification data of the request message to determine whether or not the request message is issued from the valid client computer; and (E) when the check means determines validity. And service means for executing the processing of the service request data of the request message in the server computer.

[0014]

When the client sends a request message to the server, the client also sends the designation of the security method applied to the request message, and requests the server to handle the security. The complexity of the encryption system used and the number of times of encryption differ depending on the applied security method. As a result, the processing amount when the server executes the inspection means changes, but the calculation means
It has the function of calculating this processing amount.

Further, the processing amount obtained by the calculating means corresponds to the magnitude of the load newly generated on the server when the request message is processed by the checking means. On the other hand, when the request message arrives, the monitoring means has a role of determining a load already existing in the server.

If the sum of the load amount obtained by the monitoring means and the processing amount obtained by the calculation means is smaller than the maximum value of the load allowable on the server, the request message is sent to the inspection means. Even if processed, the server can operate without difficulty. However, if the sum of the load amount obtained by the monitoring means and the processing amount obtained by the calculation means exceeds the maximum value of the load allowable on the server, the request message is taken by the server and the request message is sent to the inspection means. Processing is not preferred at this time.

On the other hand, the scheduling means has an operation of determining whether or not such a request message can be sent to the checking means at the present time. If the server cannot be loaded at the present time, after a lapse of a predetermined time, the load on the server is investigated using the monitoring means, and it is determined whether the server can be loaded again. The scheduler repeats such processing until the request message can be input to the checker.

[0018]

Next, an embodiment of the present invention will be described with reference to the drawings. FIG. 1 is a block diagram showing one embodiment of the security control system of the present invention. FIG. 2 is an information configuration diagram showing an example of the content of the request message.

As shown in FIG. 1, the receiving means 1 of the server 1
1 has received a request message 2 sent from one of the clients (not shown) over the network.
As shown in FIG. 2, the request message 2 includes client identification data 21 for identifying the request source, security specification data 22 indicating a security method to be applied to the request, and a service specifying the service request. Request data 23.

The calculating means 12 of the server 1 calculates the processing amount for checking the contents of the request message 2 by the security method indicated by the security designation data 22 of the request message 2 received by the receiving means 11. For example,
When a certain encryption method is designated as the security method, the time required to decrypt the encryption applied to a part of the request message 2 is obtained. And
The calculation means 12 internally has a correspondence table and a function between the security method and the required time, and uses these to calculate the amount of calculation.

On the other hand, the monitoring means 13 of the server 1 monitors the load status of the server 1 at present and obtains the load amount of the server 1. For example, the monitoring unit 13 measures the average wait time of the processing of the load amount and the processing amount on the server 1 at regular intervals, and stores the average waiting time therein. And so on.

Therefore, the scheduling means 14 of the server 1
Is the processing amount received from the calculating means 12 and the monitoring means 13
It is determined whether or not the request message 2 can be input at that time based on the load amount obtained from the above. If the request message 2 can be input, the request message 2 is sent to the inspection means 15. After that, the same judgment is repeated again.

FIG. 3 is a flowchart showing an example of the processing in the scheduling means 14. As shown in FIG. 3, when started, the schedule unit 14 receives the request message and the calculation amount n calculated by the calculation unit 12 from the calculation unit 12 in step S1.

Then, in step S2, the monitoring means 13 is called to obtain the load m existing in the server 1 at that time.

Next, in step S3, the maximum value of the load allowed in the server 1 is defined as max, and n + m is ma.
If it is larger than x (max <n + m), step S
Then, when n + m is smaller than or equal to max (max> = n + m), the process proceeds to step S5.

Then, in step S4, it is determined that the execution of the inspection means 15 cannot be performed at that time, and the process is interrupted for a certain period of time, and the process returns to step S2. In step S5, it is determined that the execution of the inspection unit 15 can be performed at that time, and the request message 2 is sent to the inspection unit 15 and the processing ends.

Then, the inspection means 15 of the server 1 receives the request message 2 from the schedule means 14 and uses the security method indicated by the security designation data 22 of the request message 2 obtained by the reception means 11 to request the request message 2. 2. Check the client identification data 21 of
It is determined by verifying whether the request message 2 has been issued from a valid client. If the verification is not successful, the request message 2 is rejected.

Further, the service means 16 of the server 1 carries out the processing indicated by the service request data 23 of the request message 2 when the inspection means 15 determines validity.

[0029]

As described above, in the conventional security control method, the security processing on the server is unconditionally executed when the server receives the request message from the client. However, when a strict security scheme is used, a high processing load is imposed on the server due to the security scheme in addition to the server's original processing. For this reason, the security control method of the present invention does not perform security processing unconditionally on the server. By delaying the processing, the load on the server is abnormally increased by the security processing, and there is an effect that it is possible to prevent the execution of the original processing of the server from being hindered.

[Brief description of the drawings]

FIG. 1 is a block diagram showing an embodiment of a security control system according to the present invention.

FIG. 2 is an information configuration diagram showing an example of the content of a request message.

FIG. 3 is a flowchart showing an example of a process in a scheduling means 14;

[Explanation of symbols]

 1 server 2 request message 11 receiving means 12 calculating means 13 monitoring means 14 scheduling means 15 checking means 16 service means 21 client identification data 22 security designation data 23 service request data

Claims (2)

(57) [Claims] 1. A security control method in a computer system in which a server computer and each client computer are connected via a network, wherein the client computer includes, in a request message to be sent, a client that identifies the source of the request. The server computer transmits the identification data, security designation data indicating a security method to be applied to the request, and service request data designating the service request, and the server computer (A) receives the request message. (B) calculating means for calculating the amount of processing for checking the contents of the request message according to the security scheme indicated by the security designation data of the request message received by the receiving means; load (D) monitoring means for monitoring what level the condition is currently in and acquiring its own load amount, and (D) the processing amount obtained from the calculation means and the load amount obtained from the monitoring means. It is determined whether or not the request message can be input at that time. If the request message can be input, the request message is transmitted below. If the request message cannot be input, the same determination is performed again after a predetermined time has elapsed. (E) receiving the request message from the schedule means, and using the security method indicated by the security designation data of the request message received by the receiving means, Checking the client identification data of the message, the request message is issued from the legitimate client computer. (F) service means for processing the service request data of the request message when the check means makes a valid determination. Security control method. 2. A security control method in a computer system in which a server computer and each client computer are connected via a network, wherein (A) the request message is checked by the security method indicated by the security designation data in the received request message. Calculating means for calculating the processing amount for
(B) monitoring means for monitoring the current level of the own load condition and acquiring the own load amount; and (C)
Based on the processing amount obtained from the calculating means and the load amount obtained from the monitoring means, it is determined whether or not the request message can be input at that time, and when the request message can be input, the request message is transmitted below. And when it cannot be inserted, a schedule means for repeating the same judgment after a lapse of a predetermined time, and (D) receiving the request message from the schedule means, and securing the request message received by the reception means. Checking means for checking the client identification data of the request message by using the security method indicated by the designated data and determining whether or not the request message is issued from a valid client computer; and (E) the checking means. If the service request data is valid, the service request data Security control method characterized by comprising a service unit for performing the processing of the data, to the computer server.