JP3641382B2 - Security system and security method - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to a technique using an access key for authentication of a user who permits access to a system.
[0002]
[Prior art]
As a technique for limiting access to a system to a specific user in order to increase the security of a system constructed on an electronic computer, the following technique using an access key for user authentication is known.
[0003]
That is, in this technique, an IC card storing authentication information is distributed as an access key to a specific user who is permitted to access the system (OS or specific application) in advance. Then, the user who has been distributed the access key causes the system usage disclosure to connect the access key to the system electrically or electromagnetically and read it. If the authentication information stored in the read access key is authentic, the system permits the user to access the system.
[0004]
Even after permitting access to the system, the access key is continuously monitored, and if the access key storing the normal authentication information cannot be recognized, the normal authentication information is stored again. Stop the system until it can recognize the access key.
[0005]
According to the technique of using such an access key for user authentication, the user has authentication information (for example, personal ID or password) in order to indicate to the system that he / she has the authority to access the system. You don't have to enter each time you use the keyboard. Also, when leaving the system while using the system, if the access key is taken away, it is possible to prevent a third party from illegally accessing the system during this period.
[0006]
[Problems to be solved by the invention]
According to the technology using the conventional access key for user authentication, when the user leaves the system while the access key is connected to the system in the middle of using the system, Using this access key, it becomes possible to gain unauthorized access to the system. If the access key is taken away by a third party, the system may be illegally accessed by a third party using the access key.
[0007]
Therefore, an object of the present invention is to eliminate unauthorized access to a system by a third party when a user leaves the system while the access key is connected to the system while using the system. .
[0008]
[Means for Solving the Problems]
To achieve the above object, the present invention provides, for example, a security system that limits users permitted to access a protected system,
The access key that stores the authentication data for authenticating the user and the use permission / invalidity data indicating the validity / invalidity of the access key is read / written and the power supply of the protection target system is monitored. Access key read / write means,
A user who is allowed to access the protected system can be authenticated from the authentication data read from the access key via the access key read / write means, and read from the access key via the access key read / write means An access permission means for permitting a user to access the protected system when the availability data indicates that the access key is valid;
When the availability data read from the access key indicates that the access key is valid, and the power-off state of the protection target system is longer than a predetermined period, the availability data of the access key is And an access key invalidating means for rewriting the use permission data indicating that the access key is invalid.
[0009]
According to such a security system, when a valid access key is presented, the user is allowed to access the protected system, but there has been no input from the user for a certain period of time thereafter. In this case, it is assumed that the right holder of the access key has left the access key, prohibits access to the protected system, and rewrites the access key availability data to data indicating invalidity. By preventing access to the protected system by the key, unauthorized access by others can be eliminated.
[0010]
DETAILED DESCRIPTION OF THE INVENTION
Embodiments of the present invention will be described below.
[0011]
FIG. 1 shows a configuration of an electronic computer system according to this embodiment.
[0012]
As shown in the figure, an electronic computer system according to the present embodiment includes an electronic computer (hereinafter referred to as “PC”) 103 and an IC card reader / writer 102 that reads and writes an access key 101 using an IC card. .
[0013]
The IC card reader / writer 102 is connected to the PC 103 and can be controlled from the PC 103.
[0014]
Next, the software configuration of this electronic computer system is shown in FIG.
[0015]
As illustrated, the PC 103 incorporates an access key processing program 205, an OS 206, and an application program 207 that runs on the OS 206. However, the access key processing program 205 may be incorporated into the OS 206 as a part of the OS 206. The IC card reader / writer 102 incorporates a recognition monitoring processing program 203 that is executed by a processor provided in the IC card reader / writer 102. Further, the access key 101 stores authentication data 201 and usable / unusable determination data 202.
[0016]
As shown in FIG. 3, the hardware configuration of the PC 103 is a general electronic device including a CPU 301, a main memory 302, an input device 303, a display device 304, external storage devices 305 and 306, an external input / output interface 308, and the like. It has a computer configuration.
[0017]
In such a hardware configuration, the access key processing program 205, the OS 206, and the application program 207 are stored in the external storage devices 305 and 306, and the CPU 301 is stored in the external storage devices 305 and 306. The program is loaded into the main memory 302 and executed. The access key processing program 205, OS 206, and application program 207 are directly stored from the removable storage medium 307 mounted on the external storage device 306 or once in another external storage device 305. It may be loaded into the main memory 302.
[0018]
Hereinafter, the operation of such an electronic computer system will be described.
[0019]
First, the operation of the recognition monitoring processing program 203 of the IC card reader / writer 102 will be described.
[0020]
FIG. 4 shows an operation procedure of the recognition monitoring processing program 203.
[0021]
As shown in the figure, when the IC card reader / writer 102 is activated, the recognition monitoring processing program 203 is activated and waits for a command from the PC 103. When a start command for recognition monitoring of the access key 101 is received from the PC 103 (step 401), the authentication data 201 and the usable / unusable determination data 202 of the access key 101 are first read out electrically or electromagnetically (step 402) When these can be read (step 403), it is checked whether or not the access key l01 storing the same data has been recognized (step 406). Here, specifically, the authentication data 201 and the usable / unusable determination data 202 are read in the previous step 402, and the authentication data 201 read in the current step 402 is used. When the enable / disable determination data 202 is the same as the authentication data 201 read in the previous step 402 and the enable / disable determination data 202, the access key l01 that stores the same data is recognized. In other cases, it is determined that the access key l01 storing the same data has not been recognized so far. However, when the step 402 performed this time is the first step 402 performed after activation, it is determined that the access key l01 storing the same data has not been recognized so far.
[0022]
If it is determined in step 406 that the access key 101 having stored the same data has been recognized, the process proceeds to step 411.
[0023]
On the other hand, in step 406, it is determined whether or not the read usable / unusable determination data 202 represents usable (step 408). If it is determined that usable data is represented, it can be used for the PC 103. That the access key 101 is recognized together with the authentication data 201 read out in step 402 performed this time (step 410). The fact that 101 has been recognized is reported together with the authentication data 201 read out in step 402, which was performed this time (step 409). Then, the process proceeds to step 411.
[0024]
As a result, when the access key l01 indicating that the usable / unusable determination data 202 is usable is electrically or electromagnetically connected to the IC card reader / writer 102, the point in time (before activation of the IC card reader / writer 102). If the access key 101 that can be used by the PC 103 is recognized, the authentication data 201 stored in the access key 101 is reported. When the access key l01 indicating that the usable / unusable determination data 202 is unusable is connected to the IC card reader / writer 102, at that time (when the access key is already connected before the IC card reader / writer 102 is activated). At the time of activation), the fact that the access key 101 that cannot be used is recognized is reported to the PC 103 together with the authentication data 201 stored in the access key 101.
[0025]
Furthermore, when the usable / unusable determination data 202 of the access key 101 connected to the IC card reader / writer 102 is rewritten, the access key 101 usable to the PC 103 is rewritten when it is rewritten to data indicating usable. Is recognized together with the authentication data 201 stored in the access key 101, and when it is rewritten to data indicating that it cannot be used, it is stored in the access key 101 that the unusable access key 101 is recognized by the PC 103. Is reported together with the authenticated authentication data 201.
[0026]
In step 411, it is checked whether a rewrite command for the usable / unusable discrimination data 202 has been received from the PC 103. If so, the usable / unusable discrimination data 202 for the access key 101 is rewritten according to the rewrite command. (Step 412), the process proceeds to Step 413. On the other hand, if the rewrite command has not been received, the process proceeds to step 413 as it is.
[0027]
On the other hand, if the authentication data 201 and the usable / unusable determination data 202 of the access key 101 cannot be read in the previous step 403, whether or not the access key 101 has been recognized so far in step 404. Check out. Here, specifically, if the authentication data 201 and the usable / unusable data 202 of the access key 101 can be read in the previous step 402, the access key 101 is recognized so far. In other cases, it is determined that the access key 101 has not been recognized so far. However, when the step 402 performed this time is the first step 402 performed after activation, it is determined that the access key l01 has not been recognized so far. If it is determined that the access key 101 has not been recognized, the process proceeds to step 413. If it is determined that the access key 101 has been recognized, the access key 101 is recognized by the PC 103. It is reported that it cannot be performed (step 405), and the process proceeds to step 413. As a result, when the access key 101 is removed from the IC card reader / writer 102, the PC 103 reports that the access key 101 cannot be recognized.
[0028]
Finally, in step 413, it is checked whether or not an end command has been received from the PC 103. If received, the process returns to step 401. If not received, the process returns to step 402.
[0029]
Next, the operation of the access key processing program 205 of the PC 103 will be described.
[0030]
FIG. 5 shows an operation procedure of the access key processing program 205.
[0031]
As shown in the figure, when the PC 103 is activated, the access key processing program 205 is activated. The activated access key processing program 205 sends a start command for recognition monitoring of the access key 101 to the IC card reader / writer 102 (step 500). Then, the process waits until the report received from the IC card reader / writer 102 is a report that the usable or unusable access key 101 is recognized (step 501). Here, if no report has been received yet, the fact that the last received report from the IC card reader / writer 102 has recognized the usable or unusable access key 101 by receiving these reports. Report. If the report received from the IC card reader / writer 102 is a report that the usable or unusable access key 101 is recognized, the authentication data 201 received together with the report is stored in advance in the access key processing program. Verification is performed by comparing with the authentication data registered in 205 (step 502). If it is not valid, the process returns to step 501, and if it is valid, the process proceeds to step 503.
[0032]
In step 503, it is determined whether or not this last received report is a report that the usable access key 101 has been recognized (step 503). If so, the OS 206 is activated and operated (step 507). . As a result, the user can use the PC 103.
[0033]
In step 507, after the OS 206 is activated and operated, various inputs such as a key input and a mouse input from the user are monitored to check whether any input is made by the user within a predetermined time (step 508). ) If there is no input within a certain time, the usable / unusable discrimination data 202 is rewritten in the IC card reader / writer 102 to rewrite the usable / unusable discrimination data 202 of the access key 101 to the data indicating unusable. The command is transmitted (step 509), the operation of the OS 206 is stopped (step 511), and the process returns to step 501.
[0034]
On the other hand, if there is an input within a certain time, it is determined whether or not the access key 101 storing the same data is being recognized (step 510). Here, specifically, if no report has been received from the IC card reader / writer 102 since the report previously handled as the last report in the determination of step 501, the access key 101 storing the data is stored. In other cases, it is determined that the access key 101 storing the same data is not being recognized. If it is determined that the access key 101 storing the same data is not being recognized, the operation of the OS 206 is stopped (step 511), and the process returns to step 502.
[0035]
On the other hand, if the access key 101 storing the same data is being recognized, it is checked whether or not the user has instructed the end of the OS 206. If not, the process returns to step 508 to be instructed. If YES, the OS 206 is terminated, an end command is issued to the IC card reader / writer 102, and the process is terminated.
[0036]
On the other hand, if it is determined in the previous step 503 that the last report is a report that the unusable access key 101 has been recognized, the user is prompted to input authentication data (step 504). Whether the input authentication data is valid or not is checked by comparing the input data with the authentication data registered in the access key processing program 205 in advance (step 505). If so, a rewrite command of the usable / unusable determination data 202 for rewriting the usable / unusable determination data 202 of the access key 101 with data indicating the use is transmitted to the IC card reader / writer 102 (step 506). In step 507, the OS 206 is activated and operated. On the other hand, if the input authentication data is not valid, the process returns to step 501.
[0037]
According to the operation of the electronic computer system according to the present embodiment as described above, when the legitimate access key 101 is connected to the IC card reader / writer 102, the OS 206 is operated to allow access by the user. If there is no input from the user for a certain time or longer, it is considered that the right holder of the access key 101 left the access key 101, the OS 206 is stopped, and the access key 101 can be used. By making the OS 206 unable to operate the rewrite OS 206 with the data indicating that the / impossibility determination data 202 cannot be used, unauthorized access by others can be eliminated.
[0038]
On the other hand, when the access key 101 disabled in this way is used by a legitimate holder, the access key 101 is valid so that the OS 206 can be operated and accessed again by the access key 101. By inputting the authentication data of the holder, the use / non-use determination data 202 of the access key 101 is rewritten to data representing use. Therefore, even if the right holder does not leave the access key 101 and does not input it for a certain time due to deliberation or doze, the OS 206 stops and the access key 101 can no longer be used. If it is a user, the OS can be immediately reactivated and the access key can be used.
[0039]
The embodiment of the present invention has been described above.
[0040]
In the above embodiment, when the IC card reader / writer 102 monitors the power of the PC 103 and continues to recognize the access key 101 for a certain time after the PC 103 is turned off, the access key 101 can be used. The incompatibility / determination data 202 may be rewritten with data indicating that it cannot be used.
[0041]
Further, in the above embodiment, the objects that can be accessed by the access key 101 are all the functions realized on the OS 206 including all the application programs 207. Also good.
[0042]
The access key technique according to the present embodiment is not limited to an electronic computer system, and can be applied to any device or system.
[0043]
In addition to the IC card, a memory card or other various recording media may be used as the access key.
[0044]
In addition, the IC card reader / writer in the above embodiment may be simply a device that reads and writes the access key, and the PC 103 may perform the process shown in FIG. 4 via the IC card reader / writer. .
[0045]
In step 505 in FIG. 5, the input authentication data may be compared with the authentication data stored in the access key 101.
[0046]
In the above embodiment, the use / non-use determination data indicating the use / non-use of each access key is stored and used in each access key. However, use / non-use determination for all access keys is used. The data for use may be stored on the PC 103 side and used. However, in this case, when the access key is used by a plurality of PCs 103, the use / non-use determination data for all the access keys is exchanged between the PCs 103, and each access key can be used / Keep indeterminate data up to date.
[0047]
【The invention's effect】
As described above, according to the present invention, when a user leaves the system while the access key is connected to the system in the middle of using the system, unauthorized access to the system by a third party is eliminated. be able to.
[Brief description of the drawings]
FIG. 1 is a block diagram showing a configuration of an electronic computer system according to an embodiment of the present invention.
FIG. 2 is a block diagram showing a software configuration of the electronic computer system according to the embodiment of the present invention.
FIG. 3 is a block diagram showing a hardware configuration of the electronic computer according to the embodiment of the present invention.
FIG. 4 is a flowchart showing an operation procedure of the recognition monitoring processing program according to the embodiment of the present invention.
FIG. 5 is a flowchart showing an operation procedure of an access key processing program according to the embodiment of the present invention.
[Explanation of symbols]
101 Access key 102 IC card reader / writer 103 PC
203 Recognition monitoring processing program 205 Access key processing program

Claims (6)

A security system that restricts users who are allowed to access the protected system,
The access key that stores the authentication data for authenticating the user and the use permission / invalidity data indicating the validity / invalidity of the access key is read / written and the power supply of the protection target system is monitored. Access key read / write means,
A user who is allowed to access the protected system can be authenticated from the authentication data read from the access key via the access key read / write means, and read from the access key via the access key read / write means An access permission means for permitting a user to access the protected system when the availability data indicates that the access key is valid;
When the availability data read from the access key indicates that the access key is valid, and the power-off state of the protection target system is longer than a predetermined period, the availability data of the access key is And an access key invalidating means for rewriting the use permission data indicating that the access key is invalid. The security system according to claim 1,
A user who is allowed to access the protected system can be authenticated from the authentication data read from the access key via the access key read / write means, and read from the access key via the access key read / write means Usage that accepts input of information capable of authenticating the user from the user and permits access to the protected system from the received information when the availability data indicates that the access key is invalid If the user can be authenticated, the access key is enabled to allow the user to access the protected system and to rewrite the access key availability data with the availability data indicating that the access key is valid. A security system characterized by comprising an enabling means. A security method for restricting users who are allowed to access a protected system,
Authenticates the user who is permitted to access the protected system from the authentication data read from the access key that stores the authentication data for authenticating the user and the availability data indicating the validity / invalidity of the access key. And when the availability data read from the access key indicates that the access key is valid, the user is allowed to access the protected system,
Monitor the power on / off of the protected system,
When the availability data read from the access key indicates that the access key is valid, and the power-off state of the protection target system is longer than a predetermined period, the availability data of the access key is A security method, wherein the access key is rewritten to use permission / inhibition data indicating that the access key is invalid. A storage medium storing a program to be read and executed by an electronic computer,
The program is stored in the electronic computer.
Authenticates the user who is permitted to access the protected system from the authentication data read from the access key that stores the authentication data for authenticating the user and the availability data indicating the validity / invalidity of the access key. And allowing the user access to the protected system when the availability data read from the access key indicates that the access key is valid;
Monitoring the power on / off of the system to be protected;
When the availability data read from the access key indicates that the access key is valid, and the power-off state of the protection target system is longer than a predetermined period, the availability data of the access key is And a step of rewriting the use permission / rejection data indicating that the access key is invalid. A security system that restricts users who are allowed to access the protected system,
An access key read / write means for reading / writing an access key storing authentication data for authenticating a user;
Availability data storage means for storing availability data representing validity / invalidity of each access key;
The usability data stored in the usability data storage means that can authenticate a user who permits access to the protection target system from the authentication data read from the access key via the access key read / write means. Indicates that the access key is valid, an access permission means for permitting the user access to the protected system;
Power supply monitoring means for monitoring ON / OFF of the power supply of the protection target system;
When the availability data read from the access key indicates that the access key is valid, and the power-off state of the protection target system is longer than a predetermined period, the availability data is stored in the availability data storage unit. A security system, comprising: an access key invalidating unit that rewrites the used availability data with availability data indicating that the access key is invalid.   An electronic computer system comprising the security system according to claim 1, 2 or 5 and the protection target system, wherein the protection target system is a system that operates on an electronic computer.

Images