JP4315674B2 - Information distribution system, information distribution method, and program for causing computer to execute the method - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to an information distribution system for distributing information held by a server in a LAN to a portable terminal such as a PDA via a WAN, an information distribution method, and a program for causing a computer to execute the method.
[0002]
[Prior art]
In recent years, the speed of technological innovation in the field of portable terminals such as PDAs and mobile phones has been remarkable. Compared with PCs, the number of input keys and the size of the display are subject to many restrictions in terms of hardware. It has become possible to perform even more sophisticated processing with just a terminal.
[0003]
For this reason, there has been an increasing number of opportunities for operations that have been processed exclusively in the company's office, such as checking emails, on business trips or in a moving car, and want to view internal information from anywhere at any time. Needs are getting stronger. Therefore, some companies have prepared mobile terminals that are shared by employees, and voluntarily lend them to employees who go out.
[0004]
Further, as a conventional technique, there is a technique in which a special power supply device or unit for increasing the strength of security is connected to a mobile terminal (for example, see Patent Document 1 and Patent Document 2).
[0005]
[Patent Document 1]
JP 2000-259273 A
[Patent Document 2]
JP 2002-112332 A
[0006]
[Problems to be solved by the invention]
However, these shared mobile devices often do not know when and who brought them out, and are often lost or stolen. Since it is unclear who is responsible for reimbursement, the cost of replacement is entirely borne by the company, and there are cases where the cost is increased against the intention of improving business efficiency.
[0007]
In some cases, for example, a user ID and a password for logging in to a specific server in the in-house LAN may be directly attached to the device by a sticky note or a sticker. Such an act is very problematic in that it effectively disables various security measures taken in the LAN, and there are circumstances in which the number of people entering the periphery of a device is limited to some extent, such as a desktop PC. However, there is a problem that an unauthorized person cannot effectively prevent unauthorized access to confidential information.
[0008]
In order to solve the above-described problems caused by the prior art, the present invention realizes lending management (ascertaining when and which user is using / using) a mobile terminal to which secret information is to be distributed, and acquires the mobile terminal. It is an object of the present invention to provide an information distribution system, an information distribution method, and a program for causing a computer to execute the information distribution system that can prevent access to confidential information by an unauthorized person.
[0009]
[Means for Solving the Problems]
In order to solve the above-mentioned problems and achieve the purpose, this An information distribution system according to an invention includes a first transmission unit that transmits information for accessing a first information processing apparatus to a user's portable terminal, the information transmitted by the first transmission unit, and the user. Second transmission means for transmitting information for identification to the first information processing apparatus; and third transmission means for transmitting information transmitted by the second transmission means to the second information processing apparatus; , Based on the information transmitted by the third transmission means, a determination means for determining whether or not the user has an authority to access the first information processing apparatus, and a determination result by the determination means A fourth transmission means for transmitting to the first information processing apparatus, and a determination result that the determination result transmitted by the fourth transmission means has the authority to access the first information processing apparatus by the user; so When Tsu, characterized in that the information in the specified first information processing apparatus by the user with a, a fifth transmission means for transmitting to the portable terminal.
[0010]
This Departure According to Ming, in order to access confidential information (information held by the first information processing apparatus) from a mobile terminal, a necessary key is downloaded in advance after clearly indicating information that can be specified by the user such as a user ID. I have to leave.
[0011]
Also, this An information distribution system according to the invention includes: the above In the invention, the first transmission means transmits information for accessing the first information processing apparatus to the portable terminal of the user via a communication path that can be used only by a specific user. And
[0012]
This Departure According to Meiji, access to the secret information is limited to a portable terminal that has previously downloaded the key via a specific communication path.
[0013]
Also, this An information distribution system according to the invention includes: the above In the invention, the determination unit determines whether or not the user has an authority to access the first information processing apparatus based on whether or not the current date and time are included in a preset period. It is characterized by that.
[0014]
This Departure According to Meiji, after the period, the secret information cannot be accessed with the key.
[0015]
Also, this An information distribution method according to the invention includes a first transmission step of transmitting information for accessing a first information processing apparatus to a user's portable terminal, the information transmitted in the first transmission step, and the user. A second transmission step of transmitting information for identification to the first information processing device; a third transmission step of transmitting information transmitted in the second transmission step to the second information processing device; , Based on the information transmitted in the third transmission step, a determination step for determining whether the user has authority to access the first information processing apparatus, and a determination result by the determination step A fourth transmission step transmitted to the first information processing device, and a determination result that the determination result transmitted in the fourth transmission step has authority to access the first information processing device. In the case of Wherein the information of the designated first in the information processing apparatus that including a transmission step of the fifth to be transmitted to the mobile terminal by THE.
[0016]
This Departure According to Ming, in order to access confidential information (information held by the first information processing apparatus) from a mobile terminal, a necessary key is downloaded in advance after clearly indicating information that can be specified by the user such as a user ID. I have to leave.
[0017]
Also, this The information distribution method according to the invention includes: the above In the invention, in the first transmission step, information for accessing the first information processing apparatus is transmitted to the portable terminal of the user via a communication path that can be used only by a specific user. And
[0018]
This Departure According to Meiji, access to the secret information is limited to a portable terminal that has previously downloaded the key via a specific communication path.
[0019]
Also, this The information distribution method according to the invention includes: the above In the invention, in the determination step, it is determined whether or not the user has an authority to access the first information processing apparatus based on whether or not the current date and time are included in a preset period. It is characterized by that.
[0020]
This Departure According to Meiji, after the period, the secret information cannot be accessed with the key.
[0021]
Also, this According to the program according to the invention, above The method is executed by a computer.
[0022]
DETAILED DESCRIPTION OF THE INVENTION
Exemplary embodiments of an information distribution system, an information distribution method, and a program for causing a computer to execute the method according to the present invention will be described below in detail with reference to the accompanying drawings.
[0023]
(System configuration)
FIG. 1 is an explanatory diagram showing the overall configuration of an information distribution system according to an embodiment of the present invention. Reference numeral 100 denotes a portable terminal that is lent to a user of the present system, and more specifically a PDA.
[0024]
Reference numeral 101 denotes an authentication server that issues a terminal identifier, which is a key for accessing information in the information server 102 to be described later, to the portable terminal 100. Answer whether the target user can be granted access to the information.
[0025]
For example, a cradle 101a is connected to the authentication server 101 via its USB interface, and the terminal and the authentication server 101 are connected by inserting the portable terminal 100 into the cradle 101a.
[0026]
An information server 102 receives an access request from the mobile terminal 100 and transmits data of a file designated in the request. Specifically, for example, a groupware mail server employed in an in-house LAN It is.
[0027]
(Outline of information distribution process)
Next, FIG. 2 is an explanatory diagram showing an outline of the flow of information distribution processing in the information distribution system according to the embodiment of the present invention.
[0028]
A user who wants to take the shared portable terminal 100 out of the office goes to the authentication server 101 installed in a place where only an authorized user of this system can enter, such as a security area in a company office, and connects there. The terminal is inserted into the cradle 101a (FIG. 2 (1)).
[0029]
Since the setting screen as shown in FIG. 3 is displayed on the display of the authentication server 101 to which the mobile terminal 100 is connected, the user is given his / her own user ID and password (these are given to individual employees in advance). And a period (hereinafter also referred to as “use period” or “usable period”) from which information in the information server 102 is to be extracted on the terminal. If the authentication server 101 determines that the user ID and password belong to an authorized person, the authentication server 101 issues a unique terminal identifier to the terminal ((2) in FIG. 2).
[0030]
Thereafter, the user takes the portable terminal 100 out of the office and accesses the information server 102 in the company from the outside or the like via the Internet ((3) in FIG. 2). The access request includes at least the user ID and password of the user and the terminal identifier issued from the authentication server 101. Among these, the user ID and the password are manually input by the user at each request, but the terminal identifier is automatically output from the memory of the mobile terminal 100.
[0031]
The information server 102 shows these pieces of information to the authentication server 101 and inquires whether an access request from a user specified by the information may be accepted ((4) in FIG. 2).
[0032]
The authentication server 101 gives an OK response when the user ID and password are valid and the current date and time is within the usage period set for the terminal specified by the terminal identifier, and otherwise An NG answer is sent to each information server 102 ((5) in FIG. 2). Then, the information server 102 returns the information specified in the access request in the case of OK to the portable terminal 100 in the case of NG, and the error message to that effect in the case of NG ((6) in FIG. 2).
[0033]
Thus, in this system, in order to access the information server 102 in the LAN via the WAN, a terminal identifier is required in addition to the user ID and password. For this reason, in order to use the borrowed portable terminal 100 on the go, a terminal identifier must be downloaded from the authentication server 101 in advance. From the user ID and password entered at the time of downloading, it is possible to identify who last brought the terminal out, and to clarify the responsibility in case of loss or theft (equipment rental management becomes possible) )
[0034]
In addition, a usable period is set for the terminal identifier prior to issuance, and access to the information server 102 is denied when the period is outside this period. Therefore, even if the terminal is lost or stolen outside the company and the user ID and password are known from the attached memo etc., unauthorized access to confidential information is prevented at least after the above period has elapsed. The
[0035]
(Hardware configuration)
Next, FIG. 4 is an explanatory diagram showing an example of a hardware configuration of the portable terminal 100 according to the embodiment of the present invention. In the figure, 401 indicates a CPU that controls the entire apparatus, 402 indicates a ROM that stores basic input / output programs, and 403 indicates a RAM that is used as a work area of the CPU 401.
[0036]
Reference numeral 404 denotes a cursor, a menu, or a display for displaying various data such as characters and images, and reference numeral 405 denotes an operation key for inputting characters, numbers, various instructions, and the like.
[0037]
Reference numeral 406 denotes a wired communication control unit that is connected to the cradle 101a of the authentication server 101 and controls transmission / reception of data between the CPU 401 and the authentication server 101. Reference numeral 407 denotes wireless communication that controls transmission / reception of radio waves with the wireless base station. A control unit 400 indicates a bus for connecting the above-described units.
[0038]
FIG. 5 is an explanatory diagram showing an example of the hardware configuration of the authentication server 101 and the information server 102 according to the embodiment of the present invention. For convenience of explanation, it is assumed that both have the same hardware configuration.
[0039]
In the figure, reference numeral 501 denotes a CPU that controls the entire apparatus, 502 denotes a ROM that stores basic input / output programs, and 503 denotes a RAM that is used as a work area of the CPU 501.
[0040]
Reference numeral 504 denotes an HDD (hard disk drive) that controls reading / writing of data with respect to the HD (hard disk) 505 according to the control of the CPU 501, and reference numeral 505 denotes an HD that stores data written according to the control of the HDD 504. Yes.
[0041]
Reference numeral 506 denotes an FDD (flexible disk drive) that controls reading / writing of data with respect to the FD (flexible disk) 507 according to the control of the CPU 501, and reference numeral 507 denotes a removable FD that stores data written according to the control of the FDD 506. Respectively.
[0042]
Reference numeral 508 denotes a CD-RW drive that controls reading / writing of data with respect to the CD-RW 509 according to the control of the CPU 501, and 509 denotes a removable CD-ROM that stores data written according to the control of the CD-RW drive 508. RW is shown respectively.
[0043]
Reference numeral 510 denotes a cursor, menu, window, or display for displaying various data such as characters and images, 511 denotes a keyboard having a plurality of keys for inputting characters, numerical values, various instructions, and the like, 512 denotes various types. A mouse that performs selection and execution of an instruction, selection of a processing target, movement of a mouse pointer, and the like is shown.
[0044]
A LAN interface 513 is connected to a LAN via a communication cable and functions as an interface between the network and the CPU 501. A USB interface 514 is connected to the cradle 101 a and the like and functions as an interface between the device and the CPU 501. An interface 500 indicates a bus for connecting the above-described units.
[0045]
(Functional configuration)
FIG. 6 is an explanatory diagram functionally showing the configuration of the information distribution system according to the embodiment of the present invention. In the figure, 600x is a functional unit of the mobile terminal 100, 601x is the authentication server 101, and 602x is the functional unit of the information server 102.
[0046]
A terminal identifier request unit 600a is a terminal for accessing information in the information server 102 when detecting that the mobile terminal 100 is connected to the authentication server 101 (the mobile terminal 100 is inserted into the cradle 101a). This is a functional unit that requests the authentication server 101 to issue an identifier. The request includes at least a unique terminal name assigned in advance to each mobile terminal 100.
[0047]
Reference numeral 600b denotes a terminal identifier receiving unit, which is a functional unit that receives the terminal identifier returned from the authentication server 101 in response to the request and the usable period. A terminal information storage unit 600c is a functional unit that holds information related to the mobile terminal 100, such as the above-described terminal name, in addition to the terminal identifier and usable period received by the terminal identifier receiving unit 600b.
[0048]
The difference between “terminal identifier” and “terminal name” is that the former is assigned each time by the authentication server 101 prior to the lending of the terminal, whereas the latter is regardless of whether or not it is loaned. Are fixedly assigned to each terminal. Therefore, although the “terminal name” is always the same for each portable terminal 100, the “terminal identifier” changes every time the loan is made.
[0049]
Reference numeral 600d denotes an access request unit, which is a functional unit that designates desired information (for example, mail stored in a mailbox) from information stored in the information server 102 and requests browsing of the information. . This access request includes at least the user ID and password input from the user, and the terminal name and terminal identifier read from the terminal information storage unit 600c.
[0050]
An information receiving unit 600e is a functional unit that receives the above information (however, if an access is denied, an error message to that effect) from the information server 102 that has received the above request.
[0051]
Next, reference numeral 601a of the authentication server 101 is a terminal identifier request receiving unit, which is a functional unit that receives a terminal identifier issue request transmitted from the terminal identifier requesting unit 600a of the portable terminal 100.
[0052]
Reference numeral 601b denotes a usage period setting unit, which is a functional unit that allows a user to set a usage period of a terminal identifier on the screen of FIG. 3 when the terminal identifier request receiving unit 601a receives a request for issuing a terminal identifier.
[0053]
When there is a request for issuing a terminal identifier, the usage period setting unit 601b displays the setting screen shown in FIG. When the OK button 300 on the above screen is pressed, the validity of the input user ID and password is verified by a user DB 601f described later. If they are valid, the terminal name included in the issuance request from the portable terminal 100, the user ID entered on the screen of FIG. 3, and the usage period are output to the terminal identifier issuing unit 601c described later. To do.
[0054]
A terminal identifier issuing unit 601c is a functional unit that issues a terminal identifier for accessing information in the information server 102 when a terminal name or the like is input from the usage period setting unit 601b.
[0055]
As the terminal identifier, for example, a fixed pattern corresponding to the number of shared portable terminals 100 may be prepared, and a pattern that is not in use may be assigned every time an issue request is issued. If the identifier is used repeatedly, there is a possibility that an unauthorized person will guess the pattern and the regularity of the pattern.
[0056]
Therefore, for example, in the present embodiment, a sufficient number of patterns are created from random numbers randomly generated at the timing of once a day, and when an issue request is issued from the mobile terminal 100, one of them is selected. It shall be issued as a terminal identifier. In addition to the above, for example, as many patterns as the number of mobile terminals 100 are created once a day, and which pattern is assigned to which terminal is determined at this time, and when there is a request from the mobile terminal 100, The assigned pattern may be issued as a terminal identifier.
[0057]
The issued terminal identifier is output to the terminal identifier transmission unit 601d described later together with the usage period input from the usage period setting unit 601b. The terminal identifier is also output to the lending status DB 601e described later together with the terminal name, user ID, and usage period input from the usage period setting unit 601b.
[0058]
Reference numeral 601d denotes a terminal identifier transmission unit, which is a functional unit that transmits the terminal identifier generated by the terminal identifier issuing unit 601c and the usage period to the mobile terminal 100.
[0059]
A lending status DB (database) 601e is a database that holds detailed information of the mobile terminal 100 that has been issued a terminal identifier as described above. FIG. 7 is an explanatory diagram schematically showing the contents of the lending status DB 601e. As shown in the figure, the DB includes the terminal name of the mobile terminal 100 that requested the terminal identifier, the usage period input on the screen of FIG. 3, the terminal identifier issued by the terminal identifier issuing unit 601c, and the screen of FIG. The input user ID (user) is stored in association with each other.
[0060]
Reference numeral 601f denotes a user DB, which, as shown in FIG. 8, is a database that holds a user ID and a password that are issued in advance to users of the present system in association with each other.
[0061]
The remaining functional units of the authentication server 101 will be described later. Next, 602a of the information server 102 is an access request receiving unit, and is a functional unit that receives an access request transmitted from the access requesting unit 600d of the portable terminal 100. .
[0062]
Reference numeral 602b denotes an access permission determination request unit, which is a function unit that inquires of the authentication server 101 whether or not the requesting user may be permitted access when an access request is received by the access request receiving unit 602a. This inquiry includes at least a user ID, a password, a terminal name, and a terminal identifier that are requesting access.
[0063]
A determination result receiving unit 602c is a functional unit that receives the determination result transmitted from the authentication server 101. Reference numeral 602d denotes an information transmitting unit. When the determination result received by the determination result receiving unit 602c is OK, the information that is the target of the access request received by the access request receiving unit 602a is sent to the mobile terminal 100. It is a function part to transmit. If the determination result is NG, only an error message is returned.
[0064]
Returning to the description of the remaining functional units of the authentication server 101, reference numeral 601g denotes an access permission determination request receiving unit, which is a functional unit that receives an inquiry transmitted from the access permission determination requesting unit 602b of the information server 102.
[0065]
Reference numeral 601h denotes an access permission / non-permission determination unit. The user ID and password being inquired received by the access permission determination request receiving unit 601g are valid, and the usage period of the portable terminal 100 whose current date and time is specified by the terminal identifier It is a functional unit that determines whether or not it is within the above-described lending status DB 601e and user DB 601f. Then, whether the result is OK or NG, the result is output to a determination result transmission unit 601i described later.
[0066]
Reference numeral 601i denotes a determination result transmission unit, which is a functional unit that transmits the determination result input from the accessibility determination unit 601h to the determination result reception unit 602c of the information server 102.
[0067]
(Terminal identifier issuance processing and access permission determination processing)
Next, FIG. 9 is a flowchart showing a procedure of a terminal identifier issuance process for the mobile terminal 100 and a determination process for determining whether or not the mobile terminal 100 can access the information server 102 in the authentication server 101 according to the embodiment of the present invention. .
[0068]
When the terminal identifier request receiving unit 601a of the authentication server 101 receives a request for issuing a terminal identifier from the mobile terminal 100 via the USB interface 514 (step S901: Yes), the usage period setting unit 601b then displays the usage period setting unit 601b in FIG. A setting screen as shown is displayed on the display 510 (step S902).
[0069]
When the OK button 300 on the screen of FIG. 3 is pressed (step S903: Yes), the usage period setting unit 601b registers the combination of the user ID and password input on the screen in the user DB 601f. Check if it is a legitimate user. If it is that of a registered user (step S904: Yes), the terminal name received in step S901, the user ID accepted in step S903, and the usage period are output to the terminal identifier issuing unit 601c.
[0070]
The terminal identifier issuing unit 601c selects one unused terminal identifier from the terminal identifiers generated in advance by batch processing once a day (step S905), and uses the terminal together with the usage period input from the usage period setting unit 601b. It outputs to the identifier transmission part 601d. Then, the terminal identifier and the usage period are transmitted from the terminal identifier transmission unit 601d to the terminal identifier reception unit 600b of the mobile terminal 100 (step S906). Also, the terminal identifier, terminal name, user ID, and usage period are registered in the lending status DB 601e (step S907).
[0071]
Thereafter, when the access request receiving unit 602a of the information server 102 receives an access request from the portable terminal 100, the access permission determination requesting unit 602b inquires whether or not the requesting user may be allowed to access. Therefore, the authentication server 101 that has received this by the access permission determination request receiving unit 601g (step S908: Yes) performs the above determination by the access permission determination unit 601h.
[0072]
That is, the user ID 601f being inquired is first inquired of the user DB 601f, and if these are those of the registered user (step S909: Yes), then the lending status DB 601e is stored with the terminal identifier being inquired next. A search is performed to determine whether the current date and time is within the usable period of the identifier.
[0073]
If the usage period has not yet elapsed (step S910: Yes), the determination of access OK from the determination result transmission unit 601i is made. If the above period has passed or the user ID or password is invalid, (Step S909: No, Step S910: No) Access NG determination is transmitted to the determination result receiving unit 602c of the information server 102, respectively (Step S911, Step S912).
[0074]
As described above, in the present invention, in order to extract secret information on the LAN from the shared portable terminal 100, a terminal identifier must be acquired in advance by specifying a user ID or the like. For this reason, the user will be compulsorily required to register the use of the equipment, and the lending management, which has been apt to become a trap, can be carried out without difficulty.
[0075]
Further, if outsiders are not allowed to enter the vicinity of the authentication server 101, the person who can insert the mobile terminal 100 into the cradle 101a is physically limited. It is not possible for an unauthorized person to obtain a terminal identifier and access confidential information just by knowing the password and password (physically impossible).
[0076]
Moreover, since the terminal identifier has a valid period, even if the terminal in which the terminal identifier is incorporated is dropped or lost, unauthorized access by an unauthorized person can be reliably prevented after the period has elapsed. Note that “one-time password” is a technology that is somewhat similar in terms of purpose, but in this conventional technology, the generation program on the side that issues the password must be the same, whereas in the present invention, it is exclusively. Since the authentication server 101 generates a terminal identifier, it is easy to modify the algorithm.
[0077]
Further, no special hardware is required to realize the above, and the mobile terminal 100 may be a very general PDA or the like. In the prior art, there is one in which a special power supply device or unit for increasing the strength of security is connected to a portable terminal (for example, Patent Document 1 and Patent Document 2 described above). In the present invention, such additional hardware is used. Is unnecessary.
[0078]
In the above-described embodiment, it is assumed that the mobile terminal 100 is lent out to an employee who goes out, but the usage form is not limited to this, for example, a PDA is distributed to a store clerk such as a department store or a large store, You may enable it to confirm the specification of goods, the stock status, etc. from the PDA at any time. Even if it is a private property of the company, the store where many customers come and go is in the same situation as the outside, and it is not necessarily the case that the PDA is lost or stolen, so the authentication server 101 installed in the employee dedicated area For example, a terminal identifier is issued every morning at the start of work.
[0079]
In the embodiment described above, the user can arbitrarily set the usage period, but if the user ID is known, for example, the user's going-out schedule can be extracted from the scheduler managed by the groupware. The start and end of the usage period can be displayed by default on the screen of FIG. Further, the use period once set may be freely changed (extended).
[0080]
The above-described terminal identifier requesting unit 600a, terminal identifier receiving unit 600b, access requesting unit 600d, and information receiving unit 600e are realized by the CPU 401 executing the program read to the RAM 403 of the portable terminal 100. Is done. The program can be distributed by being stored in various recording media, and can also be distributed via a network. The terminal information storage unit 600c is realized by the RAM 403.
[0081]
Further, the above-described terminal identifier request receiving unit 601a, use period setting unit 601b, terminal identifier issuing unit 601c, terminal identifier transmitting unit 601d, access permission determination request receiving unit 601g, access permission determining unit 601h, determination result transmitting unit 601i, access Specifically, the request receiving unit 602a, the access permission determination requesting unit 602b, the determination result receiving unit 602c, and the information transmitting unit 602d are realized by the CPU 501 executing a program read from the HD 505 to the RAM 503. In addition to the HD 505, this program can be stored and distributed in various recording media such as the FD 507, the CD-RW 509, and the MO, and can also be distributed via a network. Further, the lending status DB 601e and the user DB 601f are realized by the HD 505.
[0082]
Of the functional units in the portable terminal 100, the access request unit 600d corresponds to the “second transmission unit” in the claims, and the process performed by the access request unit 600d corresponds to the “second transmission step” in the claims. .
[0083]
Among the functional units in the authentication server 101, the terminal identifier transmission unit 601d corresponds to the “first transmission unit” in the claims, and the processing to be performed corresponds to the “first transmission step” in the claims. To do. Further, the access permission determination unit 601h corresponds to “determination means” in the claims, and the processing to be performed corresponds to “determination step” in the claims. Further, the determination result transmission unit 601i corresponds to the “fourth transmission unit” in the claims, and the processing to be performed corresponds to the “fourth transmission step” in the claims.
[0084]
In addition, among the functional units in the information server 102, the access permission determination request unit 602b is referred to as “third transmission means” in the claims, and the processing to be performed is referred to as “third transmission step” in the claims. Equivalent to. In addition, the information transmission unit 602d corresponds to the “fifth transmission unit” in the claims, and the processing performed by the information transmission unit 602d corresponds to the “fifth transmission step” in the claims.
[0085]
【The invention's effect】
As explained above this The invention includes a first transmission unit that transmits information for accessing the first information processing apparatus to a user's portable terminal, information transmitted by the first transmission unit, and information for identifying the user Second transmission means for transmitting the information to the first information processing apparatus, third transmission means for transmitting the information transmitted by the second transmission means to the second information processing apparatus, and the third Based on the information transmitted by the transmission unit, a determination unit that determines whether the user has an authority to access the first information processing apparatus, and a determination result by the determination unit is used as the first information processing. A fourth transmission means for transmitting to the apparatus, and a determination result transmitted by the fourth transmission means is a determination result that the user has authority to access the first information processing apparatus; , The user And the fifth transmission means for transmitting the information in the first information processing apparatus specified by the portable terminal to the portable terminal, so that the secret information (information held by the first information processing apparatus) from the portable terminal is provided. In order to access the mobile phone, it is necessary to specify the information that can be specified by the user, such as the user ID, in advance, and then download the necessary key. It is possible to obtain an information distribution system capable of realizing (when grasping which user is used / used).
[0086]
Also this The invention the above In this invention, since the first transmission means transmits information for accessing the first information processing apparatus to the portable terminal of the user via a communication path that can be used only by a specific user, Access to information is limited to mobile terminals that have previously downloaded the key via a specific communication path, so that at least other terminals can access confidential information by unauthorized persons who have acquired the terminal. It is possible to obtain an information distribution system that can prevent access to the user.
[0087]
Also this The invention the above In the invention, the determination unit determines whether or not the user has an authority to access the first information processing apparatus based on whether or not the current date and time are included in a preset period. Therefore, after the period has elapsed, access to the secret information by the key is impossible, and at least after the period has elapsed, access to the secret information by an unauthorized person who has acquired the mobile terminal can be prevented. There is an effect that a possible information distribution system is obtained.
[0088]
Also, this The invention includes a first transmission step of transmitting information for accessing the first information processing device to a user's portable terminal, information transmitted in the first transmission step, and information for specifying the user The second transmission step for transmitting the information to the first information processing device, the third transmission step for transmitting the information transmitted in the second transmission step to the second information processing device, and the third Based on the information transmitted in the transmission step, a determination step for determining whether or not the user has an authority to access the first information processing apparatus, and a determination result by the determination step is used as the first information processing. A fourth transmission step to be transmitted to the device and a determination result transmitted in the fourth transmission step is a determination result that the user has authority to access the first information processing device Specified by the user In order to access confidential information (information held by the first information processing apparatus) from the portable terminal, the fifth transmission step of transmitting information in the first information processing apparatus to the portable terminal is included. In advance, information that can be specified by the user, such as a user ID, must be downloaded in advance, and a necessary key must be downloaded. It is possible to obtain an information distribution method capable of realizing (use / recognition of use).
[0089]
Also, this The invention the above In the first invention, in the first transmission step, information for accessing the first information processing apparatus is transmitted to the portable terminal of the user via a communication path that can be used only by a specific user. Access to information is limited to mobile terminals that have previously downloaded the key via a specific communication path, so that at least other terminals can access confidential information by unauthorized persons who have acquired the terminal. It is possible to obtain an information distribution method capable of preventing access to the user.
[0090]
Also, this The invention the above In the invention, in the determination step, it is determined whether or not the user has an authority to access the first information processing apparatus based on whether or not the current date and time are included in a preset period. Therefore, after the period has elapsed, access to the secret information by the key is impossible, and at least after the period has elapsed, access to the secret information by an unauthorized person who has acquired the mobile terminal can be prevented. There is an effect that a possible information distribution method is obtained.
[0091]
Also, this According to the invention, above There is an effect that a program capable of causing a computer to execute the method is obtained.
[Brief description of the drawings]
FIG. 1 is an explanatory diagram showing an overall configuration of an information distribution system according to an embodiment of the present invention.
FIG. 2 is an explanatory diagram showing an outline of the flow of information distribution processing in the information distribution system according to the embodiment of the present invention;
FIG. 3 is an explanatory diagram showing an example of a usage period setting screen in the information distribution system according to the embodiment of the present invention;
FIG. 4 is an explanatory diagram showing an example of a hardware configuration of the mobile terminal 100 according to the embodiment of the present invention.
FIG. 5 is an explanatory diagram showing an example of a hardware configuration of the authentication server 101 and the information server 102 according to the embodiment of the present invention.
FIG. 6 is an explanatory diagram functionally showing the configuration of the information distribution system according to the embodiment of the present invention.
FIG. 7 is an explanatory diagram schematically showing the contents of a lending status DB 601e according to the embodiment of the present invention.
FIG. 8 is an explanatory diagram schematically showing the contents of a user DB 601f according to the embodiment of the present invention.
FIG. 9 is a flowchart showing a procedure of terminal identifier issuance processing for mobile terminal 100 and determination processing for determining whether or not access from mobile terminal 100 to information server 102 is performed in authentication server 101 according to the embodiment of the present invention.
[Explanation of symbols]
100 mobile devices
101 Authentication server
101a Cradle
102 Information server
400,500 buses
401,501 CPU
402,502 ROM
403,503 RAM
404 display
405 Operation key
406 Wired communication controller
407 Wireless communication control unit
504 HDD
505 HD
506 FDD
507 FD
508 CD-RW drive
509 CD-RW
510 display
511 keyboard
512 mouse
513 LAN interface
514 USB interface
600a Terminal identifier request part
600b Terminal identifier receiver
600c terminal information storage unit
600d access request section
600e Information receiver
601a Terminal identifier request receiving unit
601b Use period setting part
601c Terminal identifier issuing unit
601d Terminal identifier transmission unit
601e Lending status DB
601f User DB
601g Accessibility determination request receiving unit
601h Accessability determination unit
601i determination result transmission unit
602a Access request receiver
602b Accessibility determination request part
602c Determination result receiver
602d Information transmission unit

Claims (7)

First transmission means for transmitting information for accessing the first information processing apparatus to the user's portable terminal;
Second transmission means for transmitting information transmitted by the first transmission means and information for identifying the user to the first information processing apparatus;
Third transmission means for transmitting the information transmitted by the second transmission means to the second information processing apparatus;
Determination means for determining whether or not the user has authority to access the first information processing device based on the information transmitted by the third transmission means;
Fourth transmission means for transmitting the determination result by the determination means to the first information processing apparatus;
If the determination result transmitted by the fourth transmission means is a determination result indicating that the user has authority to access the first information processing apparatus, the first specified by the user Fifth transmission means for transmitting information in the information processing apparatus to the portable terminal;
Equipped with a,
The first transmission means is wired communication means for controlling transmission / reception of data between the second information processing apparatus and the terminal apparatus, and the second information processing apparatus and the terminal apparatus are connected to each other. Information for accessing the first information processing device is transmitted from the second information processing device to the portable terminal via a wire based on the user information input to the second information processing device in the state An information distribution system characterized by: First transmission means for transmitting information for accessing the first information processing apparatus to the user's portable terminal;
  Second transmission means for transmitting information transmitted by the first transmission means and information for identifying the user to the first information processing apparatus;
  Third transmission means for transmitting the information transmitted by the second transmission means to the second information processing apparatus;
  Determination means for determining whether or not the user has authority to access the first information processing device based on the information transmitted by the third transmission means;
  Fourth transmission means for transmitting the determination result by the determination means to the first information processing apparatus;
  If the determination result transmitted by the fourth transmission means is a determination result indicating that the user has authority to access the first information processing apparatus, the first specified by the user Fifth transmission means for transmitting information in the information processing apparatus to the portable terminal;
  With
  The first transmission unit is configured such that the terminal device is connected to a cradle connected to the second information processing device, and the second information processing device and the terminal device are connected to each other. An information distribution system for transmitting information for accessing the first information processing apparatus from the second information processing apparatus to the portable terminal based on user information input to the information processing apparatus. The determination unit has an authority to access the first information processing apparatus to the user based on the information transmitted by the third transmission unit and whether or not the current date and time is included in a preset period. The information distribution system according to claim 1, wherein it is determined whether or not there is any. A first transmission step of transmitting information for accessing the first information processing apparatus to the user's portable terminal;
A second transmission step of transmitting the information transmitted in the first transmission step and information for identifying the user to the first information processing apparatus;
A third transmission step of transmitting the information transmitted in the second transmission step to the second information processing apparatus;
A determination step of determining whether or not the user has authority to access the first information processing device based on the information transmitted in the third transmission step;
A fourth transmission step of transmitting a determination result by the determination step to the first information processing apparatus;
When the determination result transmitted in the fourth transmission step is a determination result indicating that the user has an authority to access the first information processing apparatus, the first specified by the user A fifth transmission step of transmitting information in the information processing apparatus to the portable terminal;
Only including,
In the first transmission step, the second information processing apparatus and the terminal apparatus are connected by wired communication means for controlling transmission and reception of data between the second information processing apparatus and the terminal apparatus. Based on user information input to the second information processing apparatus in a state, information for accessing the first information processing apparatus is transmitted from the second information processing apparatus to the portable terminal via a wire. An information delivery method characterized by the above.   A first transmission step of transmitting information for accessing the first information processing apparatus to the user's portable terminal;
  A second transmission step of transmitting the information transmitted in the first transmission step and information for identifying the user to the first information processing apparatus;
  A third transmission step of transmitting the information transmitted in the second transmission step to the second information processing apparatus;
  A determination step of determining whether or not the user has authority to access the first information processing device based on the information transmitted in the third transmission step;
  A fourth transmission step of transmitting a determination result by the determination step to the first information processing apparatus;
  When the determination result transmitted in the fourth transmission step is a determination result indicating that the user has an authority to access the first information processing apparatus, the first specified by the user A fifth transmission step of transmitting information in the information processing apparatus to the portable terminal;
  Including
  In the first transmission step, the second information processing device connected to the cradle connected to the second information processing device and the terminal device are connected to the second information processing device. An information distribution method, comprising: transmitting information for accessing the first information processing apparatus from the second information processing apparatus to the portable terminal based on user information input to the information processing apparatus. In the determination step, the right to access the first information processing apparatus to the user based on the information transmitted in the third transmission step and whether or not the current date and time is included in a preset period. 6. The information distribution method according to claim 4 or 5, wherein it is determined whether or not there is any.   The program which makes a computer perform the method as described in any one of the said Claims 4-6.

Images