JP4408837B2 - Authentication system - Google Patents

Description

  The present invention relates to an authentication system, and more particularly to an authentication system for performing data access authentication.

  With the rapid development of the network environment and the spread of computers, information and communication networks are exposed to the dangers of external computer viruses and unauthorized access, and the leakage of important data such as personal information and corporate secrets is rapidly increasing. These information crime problems are becoming more serious.

  For computer viruses, install virus detection / disinfection software in the computer, and for unauthorized access, deploy a firewall in the network, or provide a protection mechanism for relay devices such as routers and switches. Therefore, measures are generally taken to protect internal data destruction.

  On the other hand, until now it has often depended on the user's morals regarding leakage of important data, but in recent years, an intentionally malicious person has accessed the network and placed important data on some recording medium. There has been an urgent need to develop effective security technology for important data leaks, with many cases of copying and taking out.

As a measure for preventing important data leakage, authentication processing for determining whether or not important data can be accessed is usually performed. Further, as a conventional authentication technique, a technique is proposed in which transmission of communication data is started when a password and terminal configuration information match between a station apparatus and a remote apparatus (for example, Patent Document 1).
JP 2000-36988 (paragraph numbers [0022] to [0040], FIG. 1)

  Conventionally, in order to prevent leakage of important data, authentication data (password or the like) for the important data is set, and access is blocked if the authentication data does not match when accessing the important data.

  However, the person who extracts important data is often an internal party, and it is highly possible that the password is known. When such internal parties extract important data maliciously, connect their own laptops to the network, authorize authentication using a password, access the customer information system database, and search for customer information. , Copy the searched contents to the hard disk, or connect your own external memory to the authorized terminal connected to the network, authorize and authenticate using a password through the authorized terminal, and search for customer information There are many cases where the contents are copied to an external memory and taken out.

  In this way, in the conventional authentication process using a simple password, if you know only the password, you can take out important data even if you connect an unauthorized terminal or memory device to the network. Access could not be completely eliminated, and leakage of important data could not be reliably prevented.

  The present invention has been made in view of these points, and an object of the present invention is to provide an authentication system that effectively prevents leakage of important data and improves security.

To solve the above SL problem, an authentication system that performs data access authentication is provided. An authentication system includes an important data storage unit that stores important data that is data to be protected, an apparatus constituting a network, an authentication target apparatus that is an authentication target when the important data is accessed, and an apparatus of the authentication target apparatus By collating the authentication data registration table that registers the status as authentication data, the authentication data collection unit that collects authentication data from the authentication target device, the collected authentication data, and the authentication data registered in the table Authenticate all the authentication target devices that make up the network, detect changes in the configuration of the entire network that includes the authentication target devices, and if a network change is detected due to a mismatch, check access to important data. And an access server configured to block an authentication server.

  Here, the authentication data registration table intentionally changes a part of the network configuration of the registration contents so that it is different from the actual configuration, and sets the device status of the authentication target device to be different from the normal device status. The authentication data is registered, and the access blocking control unit authenticates the authentication target devices constituting the network when accessing the important data. Block access.

  The authentication system of the present invention collects authentication data from authentication target devices, compares the collected authentication data with the authentication data registered in the table, and authenticates all the authentication target devices constituting the network. The configuration change of the entire network including the device to be authenticated is detected, and when the network change is detected due to the mismatch, the access to the important data is blocked. As a result, it is possible to reliably prevent leakage of important data and improve security.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings. FIG. 1 is a principle diagram of an authentication system. The authentication system 1 is composed of an important data storage unit 10, authentication target devices 20-1 to 20-n, and an authentication server 30, and performs an authentication process when accessing important data.

  The important data storage unit 10 stores important data (customer information, personal information, company information, etc.) that is data to be protected. The authentication target devices 20-1 to 20-n are devices constituting the network (authentication network) 4, and are devices to be authenticated when important data is accessed. In the figure, a server 20-1, a switch 20-2, and personal computers 20-3 to 20-n are illustrated as authentication target devices.

  The authentication server 30 includes an authentication data registration table 31, an authentication data collection unit 32, and an access blocking control unit 33. The authentication data registration table 31 registers the device status (such as the hardware configuration of the device itself and the network interface status) of the authentication target devices 20-1 to 20-n as authentication data.

  The authentication data collection unit 32 communicates with the authentication target devices 20-1 to 20-n and collects authentication data from the authentication target devices 20-1 to 20-n (performs authentication data polling or authentication. Authentication data may be arbitrarily transmitted from the target devices 20-1 to 20-n to the authentication server 30).

  The access blocking control unit 33 collates the collected authentication data with the authentication data registered in the table, so that not only authentication of devices that illegally access important data but also all of the networks 4 are configured. Authentication for the authentication target devices 20-1 to 20-n is executed. Thereby, a change in the configuration of the entire network 4 including the authentication target devices 20-1 to 20-n is detected, and access to important data is blocked when a change in the network 4 is detected due to mismatching ( Note that the access blocking control unit 33 also performs normal authentication processing using a password or the like of a device that accesses important data.

FIG. 2 is a flowchart showing an outline of the authentication operation performed in the authentication system 1.
[S1] The important data storage unit 10 stores important data. FIG. 1 shows that the important data storage unit 10 is managed via the server 20-1. However, if the important data storage unit 10 has a NAS (Network Attached Storage) configuration, It can exist on the network without going through a server (that is, the important data storage unit 10 can exist on the network only with an IP address, and may have such a configuration).

[S2] The administrator selects the authentication target devices 20-1 to 20-n.
[S3] The authentication data registration table 31 registers the device states of the selected authentication target devices 20-1 to 20-n as authentication data (specific table contents will be described later with reference to FIG. 4).

  [S4] The authentication data collection unit 32 collects authentication data from the authentication target devices 20-1 to 20-n. Note that the authentication data collection unit 32 normally collects authentication data from the authentication target devices 20-1 to 20-n periodically. However, apart from this, there is an access of important data from a certain authentication target device. In such a case, authentication data may be collected again only from the corresponding authentication target device.

  [S5] The access blocking control unit 33 collates the collected authentication data with the authentication data registered in the authentication data registration table 31. If all of the authentication data collected from the authentication target devices 20-1 to 20-n existing in the network 4 match the registered authentication data, the process proceeds to step S6, and if there is any mismatching item, step is performed. Go to S7.

[S6] The access blocking control unit 33 recognizes that the configuration of the network 4 has not changed, and permits access to important data.
[S7] The access blocking control unit 33 recognizes that the configuration of the network 4 has changed, considers that some unauthorized operation is being performed, and blocks access to important data.

  Next, each of the first to fourth embodiments will be described as the operation of the authentication system 1. First, a first embodiment will be described with reference to FIGS. In the first embodiment, when important data is accessed from an authentication target apparatus, the authentication data is collected from the corresponding authentication target apparatus, and the authentication data is collated to determine whether access is possible. .

  FIG. 3 is a diagram showing the configuration of the authentication system. As the connection relationship of each component of the authentication system 1-1, with respect to the L3 (layer 3) switch 51, the development department server 52, the L2 (layer 2) switches 53, 55, 23, the data storage unit 54, the authentication server 30, sales department servers 21 and 22 are connected.

  The development department server 52 is connected to the L2 switch 53 and the data storage unit 52a, and the terminals 53-1 to 53-3 are connected to the L2 switch 53. Further, the sales department server 21 and the L2 switch 55 are connected, and terminals 55-1 and 55-2 are connected to the L2 switch 55. Further, the important data storage unit 10 and the L2 switch 23 are connected to the sales department server 22, and terminals 24 to 26 are connected to the L2 switch 23.

  Here, the sales department servers 21 and 22, the L2 switch 23, and the terminals 24 to 26 are selected as authentication target devices, and a network area including these authentication target devices and the important data storage unit 10 is defined as the authentication network 4a. And

  FIG. 4 is a diagram showing the configuration of the authentication data registration table 31. Items constituting the authentication data registration table 31 include “authentication target device”, “authentication content”, “authentication data”, and “access to important data”.

  In the “authentication target device”, the name of the authentication target device is registered, and in this example, the important data storage unit 10, the sales department servers 21, 22, the L2 switch 23, and the terminals 24-26 (the important data storage unit 10). Is also included as an authentication target device).

  “Authentication content” is an item of authentication data. For example, if the device to be authenticated is a terminal, hardware configuration information (CPU, manufacturer, OS, memory, screen resolution, drive configuration), IP address, MAC address Etc.

  If the authentication target device is a server, hardware configuration information (CPU, memory, drive configuration), interface information (interface name, IP address, MAC address), etc. are applicable, and the authentication target device is a switch or router. For example, a device name, a used port number, a port name, a MAC address, an IP address, and the like are applicable.

  “Authentication data” describes specific information (value) of the above authentication content. “Access to important data” is a column in which an administrator can arbitrarily designate a device that can access important data in the authentication network. Although not shown in the figure, if the authentication network 4a is included in a VPN (Virtual Private Network), a VPN name and a tunnel name are also registered in the authentication data registration table 31.

  FIG. 5 is a flowchart showing the operation of the authentication system according to the first embodiment. The operation when important data is accessed from a regular terminal belonging to the authentication network 4a is shown.

[S21] An access request to the important data is generated from the authorized terminal 24 which is set to be accessible to the important data in the authentication data registration table 31 of FIG.
[S22] The business department server 21 managing the important data notifies the authentication server 30 of the generation of the access request and the IP address of the accessed terminal 24.

  [S23] When the authentication data collection unit 32 in the authentication server 30 recognizes an important data access request from the terminal 24, the authentication data collection unit 32 collects authentication target data (hardware configuration information, IP address, MAC address) from the terminal 24.

[S24] The access blocking control unit 33 in the authentication server 30 collates the authentication data of the terminal 24 registered in the authentication data registration table 31 with the collected authentication data.
[S25] If the collation matches, the access blocking control unit 33 sends a successful authentication to the sales department server 22 that manages the important data.

[S26] The access blocking control unit 33 enables access to important data of the terminal 24 via the sales department server 22.
Here, the conventional authentication process is a one-to-one authentication process between a server that manages important data and a device that accesses the server. However, in the authentication system 1, a server that manages important data and an authentication 1 to N authentication processing is performed with N authentication target devices existing in the network.

  In the above-described prior art (Japanese Patent Laid-Open No. 2000-36988), when performing authentication processing between a station device and a remote device, terminal configuration information (product name, manufacturer name, etc.) of the remote device in addition to password authentication ) Is also added to the authentication process, but this prior art is also a one-to-one authentication process, and, as in the authentication system 1, it is one for all the authentication target devices existing in the authentication network. This is fundamentally different from the technology for performing the authentication process for N.

  Next, a second embodiment will be described. In the second embodiment, when a malicious third party connects an external memory to a legitimate terminal and tries to extract important data, access is blocked to prevent leakage of important data.

  FIG. 6 is a diagram showing the configuration of the authentication system. In the authentication network 4b of the authentication system 1-2, for example, a USB (Universal Serial Bus) memory 24a is illegally attached to the terminal 24 as an external memory. Other configurations are the same as the system configuration shown in FIG.

  FIG. 7 is a flowchart illustrating the operation of the authentication system according to the second embodiment. This shows an important data leakage prevention operation when the USB memory 24a for copying important data is illegally attached to the terminal 24 and the important data is accessed.

[S31] A malicious third party connects the USB memory 24a to a legitimate terminal 24 and makes an access request to important data.
[S32] The authentication data collection unit 32 collects authentication data from the sales department servers 21 and 22, the L2 switch 23, and the terminals 24 to 26, which are all authentication target devices in the authentication network 4b.

  Alternatively, in the regular terminal 24, since the drive configuration of the terminal has changed due to the connection of the USB memory 24a, the terminal 24 autonomously detects a change in the device state, and the detected current device state (authentication data) May be transmitted to the authentication server 30.

[S33] The access blocking control unit 33 compares the authentication data of the terminal 24 registered in the authentication data registration table 31 with the collected authentication data.
[S34] Of the authentication data related to the terminal 24 registered in the authentication data registration table 31, three drive configurations C, D, and E are registered in advance as shown in FIG. On the other hand, since the USB memory 24a is currently connected to the terminal 24, the drive configuration in the collected authentication data of the terminal 24 is the F drive. Therefore, the access blocking control unit 33 detects a mismatch of authentication data (authentication failure).

  [S35] When the access blocking control unit 33 detects a difference in configuration (a malicious third party has connected the USB memory 24a to the terminal 24, the drive configuration becomes unmatched with the registration information), it manages important data. An authentication failure is sent to the sales department server 22 that is currently in operation.

  [S36] The access blocking control unit 33 blocks access to the important data of the terminal 24 via the sales department server 22. When the network configuration verification mismatch is detected and the access is blocked, only the access from the corresponding terminal 24 where the verification is mismatched may be blocked. All access to important data may be blocked for all authentication target devices 21 to 26 in the network 4b.

  Furthermore, as another method, an inaccessible network area in which important data cannot be accessed (a logical area on the network where only a device that has failed in authentication exists) is provided in advance, and the access blocking control unit 33 When the access to the important data is blocked, the terminal 24 in which the verification of the authentication data does not match can be logically connected to the inaccessible network area and isolated from the original authentication network 4b (terminal) 24) the port connected to the authentication network 4b is blocked and connected to the inaccessible network area instead. The access blocking control unit 33 notifies the administrator of a warning message when there is a verification mismatch of the authentication data.

  Here, in the case of conventional important data leakage, a malicious internal party who knows the password connects his / her external memory (USB memory, etc.) to a regular terminal connected to the network, and the password is passed through the regular terminal. Authenticating using, searching customer information, copying the retrieved content to external memory and taking it out has occurred, and such a simple password authentication process could not prevent such cases .

  On the other hand, in the authentication system 1-2, authentication processing is performed by changing the network configuration of the authentication target device existing in the authentication network 4b. Therefore, even if the password is known, some external device is connected to the authentication network 4b. By doing so, it is determined that the authentication does not match, thereby blocking access to important data. For this reason, it is possible to firmly prevent important data from being leaked, and to significantly improve security.

  Also, even if a malicious third party attempts to transfer data from a legitimate terminal to another network using, for example, a VPN, if it is set to authenticate all authentication target devices in the VPN on the network The control is similar to that described above, and even in this case, it is possible to effectively prevent leakage of important data.

  Next, a third embodiment will be described. In the third embodiment, when a malicious third party connects an external terminal (such as a laptop computer) to the authentication network and tries to extract important data, access is blocked to prevent leakage of important data. It is an operation to do.

  FIG. 8 is a diagram showing the configuration of the authentication system. In the L2 switch 23 in the authentication network 4c of the authentication system 1-3, the terminal 2 is illegally connected. Other configurations are the same as the system configuration shown in FIG.

  FIG. 9 is a flowchart illustrating the operation of the authentication system according to the third embodiment. This shows an important data leakage prevention operation when the terminal 2 for extracting important data is illegally attached to the L2 switch 23 and the important data is accessed.

[S41] The terminal 2 is connected to the L2 switch 23 in the authentication network 4c by a malicious third party.
[S42] The authentication data collection unit 32 collects authentication data from the sales department servers 21 and 22, the L2 switch 23, the terminals 24 to 26, and the terminal 2, which are all authentication target devices in the authentication network 4c.

  Alternatively, when the terminal 2 is connected to the L2 switch 23, it is detected by the L2 switch 23 that the link has been raised, and the fact that the new link has been raised from the L2 switch 23 may be transmitted to the authentication server 30. .

[S43] The access blocking control unit 33 collates the authentication data registered in the authentication data registration table 31 with the collected authentication data.
[S44] The access blocking control unit 33 registers the terminals 24, 25, and 26 as terminals connected to the L2 switch 23 in the authentication data registration table 31, and the terminal 2 is not registered. To detect.

  [S45] The access blocking control unit 33 blocks access to the important data of the terminal 2 via the sales department server 22 (the various access blocking methods described in step S36 are applied).

  Here, in the case of conventional important data leakage, a malicious insider who knows the password connects his / her laptop computer to the network, authorizes authentication using the password, and accesses the database of the customer information system. In some cases, customer information is retrieved, and the retrieved contents are copied to a hard disk and taken out. Such a simple password authentication process cannot prevent such cases.

  On the other hand, in the authentication system 1-3, since an authentication process is performed by changing the network configuration of the authentication target device existing in the authentication network 4 c, any external device is connected to the authentication network 4 c even if the password is known. By doing so, it is determined that the authentication does not match, thereby blocking access to important data. For this reason, it is possible to firmly prevent important data from being leaked, and to significantly improve security.

  Next, a fourth embodiment will be described. The fourth embodiment is used, for example, in a time zone where a legitimate person does not access important data, such as outside business hours or during consecutive holidays.

  In the fourth embodiment, the authentication data registration table 31 registers authentication data in which a part of the network configuration is intentionally changed so that the device state of the authentication target device is different from the normal device state. Keep it. Then, the access blocking control unit 33 blocks the access to the important data by performing the authentication for all the authentication target devices constituting the network when the important data is accessed, so that the verification data does not match. To do.

  FIG. 10 is a diagram showing the configuration of the authentication system. The authentication system 1-4 has the same system configuration as that of FIG. 3, but in the authentication network 4d, the interface port on the sales department server 21 side connecting the L3 switch 51 and the sales department server 21 is denoted by fjqe3. ing.

  FIG. 11 is a diagram showing the configuration of the authentication data registration table. The authentication data registration table 31a is different from the table configuration shown in FIG. 4 in that “interface name: fjqe3, status: blocked” is written in the authentication data column of the sales department server 21.

  Here, in the actual system, the interface port fjqe3 on the sales department server 21 side connecting the L3 switch 51 and the sales department server 21 is not blocked but is normally released, but the authentication data registration table 31a. Is intentionally registered with a device state different from the actual system state.

FIG. 12 is a flowchart illustrating the operation of the authentication system according to the fourth embodiment.
[S51] When important data such as consecutive holidays are not used, the authentication data registration table 31a registers the interface name: fjqe3 and the status: blocked as the interface information of the sales department server 21.

[S52] The state of the interface fjqe3 of the sales department server 21 is set to a released state.
[S53] The authentication data collection unit 32 collects authentication data from the sales department servers 21 and 22, the L2 switch 23, and the terminals 24 to 26, which are all devices to be authenticated in the authentication network 4d.

  [S54] The access blocking control unit 33 compares the authentication data registered in the authentication data registration table 31a with the authentication data collected from the authentication target device in the authentication network 4d.

  [S55] Since the interface port fjqe3 of the sales department server 21 is released and the interface port fjqe3 registered in the table is closed, the verification failure is detected and an authentication failure is detected.

  [S56] The access blocking control unit 33 blocks access to all important data via the sales department server 22 (the various access blocking methods described in step S36 are applied).

  Here, in the fourth embodiment, access of all important data is prohibited in a time zone in which a legitimate person does not access the important data regardless of legitimate access or unauthorized access. By setting such control at, for example, midnight or during consecutive holidays, even if there are no people in the company, even if an outside person intrudes and tries to access important data, Access can be securely blocked.

  In the conventional important data leakage prevention technology, the authentication process is performed only between the server that manages the important data and the unauthorized terminal that tries to access the server. In the fourth embodiment, the unauthorized terminal is used. Since a mechanism for intentionally failing authentication is applied to a device that has nothing to do with it, it is very difficult for an unauthorized accessor to impersonate and break the authentication.

  As described above, according to the present invention, in order to prevent leakage of important data, the device configuration (CPU, manufacturer, OS, memory, screen resolution, Drive configuration, etc.), IP address, MAC address, device status, etc. are registered, and the status / device configuration, etc. of the devices constituting the network surrounding the important data are used as data for authentication.

  Authentication for accessing important data is not performed one-to-one with the accessing terminal, but one-to-N (N: registered for authentication) for devices on other networks registered for authentication. (The number of devices). As a result, even if a malicious third party tries to spoof authentication by connecting an unauthorized terminal, it is also difficult to access important data because authentication is performed for devices not related to the unauthorized terminal. (Especially effective in the fourth embodiment).

  Even if a malicious third party tries to steal important data using a legitimate terminal and connects an external memory device to the terminal, the hardware configuration information of the registered terminal (CPU, manufacturer, OS, memory, Since the screen resolution, drive configuration, etc.) change, authentication fails and unauthorized access to important data can be prevented.

(Appendix 1) In an authentication system that performs data access authentication,
An important data storage unit for storing important data that is data to be protected;
An apparatus constituting a network, which is an authentication target apparatus to be authenticated when important data is accessed, and
An authentication data registration table for registering the device state of the authentication target device as authentication data, an authentication data collecting unit for collecting authentication data from the authentication target device, the collected authentication data, and authentication data registered in the table , The authentication is performed on all the authentication target devices that constitute the network, the change in the configuration of the entire network including the authentication target device is detected, and the change in the network is detected due to the mismatch. An authentication server comprising an access blocking control unit that blocks access to important data, and
An authentication system comprising:

  (Supplementary Note 2) When the access blocking control unit blocks access to important data, the access blocking control unit blocks only access from the authentication target device whose collation does not match, or blocks access to important data from all devices. The authentication system according to appendix 1, wherein the authentication is performed.

  (Additional remark 3) The said authentication object apparatus which provided the inaccessible network area which cannot access important data, and the said access cutoff control part discriminate | determined authentication data collation, when interrupting access to important data The authentication system according to appendix 1, wherein the authentication system is logically connected to the inaccessible network area and isolated from the original network.

  (Supplementary Note 4) When an unauthorized external memory for illegally taking out important data is attached to the device to be authenticated, the access blocking control unit performs verification of the authentication data, and causes a mismatch of drive functions. The authentication system according to appendix 1, wherein a change in the network configuration is detected and access to important data is blocked.

  (Supplementary Note 5) When an unauthorized terminal for unauthorized access to important data is connected to the network, the access blocking control unit verifies the authentication data and connects the new terminal to the network. The authentication system according to appendix 1, wherein a change in configuration is detected and access to important data is blocked.

  (Additional remark 6) The said authentication data registration table intentionally changes a part of network structure of registration content so that it may differ from an actual structure, and the apparatus state of the said authentication object apparatus differs from a normal apparatus state. The authentication data set as described above is registered, and the access blocking control unit authenticates all the authentication target devices constituting the network at the time of access to the important data, so that the verification data does not match. The authentication system according to appendix 1, wherein access to important data is blocked when it occurs.

(Appendix 7) In an authentication device that performs data access authentication,
An authentication data registration table for registering the device status of the authentication target device as authentication data with respect to the authentication target device that is an authentication target when accessing important data, which is one device constituting the network;
An authentication data collection unit for collecting authentication data from the authentication target device;
A configuration of the entire network including the authentication target device by performing authentication for all the authentication target devices constituting the network by collating the collected authentication data with the authentication data registered in the table If the change is detected, and the network change is detected due to mismatch, the access blocking control unit that blocks access to important data,
An authentication apparatus comprising:

It is a principle diagram of an authentication system. It is a flowchart which shows the outline | summary of the authentication operation | movement performed with an authentication system. It is a figure which shows the structure of an authentication system. It is a figure which shows the structure of an authentication data registration table. It is a flowchart which shows operation | movement of the authentication system of 1st Embodiment. It is a figure which shows the structure of an authentication system. It is a flowchart which shows operation | movement of the authentication system of 2nd Embodiment. It is a figure which shows the structure of an authentication system. It is a flowchart which shows operation | movement of the authentication system of 3rd Embodiment. It is a figure which shows the structure of an authentication system. It is a figure which shows the structure of an authentication data registration table. It is a flowchart which shows operation | movement of the authentication system of 4th Embodiment.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Authentication system 10 Important data storage part 20-1-20-n Authentication object apparatus 30 Authentication server 31 Authentication data registration table 32 Authentication data collection part 33 Access blocking control part 4 Network

Claims (1)

In an authentication system that performs data access authentication,
An important data storage unit for storing important data that is data to be protected;
An apparatus constituting a network, which is an authentication target apparatus to be authenticated when important data is accessed, and
An authentication data registration table for registering the device state of the authentication target device as authentication data, an authentication data collecting unit for collecting authentication data from the authentication target device, the collected authentication data, and authentication data registered in the table , The authentication is performed on all the authentication target devices that constitute the network, the change in the configuration of the entire network including the authentication target device is detected, and the change in the network is detected due to the mismatch. An authentication server comprising an access blocking control unit that blocks access to important data, and
With
In the authentication data registration table, a part of the network configuration of registration contents is intentionally changed to be different from the actual configuration, and the device state of the authentication target device is set to be different from the normal device state. By registering authentication data, the access blocking control unit performs authentication on the authentication target device constituting the network when accessing the important data, thereby causing the verification mismatch of the authentication data to occur. Block access to
Authentication system which is characterized a call.

Images