JP4689236B2 - Unauthorized operation prevention control method and unauthorized operation prevention program - Google Patents

Description

  The present invention relates to an unauthorized operation prevention control technique for preventing unauthorized operation of information, and more particularly to a terminal control method and a control program for preventing unauthorized operation using an operating system of a user terminal. .

As this type of control technology, for example, a financial information processing system shown in Patent Document 1 below is known.
According to this financial information processing system, functions such as business performance inquiry, customer inquiry, and customer attribute inquiry are given to each terminal by introducing software to the terminal. In addition, a permission flag for giving the authority to use each function to each terminal is set for each function. The software administrator controls the authority to use the terminal based on the presence or absence of the permission flag.

More specifically, for a function with a permission flag, a menu button for using this function is displayed on the display of the terminal. In addition, a function without a permission flag is not displayed on the display, and the user cannot use this function from the terminal. That is, by controlling the display and non-display of the menu button, the authority to use various inquiries is imposed on the terminal.
JP 2003-323389 A

  By the way, conventionally, in order to restrict the use of the functions of the terminal, it is necessary to control the software level such as whether or not the menu button is displayed. In addition to the original functions of the software, a unique program required for controlling the usage authority is installed. Must be built into the software.

  In addition, in order to set the usage authority for the terminal, it is necessary to newly introduce software having a function required for controlling the usage authority in place of the previous software. For this reason, the use authority cannot be reflected on other software such as other text creation software and image processing software installed in the terminal and lacks versatility.

Furthermore, in the method of controlling access from the outside using a management console in which an administrator performs access control from the outside for setting of each user terminal under strict domain management, the user sets ON / OFF of access control. In order to do this, complicated operations had to be performed, and no one could easily set the settings.
Even if the settings can be made safely, there are many cases where the terminal itself has to be restarted in order to make the settings effective, and it is often recognized that the settings themselves are troublesome.

  The present invention has been made in view of such a background, has an excellent versatility for each terminal, and can be set to prevent unauthorized operations quickly with simple operations. The issue is to provide

In order to solve the above problems, the present invention employs the following method.
That is, the present invention is an unauthorized operation prevention control method for preventing unauthorized operation of information in a terminal, wherein the terminal is an operation item of the information defined in accordance with an operation function of an operating system installed in the terminal. Outputting to a display device connected to the terminal;
A step of accepting a request for setting a usage right for an operation in the operation item; a step of reflecting the setting content of the usage right in an operation policy of the operating system; and a basic operation of the operation policy in which the setting content is reflected The step of storing the policy in the mirror database, the step of storing the operation policy set after storing the basic operation policy in the main database, the setting items of the basic operation policy and the setting items of the operation policy are compared. Then, a step of determining the difference and a step of restoring the operation policy to the same setting items as the basic operation policy when there is a difference in the determination result are executed.

  According to this control method, the operation items are determined according to the operation function of the operating system (OS) installed in the terminal (user terminal). Here, the operating function of the operating system corresponds to basic functions of the operating system such as printing and copying that can be shared in the operation of various files (including program files). In the present invention, this operating system has the operating function. Operation items are defined by function.

  Further, it is preferable that the operation items displayed on the display device of the terminal are displayed as a screen shown in a table type so that setting of use authority can be input for each operation item.

  And a step of discriminating a difference between the operation requested of the terminal and the operation policy in which the setting contents are reflected, and a step of receiving a request for an operation contrary to the operation policy and restricting the operation. . Then, the use authority of the user terminal is controlled by reflecting this setting item in the operation policy of the operating system of the terminal.

  In the present invention, the operation policy corresponds to the authority to use the operation function of the operating system, and the function that can be used on the operating system is controlled by reflecting the setting items for the operation item of information in the operation policy. ing.

  Therefore, even if files and program files having different functions and types can be run on the operating system, the use authority can be appropriately set for each of them by introducing this control method.

  Further, in the terminal according to the present invention, identification information for identifying the terminal is given to the administrator of the terminal, and the step of determining whether or not the administrator is based on the identification information And a step of permitting a use authority setting operation when it is determined that the user is an administrator.

  In this method, when an operation that violates the operation policy is requested, this operation is restricted to prevent unauthorized operation of information.

  Furthermore, according to this method, only an authorized administrator can perform a usage authority setting operation from the screen of the display device of the terminal.

  Further, according to the present invention, when there is a difference between the basic operation policy and the operation policy, the altered operation policy can be restored by restoring the operation policy to the same setting items as the basic operation policy.

An unauthorized operation prevention program for preventing unauthorized operation of information on a terminal , the operation items of the information determined in accordance with an operation function of an operating system installed in the terminal being displayed on a display device connected to the terminal A step of outputting, a step of accepting a request to set usage authority for the operation in the operation item, a step of reflecting the setting content of the usage right in the operation policy of the operating system, and the setting content being reflected Storing an operation policy as a basic operation policy in a mirror database; storing an operation policy set after storing the basic operation policy in a main database; setting items of the basic operation policy and setting of the operation policy Compare items to determine the differences And step, when there are differences on the determination result, step a, it can be executed by a computer for manipulation protection program to restore the operation policy in the basic operating policies similar set items.

  The program of the present invention includes a step of determining a difference between an operation requested for the terminal and an operation policy in which setting contents are reflected, a step of receiving an operation request against the operation policy, and restricting the operation, Is executed by a computer.

  In the program of the present invention, the terminal manager is given identification information for identifying the manager, and the step of determining whether or not the manager is based on the identification information; And a step of allowing a use authority setting operation to be performed by a computer when it is determined that the user is an administrator.

  As described above, according to the present invention, it is possible to provide a technique for preventing unauthorized operation that is easy to introduce into a terminal and is rich in versatility that can be applied to other software having different functions.

Preferred embodiments of the present invention will be described below with reference to the drawings.
As shown in FIG. 1, the system example shown in the present embodiment includes a user terminal 1 as a terminal that processes various files F1 and program files F2 (hereinafter collectively referred to as files F) to be used, And a central console server 2 for storing data required for system management.

  The user terminal 1 is a general-purpose computer equipped with a general-purpose operating system 3 (OS), and includes a main control device (CPU), a main storage device (RAM), a hard disk drive device (HDD), and a CD-ROM drive device (CD-ROM-). DV, communication control unit (NCU), display unit (DSP), keyboard, mouse, etc. (not shown).

  The user terminal 1 stores management software according to the present invention. The use authority is appropriately set under the management software for the operation items required for various file F operations such as printing, copying, and moving.

  On the other hand, the central console server 2 is a web computer composed of a main control device, a hard disk drive device, a large-capacity storage device, a communication interface, and the like. Sending / receiving to / from 1. When the system is realized from the central console server 2, the management software is introduced into the central console server 2 and installed on each user terminal 1.

Next, the management software will be described in detail.
The management software includes a resident management program 5 and a monitoring program 6.
The resident management program 5 is incorporated in the user terminal 1 by introducing management software, receives the basic operation policy distributed from the central console server 2, encrypts the received basic operation policy, and stores the hard disk drive of the user terminal 1. Store in the device. Thereby, even when a plurality of user terminals are connected via a network, the operation policy (basic operation policy) cannot be illegally copied between the user terminals, and cracking resistance is increased.

  In the user terminal 1, the main database 7 and the mirror database 8 are constructed by introducing management software. The resident management program 5 stores the basic operation policy received from the central console server 2 in the main database 7 and the mirror database 8. Remember both.

  In this embodiment, the basic operation policy corresponds to a registry necessary for operating various files on a general-purpose operating system, and the basic operation policy corresponds to a default determined by an administrator. In this embodiment, the basic operation policy stored in the main database is stored as an operation policy set by a user (administrator).

The resident management program 5 executes policy editing processing and policy repair processing.
First, the policy editing process will be described. At the time of policy editing, the setting sheet 10 shown in FIG. 2 is displayed on the user terminal 1 to accept the basic operation policy setting change. In the present embodiment, when an ID code set by a user (administrator) is input to the user terminal 1, the setting sheet 10 is displayed on the display device of the user terminal 1. Of course, a dedicated computer for managing access control may be provided to install the program, or the central console server 2 may be used as a management terminal.

  In the policy editing process, the operation policy of the main database 7 is updated according to the basic operation policy that has undergone the setting change on the setting sheet 10. Further, the central console server 2 is accessed as necessary, and the default of the basic operation policy in the central console server 2 is updated.

  As shown in FIG. 2, the setting sheet 10 displays a use authority setting field 10a in units of extensions of various files, and an operating system operation item 10b (function) is displayed for each extension. Has been.

  More specifically, functions such as print, clipboard use, copy, move, rename, etc. are attached to various file extensions such as exe, pdf, tet, jpg, png, and so on. When the user clicks the “add” and “delete” operation buttons 10c and 10d displayed outside the column, whether or not to use the file is set.

  Further, in addition to the “add” and “delete” operation buttons 10c and 10d, a detailed setting button 10f for setting detailed use authority of each file is displayed outside the setting sheet 10, and the detailed setting button 10f is displayed. When clicked, the detailed setting sheet 11 shown in FIG. 3 is displayed on the display device.

A specific file name 11a is displayed on the detailed setting sheet 11, and it is possible to set the presence / absence of the authority to use the operation item for each of them. Therefore, by using this detailed setting sheet 11, it is possible to set the operation policy in detail for each specific file while inheriting the basic operation policy.

Next, the policy protection function will be described.
The policy protection function grasps whether or not the operation policy has been falsified based on the difference between the operation policy stored in the main database 7 and the basic operation policy stored in the mirror database 8. Further, when there is an unauthorized alteration, the update history of each operation policy is referred to, and the operation policy that seems to have been altered is repaired based on the basic operation policy.

Next, the monitoring program 6 will be described.
The monitoring program 6 operates behind the operating system 3 and monitors operations on various files F of the user terminal 1. In addition, referring to the main database 7, the user terminal 1 is authorized to use the user terminal 1, and when an operation that violates the operation policy is requested, the operation is restricted to prevent unauthorized operation of the file F by the user terminal 1. To do.

  Further, the monitoring program 6 executes all lock processing for temporarily blocking operations on various files F. More specifically, when an operation for requesting execution of all lock processing is performed in the user terminal 1, the monitoring program 6 detects the operation and executes all lock processing.

  In this all lock process, all operation items defined in the operation policy are temporarily disallowed, and the authority to use the operation on the file of the user terminal 1 is revoked. In the present embodiment, as an operation for requesting all lock processing, an operation on the all lock screen 13 displayed on the user terminal 1 and a specific operation with a mouse or the like are requested. Detected as an operation.

  Next, a processing routine related to the processing of the management software described above will be described with reference to the flowchart shown in FIG.

  First, after the operating system 3 is activated, the CPU of the user terminal 1 executes the resident management program 5 and the monitoring program 6 (step 101). Subsequently, the CPU executes a process of receiving the basic operation policy distributed from the central console server 2 and storing it in the main database 7 and the mirror database 8 (step 102).

  When the central console server 2 receives a basic operation policy or operation policy setting operation request from the user terminal 1 (step 103), the central console server 2 transmits data related to the setting sheets 10 and 11 to the user terminal 1. Then, it is output and displayed on the screen of the display device of the user terminal 1 (step 104).

  Then, the CPU of the user terminal 1 receives a setting operation for use authority for each operation item in the setting sheets 10 and 11 (step 105), and executes a process of updating or newly storing the operation policies of the databases 7 and 8. (Step 106).

  Subsequently, the monitoring program 6 starts monitoring the operation state of the user terminal 1 with respect to the various files F (step 107). Further, when there is an operation request for the target file F in the user terminal 1 (step 108), the monitoring program refers to the main database 7 (step 109) and determines whether or not the operation request is against the operation policy. A determination is made (step 110).

Further, when it is determined in step 110 that the operation request is contrary to the operation policy (step 110: YES), this operation request is restricted (step 111), and the display device of the user terminal 1 is notified of the unauthorized operation. (Step 112).

  On the other hand, in response to a request for an operation given a use right that satisfies the operation policy (step 110: NO), this operation is permitted and reflected in the operation of the file F (step 113). Then, the processing routine is temporarily exited.

  The resident management program 5 executes the policy restoration process at an appropriate timing separately from the above processing routine.

The operation policy repair process is performed according to the process routine shown in FIG.
First, in accordance with the resident management program 5, the CPU of the user terminal 1 refers to each operation policy of the main database 7 and the mirror database 8 at an appropriate predetermined timing such as when the operating system 3 is started (step 201).

  Subsequently, the resident management program 5 compares the setting items of the operation policy and the basic operation policy stored in the main database 7 and the mirror database 8 (step 202), and discriminates the difference (step 203). If they are different, it is considered that the operation policy has been tampered with, the new operation policy is repaired in accordance with the basic operation policy (step 204), and this processing is terminated.

Next, all lock processing executed by the monitoring program 6 will be described with reference to the flowchart shown in FIG.
First, as the monitoring program 6 is executed, the CPU of the user terminal 1 monitors the presence / absence of an operation requesting execution of all lock processing when the operation state is monitored (step 301). When there is an operation for requesting execution of all lock processing, control is performed to lock the use of all operation items set in the operation policy by executing all lock processing (step 302).

  Further, the operation state of the user terminal 1 is continuously monitored and, for example, the presence / absence of an operation for requesting the stop of all lock processing, such as whether a specific operation is input from the mouse, is detected (step 303). If there is an operation for requesting the release of all lock processing, the use authority of each operation item is restored according to the operation policy (step 304), and the processing routine is temporarily exited.

  As described above, according to the terminal control method of the present invention, the operation item of information is determined in accordance with the operation function of the operating system 3 of the user terminal 1, and the determined operation item is output to the sheet to be operated. Accepts usage authority setting operations for. In addition, the authority to use the operation for each file F is controlled by reflecting the setting items of the sheet in the operation policy of the operating system 3 of the user terminal 1.

  In other words, in order to prevent the unauthorized operation of the terminal by reflecting the setting items related to the use authority of the operation item in the operation policy of the operating system 3, even a file or a program having a different function can operate on the operating system 3. For example, the usage authority can be individually set for each control method.

  Therefore, it is not necessary to prepare software having a fraud prevention function for each function, and the introduction to the terminal is facilitated. Moreover, since it corresponds also to the other software which has a different function, it is rich also in versatility.

Further, according to the control method of the present embodiment, the user can set the presence / absence of usage authority from the setting sheets 10 and 11 displayed in a tabular format on the screen of the user terminal 1. This
The user can grasp the setting contents at a glance and can set the use (access) authority for each file with a simple operation.

  Furthermore, according to the control method of the present embodiment, the configuration is reflected in the operation policy of the operating system installed in the user terminal 1, so when the usage authority is set from the setting sheets 10 and 11, the moment The setting can be made effective.

The above-described embodiment is merely an embodiment of the present invention, and details thereof can be changed according to various specifications.
For example, in the above-described embodiment, all lock processing is executed at a specific operation on the user terminal 1, but all lock processing is automatically executed even when the main database 7 and the mirror database 8 are damaged. It may be.
Further, for a damaged database, the basic operation policy can be read again from the central console server 2 to restore the database.

  In addition, for data transmission / reception between the central console server 2 and the user terminal 1, a public key infrastructure (PKI), that is, a public key cryptosystem may be employed. In addition to this, the central console server 2 can define and distribute an access policy for a specific application, and it is preferable that the user who installed the application can immediately reflect the access policy.

  In storing the operation policy for the database, the unique ID of the user terminal 1 may be taken into the encryption process, and the operation policy may be stored in the database for each user terminal 1. In this case, an operation policy can be set for each user terminal 1, and unauthorized tampering using the operation policy of another user terminal can be prevented.

  In this embodiment, the user terminal 1 is used as an administrator terminal using an ID code issued by an administrator. The ID code issued by the administrator includes a database state (for example, free space). ) And ID code input time and other variables can be incorporated to enhance security characteristics for database access.

  The various items described above can be combined as much as possible without departing from the problems and technical ideas of the present invention.

The figure which shows the structural example of the system which concerns on this Embodiment. The block diagram of the screen which shows the setting sheet which concerns on this Embodiment. The block diagram of the screen which shows the detailed setting sheet | seat which concerns on this Embodiment. The flowchart which shows the processing content of the management software which concerns on this Embodiment. The flowchart which shows the processing content of the operation policy restoration process which concerns on this Embodiment. The flowchart which shows the processing content of all the lock processing which concerns on this Embodiment.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 User terminal 2 Central console server 3 Operating system 5 Resident management program 6 Monitoring program 7 Main database 8 Mirror database 10 Setting sheet 10a Setting column 10b Operation item 10c Operation button 10d Operation button 10f Detailed setting button 11 Detailed setting sheet 11a File name 13 All lock screen F file F1 Various files F2 Program file

Claims (6)

An unauthorized operation prevention control method for preventing unauthorized operation of information on a terminal,
The terminal
Outputting an operation item of the information determined in accordance with an operation function of an operating system installed in the terminal to a display device connected to the terminal;
Receiving a request to set usage authority for the operation in the operation item;
Reflecting the setting content of the usage right in the operation policy of the operating system;
Storing the operation policy reflecting the setting contents as a basic operation policy in a mirror database;
Storing the operation policy set after storing the basic operation policy in a main database;
Comparing the setting items of the basic operation policy with the setting items of the operation policy to determine the difference;
When there is a difference in the determination result, the operation policy is restored to the same setting items as the basic operation policy;
An unauthorized operation prevention control method characterized by executing Determining a difference between an operation requested for the terminal and an operation policy in which the setting content is reflected;
Receiving a request for an operation that violates the operation policy and regulating the operation;
2. The method for preventing unauthorized operation according to claim 1, wherein: Identification information for identifying the administrator of the terminal is given to the administrator of the terminal, and determining whether or not the administrator is based on the identification information;
A step of permitting the use authority setting operation when it is determined to be an administrator;
The unauthorized operation prevention control method according to claim 1 or 2, characterized in that: An unauthorized operation prevention program for preventing unauthorized operation of information on a terminal,
Outputting the operation items of the information determined in accordance with an operation function of an operating system installed in the terminal to a display device connected to the terminal;
Receiving a request to set usage authority for the operation in the operation item;
Reflecting the setting content of the usage right in the operation policy of the operating system;
Storing the operation policy reflecting the setting contents as a basic operation policy in a mirror database;
Storing the operation policy set after storing the basic operation policy in a main database;
Comparing the setting items of the basic operation policy with the setting items of the operation policy to determine the difference;
When there is a difference in the determination result, the operation policy is restored to the same setting items as the basic operation policy;
An unauthorized operation prevention program that can be executed by a computer. Determining a difference between an operation requested for the terminal and an operation policy in which the setting content is reflected;
Receiving a request for an operation that violates the operation policy, and regulating the operation;
The unauthorized operation prevention program according to claim 4, which can be executed by a computer. Identification information for identifying the administrator of the terminal is given to the administrator of the terminal, and determining whether or not the administrator is based on the identification information;
A step of permitting the use authority setting operation when it is determined to be an administrator;
The unauthorized operation prevention program according to claim 4 or 5 , wherein the program can be executed by a computer.

Images