JP4699939B2 - Access control method - Google Patents

Description

  The present invention relates to an access control method, and more particularly to a method for restricting reference to documents including confidential information at a work position.

  Conventionally, since confidential information is included in documents such as maintenance manuals and work procedure manuals, access control is performed by the management device of the center, and the user is restricted by the set user ID / password. .

  Further, Patent Document 1 further describes how to prevent the mobile terminal from being illegally used before it is lost or stolen, and to prevent peeping of confidential information in public places. In order to take security measures, encrypt data before putting confidential data in the mobile device, check the location of the mobile device when using confidential data, determine whether it is an authorized location, Then, it is disclosed to restrict the places where the confidential data can be used in the mobile terminal by permitting the use of the data after decryption and not permitting the use if the place is not authorized.

In addition, a previous patent application related to the present applicant describes a method for preventing unauthorized use and information leakage in a terminal by using a geographical position (outdoor, relatively wide range) such as GPS. This is different from a system that limits applications and information browsing that can be used in limited indoor locations (in front of customer equipment, maintenance personnel rooms, etc.) in the invention.
JP 2003-256287 A

  However, since users with access restrictions can refer to documents regardless of location, there is a possibility of being peeped by third parties using mobile devices etc. in public places such as trains. There was a problem that there was.

  An object of the present invention is to restrict a predetermined user so that a document can be referred to only at a predetermined location.

  The present invention refers to documents such as maintenance manuals and work procedure manuals used in maintenance work, etc., and identifies the current position with the worker carrying the user ID card with wireless communication function and the access point installed at the work place. By doing so, it is characterized by providing a method of restricting reference at the use position.

  According to the present invention, it is possible to refer to a document including confidential information only at a predetermined location, so that the threat of information leakage can be reduced.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings.

FIG. 1 shows a configuration of a remote access system in which a computer room and a center of a customer site that can access documents via a network are connected via a public network / Internet network 4. In FIG. 1, a computer room 1 in which an access point (1) is arranged, a computer room 2 in which an access point (2) is arranged, and a center 3 are connected via a public network / Internet network 4. An operator carrying a user ID card 11 with a wireless communication function enters the computer room 2, and includes a user terminal device 12, a communication device 13, a local management device 14, and a user ID confirmation table 15. A storage device 16 and a LAN 17 are arranged, a storage device 21 is arranged in the center 3, and an access control list (ACL) 23, a user location information list 24, a manual, a procedure manual, etc. are stored in the storage device 21. Documents 25 are provided. Also, a center management device 26, a manager terminal device 27, and a communication device 28 are arranged.

FIG. 2 shows a flowchart of the access control method according to the first embodiment of the present invention in which the reference of documents including confidential information is restricted at the work position. In the flowchart shown in FIG.
In step (1), the access point transmits an inquiry signal. In step (2), the user ID card with wireless communication function transmits a user ID data signal. In step (3), the access point In step (4), the local management device transmits user ID data, location #, and confirmation time. In step (5), the center management device transmits user ID data and location #. In step (6), the manager terminal device sends approval / non-approval input by the administrator. In step (7), the user terminal device sends the document to the user terminal device. When the reference request is made, a document access request is transmitted. In step (9), a user ID / password request is transmitted. In step (10), the user ID / password request is transmitted. In step (10), the center management apparatus transmits a document display data / unreferenceable message. .
The detailed flow is shown in FIG. 6 (user ID card with wireless communication function), FIGS. 7 to 9 (access point), FIGS. 10 to 12 (local management device), FIGS. 15 to 19 and 22 (center management device), FIG. 23 (terminal device for users) and FIG. 24 (terminal device for managers).

FIG. 3 shows a situation where the user ID card 21 with a wireless communication function receives an inquiry signal and transmits a user ID data signal.
In FIG. 3, 31 is an antenna, 32 is a memory unit, 33 is a control unit, 34 is a reception unit, 35 is a transmission unit, 36 is a user ID storage unit, and 37 is a power supply unit.
When the wireless communication function-equipped user ID card 21 receives the inquiry signal at the reception unit 34, the control unit 33 reads the user ID data signal from the user ID storage unit 36, and the transmission unit 35 receives the user ID data signal from the antenna 31. Send it out.

FIG. 4 shows a situation in which the access point transmits an inquiry signal and receives a user ID data signal. 4, 41 is an antenna, 42 is a memory unit, 43 is a control unit, 44 is a reception unit, 45 is a transmission unit, 46 is a timer unit, 47 is a power supply unit, 48 is a LAN interface unit, and 49 is a LAN connector. ing.
In FIG. 4, the access point transmits an inquiry signal from the antenna 41, and the received user ID data signal is received by the receiving unit 44 via the antenna 41. The access point is connected to other devices via a LAN interface unit 48 via a LAN connector 49, and transmits the received user ID data signal to other devices via the LAN.

FIG. 5 shows an operation when an operator who carries a user ID card with a wireless communication function enters a computer room equipped with an access point.
When an operator carrying a user ID card with a wireless communication function enters the inquiry signal receivable area of the computer room, the user ID card with a wireless communication function transmits a user ID data signal in response to the inquiry signal. The access point can recognize whether the worker who has entered the room by receiving the employee ID data is an employee.

  FIG. 6 is a processing flow when an inquiry signal (radio wave) is received by the user ID card with a wireless communication function. In FIG. 6, when the processing flow at the time of reception of the inquiry signal (radio wave) of the user ID card with wireless communication function is started in step 61, the reception unit receives the inquiry signal (radio wave) in step 62, and in step 63 In the control unit, an inquiry signal (radio wave) is determined. In step 64, it is determined whether or not there is an inquiry signal. If there is an inquiry signal, in step 65, the control unit reads out data for transmission from the ID storage unit (eg, 01XXX), and in step 66, A user ID data signal is transmitted from the transmission unit, and in step 67, the processing flow is terminated.

  FIG. 7 is a processing flow at the time of initial setting of the access point. In FIG. 7, when the processing flow at the time of initial setting of the access point is started in step 71, the location # of the installation location is set in the memory unit (eg, A-2) in step 72, and in step 73, the memory unit In step 74, an inquiry signal transmission interval is set (for example, an interval of 60 seconds). In step 74, a local management device name (local management device address) is set in the memory unit.

  FIG. 8 is a processing flow of transmission processing of an access point inquiry signal (radio wave). In FIG. 8, when the processing flow of the access point inquiry signal (radio wave) transmission process is started in step 81, the control unit counts up the timer unit in step 82, and in step 83, the control unit Comparison processing of the count of the timer unit and the transmission interval setting of the memory unit is performed. In step 84, the transmission interval is determined. If the transmission interval is Y, the control unit resets the count of the timer unit in step 85, and in step 86, an inquiry signal is transmitted from the transmission unit. In step 87, the processing flow is terminated. In step 84, when the transmission interval is N, the process proceeds to step 82 and the process is repeated.

  FIG. 9 is a processing flow when an inquiry signal (radio wave) is received from the access point. In FIG. 9, when the processing flow at the time of reception of the inquiry signal (radio wave) of the access point is started in step 91, the user ID data signal (radio wave) is received by the receiving unit in step 92. The user ID data signal (radio wave) is determined by the control unit. In step 94, the presence or absence of the user ID data signal is determined. If the user ID data signal is present, the control unit controls the user ID data in step 95. The user ID data is read from the signal. In step 96, the control unit reads the local management device name from the memory unit. In step 97, the control unit reads the location # from the memory unit. User ID data and location # to local management device Transmitted, at step 99, the processing flow is ended. In step 94, when there is no user ID data signal, the process proceeds to step 99 and the processing flow is terminated.

  FIG. 10 is a processing flow at the time of initial setting of the local management device. In FIG. 10, when the processing flow at the time of initial setting of the local management apparatus is started in step 101, a new user ID confirmation table is created in step 102, and a deletion confirmation interval of the user ID confirmation table is registered in step 103 ( (Example: 600 second interval) In step 104, the name of the center management device (center management device address) is registered. In step 105, the processing flow is terminated.

  FIG. 11 is a processing flow when the user ID / location # of the local management apparatus is received. In FIG. 11, when the processing flow at the time of receiving the user ID / location # of the local management apparatus is started in step 111, the user ID / location # is received via the LAN and the user ID / location # is recorded in step 112. In step 113, the current user ID confirmation table is searched for a “row” of the user ID / location #. If there is a corresponding row in step 114, the current user ID confirmation is performed in step 115. A new row is added to the table. In step 116, the current time is recorded in the newly added row in the recorded user ID / location # and confirmation time. In step 117, the user ID / location # / confirmation time is recorded as the user position. As additional information, center management device via communication device Transmitted, at step 117, the current time to check the time of the corresponding line is recorded (updated rows), in step 119, the processing flow is ended. In step 114, if there is no corresponding line, the process proceeds to step 118, the current time is recorded (update the line) at the confirmation time of the corresponding line, the process proceeds to step 119, and the processing flow is ended.

  FIG. 12 is a processing flow at the time of confirmation of deletion of the user ID confirmation table of the local management device. In FIG. 12, when the processing flow for confirming the deletion of the user ID confirmation table of the local management device is started in step 121, the deletion confirmation interval period of the employee ID confirmation table is confirmed in step 122 (OS timer function). In step 123, the current user ID confirmation table is searched for a row that is older than the previous deletion confirmation time. If there is a corresponding row in step 124, the user ID of the corresponding row is checked in step 125. Location # is transmitted as user position deletion information to the center management apparatus via the communication apparatus, the corresponding line is deleted in step 126, and the processing flow is terminated in step 127. If there is no corresponding line in step 124, the process proceeds to step 119, and the processing flow ends.

  FIG. 13 is a user ID confirmation table (recording example). In FIG. 13, the user ID, location #, and confirmation time are recorded in a table format in the user ID confirmation table.

  FIG. 14 is a diagram illustrating an example of confirmation of deletion in the user ID confirmation table. It is shown that a line is added to the user ID confirmation table, a line is updated, a line is deleted, and a deletion is confirmed.

  FIG. 15 is a processing flow when the center management apparatus receives additional information on the user position. In FIG. 15, when the processing flow at the time of receiving additional information on the user position of the center management apparatus is started in step 151, additional information on the user position is received via the communication apparatus in step 152, and the user ID, location #, The confirmation time is recorded, and in step 153, the recorded user ID / location # line is searched from the user position information list. In step 154, the processing flow is terminated.

  FIG. 16 is a processing flow when the center management apparatus receives deletion information on the user position. In FIG. 16, when the processing flow at the time of receiving the deletion information of the user position of the center management apparatus is started in step 161, the deletion information of the user position is received via the communication apparatus in step 162, and the user ID / location # is set. In step 163, the line of the user ID / location # recorded from the user position information list is searched. In step 164, the corresponding line is deleted from the user user position information list. In step 165, the processing flow is finish.

  FIG. 17 is a part of a processing flow when the center management apparatus receives a document access request. In FIG. 17, when the processing flow at the time of receiving the document access request of the center management apparatus is started in step 171, the document access request is received via the communication apparatus in step 172, and the request source name (request source address) is received. In step 173, the user ID / password information is received and recorded (temporary storage memory). In step 174, the recorded user ID / password line is searched from the access control list. In step 176, the line of the user ID recorded from the user location information list is searched for. In step 177, if the corresponding line exists, the user is added to the line of the access control list in step 177. Location # of location list row is included Looking, the process proceeds to A. If there is no corresponding row in step 176 and step 178, the process moves to B.

FIG. 18 is a part of a processing flow at the time of initial setting of the center management apparatus. In FIG. 18, when location # is N in step 181 from A, in step 182, the user ID / location # is transmitted to the management terminal as approval request information, and in step 183, a non-approval or timeout is set. If N , the approval information is received in step 184, the location # is additionally recorded in the corresponding row of the access control list, the confirmation time of the corresponding location # is updated in step 185, and in step 186 Then, the document information requested for reference is transmitted to the request source, and the processing flow is ended in step 187. On the other hand, if the location # is Y in step 181, the process proceeds to step 185, where the confirmation time for the corresponding location # is updated in step 185, and in step 186, the document information requested for reference is transmitted to the request source. In step 187, the processing flow ends. On the other hand , if the non-approval or timeout is Y in step 183, the process proceeds to B, and the process proceeds from B to step 188. In step 187, the processing flow is terminated.

  FIG. 19 is a processing flow at the time of initial setting of the center management apparatus. In FIG. 19, when the processing flow of the processing flow at the time of initial setting of the center management apparatus is started in step 191, the access control list deletion confirmation interval is registered (eg, 6-month interval) in step 192, and in step 193. Then, the administrator terminal device name (manager terminal address) is registered, and in step 194, the processing flow is terminated.

  FIG. 20 is an access control list (recording example). In the access control list of FIG. 20, the user ID, password, location #, and confirmation time are recorded in a table format.

  FIG. 21 is a user position information list (recording example). In the user position information list of FIG. 21, the user ID, location #, and confirmation time are recorded in a table format.

  FIG. 22 is a processing flow at the time of confirming deletion of the access control list of the center management apparatus. In FIG. 22, when the processing flow for confirming deletion of the access control list of the center management apparatus is started in step 221, the access control list deletion confirmation interval cycle is confirmed (OS timer function) in step 222. In step 224, if there is a corresponding line in the location #confirmation time of the current access control list that is not newer than the previous deletion confirmation, the corresponding line is deleted in step 225. In step 226, the processing flow ends.

  FIG. 23 is a processing flow at the time of a document reference request of the user terminal device. In FIG. 23, when the processing flow at the time of the document reference request of the user terminal device is started in step 231, a document access request is transmitted to the center management device by the browser function in step 232. The user ID / password input request is received and the input screen is displayed. In step 234, the input user ID / password is transmitted to the center management apparatus. In step 235, a reply is received. In step 236, the document is received. If the information is determined and the document information is Y, the document is displayed on the browser in step 237, and the processing flow is terminated in step 238. If the document information is N in step 236, a message “No document reference authority” is displayed in the browser in step 237, and the process flow ends in step 238.

  FIG. 24 is a processing flow when the administrator terminal device requests a document reference. In FIG. 24, when the processing flow at the time of the document reference request of the manager terminal device is started in step 241, the approval request information for the user ID / location # is received in step 242, and the user ID is received in step 243. The location # and the approval / non-approval input request screen are displayed. In step 244, the input approval / non-approval is transmitted to the center management apparatus. In step 245, the processing flow ends.

  The present invention can be applied to an information leakage prevention system or a work support system, and has already been applied to a maintenance work (see electronic manual) support system and a compliance service.

FIG. 1 is a diagram showing a configuration of a remote access system in which a computer room at a customer site and a center are connected via a public network / Internet network 4. FIG. 2 is a flowchart of the access control method according to the first embodiment of the present invention that restricts reference to documents including confidential information at a work position. FIG. 3 is a diagram illustrating a situation where the user ID card 21 with a wireless communication function receives an inquiry signal and transmits a user ID data signal. FIG. 4 is a diagram illustrating a situation where the access point transmits an inquiry signal and receives a user ID data signal. FIG. 5 is a diagram showing an operation when an operator carrying a user ID card with a wireless communication function enters a computer room equipped with an access point. FIG. 6 is a processing flow when an inquiry signal (radio wave) is received by the user ID card with a wireless communication function. FIG. 7 is a diagram showing a processing flow at the time of initial setting of an access point. FIG. 8 is a diagram showing a processing flow of an access point inquiry signal (radio wave) transmission process. FIG. 9 is a diagram showing a processing flow when receiving an inquiry signal (radio wave) of the access point. FIG. 10 is a processing flow at the time of initial setting of the local management device. FIG. 11 is a processing flow when the user ID / location # of the local management apparatus is received. FIG. 12 is a processing flow at the time of confirmation of deletion of the user ID confirmation table of the local management device. FIG. 13 is a user ID confirmation table (recording example). FIG. 14 is a diagram illustrating an example of confirmation of deletion in the user ID confirmation table. FIG. 15 is a processing flow when the center management apparatus receives additional information on the user position. FIG. 16 is a processing flow when the center management apparatus receives deletion information on the user position. FIG. 17 is a part of a processing flow when the center management apparatus receives a document access request. FIG. 18 is a part of a processing flow at the time of initial setting of the center management apparatus. FIG. 19 is a processing flow at the time of initial setting of the center management apparatus. FIG. 20 is an access control list (recording example). FIG. 21 is a user position information list (recording example). FIG. 22 is a processing flow at the time of confirming deletion of the access control list of the center management apparatus. FIG. 23 is a processing flow at the time of a document reference request of the user terminal device. FIG. 24 is a processing flow when the administrator terminal device requests a document reference.

Explanation of symbols

1 Computer Room 2 Computer Room 3 Center 4 Public Network / Internet Network 11 User ID Card with Wireless Communication Function 12 User Terminal Device 13 Communication Device 14 Local Management Device 15 User ID Confirmation Table 16 Storage Device 17 LAN
21 storage device 23 access control list (ACL)
24 User location information list 25 Documents such as manuals and procedure manuals 26 Center management device 27 Terminal device for administrator 28 Communication device 31 Antenna 32 Memory unit 33 Control unit 34 Reception unit 35 Transmission unit 36 User ID storage unit 37 Power supply unit 41 Antenna 42 Memory 43 Controller 44 Receiver 45 Transmitter 46 Timer 46 Power Supply 48 LAN Interface 49 LAN Connector

Claims (7)

In an access control system comprising a wireless access point, a local management device, a user terminal device, and a center management device connected to the local management device via a network, installed in a work place where maintenance work is performed,
When the operator who performs the maintenance work makes a reference request for documents to be used in the maintenance work by the user terminal device, the center management device is configured so that the wireless access point carries wireless communication carried by the worker. Obtained by wireless communication from a functional user ID card , transmitted to the local management device, received from the local management device via the network and the user ID of the worker received from the local management device via the network by identifying the current position of the worker with the the said radio access point location information said installed in the work place, access control method which is characterized in that the reference limiting the worker at the use position . The access control method according to claim 1,
A local management device of a user site identified by a device name or an address name is connected to the center management device via the network, and a plurality of wireless access points are connected to each of the local management devices, The center management apparatus manages the user ID and location information of the worker at the plurality of access points of the local management apparatus at the user site . The access control method according to claim 1,
An administrator terminal device is connected to the center management device, and the administrator terminal device modifies an access control list including the user ID and the location information, or approval / non-approval referring to the access control list. The control information is transmitted to the center management apparatus . In the access control method according to any one of claims 1 to 3 ,
An access control method, wherein user location authentication and user ID / password authentication are performed when referring to the documents . In the access control method according to any one of claims 1 to 3 ,
An access control method characterized in that user location authentication and user ID / password authentication are performed when applications such as maintenance tools stored in the center management device are downloaded to the user terminal device during use . In the access control method according to any one of claims 1 to 3,
An access control method characterized in that management is facilitated by specifying the location information not by absolute position but by relative position. In the access control method according to any one of claims 1 to 3,
By installing the local management device at the work site, it is possible to detect that the worker has left the communication area without constantly monitoring the communication state of the user ID card on the center management device side. control method.

Images