JPH01120662A - Foul application preventing system - Google Patents

Abstract

PURPOSE:To prevent the foul applications of facilities related to a computer by comparing information supplied from users with data stored in each data storing means to decide the entrance/leaving to and from the facilities as well as the propriety for applications of those facilities. CONSTITUTION:When a user uses the facilities, the user has the input of an access device carried with him/her to a facility port check device 2, a section port check device 3 or an equipment check device 4. These check devices 2-4 compare the information on the access device with the data stored in a user condition file 6, a using condition file 7 or a condition file 8 to check the qualification of the user. Thus the entrance/leaving to and from facilities is decided together with the propriety for applications of those facilities.

Description

[Detailed Description of the Invention] [Industrial Application Field] The present invention relates to a system for preventing unauthorized use in the use of important equipment, and in particular, the present invention relates to a system for preventing unauthorized use in the use of important equipment, and in particular, to prevent unauthorized use of facilities having multiple compartments and devices for which it is desirable to restrict access rights and usage patterns. Concerning prevention systems.

[Conventional technology]

In recent years, the use of computers has been expanding due to the use of networks and the like. With this trend, the social and industrial impact of computer equipment usage is increasing, and countermeasures are becoming important.

Conventionally, as stated in the Japan Information Processing Development Department [Survey Report on the Development of Security Technology for Computer Systems (JIPDEC Document 58-sool) J], ■Password management, Access management is performed using methods such as usage management.

■Also. Regarding the entire equipment, management methods such as personal authentication management using authentication devices such as IC cards have been developed.

I was in a situation like this.

[Problem that the invention seeks to solve]

Conventional methods for preventing unauthorized use as described above include:

■Many of the check results at each checkpoint were determined independently. Therefore, the relationship between each check was either inconsequential or limited. Therefore, in reality, the scope of the check was only very limited.For example, if one device is used,
Even if the incident was terminated through fraudulent means, the primary equipment was not sufficiently checked. Or, even if one device was used for a purpose different from the purpose of entry, it could not be checked.

■In addition, the check items also vary depending on the limitations of the hardware used.
It was very limited.

There was a problem.

The present invention has been made in view of the above circumstances, and its purpose is to solve the above-mentioned problems in conventional unauthorized use prevention methods, and to provide an effective method for preventing unauthorized use of computer-related facilities. The purpose is to provide a prevention system.

[Means for solving problems]

The above-mentioned object of the present invention is, firstly, to provide a data storage means for storing user data and a data storage means for storing usage condition data in a system for preventing unauthorized use in facilities where users and scope of use are restricted. means, a data storage means for storing data related to sections/equipment corresponding to the purpose of use, and means for searching data stored in each of the data storage means, and a data storage means for storing data related to a plurality of sections/equipment in the facility. The facility is characterized by comparing information (12) inputted by the user from an input means provided in the facility with data stored in each of the data storage means to determine entry/exit to the facility and availability of equipment (17). By means of an unauthorized use prevention system,
Second, a data storage means for storing user data;
The data storage means includes a data storage means for storing usage condition data, a data storage means for storing data regarding partitions and equipment corresponding to usage purposes, and means for searching data stored in each of the data storage means. Information manually entered by the user using the user's portable device with the user's portable device having 11 functions, and the respective data This is achieved by a system for preventing unauthorized use, which is characterized in that it compares data stored in a storage means to determine whether or not one device can be used when entering or exiting the facility.

[Effect]

In the first system mentioned above.

(1) Install a checkerag device at the entrance/exit of the facility and for every two pieces of equipment in each department.

(2) Each check device compares the information entered by the facility user with pre-registered information regarding the facility user; (3) Comprehensively judges the check results of each check device; Decide whether or not to enter and exit 9 equipment.

In addition, in the above-mentioned second system, (1) check devices are provided at the entrance and exit of the facility and for each of the nine devices in the department section, and users are made to carry portable devices (hereinafter referred to as "access devices");

(2) When passing through a checkpoint, facility users must insert the access device into the checking device of the relevant department for checking.

(3) The above-mentioned check device checks the qualifications of the person wishing to enter the facility, and if the person is qualified, the checkpoint sequence according to the purpose of use and usage conditions such as usage time limits are sent to the access device carried by the user. (4) The checking device is provided by the person wishing to use the relevant department.
In other words, we check whether the sequence of checkpoints is in accordance with the purpose of use and whether the conditions of use such as usage time limits are met, and if the facility is suitable, we will inform the facility user of the equipment in the relevant department. Permit use.

Note that the above checking device simultaneously adds a plurality of check index values such as access time and access conditions to the access device.

Also, access devices carried by facility users.

While facility users are using the facility, access process values (for example,
The total time spent in the facility) may be calculated to perform a self-check to see if access process value restrictions are violated.

〔Example〕

Embodiments of the present invention will be described in detail below with reference to the drawings.

Figure 2 is a diagram showing a situation in which a fraud prevention system, which is an embodiment of the present invention, is applied to a facility.
1 is the target facility, and 15 is a section of facility location 1.

16 is a piece of equipment in the compartment 15, 2 is a facility rotinic device installed at the entrance to the facility location 1, 3 is a compartment rotinic device installed at the entrance to the compartment 15, and 4 is a device installed in relation to the equipment 16. Check device, also 12
indicates an access device carried by the facility user 50.

The outline of the system of this embodiment is as follows. That is, when the facility user 50 uses the facility device 1, he or she inserts the access device [12] into the facility rotary device 2 provided at the facility entrance/exit.

The tM facility check device 2 checks the qualifications of the facility user 50, and if the facility user 50 is qualified, sends the checkpoint sequence and usage conditions according to the purpose of use to the access device 12.
write to.

A similar check is performed each time the facility user 50 passes through the section 15 of each department in the facility 1 or uses each device 16. If there is no problem in the check, an index value such as the access time is added to the access device 2112 carried by the facility user 50.

Further, each time the facility user 50 finishes using each section 15 or each device 16, a completion check is performed.

If there are no problems in this check, facility users 50
are allowed to exit the section 15.

Finally, when the facility user 50 exits from the exit of the facility 1, the facility lotinic device 2 installed at the facility entrance
A full check will be carried out. If there are no problems with this check, the facility user 50 is allowed to leave the facility 1.

FIG. 1 shows a system configuration diagram that is an embodiment of the present invention, in which 1 is a central computer, 2 to 4 are the aforementioned check devices, 5 is a timer, 6 is a user condition file,
Reference numeral 7 indicates a usage condition file, 8 a condition file, and 10 a communication line.

When the central computer 1 receives information on the access device 12 carried by the facility user 50 from each of the checking devices 2 to 4, it reads the files 6 to 8 and checks them.
If there are no problems with access rights and usage conditions, the time is read from the nine-way timer 5 and the items to be recorded in the access device 12 are sent to the corresponding check device.

The user condition file 6 stores the user code of the facility 1, the purpose of use, and the conditions of use corresponding to the user code. In the usage condition file 7, usage sections and A-2 conditions for each usage purpose of the facility facility 1 are stored in routes according to the purpose. The condition file 8 stores temporal changes in usage conditions for equipment in facility 1 (compartment 1 equipment).

FIG. 3 shows the central computer 1. An example of the configuration of the facility Lochnic device 29, the section Lochnic device 32, and the device checking device 4 is shown. In the figure, 51 is a controller;
2 is a determination device, 53 is a memory, 54 is an arithmetic unit, and 21 is a reading unit of the facility rotinic device 2.

Reference numeral 22 indicates the same writing section, 23 indicates the same display section, 31 indicates the reading section of the compartment rotinic device 3, 32 indicates the same writing section, 41 indicates the reading section of the device checking device 4, and 42 indicates the same writing section. This will be explained below.

The facility user 50 inserts the access device @ 12 into the facility rotary device 2 when using the facility equipment 1.

Access equipment! 112, user information 200 is stored, an example of which is shown in FIG. here,
As user information, name code 201. Purpose of use code 202. Usable device code 204. Usable time 20
5. Usage conditions 206 are stored.

The reading unit 21 reads a name code 2 as user information.
01. Purpose of use code 202. Usable device code 20
4. Usable time 205. The usage conditions 206 are read and this information is sent to the controller 51 of the central computer 1.

The operation of the controller 51 is shown in FIG. The controller j-roller 51 determines whether to enter or leave the room based on the input information from the reading section 21 (step 82), and in the case of entering the room, displays the contents of the purpose of use code 202 in the display section +ζ section 23. , the user 50 inputs the purpose of use this time (step 83).

The controller 51 reads the user conditions file and checks the qualifications of the applicant for admission using the determiner 52 to check whether the conditions of use have changed and whether the use is within the specified time based on the information from the timer 5. (Step 85), and if it is suitable, the checkpoint sequence according to the purpose of use is read out from the use condition file 7, and the access time to the facility Lochnik device 2, access conditions, and multiple check index values (total usage time, CPU usage, etc.)
is added and sent to the writing section 22. The total usage time is 1. For example, 70% of the maximum required time is calculated by the calculator 54 and added as a check index value.

The use condition file 7 stores purpose-specific processing information 300, an example of which is shown in FIG. Purpose-based processing information 300 includes checkpoint columns 301 and 3.
02. Purpose 303. Code 304. Terms of Use 305. It consists of a maximum required time 306. The writing unit 22 writes the sent information to the access device 12 of the facility user 50 (step 87). If not (step 86),
A message of refusal of entry to the facility 1 is output on the display section 234 (step 90). After the facility roti-nic device 2 finishes writing the information, the facility user 50 receives the access device 1.
2 (step 88) and open the door 111 (step 89).

When leaving the room in step 82, the controller 51 checks whether the leaving time is within the leaving time range (step 91) and whether the access process values such as CPU usage are within the standard (step 92). After writing the state quantity in the access device [i' 212, the exit gate is opened (step 94).

In FIG.
An example of operation related to this is shown below. What is shown in FIG. 7 is the operation in the case where the correspondence between the one compartment entrance checking device 31 and the equipment checking device 4 with the access device 12 is all performed via the controller 51 of the central computer 1.

When the facility user 50 uses the compartment 15 or the equipment 16, the facility user 50 uses the compartment rotinic device 3 or the equipment check device 4.
Insert the access device 12 into the.

In the access device 12, there is user management information 400 to which a plurality of check index values such as "checkpoint sequence according to purpose of use", "maximum use time", "conditions of use", etc. inputted by the controller 51 are added. Stored. FIG. 8 shows an example of the above-mentioned user management information 400.

The user management information 400 consists of an objective sequence 401 and a result sequence 402, and further includes an objective sequence 40.
1 is code 411. Maximum required time 412. Conditions of use 4
13, the resulting sequence 402 is also code 41
4. Entry time: 415. Exit time 416. CPU usagei
417. It consists of 418 total usage times.

The following explanation will be made regarding the case of the compartment rotinic device 2j3, but the same applies to the case of the device checking device fi4.

The reading unit 31 reads the target sequence 401 as user management information 400 and sends this information to the controller 51 of the central computer 1. The controller 51 is
Step 171) to determine whether to enter or leave the room from the input check device; if entering, use the purpose of use code 2;
02 from the information read through the reading section 31 (step 172), and compares it with the contents of the condition file 8 to see if the usage conditions have changed, and from the information of the timer 5 Check the qualifications of the facility user 50 regarding the following points (steps 173 to 175).
, if the timer 5 is qualified, the information with multiple check index values such as the access time and total time obtained from the timer 5 is sent to the writing unit 32 (steps 176 and 177), and the writing unit 3
2 writes the sent information to the access device 12 held by the facility user 50. After the information writing is completed, the compartment rotinic device 3 returns the access device 12 to the facility user 50 and opens the entrance gate ( Steps 178 and 179).

If the controller 51 leaves the room in step 171,
Check whether it is within the exit time and whether the access process values such as CPU usage are within the standards (steps 181 and 182).
If there is no problem, the exit gate is opened after entering the exit time and state quantity at the time of exit into the access device 12 (steps 183 and 184).

FIG. 9 shows an example of the configuration of the access device 12. In the figure, 71 is a controller, 72 is a memory, 73 is an arithmetic unit,
Reference numeral 74 indicates a timer, and 75 indicates an alarm device.

The controller 71 controls data transmission to the aforementioned check devices 2 to 4 and data reception from the central combination unit 1. Memory 72 stores user information 200 and user management information 400.

When the controller 71 receives the signals from the check devices 2 to 4, it reads the memory 72 and transmits the corresponding information. Further, when data is received from the central computer 1, the information is stored in the corresponding section of the memory 72. The timer 74 sends an activation signal and current time information to the controller 71 at regular time intervals. When the controller 71 receives the activation signal, it reads the memory 72 and learns the process quantities such as the CPU time used by each device and the time of entering the facility, and sends the information to the computing unit 73. The computing unit 73 calculates process index values such as the total CPU time used and the total amount of time used, and sends them to the controller 71. The controller 71 reads the regulation value from the memory 72, compares it with the current value, and if the regulation is exceeded, sends a signal to the alarm device 75 to issue an alarm.

According to the above embodiment, since the facility user's check is performed on multiple items and in chronological order, the following effects can be obtained.

(1) It is possible to manage the behavior of users according to the route according to the purpose of use for each section and device, and it is possible to understand and check users in detail.

(2) Facility use can be managed not only by routes that match the purpose of use, but also by times that match the purpose of use, and it is possible to check users' actions that are not intended for the purpose.

(3) It is possible to manage the user's stay in the facility based on the length of stay, and it is possible to detect actions other than those originally requested, thereby preventing fraudulent actions.

(4) Since the user's actions can be recorded in detail within the access device, fraud can be analyzed after the fact and countermeasures can be devised.

In the above embodiment, the calculation of the process amount is performed in the access device 12, but it is also possible to perform the calculation in the central computer 1. In addition, although the central computer 1 has a file, this file is also stored in the checking devices 12 to 4,
It is also possible to configure the checking device to perform all calculation processing. Furthermore, in the above embodiment, the user check is performed by all the check devices 3 and 4 on the facility user's access device [i! 12, but it is also possible to determine a key checking device in advance and perform the check using only that checking device.

Furthermore, it is possible to check the behavior of facility users not only by inputting and outputting the access device, but also by using direct input from the tM facility users. Furthermore, it is also possible to configure the system to check in a plurality of ways by operating observation equipment (for example, a VTR) in the department in conjunction with the input/output of the access device.

〔Effect of the invention〕

As described above, according to the present invention, in a system for preventing unauthorized use in a facility where users and the scope of use are restricted, the data storage means for storing user data and the data storage means for storing usage condition data are provided. , comprising a data storage means for storing data related to sections and equipment corresponding to the purpose of use, and means for searching data stored in each of the data storage means, and a means for retrieving data stored in each of the data storage means, and a method for storing data related to a plurality of sections and equipment in the facility. Comparing the information input by the user from the provided input means and the data stored in each of the data storage means,
An unauthorized use prevention system that determines whether or not the equipment can be used when entering and exiting the facility, or a data storage means that stores user data, a data storage means that stores usage condition data, and sections and equipment that correspond to the purpose of use. A user-portable device comprising a data storage means for storing data related to data and a means for searching data stored in each of the data storage means and having a data storage function is used to store data in a plurality of sections within the facility.・Input means provided in connection with the equipment compares the information input by the user using the user portable device with the data stored in each of the data storage means, and enters and exits the 9 equipment into the facility. Since the unauthorized use prevention system determines whether or not the computer can be used, it has the remarkable effect of realizing an effective unauthorized use prevention system for preventing unauthorized use of computer-related facilities.

[Brief explanation of the drawing]

Fig. 1 is a block diagram of an unauthorized use prevention system that is an embodiment of the present invention, Fig. 2 is a diagram showing a situation in which the system of the embodiment is applied to a facility, and Fig. 3 is a detailed diagram of each component of the system. FIG. 4 is a diagram showing an example of the configuration of user information stored in the access device, FIG. 5 is a flowchart showing the operation of the controller of the central computer, and FIG. A diagram showing an example of the configuration of purpose-specific processing information stored, FIG. 7 is a flowchart showing an example of the operation of the partitioned Rochnik device 2 Isoki check device, and FIG. 8 is a configuration of user management information stored in the access device. FIG. 9 is a diagram showing an example of the configuration of an access device. 1: Central computer, 2: Facility Rotini device, 3:
Compartment Rotnik Apparatus, 4:! ! i device check device, 5:
Timer, 6: User condition file, 7: Use condition file, 8: Condition file, 10: Communication line, 11: Target facility, 12: Access device, 15: Section of facility, 16:
One device in the section, 50: Facility user. Figure 1 Figure 2 Figure 3 Figure-1 ?

Claims (1)

[Claims] 1. In a system for preventing unauthorized use in a facility where users and scope of use are restricted, a data storage means for storing user data, a data storage means for storing usage condition data, and a purpose of use. and a means for retrieving data stored in each of the data storage means, and an input provided in relation to a plurality of divisions and equipment in the facility. A system for preventing unauthorized use, characterized in that information input by a user from the means is compared with data stored in each of the data storage means to determine entry/exit to the facility and whether or not equipment can be used. 2. Using the time series of the results of comparing the information input by the user from the input means provided in connection with the plurality of sections and equipment in the facility and the data stored in each of the data storage means, The system for preventing unauthorized use according to claim 1, characterized in that the system verifies the legitimacy of facility use. 3. In a system for preventing unauthorized use in facilities where users and scope of use are restricted, data storage means for storing user data, data storage means for storing usage condition data, and compartments and equipment corresponding to the purpose of use are provided. and a means for searching data stored in each of the data storage means,
Information inputted by the user using the user's portable device having a data storage function into an input means provided in connection with a plurality of sections/equipment in the facility, and each of the above-mentioned data. An unauthorized use prevention system that compares data stored in a storage means to determine whether to enter or leave the facility and whether or not equipment can be used. 4. Results of comparing the information inputted by the user using the user portable device into the input means provided in connection with a plurality of sections/equipment in the facility with the data stored in each of the data storage means. 4. The system for preventing unauthorized use according to claim 3, wherein the validity of facility use is verified using a time series of . 5. Claim 3, characterized in that the user portable device is configured to self-check the validity of facility use from the user's state quantity stored in the device itself.
Unauthorized use prevention system described in section.