JPH03152652A - Network security system - Google Patents

Abstract

PURPOSE:To prevent the breakage of a network security system and the surreptitious use of data despite of the surreptitious use of a password by providing an interface part to limit a user ID to which another computer device can apply a remote log-in operation. CONSTITUTION:When a remote log-in operation is applied to a computer device A from a computer device B, the device B gives a connection request to the device A. Based on this request, a controller 4 obtains an IP address of the device B and stores a channel number and the IP address ib a main storage 6. Then the controller 4 sends the connection request back to the device A. The device A outputs a logical link for connection OK as a long as the device A is defined to a host file 2. The logical link is sent back to the device B via the device A, and the device B inputs user ID via the logical link. The input user ID is sent to an assigned channel of the controller 4 and it is decided whether the ID is equal or not to the user ID that is defined by the storage 6 via a central device 5. If so, the ID is returned as it is to the device A and a remote log-in operation is attained.

Description

[Detailed Description of the Invention] [Field of Industrial Application] This invention utilizes TCP, which is a standard network protocol.
The present invention relates to a network security system between computer devices supporting /IP.

[Conventional technology]

FIG. 2 shows a system configuration when a conventional computer device supporting TCP/IP remotely logs in from another computer device B, and FIG. 3 shows its operation. The host file 2.3 in Figure 2 defines the IP address of the computer device to be remotely logged in (.

Next, the operation will be explained. When remotely logging in from computer device B to computer device A, refer to host files (2) and (3) in Figure 2, create a socket from channel (9) in Figure 3, and send a connection request to channel! Submit to (7). Computer device A confirms that the IP address of computer device rIIB is defined in the host file (2) in FIG. ).

Computer device B has the user ID of computer device A.
and password to log in remotely.

[Problem to be solved by the invention]

Conventional computer equipment was configured as described above, so if you define an IP address on the TCPIP host file and know the user ID and password, you may be logged in with a privileged system user ID, etc. There was a problem that the system (O8 etc.) could be destroyed by other computer devices.

This invention was made to solve the above-mentioned problems, and aims to provide a network security system that can restrict the user IDs that can log in even if remote login is performed from another computer device. .

[Means to solve the problem]

The network security system according to this invention includes:
When logging in remotely from another computer device, the user ID and password are entered, but by defining the user ID that can log in in memory, if an attempt is made to log in with a user ID other than the defined user ID, the network will be disconnected. It has the function of

[Effect]

In the network security system according to the present invention, when a remote login request is received from another computer device and a user ID is input, a defined user ID is input.
D, and if it is defined, connect the network as is, and if it is not defined, disconnect the network.

〔Example〕

An embodiment of the present invention will be described below with reference to the drawings.

In FIG. 1, (1) has a conventional configuration, and host files are shown in (2) and (3). (4) is a control device that obtains network information and controls it; (5) is a control device (4)
A central processing unit that receives and judges instructions, (6)
indicates the main memory that obtains data and stores information.

Next, the operation will be explained. When remotely logging in from computer device B to computer device A, computer device fiB creates a socket and issues a connection request to computer device A.

Due to this request, the control device (4)
Obtain the IP address, assign the channel, determine whether the IP address is defined in the central processing unit (5), and if it is defined, store the channel number and IP address in the main storage (6). Remember address.

Thereafter, the control device (4) returns the connection request to the computer device A as is. Computer device A creates a socket, and if it is defined in the host file (2), issues a logical link that allows connection. This logical link is returned to computer device B via control device (4).

Computer device B uses a logical link to identify the user ID.
You will be asked to enter your user ID. The input user ID is sent to the assigned channel of the control device (4), and is sent to the main storage device (6) via the central processing unit (5).
), and if the user ID is defined, it is returned to the computer device A as is and login is possible, but if it is not defined, the assigned channel is disconnected and login is disabled.

In the above embodiment, the network security system is provided in the transceiver cable between the computer device A and the transceiver, but the network security system may be provided in the computer device A as an interface port.

〔Effect of the invention〕

As described above, according to the present invention, when a user connects to a network with another location, even if the password is stolen, the user can log in with a privileged user ID, and there is no need to worry about the system being destroyed or important data being stolen.

[Brief explanation of the drawing]

FIG. 1 is a block diagram of a network security system according to an embodiment of the present invention, FIG. 2 is a block diagram of a network using a conventional computer device, and FIG. 3 is a block diagram showing the operation of the network. In addition, in the figures, the same reference numerals indicate the same or corresponding parts.

Claims (1)

[Claims] A computer device that supports TCP/IP is connected to an Ethernet cable using a transceiver cable, but an interface section is provided between the transceiver port and the transceiver so that when another computer device logs in remotely, a user can log in remotely. A network security system characterized by restricting IDs.