JPH05165780A - Security protective device for user of tss terminal - Google Patents

Abstract

PURPOSE:To execute security protection to allow the unspecified user of a TSS terminal not registered beforehand to use only a limited function like the retrieval of a data base, etc. CONSTITUTION:This device is provided with the function 4 to limit the user to log in from a public communication line, the function 6 to limit a TSS command used by the user to retrieve the data base, and the function 5 to limit a TSS terminal machine used by a system superintendent. Thus, when the database of high public interest is retrieved by the unspecified user of the public communication line, the destruction of a system due to misoperation or an evil intention can be prevented.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to security protection of a terminal for searching a highly public database by an unspecified user having a personal computer via a public communication line.

[0002]

2. Description of the Related Art Conventionally, a user of a terminal has been registered in advance, and the system administrator and the database administrator have set the authority to use the database for the user and the TSS commands that can be used. As a general rule, each person should set his / her own password as necessary to protect the security.In order to allow unspecified users to search the database, register specific users in advance. It was a way to keep. In addition, a method of installing a minicomputer or the like dedicated to security control is also adopted in order to permit use as an unspecified user guest.

[0003]

In this conventional security apparatus, when an unspecified user who searches a database through a public communication line searches the database, a database search process is performed in order to prevent the system from being damaged due to an erroneous operation or malicious intent. It is necessary to build a dedicated system with a complicated structure in terms of hardware and software, such as connecting a minicomputer that shares security functions to the computer that performs TS.
There is a problem that a simple system construction using the S function cannot be constructed.

An object of the present invention is to connect a dedicated minicomputer that shares the security function to an unspecified number of users to search a database, and to realize perfect security. The purpose of the present invention is to provide a security device for a terminal that searches by searching.

[0005]

A security protection device for a TSS terminal according to the present invention is used by a user control function for controlling a user who uses the TSS via a public communication line and a user who searches a database. Command control function that controls ATSS commands that can be performed, and system management to prevent information about the system administrator, which is originally an external secret, from leaking to the outside and various privileges given to the system administrator from being used maliciously. It is provided with a system administrator control function for controlling a terminal that can be used by a person.

[0006]

The present invention will be described below with reference to the drawings.

FIG. 1 shows an administrative database search system according to an embodiment of the present invention. When the terminal 1 searches the administrative database 8 under the TSS system 3 via the public line network 2, the three-step security protection function described below operates to ensure the proper use of the database and to manage the database under the TSS. It is possible to protect other databases and files from unauthorized access. The protection function of the first stage is the user restriction function 4, and when the TSS user declares the user name at the start of use, only the database search is performed for the user via the public communication network 2. It is checked whether the guest user is allowed to. The use of TSS is permitted when the guest user is declared, but the use of TSS is refused when the user other than the guest user is declared. Therefore, for some reason, the user name having a right other than the database search is leaked to the outside, and even if an attempt is made to maliciously use it via the public communication line, it is eliminated at this stage.

The second-stage protection function is the system administrator controller 5, and the user who has passed through the user control function 4 is checked. Since the system administrator can exercise all the rights possessed by the computer system, only the user other than the guest user can pass the check of the user control function 4. Therefore, if the system administrator name is leaked to the outside and malicious use is made,
It will cause a serious situation such as database destruction and system destruction. In order to prevent such a situation, when the system administrator declares the use from a terminal other than the control terminal 9, the system administrator control function 5 rejects the use.

The third stage protection function is the command control function 6
Thus, a command that can be used is checked for a user who is permitted to use ATSS. The command is checked every time the user issues a command, and the guest user who has passed through the public communication line network 2 is only allowed to search the administrative database. Therefore, even if an update command is used to destroy the database, execution of the command is rejected, and the system is protected safely.

[0010]

As described above, since the present invention is implemented as a security function in the TSS system, there is no need to construct a system having a complicated structure in which a dedicated minicomputer or the like that shares the security function is connected, and This has the effect of easily realizing a highly public system of performing database search for a large number of specified users and realizing complete security protection.

[Brief description of drawings]

FIG. 1 is a block diagram of an embodiment of the present invention.

[Explanation of symbols]

 1 Terminals connected via public communication network 2 Public communication network 3 TSS system 4 User control function 5 System administrator control function 6 Command control function 7 Database search function 8 Administrative database 9 Control computer for system management

Claims (1)

[Claims] 1. A device having a function of restricting TSS users for each terminal, a command control function of controlling TSS commands that can be used for each user, and a function of restricting terminals that a system administrator can use. Yes, TS
Security device for S terminal users.