JPH05173973A - Security method of on-line real-time processing - Google Patents

Abstract

PURPOSE:To improve the security of a system by providing certain conditions for allowing a host computer to process input data from a terminal. CONSTITUTION:The host computer 5 possesses operator numbers, sections names, and ranks by transactions as a data base in advance. Further, operator cards characteristic to users are prepared on the terminal side 2 and when the terminal is operated, the card is read on the side of the terminal side 2 and the information on the card is sent to the host computer 5. Transaction contents corresponding to the input data from the terminal 2 and the number, name, section, and rank of the operator are checked to prevent illegal input operation and illegal updating of customer information.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention, in a host computer connecting a plurality of terminals, checks transaction contents corresponding to input data from each terminal and various information on a data bus to check for illegality. The present invention relates to a security method of online real-time processing for preventing input.

[0002]

2. Description of the Related Art Online real-time processing is
The data input, the data processing, and the transfer of the processing result are performed at substantially the same time as the generation of the data. Therefore, there is an advantage that the turnaround time is short, but the cost is increased. Various input data in the online / real-time processing system are generally mainly terminal inputs. In particular, data input at financial institutions is
From the viewpoint of preventing unauthorized input on the terminal side, it is necessary to take security measures on the terminal side and the host computer connected to the terminal. In other words, online real-time processing in a financial institution requires security measures for transactions, especially security measures for preventing unauthorized updating of customer information. In the conventional method, security is realized by operating the operation key and the special key according to the rank for each transaction on the terminal side. However, with this method, the operator of the terminal cannot be specified, and thus the prevention of illegal transactions is not guaranteed in terms of real-time processing.

[0003]

As described above, as a security measure for the conventional online / real-time processing, a special key according to the rank of each transaction is provided in order to secure the transaction and prevent the illegal update of the customer information. It was done by operating. With this method, the prevention of illegal transactions cannot be guaranteed in real time. An object of the present invention is to solve the above-mentioned conventional problems, to prevent illegal transactions, to verify transaction contents in real time, and to provide a security method for online real-time processing capable of verifying the validity of terminal input. To provide.

[0004]

In order to achieve the above object, the security method for online real-time processing according to the present invention is an online real-time system comprising a terminal device and a host computer connected to them via a transmission line. In the processing system, the host computer holds in advance the terminal operator number, affiliation, name and rank for each transaction as a database, and in the terminal device,
By giving a unique operator card to the operator, reading the operator card with the terminal device at the time of operating the terminal, and transmitting the read various information to the host computer, the host computer The operator information and transaction contents corresponding to the input data from each terminal are checked with the contents registered in the database, and the validity of the terminal input is verified if they match. There are features.

[0005]

In the present invention, by comparing the operator of the terminal with the contents of the transaction using the terminal, real-time processing is performed and the validity of the terminal input is verified. That is, the operator of the terminal and the transaction contents are judged in real time on the host computer, and information for managing the illegal input of the terminal and the input by the person corresponding to the system is stored in the host computer. Owns a computer file. By registering the information about the terminal operator of the financial institution and the rank for each transaction in this file, it is possible to prevent the unauthorized update of the customer information of the financial institution by the input information from the terminal. That is, in the host computer, it is determined whether or not the input information from the terminal device conforms to the processing content defined by the system. Compared with the conventional method, the host computer
This is different in that the information for judging the suitability of the operator on the data is converted into a database and the security is secured in real time.

[0006]

Embodiments of the present invention will now be described in detail with reference to the drawings. FIG. 1 is a connection configuration diagram of an online real-time processing system showing an embodiment of the present invention. Figure 1
In the figure, 1 is a keyboard display connected to a terminal device, 2 is a body of the terminal device, 3 is a terminal control device, 4 is a transmission line for connecting the terminal control device 3 and the host computer 5, Is a host computer, and 6 is an external storage device such as a magnetic disk. The terminal device 2 has an operator card insertion port (a) and an audio card insertion port (b).
Is provided. As shown in FIG. 1, in the system of the present invention, the information of all the persons who operate the terminal device 2 is stored on the external storage device 6 connected to the host computer 5. This information is registered off-line in advance. In the initial operation of the online processing, this registration information is loaded from the external storage device 6 to the host computer 5, and when the online processing is started, the operator is registered by referring to this registration information. If so, the processing of the input transaction is executed, and a message indicating the completion of processing is output to the terminal 2 in kanji with the operator's name. On the other hand, when the registration information of the host computer 5 and the input information do not match, the fact that the processing is not completed is sent to the terminal 2 and an error notification is output. Insertion slot (a) of terminal 2
Is the insertion port of the operator card. Further, depending on the type of input data from the terminal 2, the rank required for processing is set for each business transaction unit of the host computer for each type of input transaction. Then, if the ranks from the terminals 2 match, the predetermined processing is completed, but if the ranks from the terminal 2 do not match, the corresponding transaction is unprocessed and an error notification is given to the corresponding input terminal 2. Terminal 2
The insertion slot (b) of the
This is the insertion slot for the delicate card.

FIG. 2 is an explanatory view of the card provided in the terminal device of the present invention. FIG. 2A shows the operator's card 7, in which the shaded portion is the magnetic stripe 8.
On the magnetic stripe 8, a unique number of the operator and a serial number for indicating the affiliation are recorded. Figure 2 (b)
Is the audio card 9 and the shaded area is the magnetic stripe 10. Although the transactions of the terminal device 2 are ranked, the rank number is recorded on one card 9 like the ranks 1 to 3 in the magnetic stripe 10. The terminal device 2 connected to the system reads and operates the card 7 unique to the operator and the card 9 corresponding to the transaction rank when they are inserted into the insertion openings (a) and (b). The unique information of the person and the rank information of the transaction are transmitted to the connected host computer 5. On the other hand, in the host computer 5, in order to centrally manage the name, number, and affiliation of each operator in advance, these pieces of information are stored in a file, and the validity of the terminal input generated in real time is confirmed. Detect for each transaction.

FIG. 3 is a transmission format diagram between the terminal and the host computer in FIG. The contents of the operator's card 7 and the contents of the audio card 9 are added to the host computer as input information from the keyboard 1 of the terminal 2.
Data to the computer 5. Transmission for the host computer 5
As shown in FIG. 3, the mat first sends the input information 11 from the keyboard or the like, and then the contents 1 of the operator's card 7.
2 is transmitted, and finally the content 13 of the audio card 9 is transmitted. If the audio card 9 is not set, the contents of the audio card 9 will not be transmitted. In that case, the format of FIG.
1 and operator card contents 12.

FIG. 4 is a diagram showing a form in which the information of the operator card is stored in the magnetic disk device. Figure 4 (a) shows
Area 1 for storing operator information on the magnetic disk 6
In this area 18, the type of transaction rank at the terminal is also stored together with the operator information. The host computer 5 is used to indicate the name (Kanji code) of the operator, the unique number assigned to the operator, and the affiliation in the external storage device 6 such as a connected magnetic disk. The serial number is stored in the format shown in FIG. That is, the affiliation number 15, the operator number 16, and the name 17 are registered for all the operators 1 to n. When the on-line real-time processing is started, as the initial operation, the information regarding the operator and the rank regarding the transaction are loaded from the magnetic disk 6 into the main memory of the host computer 5. The host computer 5 temporarily stores the input information 11, the operator card content 12, and the audio card content 13 sent from each terminal device 2, and relates to the operator therein. The information and rank of each transaction will be sequentially compared with the registered ones. As a result, real-time processing for preventing unauthorized update of the customer information of the financial institution by the input information from the terminal is possible, and the validity of the terminal input can be verified.

As described above, in the present invention, the security measures for the terminal and the host computer connected thereto are systematized. Therefore, (a) on the terminal side, a unique operator card (ID card) is given to the operator, and when the terminal is operated, this card is inserted from the insertion port to provide the card information. It is transmitted to the host computer. (B) Normally, only operator card information is required, but in the case of a particularly important transaction, in addition to the operator card information, additional information is available.
The code is read and the information is also transmitted to the host computer. (C) In the host computer, the operator's number, name, affiliation, and rank for each transaction are held in advance as a database. (D) In the host computer, the transaction contents corresponding to the input data from each terminal and various information on the database are compared and checked to prevent illegal input.

[0011]

As described above, according to the present invention,
In an online / real-time processing system, by comparing and checking the operator information and transaction rank information added to the input data from the terminal device with the contents registered in advance, the validity of the terminal input by the real-time processing Can be verified, and as a result, the security of the system can be improved.

[0012]

[Brief description of drawings]

FIG. 1 is a connection configuration diagram of an online real-time processing system showing an embodiment of the present invention.

FIG. 2 is an explanatory diagram of an operator card and an audio card used in the present invention.

FIG. 3 is a diagram showing a transmission format between a terminal and a host computer according to the present invention.

FIG. 4 is a diagram showing a case in which operator card information according to the present invention is stored in a magnetic disk device.

[Explanation of symbols]

 1 keyboard display 2 terminal device 3 terminal control device 4 transmission line 5 host computer 6 external storage device 7 operator's card 8 magnetic stripe (operator information) 9 audio card 10 magnetic stripe (Transaction rank information) 11 Input information from keyboard, etc. 12 Content of operator's card 13 Content of audio card 15 Affiliation number 16 Operator's number 17 Name 18 Verification registration area in magnetic disk

Claims (1)

[Claims] 1. An online system comprising a terminal device and a host computer connected to the terminal device via a transmission line.
In the real-time processing system, the host computer has a terminal operator's number, affiliation, name, and rank for each transaction as a database in advance, and the terminal device has an operator operator peculiar to the operator. -By adding a card, reading the operator card with the terminal device at the time of operating the terminal, and transmitting the read various information to the host computer, the host computer inputs the information from each terminal. Online characterized by checking the operator information and transaction contents corresponding to the data with the contents registered in the above-mentioned data base and verifying the validity of the terminal input depending on whether they match or not. -Security method for real-time processing.