JPH0675917A - Transaction execution protection system by time unit in transaction processing system - Google Patents

Abstract

PURPOSE:To enable the setting of the execution protection of a transaction by a time unit. CONSTITUTION:The transaction name is stored in a transaction name storage area 5 by a reception and transmission control means 2 which receives the transaction processing request message from a terminal equipment 1, and the inspection of the transaction which is possible to operate by a time classified control table of transaction name 9 is performed from the time of the transaction name storage area 5 and a timer device 6 by the transaction information search means 7 of the transaction execution right inspection means 8 of a transaction execution means 3. If the transaction is possible to operate, the execution of a program 4 is performed by the transaction execution means 3. Therefore, the execution of the transaction becomes possible to be limited by a time unit and the malicious transaction utilization is prevented.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a transaction execution protection control system for a computer online transaction processing system.

[0002]

2. Description of the Related Art Conventionally, this type of transaction execution protection control system sets a password for a terminal user, and when a connection request command between a terminal device and an online transaction / processing system is input from the terminal device, Add the user name and password, and then enter
In the transaction / processing system, the validity of the password of the terminal user and the existence of transaction execution authority were checked.

That is, when the terminal user of the terminal device connected to the online transaction processing system does not have the transaction execution right, the terminal user's connection request is rejected or a transaction processing request message is issued. It rejected illegal transaction execution by rejecting.

[0004]

In the above-mentioned conventional method, a terminal user who has the right to execute a transaction can freely execute the transaction.

If the terminal user performs transaction execution work during the original business hours, it is easy to monitor so that persons around the terminal user will not execute illegal transactions.

[0006] However, there is a disadvantage in that the monitoring from the surrounding people becomes weak when it is outside the business hours, and it is easy for a malicious terminal user to execute an illegal transaction.

It is an object of the present invention to provide a transaction execution protection control method in a transaction processing system, which enables setting of transaction execution protection in units of time.

[0008]

A time-based transaction execution protection control system of the present invention receives a transaction processing request message input from a terminal device, and receives a message as a processing result from an application program that has performed transaction processing. A transmission / reception control unit that performs a process of sending to a device, a message received from the transmission / reception control unit is passed to an application program, the application program is executed, a message that is the processing result is received, and a transaction execution that notifies the transmission / reception control unit In the online transaction processing system having means, a transaction that registers transaction name information for each time required for transaction execution protection in a transaction name management table by time Name information registration means, a transaction name storage area in which the transmission / reception control means stores a transaction name, a time when a message is received from the terminal device is read from a timer device, and a transaction name corresponding to the time is read by the time transaction. Transaction name information search means by time retrieved from the name management table,
The transaction name obtained by the transaction name information searching means and the transaction name stored in the transaction name storage area by the transmission / reception control means are checked for equivalence, and if the values match, the execution permission of the transaction is indicated, Further, in the case of disagreement, it has a transaction execution right inspection means which does not permit the execution of the transaction and notifies the transaction execution means of the violation of the transaction execution protection.

[0009]

The present invention will be described in detail with reference to the drawings.

FIG. 1 is a block diagram showing an embodiment of the present invention.

In this embodiment, the terminal device 1, the transmission / reception control means 2, the transaction execution means 3, the application program 4, and the transaction name storage area 5 are provided.
3, a timer device 6, a time-based transaction name information searching means 7, a transaction execution right checking means 8, a time-based transaction name management table 9, and a time-based transaction name information registration means 10.

FIG. 2 shows a transaction name management table 9 by time.
An example of the configuration is shown.

Next, the operation of the embodiment of the present invention will be described in detail with reference to the drawings.

In order to execute the transaction, the terminal user inputs a connection request command with the online transaction / processing system from the terminal device 1 and sends a message to the terminal device 1 to the effect that the connection process is completed.

Upon receipt of the transaction processing request message from the terminal device 1, the transmission / reception control means 2 stores the transaction name in the transaction name storage area 5, and then passes the message to the transaction execution means 3.

The transaction execution means 3 to which the message is passed requests the transaction execution right inspection means 8 to investigate whether the transaction processing the transaction processing request message can execute the application program 4.

The transaction execution right checking means 8 requests the transaction information searching means 7 to search for the transaction name corresponding to the time in the execution protection information of the application program 4.

FIG. 2 is an example of the time-based transaction name management table 9 registered in advance by the time-based transaction name information registration means 10, which is composed of a time 21 and a transaction name 22. A transaction name 22 that can be executed is registered in correspondence with.

In this example, there is no executable transaction name from 00:00 to 8:30, and "TRNS01", from 8:30 to 17:30.
This means that three transactions "TRNS02" and "TRNS03" can be executed, and only one transaction "TRNS04" can be executed from 17:30 to 24:00.

Time-dependent transaction name information searching means 7 which receives a request from the transaction execution right checking means 8
Reads the current time from the timer device 6 and determines the transaction name.

For example, at 14:00, the executable transactions are "TRNS01" and "TRNS".
NS02 "and" TRNS03 "are given, and this is notified to the transaction execution right checking means 8.

The transaction execution right checking means 8 carries out an equivalence check of the transaction name obtained from the transaction name storage area 5 and the transaction name notified from the time-based transaction name information searching means 7, and if the values match, The transaction executing means 3 is permitted to execute the transaction, and if they do not match, the transaction executing means 3 is notified that the transaction is not permitted to be executed.

The transaction executing means 3 receives the notification from the transaction execution right checking means 8 and, if the transaction execution is permitted, notifies the application program 4 of a transaction processing request message in order to execute the transaction. Execute program 4. After execution of the application program 4, the transaction processing result is notified to the transmission / reception control means 2, and the transaction processing result is displayed on the terminal device 1. On the other hand, if the notification from the transaction execution right inspection means 8 is transaction execution disapproval, the transaction execution means 3 notifies the transmission / reception control means 2 of the fact that the transaction execution right has been violated, without executing the application program 4. The transmission / reception control means 2 outputs a message to that effect to the terminal device 1.

In this embodiment, no transaction can be executed at 5 o'clock,
If it is 10:00, the transaction "TRNS01",
It can be executed for "TRNS02" and "TRNS03". At 22:00, only the transaction "TRNS04" can be executed. In this way, transaction execution can be restricted according to the terminal usage time.

[0025]

According to the present invention, the equivalence check is performed between the transaction submitted by the terminal user and the transaction registered at each time, thereby limiting the terminal use time at which the transaction can be executed. In addition, the transaction that can be executed can be changed according to the terminal use time, so that the execution of the transaction outside the original business hours can be restricted.
Therefore, it is possible to prevent malicious terminal users from executing transactions, which is effective for transaction execution protection.

[Brief description of drawings]

FIG. 1 is a diagram showing an embodiment of the present invention.

FIG. 2 is a diagram showing a configuration of a transaction name management table 9 by time in FIG.

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 1 terminal device 2 transmission / reception control means 3 transaction execution means 4 application program 5 transaction name storage area 6 timer device 7 transaction name information search means by time 8 transaction execution right inspection means 9 transaction name management table by time 10 transaction name information registration by time Means 21 Time 22 Transaction name

Claims (1)

[Claims] 1. A transmission / reception control means for receiving a transaction processing request message input from a terminal device, and transmitting a message as a processing result to a terminal device from an application program that has performed transaction processing, and the transmission / reception control means. In the online transaction processing system having a transaction execution means for passing the message received from the application program to the application program, executing the application program, receiving the message as the processing result, and notifying the transmission / reception control means, transaction execution protection Transaction name information registration means for registering transaction name information for each required time in the transaction name management table for each time, and the transmission / reception control means for registering the transaction name A transaction name storage area to be stored, time-dependent transaction name information searching means for reading a time when a message is received from the terminal device from a timer device, and extracting a transaction name corresponding to the time from the time-specific transaction name management table, The transaction name obtained by the transaction name information searching means and the transaction name stored in the transaction name storage area by the transmission / reception control means are checked for equivalence, and if the values match, execution of the transaction is permitted. In the case of disagreement, the transaction execution right inspection means for disallowing the execution of the transaction and for notifying the transaction execution means of the violation of the transaction execution protection is provided. Your system.