JPH0793254A - Method and device for preventing unauthorized use of network system - Google Patents

Abstract

PURPOSE:To prevent unauthorized use by preventing information from being outputted from a host computer to the third person by outputting an end message and disconnecting a terminal when wrong ID information is inputted by >=n times. CONSTITUTION:The host computer waits access from the terminal at all times, the terminal at the time of receiving access and becomes the state receiving an input from the terminal. In this state, when the ID number information is inputted from the terminal side to a judgement processing part 31, the judgement processing part 31 checks whether or not there are any relevant registered data in a user register memory 32, an when there are no registered data, an input error massage is issued to the terminal as abnormally. In this case, when the wrong ID number information sent from the terminal side is inputted at >=n times, the end massage is issued to the terminal, and the terminal is disconnected. Further, when a wrong password is inputted by >=n times, an alarm message is displayed at the terminal to inform a manager of abnormally.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a method and apparatus for preventing misuse of a network system mainly connected to a host computer by a communication line, a LAN or the like.

[0002]

2. Description of the Related Art Communication lines centering on a host computer,
As a network system connected by LAN etc.,
For example, the configuration is as shown in FIG. That is, FIG.
As shown in FIG. 1, a host computer 11 and a host computer terminal and a CRT are installed in the host computer management room 1.
12 is installed and managed, operated, maintained, etc. by a host computer administrator 13.

The host computer 11 is connected to the terminal group 2 through the communication line 3, and the user 23 can freely access the host computer 11 from the terminal 21 to store the information storage HD1 of the host computer 11.
The host computer information is available from No. 4.

By the way, when such a network system is used, the user 23 applies to the host computer administrator 13 to that effect and performs user registration, so that the user 23 is given an ID number (user registration). Number) and password 24, which is known only to the user.

Therefore, when the user 23 uses the network system, the ID number and password 2 are added to the terminal 21.
When 4 is input and the user registration is matched, the host computer 13 is connected and the state becomes available.

[0006] The only condition for using this network system is to check whether the ID number and the password 24 match the user registration. Therefore, if the password 24 should be known to a third party. Will be available.

Conventionally, as a method for preventing abuse of such a network system, a message as shown in FIG. 5 is displayed on the CRT 22 when the host computer 11 and the terminal 21 are connected, and the user 23 checks the content of the message. By doing so, it was determined whether or not the third party abused it.

Here, in FIG. 5, the content of the message displayed on the CRT 22 is the last usage time 22.
2, the total use time 223 up to the present, and the number of uses 224 up to the present. Therefore, in such a message content, only the usage result is known, and the user notices it only after being abused by a third party.

[0009]

As described above, in the conventional abuse prevention method, it is determined whether the information is abused by a third party by checking the usage status of the network system displayed on the CRT of the terminal. This is a big problem, especially in the case of confidential information that is difficult for a third party to know.

It is an object of the present invention to provide a method and a device for preventing abuse of a network system, which protects the information of users while preventing the abuse in the network system.

[0011]

In order to achieve the above-mentioned object, the present invention has a communication line, L
In a network system having a plurality of terminals connected by AN or the like, and capable of outputting information from the host computer to the terminals when the ID number information and password information sent from the terminals match the user registration, ID number information and password information sent from the user is judged based on the registration data stored in the user registration memory,
When the ID number information is abnormal or when the ID number information is normal and the password information is abnormal, an input error message is output to the terminal, and if incorrect ID information is input n times or more, an end message is output and the terminal is output. Disconnect the connection with
Further, when the ID number information is normal and the incorrect password information is input m times or more, the determination processing means has a function of outputting an alarm message to the terminal of the host computer, and the determination processing means outputs incorrect password information m times. It is provided with a dummy information processing means which is activated when it is determined that the above-mentioned input is made, fetches the dummy information from the dummy information memory, executes the dummy processing, and sends the dummy information to the terminal.

[0012]

In the abuse prevention device for a network system having such a configuration, if incorrect ID information is input n times or more, a termination message is output and the connection with the terminal is cut off. If no information is output from the host computer, and if ID number information is normal and incorrect password information is input m times or more, a warning message is output to the terminal of the host computer and at the same time dummy information is output to the terminal. Since it is sent out, the information can be protected by taking the ID number use suspension procedure by the host computer administrator, and the terminal user's follow-up investigation can be performed to prevent the recurrence while the dummy information is being output. It will be possible.

[0013]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS An embodiment of the present invention will be described below with reference to the drawings. Since the configuration of the network system is the same as that shown in FIG. 4, its description is omitted here, and the processing function for preventing misuse by a third party in the host computer is shown in FIG.
The block diagram shown in FIG.

In FIG. 1, reference numeral 31 is a judgment processing unit for judging whether or not the ID number information and password information sent from the terminal 21 correspond to the registration data stored in the user registration memory 32. The determination processing unit 31 outputs the input error message to the terminal 21 when the ID number information is abnormal or the incorrect ID information is input n times or more, and outputs the end message. It has a function to output an input error message to the terminal when the password information is abnormal even if the information is normal, and to output an alarm message to the terminal 12 of the host computer when the incorrect password information is input m times or more. is doing.

When the determination processing unit 31 determines that both the ID number information and the password information are normal, the reference numeral 33 fetches the information from the information memory 34, executes the normal processing, and sends it to the terminal 21. It is a data processing unit.

Further, reference numeral 35 is activated when the determination processing unit 31 determines that incorrect password information has been input m times or more, fetches dummy information from the dummy information memory 36 and executes dummy processing, and the terminal 21 It is a dummy information processing unit that sends dummy information to the.

Next, the operation of the abuse prevention processing function of the network system configured as described above will be described with reference to the flowcharts shown in FIGS. Now, the host computer 11 is always waiting for an access from the terminal 21 (step S1), connects the terminal when there is an access (step S2), and is in a state of accepting an input from the terminal.

In such a state, I
When the D number information is input to the determination processing unit 31, the determination processing unit 1 checks whether or not there is corresponding registration data in the user registration memory 32 (step S3). If there is no registration data, it is abnormal. An input error message is issued to the terminal as (step S4).

Here, an incorrect I sent from the terminal side
When the D number information is input n times or more (step S5),
An end message is issued to the terminal (step S6), the connection with the terminal is disconnected (step S7), and the process returns to the initial state.

On the other hand, when the ID number information is determined to be normal in step S3, it is checked whether or not the password information sent from the terminal side is normal (step S8), which is abnormal. And an input error message is issued to the terminal (step S9).

Here, if the wrong password information sent from the terminal is input m times or more (step S1)
0), an alarm message is displayed on the terminal of the host computer, and the host computer administrator is notified of the abnormality (step S11). At the same time, a procedure for suspending the use of the ID number is performed to protect information (step S12).

Further, from the viewpoint of preventing recurrence, dummy processing is executed in order to track whether or not the abuse is occurring (step S1).
3) Output the dummy information to the terminal. Therefore, the user thinks that the information is obtained from the host computer, and the host computer administrator can trace the terminal user during that time.

On the other hand, if the password information is determined to be normal in step S8, it is checked whether the password is a damage report (step S14). The process proceeds to S11, and the same process as the process after the input error has occurred m times or more is performed. If it is determined in step S14 that the password has not been reported as damage, a usage history as shown in FIG. 5 is issued to the terminal (step S15),
The process shifts to normal processing (step S16).

As described above, in this embodiment, the determination processing unit 1 determines the ID number information and password information sent from the terminal.
Check based on the registration data stored in the user registration memory, and if the ID number information is abnormal, the terminal 21
The input error message is output to the terminal, the end message is output if incorrect ID information is input n times or more, and the input error message is output to the terminal if the password information is abnormal even if the ID number information is normal. If incorrect password information is output m times or more, a warning message is output to the terminal 12 of the host computer and at the same time dummy information is sent from the dummy information processing unit 35 to the terminal 21. It is possible to prevent the abuse of the network system by a person in advance, and even if the password of the user is decrypted by a third party, trace the third party to prevent the recurrence and protect the user information. You can

[0025]

As described above, according to the present invention, the abuse of the network system by a third party can be prevented, and even if the password of the user is decrypted by the third party, the third party can It is possible to provide a method and a device for preventing misuse of a network system, which can trace the information to prevent recurrence and protect user information.

[Brief description of drawings]

FIG. 1 is a block diagram illustrating a method and an apparatus for preventing misuse of a network system according to the present invention.

FIG. 2 is a view showing a flowchart for explaining the operation of the embodiment.

FIG. 3 is a view showing a flow chart similarly to FIG. 2;

FIG. 4 is a diagram showing a configuration example for explaining a network system.

FIG. 5 is an explanatory diagram of a message displayed on the CRT of the terminal in the same system.

[Explanation of symbols]

11 ... Host computer, 12 ... Host computer terminal, 21 ... Terminal, 22 ... CRT, 24 ...
Password, 31 ... Judgment processing unit, 32 ... User registration memory, 33 ... Data processing unit, 34 ... Information memory,
35 ... Dummy information memory, 36 ... Dummy information memory.

Claims (3)

[Claims] 1. A communication line centering on a host computer,
In a network system having a plurality of terminals connected by a LAN or the like and capable of outputting information from the host computer to the terminal when the ID number information and the password information sent from the terminal match the user registration, The ID number information and password information sent are checked based on the user registration data. If the ID number information is abnormal, an input error message is output to the terminal, and incorrect ID information is input n or more times. When the ID number information is normal and the password information is abnormal, an input error message is output to the terminal, and further incorrect password information is input m times or more. A network system characterized by outputting an alarm message to the terminal of the host computer Prevention method. 2. A communication line centering on a host computer,
In a network system having a plurality of terminals connected by a LAN or the like and capable of outputting information from the host computer to the terminal when the ID number information and the password information sent from the terminal match the user registration, The sent ID number information and password information are checked based on the user registration data. If the ID number information is abnormal, an input error message is output to the terminal, and incorrect ID information is input n times or more. Then, the end message is output, the connection with the terminal is disconnected, and the ID
When the number information is normal and the password information is abnormal, an input error message is output to the terminal, and when incorrect password information is input m times or more, an alarm message is output to the terminal of the host computer and at the same time dummy information is output. A method for preventing misuse of a network system, which comprises transmitting a message to a terminal. 3. A communication line centering on a host computer,
In a network system having a plurality of terminals connected by a LAN or the like, and capable of outputting information from the host computer to the terminals when the ID number information and the password information sent from the terminals match the user registration, The ID number information and password information sent from the user is judged based on the registration data stored in the user registration memory, and when the ID number information is abnormal, or when the ID number information is normal and the password information is abnormal, the terminal Output an input error message, and if incorrect ID information is input n times or more, output an end message to disconnect the terminal, and input the correct ID number information and incorrect password information more than m times Determination processing means having a function of outputting an alarm message to the terminal of the host computer, and this determination processing Is activated and password incorrect information in step is determined to have been entered or m times, executes the dummy processing at captures and dummy information from dummy information memory,
An abuse prevention device for a network system, comprising: dummy information processing means for transmitting dummy information to the terminal.