JPH11306142A - Computer and security device for computer system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To limit the accesses given from the areas other than a prescribed area and to improve the security of a computer system by degenerating or stopping the function of a computer by means of an authentication information receiving means if the authentication information sent from an authentication information transmitting means is not received. SOLUTION: An authentication information receiving device 10 receives an authentication radio signal 9c of an authentication information transmitting device 9 via a receiving part 10a and decides whether the received signal 9c is normal or not via a processing part 10b. If a normal signal 9c is decided, the part 10b sets an application 8 in an executable state. If the part 10b decides an abnormal signal 9C and receives no authentication information, the part 10b sets the application 8 in a non-executable state to degenerate or stop the function of a computer.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

The present invention relates to a computer and a security device for improving the security of a computer system.

[0002]

2. Description of the Related Art Many computers are connected to each other via a network so as to be accessible. The accessing computer becomes accessible when the permission of the accessed computer is obtained.

However, if the computers can be accessed without restriction on the same network, information leakage or information falsification occurs. Therefore, generally, for example, a mechanism for checking unauthorized access is realized by software, and security control is executed to protect the computer and the computer system from unauthorized access.

[0004]

However, if a security hole that does not have the effect of security control is found, even if the computer is connected to the same network, even if it is located in a remote place, it is illegal. Access is possible.

SUMMARY OF THE INVENTION The present invention has been made in view of the above situation, and has as its object to provide a computer and a security device for a computer system which enhance access security by restricting access from outside a predetermined area. I do.

[0006]

In order to achieve the above object, the present invention takes the following measures. The present invention provides an authentication information transmitting means for transmitting authentication information receivable in a predetermined area, and reduces the functions of the computer when the authentication information transmitted from the authentication information transmitting means is not received. Alternatively, it is a computer security device including an authentication information receiving unit for stopping.

Therefore, in the computer security device of the present invention, the functions of the computer taken out of the area can be reduced or stopped. Therefore, even if the computer provided with the security device is taken out of the area, the computer does not operate normally, so that the computer can be prevented from being stolen.

Further, by reducing or stopping the functions of the computer, it is possible to prevent information stored in the computer taken out of the area from being leaked or falsified, thereby enhancing security.

According to the present invention, there is provided an authentication information transmitting means for transmitting authentication information receivable within a predetermined area, and a computer installed in a computer capable of transmitting and receiving data via a network, wherein the authentication information transmitted from the authentication information transmitting means is provided. Is a security device of a computer system including an authentication information receiving means for reducing or stopping the function of the computer when not receiving the same.

Therefore, in the security device of the computer system according to the present invention, the functions of the computers outside the area are reduced or stopped, so that unauthorized access from outside the area can be prevented, thereby enhancing the security. .

[0011]

Embodiments of the present invention will be described below with reference to the drawings. (First Embodiment) The present embodiment relates to a security device of a computer system which enhances security by providing a restriction based on a physical distance in a use environment of the computer system.

FIG. 1 is a block diagram showing a security device of a computer system according to the present embodiment. The server 1 and the clients 2 to 5 each have a network 6
And a LAN is configured.

The server 1 is provided with a database 7, and this database 7 stores important information. The server 1 and the clients 2 to 5 have application software (hereinafter, referred to as “applications”) 8 for accessing the database 7. Writing is possible.

The security device of the computer system comprises an authentication information transmitting device 9 and an authentication information receiving device 10. The authentication information transmitting device 9 creates an authentication wireless signal 9c, which is authentication information, by the generation unit 9a, and transmits the created authentication wireless signal 9c by the transmission unit 9b.

The authentication radio signal 9c is receivable within the area T, and is specified for the area T in advance. The authentication information receiving device 10 is installed in each of the server 1 and the clients 2 to 5.

In the authentication information receiving apparatus 10, the authentication radio signal 9c is received by the receiving unit 10a, and the processing unit 10b determines whether or not the received authentication radio signal 9c is normal.

When the processing unit 10b determines that the authentication radio signal 9c is normal, the processing unit 10b sets the application 8 to be executable. The processing unit 10b
If it is determined that the authentication wireless signal 9c is abnormal, the processing unit 10b sets the application 8 in an unexecutable state. Here, the case where the authentication wireless signal 9c is determined to be abnormal refers to a case where the authentication wireless signal 9c cannot be received or a case where an incorrect authentication wireless signal 9c has been received.

The operation of the computer system will be described below. In this computer system, the server 1 and the clients 2 to 4 are installed in an area T in which the authentication wireless signal 9c transmitted from the authentication information transmitting device 9 can be received.

Therefore, in the server 1 and the clients 2 to 4, the application 8 can be executed, so that information in the database 7 can be read and written.

However, the client 5 has the
Installed outside. Therefore, the application 8 cannot be executed in the client 5. Therefore, it is impossible for the client 5 to read and write information in the database 7.

Hereinafter, a specific use example of the present embodiment will be described. For example, suppose that there is a case where personnel information is managed in a database of a server of the personnel section, and this personnel information is desired to be usable only by a client of the personnel section.

In such a case, the administrator of the computer system sets the authentication information transmitting device 9 so that the authentication radio signal can be received only in the room of the personnel section. The computer used in this company has a database access application installed therein and employs an authentication information receiving device 10 installed therein.

Thus, the personnel information can be used only by the server and the client installed in the personnel section.
To increase the number of clients of the personnel section, it is only necessary to connect the computer to a network in the room of the personnel section.

Further, even if the computer of the personnel section is moved to another department, the personnel information cannot be used. As described above, in the security device of the computer system according to the present embodiment, when the authentication wireless signal 9c cannot be received from the authentication information transmitting device 9, the authentication information receiving device 10
Makes the application 8 infeasible and reduces the functions of the computer.

As a result, even if the computers have the same configuration, if the computers do not exist in the area, they will not perform a predetermined function. Therefore, it is possible to prevent unauthorized access from computers at long distances, outside the department, and outside the area. Can be.

Therefore, leakage of information and falsification of unauthorized information can be prevented, and security is enhanced. Also,
The security device of the computer system according to the present embodiment transmits and receives authentication information as a wireless signal.

Thus, the area in which the authentication information can be received can be set according to the physical distance or space, and it is possible to easily add or move computers, thereby improving manageability.

Further, by transmitting and receiving the authentication information as a wireless signal, even if the computer system is connected by a wired network, it is possible to restrict the physical distance.

Further, unlike a wireless LAN, since a wired network such as a transmission cable or an optical fiber is applied to transmission and reception of information between ordinary computers, high-speed transmission and reception of information is possible.

Further, the security of the computer system according to the present embodiment can be further improved by using it together with another security device using a firewall system or access control software.

In the security device of the computer system according to the present embodiment, the function of the computer is reduced when the authentication radio signal 9c is not received.
This means that the function of the computer is expanded when the authentication wireless signal 9c is received.

In the security device of the computer system according to the present embodiment, transmission and reception of the authentication radio signal 9c between the authentication information transmitting device 9 and the authentication information receiving device 10 are performed by various methods such as radio waves and light. Means are applicable.

Furthermore, in the security device of the computer system according to the present embodiment, the case where access control to the database 7 is performed has been described as an example. However, the present invention is not limited to this. The present invention can also be applied to a case where the present invention is applied to mutual access control.

(Second Embodiment) The present embodiment relates to a security device for a computer system that changes the level of reduction or suspension of the functions of the computer in accordance with the reception state of the authentication information.

FIG. 2 is a block diagram showing a security device of the computer system according to the present embodiment. The same parts as those in FIG. 1 are denoted by the same reference numerals and description thereof will be omitted. When receiving the recognition wireless signal 9c, the receiving unit 12a of the authentication information receiving device 12 installed in the client 11 processes the received recognition wireless signal 9c into the processing unit 12b.
Send to

Further, the receiving unit 12a receives the recognition radio signal 9c.
If no is received, the processing unit 12b
Send to The processing unit 12b classifies the reception state of the authentication wireless signal 9c at the present time into the following three states A to C.

State A is classified when the authentication radio signal 9c is correctly received. State B is the authentication radio signal 9c
Is categorized when received incorrectly. State C is classified when the authentication wireless signal 9c is not received.

Based on Table 1, the processing unit 12b determines, based on Table 1, the level of reduction and suspension of the functions of the computer (hereinafter referred to as the reception status of the authentication radio signal 9c and the previous reception status of the authentication radio signal 9c). , "Interrupt level"
Is determined).

[0039]

[Table 1]

The interrupt level includes the cancellation of interrupt processing,
There are four types of interrupt processing for applications 13 and 14, interrupt processing for operating system 15, and interrupt processing for hardware 16.

After determining the interrupt level, the processing section 12b sends an interrupt signal or an interrupt release signal to the target whose processing is to be changed. For example, the status is the status B last time, and in the case of the status B even at the present time, the interrupt processing to the operating system 15 is executed.

In the case of the state A at the present time, which was the state C last time, the interrupt control is released. As described above, in the security device of the computer system according to the present embodiment, the interrupt processing level of the computer is determined according to the reception state of the authentication wireless signal 9c in the authentication information receiving device.

Therefore, a flexible security level can be realized. When the security device according to the present embodiment is installed on a stand-alone computer,
When the stand-alone computer is taken out of the area, it can be made unusable, thereby preventing the computer from being stolen. Even if important information is stored in this stand-alone computer, this information can be locked.

[0044]

As described above in detail, in the computer security device of the present invention, the functions of the computer taken out of the area are reduced or stopped, so that the computer can be prevented from being stolen.

Further, by reducing or stopping the functions of the computer, it is possible to prevent the information possessed by the computer taken out of the area from being leaked or falsified, thereby enhancing security. Further, in the security device of the computer system of the present invention, since the functions of the computer outside the area are reduced or stopped, unauthorized access from outside the area can be prevented, and the security is strengthened.

[Brief description of the drawings]

FIG. 1 is a block diagram showing a security device of a computer system according to a first embodiment of the present invention.

FIG. 2 is a block diagram showing a security device of a computer system according to a second embodiment of the present invention.

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 1 ... Server 2-5, 11 ... Client 6 ... Network 7 ... Database 8, 13, 14 ... Application software 9 ... Authentication information transmission apparatus 9a ... Generation part 9b ... Transmission part 9c ... Authentication radio signal 10, 12 ... Authentication information Receiving device 10a, 12a ... Receiving unit 10b, 12b ... Processing unit 15 ... Operating system 16 ... Hardware

Claims (2)

[Claims] 1. An authentication information transmitting means for transmitting authentication information receivable in a predetermined area, and a function of the computer provided when the authentication information transmitted from the authentication information transmitting means is not received. And an authentication information receiving means for reducing or stopping the security of the computer. 2. An authentication information transmitting means for transmitting authentication information receivable in a predetermined area; and a computer installed in a computer capable of transmitting and receiving data via a network, and transmitting the authentication information transmitted from the authentication information transmitting means. A security device for a computer system, comprising: authentication information receiving means for reducing or stopping the function of the computer when not receiving the information.