JPS59191650A - Preventing system for wrong use of system - Google Patents

Abstract

PURPOSE:To prevent completely and effectively the wrong use of a system by sending periodically and automatically the correct use confirming information of system different in content to a host computer system to check a password. CONSTITUTION:A link is set between a host 10 and a terminal 12, and a password and its retrieval number are combined to be sent periodically to the host 10 from the terminal 12 in the form of the correct use confirming information 100. Receiving the first information 100, the host 10 reads out the corresponding first password out of a table 26-1. Then both passwords are collated with each other in a step 206. When the coincidence is obtained between these passwords, the same check is carried out when the next information 100 is received within a prescribed period of time. Therefore the processes of steps 206 and 208 are repeated when the information 100 coincident with the contents of the table 26-1 is received periodically from the terminal 12. Then the use of the host 10 is possible at the terminal 12. When no coincidence is obtained between both passwords, the link is cut off between the host 10 and the terminal 12.

Description

DETAILED DESCRIPTION OF THE INVENTION [Field of Application of the Invention] The present invention relates to a method for preventing unauthorized use of a computer system.

[Background of the invention]

In online systems, the computer system can be used from a terminal device, but in the past, unauthorized use of the computer system was prevented in the following manner.

FIG. 1 schematically shows an online system, in which a host computer system 1o (used system) and a terminal system 12 (used system) are shown.
host computer system 10 and terminal system 1
2 through a link 16 of a network 14 formed between the two. Although not shown in the figure, a plurality of other terminal systems are connected to the network 14.

When the host computer system 10 is used on the multi-terminal system 12 side by the operator 18 on the terminal system 12 side operating the terminal system 12, the operator 18 on the terminal system 12 side first operates the terminal system 12 before using the host computer system 10. host computer system 10
A link 16 is established between the host computer system 10 and the host computer system 10, and then a LOGON command or the like (9) is executed, thereby making the host computer system 10 usable. Then LO
The host computer system 10 is used at the terminal system 12 at any time until a procedure for terminating system use, such as a GOFF command, is performed.

Conventionally, in this type of online system or TSS system, after exchanging the LOGON command, user ID, business code, etc., information for valid use confirmation (
Authentication information such as passwords) is sent to the terminal system 12.
This operation is performed once or periodically multiple times, and the host computer system 10 matches the same legitimate use confirmation information prepared in advance with the received legitimate use confirmation information to confirm that both parties are When they match, the terminal system 12 is permitted to use it.

However, as mentioned above, the host computer system 1
0 and the terminal system 12, the host computer system 10 is illegally used by using the terminal system 20 that is illegally connected to the network 14 as shown in FIG. If an operator 22 (unauthorized user) attempting to do so appears, the operator 22 steals the information for confirming legitimate use, such as the LOGON command executed between the host computer system 10 and the terminal system 12, and steals the information. Understand the content and then use the terminal system 12
1/1 aid Notify the host computer system 10 of a failure and discontinue its use, and pretend to the host computer system 10 that the terminal system 20 is legitimate. It is possible to use it.

As described above, the conventional system has a problem in that it cannot sufficiently prevent unauthorized use of the host computer system 10 and completely protect communication secrecy.

In addition, as a method to prevent such unauthorized use, LOGOF
It is conceivable to prevent unauthorized use by having the operator 18 periodically input information for confirming legitimate use up to the F procedure, but this method requires complicated operations for the operator 18 and is not practical. The problem was that it wasn't.

[Purpose of the invention]

The present invention has been made in view of the above-mentioned conventional problems.
The purpose is to provide a method for preventing unauthorized use of a computer system that can effectively and completely prevent unauthorized use of a computer system.

[Summary of the invention]

In order to achieve the above object, the present invention transmits legitimate use confirmation information from a terminal device when the computer system is used, the computer system checks the legitimate use confirmation information, and the terminal device In a method for preventing unauthorized use of a system that confirms legitimate use, multiple pieces of information for confirming legitimate use are prepared for each computer system and terminal device, and the terminal device uses information for confirming legitimate use determined according to preset procedures. The system is characterized by a method to prevent unauthorized use of the system, which automatically sends information at predetermined time intervals according to preset procedures.

[Embodiments of the invention]

DESCRIPTION OF THE PREFERRED EMBODIMENTS Preferred embodiments of the system unauthorized use prevention method according to the present invention will be described below with reference to the drawings.

FIG. 3 shows an online system to which the system unauthorized use prevention method according to the present invention is applied, and in the figure, a host computer system 10 and a terminal system 12 are connected to a network 14.

Here, password group tables 26-1 and 28 having the same contents are prepared in the host computer system 10 and the terminal system 12. and the password search number attached.

Further, similar password group tables 28 (not shown) are prepared in terminal systems other than the terminal system 12, and a password group table 26 is prepared in the host computer system 10 in correspondence with these password group tables 28. ing. Note that each password group table 28 in each terminal system and the password group table 26 in the host computer system 10
-1. ...The contents of 26-N correspond to each other.

A preferred embodiment of the present invention has the above configuration, and its operation will be explained below with reference to FIG. 4.

After the link 16 between the host computer system 10 and the terminal system 12 has been established and a command such as a LOGON command has been performed, the initial password and the search number for that password are first paired and verified. The information is read out as usage confirmation information 100, and the legitimate usage confirmation information 100 is sent to the host computer system 10 in step 202. Then step 20
Time monitoring is performed in step 4, and when a predetermined period of time has elapsed, the legal use confirmation information 100, which is a pair of the next password and the password search number for that password, is read out again.

In this way, the legitimate use confirmation information 100 is periodically sent from the terminal system 12 to the host computer system 10.

On the other hand, in the host computer system 10, when the first legitimate use confirmation information 100 is received, the first password corresponding to it is read out from the multiple password group table 26-1 using the password search number, and both are read out from the multiple password group table 26-1. A password match is performed in step 206.

If it is determined in step 206 that both passwords are -i, time monitoring is performed in step 208, and if the next legitimate use confirmation information 100 is received within a predetermined time, the process returns to step 206. A similar check is performed.

Therefore, from the terminal system 12 side, the password group table 2 is
When the legitimate use confirmation information 100 that matches the content of 6-1 is received periodically, the processes of steps 206 and 208 are repeated, and the host computer system 10 can be used by the terminal system 12. becomes.

Also, in step 206, the password group table 2
If it is determined that the content read from 6-1 and the received legitimate use confirmation information 100 do not match, and if the next legitimate use confirmation information 100 is not received within a predetermined time in step 208. If so, in step 8 209 the link 16 between the host computer system 10 and the terminal system 12 is severed to prohibit use of the host computer system 10, thereby preventing unauthorized use of the host computer system 10. Prevented.

As explained above, according to this embodiment, the legitimate use confirmation information 100 with different contents is periodically sent to the host computer system 10 side to check the password. 100
Since the transmission of the information is performed automatically, it is impossible for an unauthorized user to understand and confirm the information and misuse the host computer system 10, and unauthorized use of the host computer system 10 can be completely and effectively prevented. .

Next, a second preferred embodiment of the present invention will be described with reference to FIG.

In this embodiment, after an exchange such as a LOGON command is executed, the host computer system 10 randomly selects a password search number from the password group table 26-1, that is, information for identifying legitimate use confirmation information. The information 102 about the password search number is read out in step 210 and transmitted to the terminal system 12 .

In the terminal system 12, the password index number 10 is
2 is received, the password is read out from the password group table 28 in step 200, and the password is sent to the host computer system 10 as legitimate use confirmation information 100 in step 202.

On the host computer system 10 side, the time until the legitimate use confirmation information 100 is received is monitored in step 208.
When the legitimate use confirmation information 100 is received within a predetermined time from the processing in step 0, the password read out in step 210 and the received password are compared in step 206. If it is determined that there is, the process proceeds to step 212, where time monitoring is performed. As a result, when a predetermined period of time has elapsed, the process returns to step 210, and the same process is performed sequentially.

Note that if it is determined in step 208 that the legitimate use confirmation information 100 is not received within the predetermined time, or if it is determined in step 206 that the two passwords do not match, the process advances to step 209.

Further, in the terminal system 12, if it takes a predetermined time or more to receive the password index number 102 after transmitting the password, the process proceeds to step 214, and the link 16 is disconnected from the terminal system 12.

As explained above, according to this embodiment, since a match is periodically performed on randomly selected passwords, unauthorized use of the terminal system 12 can be more completely prevented than in the first embodiment. .

In addition, in both of the above embodiments, the transmission timing of the legitimate use confirmation 1 information 100 was constant;
When transmitting any legitimate use confirmation information 100, information regarding the transmission timing of subsequent legitimate use confirmation information 100 is transmitted from the terminal system 12 to the computer system, and the computer system retains the transmission timing information. It is also possible to obtain the transmission timing of the legitimate use confirmation information for each transmission, and in this case, since the transmission timing of the legitimate use confirmation information is not constant, it is possible to completely prevent unauthorized use of the system being used.

Also the password search number and password.

If any or all of the transmission timing of the legitimate use confirmation information 100 is encrypted, it becomes completely impossible for unauthorized users to intervene.

Furthermore, in the above embodiment, the password group table was searched to prevent unauthorized users from intervening.
The user system sends a number at a predetermined timing, and the user side generates a password 12 from each received number according to a predetermined algorithm.

It is also preferable to configure the system in such a way as to generate .

In the above embodiment, a distributed data processing device such as a terminal control device is used instead of the host computer system 100, and each terminal device connected to the data processing device is used instead of the terminal system 120. There may be.

〔Effect of the invention〕

As explained above, according to the present invention, it is possible to effectively and completely prevent unauthorized use of a computer system.

[Brief explanation of drawings]

FIG. 1 is an explanatory diagram of the configuration of the online system, FIG. 2 is an explanatory diagram of unauthorized use of the system, and FIG.
A configuration diagram of the embodiment, FIG. 4 is an explanatory diagram of the operation of the embodiment in FIG. 3,
FIG. 5 is an explanatory diagram of the operation of a second preferred embodiment of the present invention. 10...Host combiner system 12...Terminal system 14...Network 26.28...
・Password Group Table Representative Patent Attorney Akio Takahashi

Claims (1)

[Scope of Claims] (+) When using a computer system from a terminal device, information for confirming legitimate use is transmitted from the terminal device, and the computer system checks the legitimate use information and the terminal device determines that the correct image is being used. In a method for preventing unauthorized use of a system, a plurality of pieces of information for confirming legitimate use are prepared for each of the computer system and the terminal device, and the terminal device is provided with information for confirming the legitimate use according to a preset procedure. A system unauthorized use prevention method characterized by automatically transmitting confirmation information at predetermined time intervals according to preset procedures. (2. In the method described in claim (1),
When transmitting any legitimate use confirmation information, the terminal device transmits transmission timing information regarding the transmission timing of subsequent legitimate use confirmation information to the computer system, and the computer system adjusts the time interval based on the timing information. A method for preventing unauthorized use of the system. (3) In the method described in claim (1) or (2), the computer system transmits information identifying the legitimate use confirmation information to the terminal device, and A method for preventing system unauthorized use, characterized in that the information for confirming legitimate use to be transmitted next is determined based on the identification information.