JPS62260260A - Security system - Google Patents

Abstract

PURPOSE:To prevent the damage caused by the surreptitious use of an ID by collating the user identifying signal supplied from a terminal with the MODEM identifying signal produced by a MODEM. CONSTITUTION:When an access is given to a center station from a terminal station, the MODEM 4 of the center station gives a request to the terminal station for the transmission of a MODEM ID. Receiving this transmission request, a MODEM 2 transmits the MODEM ID given to the MODEM 2 itself. Receiving this MODEM ID, a MODEM 4 checks whether or not the MODEM ID belongs to a terminal station having an access right. When it is decided that said terminal station has the access right, an acknowledge is sent to the terminal station. The MODEM 2 receives the acknowledge and sends the signal to a terminal 1 to show the permission of communication to give a request for the input of a user ID. Then the user ID is supplied from the terminal 1 and received by a data base 5 and the processor of the base 5 checks whether the user ID has an access right or not. Then an acknowledge is sent back to the terminal station if it is confirmed that the user ID has an access right.

Description

DETAILED DESCRIPTION OF THE INVENTION [Field of Industrial Application] The present invention relates to a security system, particularly to a security system for preventing damage caused by theft of a user identification number during data communication such as a database service.

[Conventional technology]

Conventionally, as a security method for excluding access by users who do not have access rights in data communication systems such as database services, an identification signal for user identification (hereinafter abbreviated as ID) is input from an access terminal. In order to do so, a widely used method is to receive this ID at a center that has a database, etc., and check whether the user has access rights, and to permit access only if the verification result indicates that the user has access privileges. ing.

In this method, the ID entered into the access terminal is usually
is modulated by a modem on the terminal side and transmitted to the center side via a transmission line, and the ID demodulated by the modem on the center side is sent to a processor such as Datapace and subjected to the above-mentioned verification.

[Problem that the invention seeks to solve]

With the conventional security method described above, it is only possible to verify the ID sent to the center side, and the location of the terminal where the ID was entered cannot be identified, so the ID of the user who has access rights can be stolen by illegal means. A person may be able to access without permission using a stolen ID from a terminal in another location to which he or she does not have access rights, resulting in leakage of confidential information to outsiders who do not have access rights, or users whose IDs have been stolen. There is a problem in that it is impossible to prevent damage such as unfair charges from occurring.

An object of the present invention is to solve the above-mentioned problems by
An object of the present invention is to provide a security method that prevents damage caused by fiID theft by verifying both the FIID and the modem ID.

[Means for solving problems]

The method of the present invention provides for user identification information input from the terminal when accessing from a terminal station having an access terminal and a first modem to a center station having a second modem and a data processing device to be accessed. In a security system in which the center station receives an identification signal of @l, checks whether or not the user has an access right, and if the user has the right to access, the access is permitted. job-specific signal generation means for generating and returning a second identification signal for modem identification assigned in advance in response to the transmission request, and the second modem receives the transmission request at the time of access. modem verification means for verifying whether or not the first modem that has received the second identification signal and sent it back has an access right; The present invention is characterized in that the access is permitted only when both verification results of the signals indicate the access right M.

〔Example〕

Next, the present invention will be explained with reference to the drawings.

FIG. 1 is a block diagram showing one embodiment of the present invention, and FIG. 2 is a sequence diagram showing the procedure of signal exchange in this embodiment.

In FIG. 1, a terminal 1 and a modem 2 are installed on the access terminal station side, and a modem 4 and a database 5 are installed on the center station side. The terminal and the center are connected via a public telephone network 3. The modem 2 has a terminal interface 20. Transmission circuit 21. Receiving circuit 22. It has a configuration in which a generation circuit 24 is additionally connected to a conventional modem equipped with a line interface 23 and a line interface 23. The modem 4 also has a terminal interface 40,
Transmission circuit 41. Receiving circuit 42. An ID verification circuit 44 is added to a conventional modem equipped with a line interface 43 and a line interface 43.
It has a configuration in which it is additionally connected.

The ID generation circuit 24 has a built-in memory in which is written an identification signal (modem If) assigned in advance to the modem 2 for identifying the modem location, and receives a modem ID transmission request from the modem 4 as described later. When K is sent, the above-mentioned modem ID is read out and sent to the center station. Also I
The D verification circuit 44 receives the modem I signal sent from the modem 2.
When it receives D, it checks whether it is the modem of a terminal station that has access rights, and sends out a check signal indicating the check result.

When the terminal station accesses the center station, as shown in Figure 2, the terminal station makes a call (and dials), and the center station automatically responds to this, completing the line connection on the public telephone network 3. . The operation up to this point is the same as the conventional system, but in this embodiment, the modem 4 of the center station then requests the terminal station to send a modem ID. The modem 2 that has received this transmission request transmits the modem ID assigned to itself. Upon receiving this, the modem 4 finally verifies whether the modem ID is of a terminal station that has access rights, and only when the verification result indicates that the terminal station has access rights, sends an acknowledgment A CK (1) to the terminal station. Send to. If the verification result indicates that there is no access, a negative response (NACK) is sent back to the terminal station, and then the +fM connection is disconnected (this case is not shown in FIG. 2). When the modem 2 receives the positive response ACK(1), the modem 2 sends a signal indicating that communication is possible to the terminal 1 and requests input of the shoer ID.

At the same time, the center station sends a signal from the modem 4 to the database 5 indicating that communication is possible, and waits for access to the database 5. After this, the terminal l
From user1. &Occupational signal for separation (user ID)
The processor of the database 5 that receives this inputs the ID and checks whether it is the ID of a user who has access rights, and only when the check result shows that the user has access rights, sends an affirmative response ACK (2). is returned to the terminal station, and online communication between the two stations begins.

FIG. 3 is a block diagram showing an example of the configuration of the ID verification circuit 44 in FIG. 1. The clock and reception ID (modem ID) sent from the reception circuit 42 (or terminal interface 40) are sent to the memory circuit 45 and buffer memo IJ-46, respectively. The memory circuit 45 has a built-in memory in which a group of modem IDs of terminal stations that have access rights are written in advance, and in response to a clock, sequentially reads out i from the modem from the memory while keeping the address correct, and compares the data. Send to container 47. The buffer memory 46 stores the modem ID (reception ID) received from the terminal station.
), memory circuit 4
While the modem ID group of 5 is being read, the receiving ID
continues to be sent to the data comparator 47. The data comparator 47 compares the two modem IDs sent from the memory circuit 45 and the buffer memory 46, and sends a verification signal indicating whether or not they match to the transmission circuit 41 (or terminal interface 40). Le.

During the reading period of the modem ID group in the memory circuit 45, when the above-mentioned collation signal indicates a match, the modem 4 transmits an acknowledgment ACK (1), and when the collation signal does not indicate a match from start to finish, the modem 4 Negative response (NA
CK) is transmitted.

In this embodiment, the modem ID assigned to the modem 2 of the terminal station is not made known to the user. In addition, modem 2 or 4 usually has a memory in which a large amount of data is written in addition to the modem ID or modem ID group, so even if an attempt is made to read the contents of the memory and steal the modem ID, it will be difficult to steal the modem ID. It's impossible. Therefore, even if a person who has stolen a user ID tries to gain unauthorized access from a terminal in another location to which he or she does not have access rights, as in the case of the conventional method, such unauthorized access will be eliminated at the stage of verifying the modem ID. can. Furthermore, since the modem ID verification described above is performed independently between the modems of both the center station and the terminal station, it can be easily applied without being affected by existing conventional communication protocols.

〔Effect of the invention〕

As explained above, in the present invention, the user I
By performing a double verification that includes verification of the modem ID of the terminal station in addition to the D verification, it is possible to realize a security system that further prevents damage caused by theft.

[Brief explanation of drawings]

1 and 3 are block diagrams showing an embodiment of the present invention, and FIG. 2 is a sequence diagram for explaining the operation of the embodiment of the present invention. 1... terminal, 2, 4... modem, 20
．． 40...Terminal interface, 21.41.
...Transmission circuit, 22.42 ...Reception circuit, 23.43 ...Line interface, 24
. . . ID generation circuit, 44 . . ID verification circuit, 3 . . . public telephone network, 5 . . . database. Agent: Susumu Uchihara, Patent Attorney, 2nd 11th! I grass 2m grass 3 bacteria

Claims (1)

[Claims] When accessing from a terminal station having an access terminal and a first modem to a center station having a second modem and a data processing device to be accessed, a first identification signal for user identification inputted from the terminal is transmitted. In the security method, the first modem responds to the transmission request issued from the center station at the time of the access, in which the center station receives the request, verifies whether or not the user has the access right, and if the user has the access right, permits the access. The second modem has an identification signal generating means for generating and returning a second identification signal for identifying the modem which is assigned in advance to the modem, and the second modem is returned after issuing the transmission request at the time of the access. modem verification means for verifying whether or not the first modem that has received and returned the second identification signal has an access right; A security method characterized in that access is permitted only if the user has access rights.