JPH03192458A - Access control system - Google Patents

Abstract

PURPOSE:To improve safety for access to a remote computer by judging the permission of use according to the identifier of a user, the identifier of a computer executing a connection processing and the identifier of a network to which the computer belongs. CONSTITUTION:Networks 3a-3c connecting computer systems 2a-2c to communication channels 1a-1c are identified respectively as the separate networks and mutually connected through gate ways 4a-4c. Each computer system 2 is equipped with a use starting procedure part 5, command analysis part 6, interface part 7 and address analysis part 8. The use permission of the remote computer system is judged according to the identifier of th user, the identifier of the computer system executing the connection processing and the identifier of the network to which the computer system belongs, and a use procedure is executed. Thus, the safety is improved without damaging operability.

Description

[Detailed Description of the Invention] [Object of the Invention] (Field of Industrial Application) The present invention relates to an access control system, and in particular,
The present invention relates to an access control method in a network system in which networks formed from a plurality of computer systems organically connected via communication media are interconnected.

(Prior Art) Conventionally, in a network in which multiple computer systems are organically connected via a communication medium, in order to use a remote remote computer, a terminal device equipped with a CRT display or a keyboard is required. Use of the remote computer was permitted by performing a procedure to start using the computer using the user's identifier on the computer connected to the remote computer, and then performing the same procedure to start using the remote computer using the user's identifier.

(Problem to be Solved by the Invention) As described above, permission to use a remote computer has been granted by determining only the user's identifier. Therefore, it is easy to use a remote computer from a remote unmanaged network or by duplicating user identifiers, and there are security problems such as unauthorized use, destruction, or wiretapping of the remote computer's resources. Ta.

The present invention has been made in view of the above circumstances, and allows usage permission to be granted when using a remote computer via a communication medium by identifying the user's identifier and the identifier (node) of the computer that performed the connection process to the remote computer. address) and the identifier of the network to which the computer belongs (network address).
The purpose is to provide an access control method that improves the security of access to remote reference computers.

[Configuration of the Invention (Means and Effects for Solving the Problems) In order to achieve the above object, the present invention provides a network in which a plurality of computer systems are connected to each other via a communication medium, and In a network system that allows mutual use of computer systems, permission to use a remote computer system via a communication medium is granted using the user's identifier and connection processing to the remote computer system. the remote computer system; and a usage procedure means that performs usage procedures on the remote computer system based on the determination of the determination means. With this configuration, the safety of using a remote computer via a communication medium is improved without impairing operability.

(Example) Hereinafter, one embodiment of the present invention will be described with reference to the drawings.

FIG. 1 is a diagram showing the configuration of a network system according to an embodiment of the present invention.

As shown in the figure, this system includes a computer system 2a and communication channels 1a, lb, and lc (hereinafter collectively referred to as communication channels 1), which are communication media.

2b, 2c (hereinafter collectively referred to as the computer system 2).
a, 3b, and 3c (hereinafter collectively referred to as network 3) are identified as separate networks, and gateways 4a, 4b, and 4c (hereinafter collectively referred to as gateway 4) are identified as separate networks. are connected to each other through

The computer system 2 includes usage start procedure units 5a and 5b that analyze a user's usage start request and determine usage permission for each computer system 2.

5c (hereinafter collectively referred to as the usage start procedure unit 5), the user who is permitted to start using the usage start procedure unit 5 uses the own convenience store system 2.
command analysis units 6a, 8b, and 6c (hereinafter collectively referred to as the command analysis unit 6), which analyze the remote computer system 2, interface units 7B, 71), 7c (hereinafter referred to as
These will be collectively referred to as the interface section 7. ), and address analysis units 8a, 8b, and 8c that analyze the address of the remote computer system 2 accessed via the communication path 1 and the gateway 4 (hereinafter, these will be collectively referred to as the address analysis unit 8). has.

Furthermore, the computer system 2 includes file systems 9a, 9b, and 9c for storing information (hereinafter collectively referred to as the File Fist System 9), a CRT display for displaying information, and inputting commands, etc. Terminal devices 10a, 10b, lOc consisting of a keyboard for
(Hereinafter, these will be collectively referred to as the terminal device 10.)
is connected.

The file system 9 also contains a user ID that is set for a user to use the computer system 2.
, a user information area 11a, Ilb, and llc (hereinafter collectively referred to as the user information area 11) that store user information such as passwords, etc., and a remote computer system 2 where the user is remote. A network 3, a remote computer system 2, and a remote computer system that may access the own computer system 2, which are configured to use the own computer system 2 via the communication path 1 and the gateway 4. 2, remote access information areas 12a, 12b, and 12c (hereinafter collectively referred to as remote access information areas 12
shall be. ). Furthermore, this remote access information area 12 includes information about the user's own computer and system 2 that are configured for the user to use a remote computer system 2 from the user's own computer system 2.
Remote access information for an access request, including the user ID of the network 3, the remote computer system 2, and the own computer system 2 that can be accessed from the computer system 2, is registered. User information and remote access information are registered and changed from the own terminal device 10, but in order to ensure the confidentiality of user information and remote access information, each user information is encrypted. The information is stored in area 11 and remote access information area 12.

FIG. 2 is a diagram showing the relationship between the functions of the usage start procedure unit 5, command analysis unit 6, interface unit 7, and address analysis unit 8. As shown in the figure, the usage start procedure unit 5・User information area 11 of system 9
The user information registered in 7 is compared with the usage start request entered by the user 7 from the terminal device 10, and if they match, usage is permitted, and if they do not match, usage is permitted. It has a function to deny the command, and outputs a usage permission signal to the command analysis unit 6 when the usage is permitted.

When the command analysis unit 6 receives the usage permission signal, the command analysis unit 6
The computer system 2 communicates with the user and analyzes whether the computer system 2 to be used inputted by the user from the terminal device 10 is the own computer system 2 or a remote remote computer system 2. When the computer system 2 to be used is the own computer system 2, the user uses the own computer system 2 while communicating with the command analysis section 6 using the terminal device 10. On the other hand, when the computer system 2 to be used is a remote computer system 2, the user uses the identifier of the remote computer system 2 to be used as a parameter (command) to send the command to the interface unit 7 via the command analysis unit B. to start.

The interface unit 7 activated by the command analysis unit 6 communicates with the interface unit 7 in the remote remote computer system 2 to be used via the communication path 1 and the gateway 4, thereby connecting the remote computer or system 2 to the target remote computer system 2. access. Assuming that the computer system 2 on which the user starts the interface unit 7 is the requesting side, and the target remote computer system 2 is the receiving side, the requesting side interface unit 7 and the receiving side interface unit 7 are separated by the terminal device 10.
This is done by a determining unit (not shown) automatically determining whether the program is activated from the keyboard or via the network 3.

When activated via the network 3, the receiving side interface section 7 activates the address analysis section 8 of the receiving side computer system 2. Activated address analysis unit 8
obtains from the network 3 via the receiving interface unit 7 the identifier (node address) of the requesting computer system 2 that has performed the connection process and the identifier (network address) of the network to which the requesting computer system 2 belongs. The address analysis unit 8 stores these identifiers in the remote access information area 1 in the file system 9 of the receiving computer system 2 in order to use the receiving computer system 2.
Compare this with the remote access information for access reception set and registered in 2. As a result of the comparison, if they do not match, the request side interface unit 7 is notified of the refusal of use via the reception side interface unit 7. on the other hand,
If they match, the address analysis unit 8 notifies the reception side interface unit 7, and the reception side interface unit 7 starts the reception side usage start procedure unit 5.

The activated receiving side usage start procedure unit 5, like the above-mentioned requesting side usage start procedure unit 5, receives the usage start request consisting of the user ID, password, etc. notified from the requesting computer system 2, and the receiving side computer system. system 2
In order to use this, the user information set and registered in the file of the receiving side computer system 2 and the user information area 11 of the system 9 is compared. As a result of the comparison, if they do not match, usage is refused, and if they match, usage permission is notified to the requesting interface unit 7 via the accepting interface unit 7.

Next, the operation of the network system having the above configuration will be explained with reference to the flowcharts shown in FIGS. 3 and 4.

FIG. 3 is a flowchart showing the processing of the usage start procedure unit 5. As shown in the figure, after the computer system 2 is started, the user accesses the user interface from the terminal device 10.
When D is input (step Sl), the input user ID is compared with the user information set and registered in the user information area 11 in the file system 9 of the computer system 2 (step 82). Input user I
If D does not match the user information, the user is considered to have made an input error or is an unauthorized user, and the count value of a counter (not shown) provided in the computer system 2 that counts the number of mismatches is checked. (Step S
3). If the count value is "3", use of the computer system 2 is refused, and if the count value is not "3", the contents of the counter are updated and the user is requested to input the user ID again (step S4). .

On the other hand, if the user ID matches the user information, it is checked whether a password has been set (step S5).
). When a password has been set, the user is requested to enter the password, and the entered password is compared with the registered password. (Step 88.87)
. If the passwords match or if no password has been set, the user is allowed to use the computer system 2. However, if the entered password does not match the user information, the user is assumed to have made an input error or is an unauthorized user, and the counter counts the number of mismatches and checks the count value. (Step S3, 84). Note that the counter is reset when the user is permitted to use the computer system 2.

In this way, user information area 1 of file system 9
If the user information registered in computer system 1 does not match the use start request input from terminal device 10, use of computer system 2 is not permitted.

FIG. 4 is a flowchart showing the processing of the interface unit 7. As shown in the figure, the interface unit 7 is activated by the network 3 or by the user via the terminal device lO or the command analysis unit 6. It is determined whether it has been started based on the determination result of the determination unit (step 910). That is, when the interface unit 7 is activated by the network 3, it acts as a receiving interface, and when activated by the user, it acts as a requesting interface.

First, the case where it acts as a request side interface will be explained. Through the above procedure, in order for a user who is permitted to use the computer system 2 to use the target remote computer system 2, that is, the receiving computer system 2, the user can access the network 3 from the terminal device 10 to the remote computer system 2. After setting an identifier consisting of a computer system, user ID, etc., the requesting interface unit 7 connects the receiving computer system 2
is invoked as a command with the identifier of
The remote access information for the access request registered in the remote access information area 12 of the system 9 is compared with the identifier set from the terminal device 10, and the receiving computer system 2 specified by the current user ID is
(Step 8)
11. S12).

If they match, access is enabled, and the requesting interface unit 7 connects to the target receiving computer system 2 and waits for a response from the receiving interface unit 7 (step 513). When the request-side interface section 7 receives permission to access from the reception-side interface section 7, it notifies the reception-side interface section 7 of the user ID and waits for a response from the reception-side interface section 7 (step 8).
14°si5. sie>. When the user receives permission to access from the reception side interface section 7, the user is permitted to use the target reception side computer or system 2, and thereafter performs conversation processing with the reception side computer system 2 (step 317).

However, if access becomes impossible at step S12, step S14, or step S17, use of the target receiving computer system 2 is refused.

On the other hand, the interface section 7 activated by the network 3 acts as the receiving side interface section 7,
First, the receiving side address analysis unit 8 is activated. The activated reception side address analysis unit 8 is the reception side interface unit 7.
The node address and network address, which are the identifiers of the requesting computer system 2 that performed the connection process, are obtained from the network 3 via the access reception registered in the remote access information area 12 of the receiving file system 9. to check whether the receiving computer system 2 can be accessed (step 5111.S).
19. S20). As a result of the comparison, if they match, the receiving side address analysis section 8 notifies the requesting side interface section 2 that access is possible via the receiving side interface section 2 (step 814 and step S20 correspond). When the requesting interface unit 7 is notified that access is permitted, the requesting interface unit 7 notifies the user ID. When the reception side address analysis unit 8 receives the user ID via the reception side interface unit 7, it compares it with the reception side remote access information and checks whether the user is able to access the reception side computer Q system 2 ( Steps 821, 822, S23). As a result of the comparison, if they match, the reception side interface unit 7
The access permission is notified to the requesting interface section 7 via the request side interface unit 7 (step S17 and step 823 correspond). In response to this access permission notification, the receiving side interface section 7 starts the receiving side usage start procedure section 5 and performs the procedure for using the receiving side computer system 2.

Thereafter, the user performs conversation processing with the receiving computer system 2.

However, step S20 or step S23
As a result of the comparison with the receiving side remote access information in , if access is not possible, the receiving side address analysis unit 8
The receiving interface unit 7 notifies the requesting interface unit 7 that access is not possible.

It should be noted that the present invention is not limited to the above-mentioned embodiments, and can of course be modified in various ways.

[Effects of the Invention] As described in detail above, according to the access control method of the present invention, when accessing a remote computer system, the attributes of the person based on the user ID and the location of the computer system to be connected are checked. By performing a three-step check based on the attributes and the attributes of the network group, unauthorized use or destruction of the remote computer system is prevented, and access to the remote computer system can be performed safely.

Furthermore, since the procedure for starting to use the remote computer system is performed after determining whether to access the remote computer system, safety is further improved.

Furthermore, since the attributes of network groups are checked, the security of the organization can be improved by making the topology of the network and the organization the same.

[Brief explanation of drawings]

FIG. 1 is a diagram showing the configuration of a network system according to an embodiment of the present invention, FIG. 2 is a diagram showing functional relationships, and FIG. 3 is a diagram showing the relationship between functions.
FIG. 4 is a flowchart showing the processing of the usage start procedure section, and FIG. 4 is a flowchart showing the processing of the interface section. 1... Communication path (communication medium), 2a, 2b, 2c... (remote) computer
System, 3a, 3b, 3e--Network, 5a, 5b, 5
c... Usage start procedure department (usage procedure means),

Claims (1)

[Claims] In a network system in which a network formed by multiple computer systems is interconnected via a communication medium, and these computer systems can be used mutually, remote remote communication via a communication medium is possible. The identifier of the user who is authorized to use the computer system, the identifier of the computer system that performed the connection process to the remote computer system,
and a determination means for making a determination based on the identifier of the network to which the computer system belongs, and a usage procedure means for performing a usage procedure for the remote computer system based on the determination by the determination means. control method.