JPH03265888A - On-line transaction secrecy protection system - Google Patents

Abstract

PURPOSE:To evade the shut-off of a transaction process by registering cipheering program names for user descriptors, deciphering program names, and switching dates in advance, and performing automatic switching to programs corresponding to operation dates attending with the lapse of the operation dates. CONSTITUTION:A cipher conversion program resistration control means 17 registers plural ciphering program names and corresponding switching dates in a ciphering program registration control table 7 and a cipher conversion program registration control means 18 registers plural deciphering program names and corresponding switching dates in a deciphering program registration control table 13 before an on-line transaction processing system starts operating. Consequently, the influence of switching operation on the on-line transaction process can be ignored.

Description

DETAILED DESCRIPTION OF THE INVENTION Field of the Invention The present invention relates to online transaction processing security systems.

[Conventional technology]

Conventionally, in online transaction processing security systems, when a message requesting to use the online transaction processing system is input to a terminal, the same encryption program is always scheduled on the terminal side, and the encryption is executed according to the conversion rules determined by the program. On the host side, the same decryption program is always scheduled, decrypts the code using the same conversion rules determined by the program, and notifies the transaction processing system, thereby updating the communication network. We have achieved confidentiality protection at the highest level.

However, in the existing system, there is a great risk that unauthorized access to the system may be gained through unauthorized access to the communication network, such as decryption of codes. Therefore, it was necessary to frequently re-register the cryptographic conversion program, temporarily stop online transaction processing, and reinstall a new cryptographic conversion program.

[Problem to be solved by the invention]

In the conventional online transaction processing security system described above, when switching the encryption conversion program when the online transaction processing system has been operating for a long time (several months), it is necessary to first disconnect the program and start a new one. There was a problem in that it was necessary to re-register another program, and the switching work did not affect online transaction processing, so the impact could not be ignored.

[Failure to solve the problem]

The system of the present invention includes an encryption program 8.9 that encrypts an online transaction processing usage security descriptor included in an input online transaction processing system usage request message, and a descriptor encrypted by the program. Encryption program registration management table 7 that allows you to register multiple operation switching dates and times and encryption program names in advance; a decryption program registration management table 13 that can be individually registered; a decryption program registration control means 17 in which a plurality of the encryption program names and operation switching dates and times are registered in advance in the encryption program registration management table; and the decryption program registration control means 17; The decryption program registration control means 1-18 registers a plurality of names and switching dates and times of the decryption program to perform the decryption program in advance, and registers the decryption program in the decryption program registration management table or decryption program according to the online transaction processing system usage request message and request acceptance date and time. An encryption conversion program scheduling processing control means 5.11 that searches a management table, determines and schedules the corresponding encryption program, and an online transaction processing system usage request terminal notified by the terminal device input/output control means 3. A terminal device input/output control means 4 that notifies the terminal device input/output control means of a response message from the host notified by the device input/output control means 3, and an online transaction processing system utilization request message notified by the terminal device input/output control means. In an online transaction security protection system for an information processing system, comprising a host input/output control means 10 that notifies an online transaction processing system of a request and a terminal device of a response thereof, the request is sent by a request from the encryption conversion program schedule link processing control means. A timer device 6.12 is provided for notifying the encryption conversion program scheduling processing control means of the operating date and time at the time of acceptance, and the encryption conversion program registration control means registers the encryption program in the encryption program registration management table. A plurality of decryption program names and switching dates and times can be registered in advance, and the encryption conversion program registration control means can register a plurality of decryption program names and switching dates and times in the decryption program registration management table in advance. Further, the encryption conversion program scheduling processing control means is capable of searching the registration management table, determining a program name corresponding to the operating date and time obtained from the timer device, and scheduling the corresponding program. shall be.

〔Example〕

Next, embodiments of the present invention will be described with reference to the drawings.

FIG. 1 is a block diagram of an embodiment of the present invention.

The encryption conversion program security protection method in this embodiment is as follows:
Terminal device human output control means 3 and terminal device input/output control means 4
, encryption conversion program scheduling control means 5 , timer device 6 , encryption program registration management table 7 , encryption program 8.9 and encryption conversion program registration control means 17
a terminal device 1 comprising: a host input/output control means 10; a cryptographic conversion program scheduling control means 11; a timer device 12; a decryption program registration management table 13; a decryption program 14, 15; and a decryption program registration control means 18. It consists of a host 2 equipped with an online transaction processing system 16.

FIG. 2 shows an example of the encryption program registration management table, and FIG. 3 shows an example of the decryption program registration management table. and a switching date/time storage area 24.

Next, the operation of the cryptographic conversion program time-limited security protection system of this embodiment configured as described above will be explained.

Before the online transaction processing system starts operating, the encryption conversion program registration control means 17 stores the encryption program name and the corresponding switching date and time in the encryption program registration management table 7, and the encryption conversion program registration control means 18 A process is performed to register a plurality of decryption program names and corresponding switching dates and times in the decryption program registration management table 13.

That is, the encryption conversion program registration control means 17 assigns the encryption program name to 21 of the encryption conversion program registration management table 7.
(Figure 2) shows the corresponding switching date and time at 22 (2nd
), and the encryption conversion program registration control means 18 registers the encryption conversion program name in 23 (Figure 3) of the encryption conversion program registration management table 13 (FIG.
4 (Figure u!3).

0 During operation of the online transaction processing system, when a message requesting the use of the online transaction processing system is input to the terminal device 1, the input message is transferred from the terminal device input/output control means 3 to the terminal device input/output control means 4. The terminal device input/output control means 4 includes a cryptographic conversion program scheduling control means 5.
A message requesting the use of the online transaction processing system is sent to the person. When the encryption conversion program scheduling control means 5 receives the message requesting the use of online transaction processing, it acquires the operation date and time from the timer device 6, and uses this value as a key to change the switching date and time storage area (22) of the encryption program registration management table 7. The encrypted program name storage area 21) is searched for the corresponding program name, and the program to be started is determined and scheduled.

For example, in FIG. 2, if the operation date and time is before January 1, 1989, PROL is scheduled and
PRO2 will be scheduled from January 1, 1999 to January 31, 1989. In this way, automatic switching of the encryption program is realized according to the driving date and time.

The scheduled encryption program encrypts the user descriptor included in the online transaction processing system usage request message. The encrypted message requesting to use the online transaction processing system is sent to the terminal device input/output control means 4 again, and the terminal device input/output control means 4 controls the encrypted message requesting the use of the online transaction processing system by host input/output control. The means 10 is notified.

The host input/output control means 10 notifies the encryption conversion program scheduling control means 1 of an online transaction processing system usage request message. When the encryption conversion program scheduling control means 11 receives the message requesting the use of online transaction processing, it acquires the operation date and time from the timer device 12, and uses this value as a key to change the switching date and time storage area (24) of the encryption conversion program registration management table 13. The program name corresponding to this search is searched in the encryption conversion program name storage area (23), and the program to be activated is determined and scheduled.

For example, on the right side of Figure 3, if the operation date and time is before January 1, 1989, PR51 is scheduled and
PR52 will be scheduled from January 1, 1999 to January 31, 1989. In this way, automatic switching of the encryption conversion program is realized for the 'C1 operation date and time.

The scheduled encryption conversion program decrypts the user descriptor included in the message requesting to use the online transaction processing system, and returns it to the state in which it was inserted into the terminal device 1.

The decoded online transaction processing system use request message is notified to the host input/output control means 10, and the host input/output control means 10 notifies the online transaction processing system 1G, and the online transaction processing system 13 system 16, Processing will be performed based on the received online transaction processing system usage request message.

〔Effect of the invention〕

As explained above, the present invention enables a plurality of encryption program names, decryption program names, and switching dates and times to be registered in advance in a user descriptor of an online transaction processing use request message in an online transaction processing security system. , by making it possible to automatically switch to a program corresponding to the date and time of the online transaction processing system as the operating date and time elapse, it prevents unauthorized acquisition of system usage rights through unauthorized intrusion into communication networks, etc. This method also has the effect of avoiding the suspension of transaction processing and the burden on operators caused by changing/switching the encryption conversion program as in the conventional method.

4,

[Brief explanation of drawings]

FIG. 1 is a block diagram showing the configuration of an embodiment of the cryptographic conversion program time limiter 1F secure protection system of the present invention, 1...
... terminal device, 2 ... host, 3 ...
...Terminal device human output control means, 4...Terminal device input/output control means, 5, 11... Encryption conversion program scheduling control means, 6, 12... Timer device, 7... Encryption program registration management table, 8.9... Encryption program, 10...
...Host input/output control means, 13...Decryption program registration management table, 14゜15...Decryption program, 16...Online transaction processing system, 17.18 ... Encryption conversion program registration control means.

Claims (1)

[Claims] Encryption programs 8 and 9 for encrypting online transaction processing usage security descriptors included in an input online transaction processing system usage request message, and descriptors encrypted by the programs. The decryption programs 14 and 15 that decrypt the code, the encryption program registration management table 7 that allows multiple operation switching dates and times and encryption program names to be registered in advance, and the encryption program registration management table 7 that allows multiple operation switching dates and times and decryption program names to be registered in advance. a possible decryption program registration management table 13; and a plurality of the encryption program names and operation switching dates and times in the encryption program registration management table; and a plurality of the decryption program names and switching dates and times in the decryption program registration management table. Encryption conversion program registration control means 18 registers a plurality of encryption programs in advance, and searches the encryption program registration management table or decryption program registration management table based on the online transaction processing system use request message and request acceptance date and time, and executes the corresponding encryption conversion program registration control means 18. Encryption conversion program scheduling processing control means 5, 11 that determines and schedules a program or decryption program, and a message from the host that has notified the host 2 of the online transaction processing system use request message notified by the terminal device input/output control means 3. Terminal device transmission/reception control means 4 for notifying the terminal device input/output control means of a response message
and a host transmission/reception control means 10 for notifying the online transaction processing system of the online transaction processing system use request message notified by the terminal device transmission/reception control means and for notifying the terminal device of the response. , comprising a timer device 6, 12 for notifying the encryption conversion program scheduling processing control means of the operating date and time at the time of request reception in response to a request from the encryption conversion program scheduling processing control means, The control means is capable of registering a plurality of encryption program names and switching dates and times in the encryption program registration management table in advance, and the encryption conversion program registration control means is capable of registering a plurality of encryption program names and switching dates and times in the encryption program registration management table. A plurality of decryption program names and switching dates and times can be registered in advance, and the decryption program scheduling processing control means searches the registration management table and determines a program name corresponding to the operation date and time obtained from the timer device. An online transaction security system characterized in that it is possible to schedule corresponding programs.