JP2019125104A - Authentication device, authentication method and authentication system - Google Patents

Abstract

To provide an authentication device, an authentication method, and an authentication system capable of suppressing unauthorized use of a terminal in a system for providing a service to the terminal.SOLUTION: An authentication system 1 comprises a server 20, a terminal 40 and an authentication device 10. The server 20 provides services. The authentication device 10 includes a management terminal connection unit 12 and an authentication unit 11, and authenticates the terminal 40 between the server 20 and the terminal 40. The management terminal connection unit 12 receives the setting for setting the terminal 40 in a state in which the operation related to the use of the service is restricted. When the authentication unit 11 receives a signal from the terminal 40 (an operation restriction terminal) set to the state in which the operation related to the use of the service is restricted, the authentication unit 11 transmits, to the operation restriction terminal which is a transmission source of the signal, a response signal instructing restriction of the operation related to the use of the service. When the authentication unit 11 receives a signal requesting an authentication process from the terminal 40 not corresponding to the operation restriction terminal, the authentication unit 11 performs authentication processing related to the use of service.SELECTED DRAWING: Figure 1

Description

  The present invention relates to an authentication device, an authentication method, and an authentication system that perform authentication of a terminal that is provided with a service using a public network.

  In recent years, with the increasing performance of mobile terminals such as tablet terminals and smartphones and the spread of cloud computing technology, companies and organizations that use cloud services on mobile terminals to improve business efficiency are increasing. Along with this, there is a demand for a solution to a problem in which a mobile terminal is lost, for example, a situation in which unauthorized use of the mobile terminal or data leakage held by the mobile terminal is likely to occur.

  A conventional invention for solving such a problem is disclosed in Patent Document 1. In the invention described in Patent Document 1, high security is realized by providing an expiration date in session information generated when a user starts using a service. Specifically, in the invention described in Patent Document 1, when the expiration date provided in the session information ends, the input of authentication information is requested again, and when the correct authentication information is not input, the service is regarded as authentication failure. Restrict the use of

JP, 2015-32108, A

  However, in the invention described in Patent Document 1, although it is possible to prevent a third party from illegally using the service when the terminal is lost, the terminal holds data acquired using the service. In this case, it is impossible to prevent the data held by the terminal from being used by a third party. Therefore, when the terminal is lost, important data such as business data held by the terminal may be leaked.

  The present invention has been made in view of the above, and it is an object of the present invention to obtain an authentication apparatus capable of suppressing unauthorized use of a terminal in a system for providing a service to the terminal.

  In order to solve the problems described above and achieve the object, the present invention is an authentication device that authenticates a terminal between a server providing a service and a terminal, and the operation related to the use of the terminal is restricted. And a setting reception unit configured to receive the setting to be put into a set state. Further, when the authentication device receives a signal from the operation restricted terminal which is a terminal set to a state in which the operation related to the use of the service is restricted, the authentication device relates to the use of the service to the operation restricted terminal of the signal transmission source. And an authentication unit for performing an authentication process related to the use of the service when a signal requesting an authentication process is received from a terminal not corresponding to the operation restricted terminal.

  The authentication device according to the present invention has the effect of being able to suppress unauthorized use of a terminal in a system that provides a service to the terminal.

A diagram showing an example of configuration of an authentication system provided with an authentication device according to a first embodiment A figure showing an example of attestation data and terminal data which a data attaching part concerning Embodiment 1 holds. A diagram showing an example of a screen displayed on the display unit of the management terminal of the authentication system according to the first embodiment. The figure which shows an example of the hardware which implement | achieves the authentication apparatus concerning Embodiment 1. The figure which shows an example of the hardware which implement | achieves the terminal concerning Embodiment 1. Flowchart showing an outline of the operation of the authentication device according to the first embodiment Flow chart showing an example of the operation of the terminal according to the first embodiment Flow chart showing an example of the operation of the authentication device according to the first embodiment A diagram showing an example of configuration of an authentication system according to a second embodiment Flow chart showing an example of the operation of the authentication device according to the second embodiment A diagram showing an exemplary configuration of an authentication system according to a third embodiment Flow chart showing an example of the operation of the authentication device according to the third embodiment A diagram showing an exemplary configuration of an authentication system according to a fourth embodiment Flow chart showing an example of the operation of the authentication device according to the fourth embodiment A figure showing an example of composition of an authentication system concerning Embodiment 5 A figure showing an example of terminal data which a data holding part of an attestation device concerning Embodiment 5 holds. Flow chart showing an example of the operation of the authentication device according to the fifth embodiment The figure which shows an example of the function which the authentication system concerning Embodiment 5 provides a service administrator.

  Hereinafter, an authentication device, an authentication method, and an authentication system according to an embodiment of the present invention will be described in detail based on the drawings. The present invention is not limited by the embodiment.

Embodiment 1
FIG. 1 is a diagram showing a configuration example of an authentication system provided with an authentication device according to a first embodiment of the present invention.

  The authentication system 1 according to the first embodiment includes operations such as writing, editing, and confirmation of information necessary for authentication processing in the authentication device 10 according to the present invention, one or more servers 20 that provide services, and the authentication device 10. Management terminal 30 for performing authentication on the authentication device 10, and one or more terminals 40 that access the server 20 and receive a service. The authentication device 10 has a function of communicating with the terminal 40 and a function of communicating with the server 20, and executes processing such as relaying communication between the terminal 40 and the server 20. Although the details will be described later, when the authentication device 10 detects communication with the terminal 40 designated in advance by the management terminal 30, the operation of the detected terminal 40 is restricted. The terminal 40 is, for example, a movable device such as a tablet terminal or a smartphone, and may be lost by being left behind or the like when going out. Although only one management terminal 30 is shown in FIG. 1, a plurality of management terminals may be provided.

  The authentication device 10 and the terminal 40 are connected to a network 50 which is a public network such as the Internet and perform communication via the network 50. In the terminal 40, the agent 41 installed in advance communicates with the authentication device 10, and receives provision of service from the server 20 via the authentication device 10. The terminal 40 in which the agent 41 is not installed can not receive the service. The authentication device 10 and the network 50 are connected by wire or wirelessly. The terminal 40 and the network 50 are wirelessly connected. The connection form of the terminal 40 and the network 50 is not limited to this. Some terminals 40, that is, one or more terminals 40 and the network 50 may be connected by wire. Since the network 50 is a public network, it is desirable that communication between the authentication device 10 and the terminal 40 be encrypted communication.

  The authentication device 10 includes an authentication unit 11, a management terminal connection unit 12, a proxy processing unit 13, an agent management unit 14, and a data holding unit 15.

  The authentication unit 11 executes various processes including an authentication process of the terminal 40 that desires to use the service.

  The management terminal connection unit 12 has a function of communicating with the management terminal 30, and registration of the authentication data 16 and the terminal data 17 performed by the administrator using the management terminal 30, correction of the authentication data 16 and the terminal data 17, and authentication Processing for realizing confirmation of the data 16 and the terminal data 17 is executed.

  The proxy processing unit 13 transmits the request received from the terminal 40 via the authentication unit 11 to the server 20 on behalf of the request source terminal 40, and receives a response to the request from the server 20, and the authentication unit 11 A process of transferring to the request source terminal 40 is performed.

  The agent management unit 14 holds application software for providing the terminal 40 with a function as the agent 41 by being installed in the terminal 40 and information necessary for the agent 41 to operate, and the use of the agent 41 is permitted. When a request is received from the terminal 40, the stored application software or the like is transmitted to the request source terminal 40.

  The data holding unit 15 holds authentication data 16 and terminal data 17 which are information related to terminals that can use a service.

  Here, the details of the authentication data 16 and the terminal data 17 held by the data holding unit 15 will be described with reference to FIG. FIG. 2 is a view showing an example of the authentication data 16 and the terminal data 17 held by the data holding unit 15 according to the first embodiment.

  The authentication data 16 includes a user ID (Identifier), a password, a user name, a company, an organization, and an access right. The authentication data 16 may include information other than these. The registration of the authentication data 16 is performed in advance using a management terminal 30 by a service manager who provides the various services by constructing the server 20. The information used in the process in which the authentication unit 11 authenticates the terminal 40, the process in which the authentication unit 11 determines whether or not to transfer the request from the terminal 40 to the proxy processing unit 13, etc. is "user ID". , "Password" and "access right". Therefore, the authentication data 16 includes at least the "user ID", the "password" and the "access right". The “user name”, “company” and “belonging” are not essential information, but when such information is included in the authentication data 16, the service administrator checks the authentication data using the management terminal 30. It becomes possible to do work efficiently. In order to improve security, it is desirable to keep the "user ID" and "password" in an encrypted state. The method of encryption is not specified.

  The “user ID” is identification information of the user who owns the terminal 40. "User name" represents the user's name, "company" represents the company to which the user belongs, and "affiliation" represents the user's affiliation within the company. "Access right" represents a service available to the user. Each user can use one or more services, and in the case of users who can use a plurality of services, the "access right" includes a plurality of information, that is, a plurality of each of a plurality of available services. Information is registered. In the example shown in FIG. 2, information representing service # 1 and information representing service # 2 are registered in the access right of the user whose user ID is S00001 and this user uses service # 1 and service # 2 be able to.

  The terminal data 17 includes manager registration terminal data 17-1 and automatic registration terminal data 17-2. The manager registration terminal data 17-1 is data registered by the service manager using the management terminal 30. The automatic registration terminal data 17-2 is data registered based on login information received by the authentication unit 11 from the terminal 40. The login information is information transmitted from the agent 41 of the terminal 40 to the authentication device 10 when the terminal 40 requests the authentication device 10 to perform authentication processing, and includes information unique to the terminal 40.

  The administrator registration terminal data 17-1 includes a terminal ID, a maker, a model, a MAC (Media Access Control) address, a prohibited terminal, and a restriction policy. The manager registration terminal data 17-1 may include information other than these.

  “Terminal ID” is identification information of the terminal 40. “Manufacturer” represents the manufacturer of the terminal 40, and “model” represents the model of the terminal 40. The “MAC address” is a MAC address given to the terminal 40. The MAC address is a physical address that uniquely indicates a specific terminal 40. "Prohibited terminal" is information indicating whether the terminal 40 corresponds to a prohibited terminal. The prohibited terminal is a terminal whose operation is restricted according to the instruction of the authentication device 10, and corresponds to the operation restricted terminal. When the "prohibited terminal" is "corresponding", the terminal 40 corresponds to a prohibited terminal, and when the "prohibited terminal" is "non-corresponding", the terminal 40 does not correspond to a prohibited terminal. The “limit policy” is information indicating how the operation of the terminal 40 is restricted when the terminal 40 corresponds to a prohibited terminal. As shown in FIG. 2, “unavailable”, “terminal reset”, “specified data deletion”, “application data deletion (application data deletion)”, and the like are set in the “limit policy”. The setting of the administrator registration terminal data 17-1 is performed by the management terminal connection unit 12 operating as a setting reception unit receiving a setting operation of various information performed by the service administrator using the management terminal 30.

  Here, the operation of the terminal whose operation is restricted according to the instruction of the authentication device 10 will be briefly described. When the agent 41 of the terminal 40 for which “unavailable” is set in the “limit policy” is instructed from the authentication device 10 to limit the operation, the agent 41 does not execute the operation for using the service, and the service of the user Restrict use. The agent 41 of the terminal 40 for which "terminal reset" is set in the "limit policy" changes the state of the terminal 40 to an initial state which is the state at the time of shipment from the factory, when an operation restriction is instructed from the authentication device 10. . When the agent 41 of the terminal 40 for which “deletion of designated data” is set in “limit policy” is instructed from the authentication device 10 to limit the operation, the agent 41 erases the designated data. For example, when a specific area of the storage unit whose description is omitted in FIG. 1 is specified, the agent 41 erases the data written in the specified area. The method by which the authentication device 10 designates data to be erased is not limited to this. Other designation methods may be possible, such as designating erasure of data acquired using a particular service. The agent 41 of the terminal 40 for which “application data deletion” is set in the “limit policy” erases data obtained using the designated application when instructed by the authentication device 10 to limit the operation. The restriction policy shown in FIG. 2 is an example, and the contents of the settable restriction policies are not limited to these. In the following, in order to prevent the description from being complicated, even if the operation performed by the agent 41 of the terminal 40 is described, the description will be made with the terminal 40 as the subject.

  The automatic registration terminal data 17-2 includes a terminal ID, a user ID, a communication time, a use service, and a state. The automatic registration terminal data 17-2 may include information other than these.

  The “terminal ID” is the same information as the “terminal ID” included in the administrator registration terminal data 17-1, and the “user ID” is the same information as the “user ID” included in the authentication data 16. The “communication time” is the time when the authentication device 10 lastly communicated with the terminal 40. The “use service” is information representing a service used by the terminal 40 or a service used. The “state” is information indicating the service usage status of the terminal 40. When the “state” is “connection”, it indicates that the terminal 40 is using the service indicated by the “use service”. If the “state” is “end”, it indicates that the terminal 40 has ended using the service indicated by the “use service”.

  The management terminal 30 has a function of registering the authentication data 16 and the manager registration terminal data 17-1 constituting the terminal data 17 in the authentication device 10, the authentication data 16 registered in the authentication device 10 and the terminal data The service manager is provided with the confirmation function 17 and the confirmation function of the service usage status of each terminal corresponding to the authentication data 16 and the terminal data 17 registered in the authentication device 10. The confirmation function of the authentication data 16 and the terminal data 17 registered in the authentication apparatus 10 also includes a function of correcting the administrator registration terminal data 17-1 of the registered authentication data 16 and the terminal data 17. For example, the service administrator can change the setting of “prohibited terminal” of the administrator registration terminal data 17-1 using the confirmation function of the registered authentication data 16 and the terminal data 17. The management terminal connection unit 12 of the authentication device 10 reads out the authentication data 16 and the terminal data 17 held by the data holding unit 15, and the display unit of the management terminal 30 (see FIG. This is realized by generating data of a screen to be displayed on 1) and displaying the data on the management terminal 30. The data of the screen to be displayed on the display unit of the management terminal 30 may be created by the management terminal 30.

  FIG. 3 is a diagram showing an example of a screen displayed on the display unit of the management terminal 30 of the authentication system 1 according to the first embodiment. More specifically, FIG. 3 is a diagram showing an example of a screen displayed when the service administrator confirms the service usage status of each terminal corresponding to the authentication data 16 and the terminal data 17 registered in the authentication device 10. It is. Hereinafter, the terminal corresponding to the authentication data 16 and the terminal data 17 registered in the authentication device 10 will be referred to as a registered terminal.

  As shown in FIG. 3, the service manager can monitor the service usage status of each registered terminal using the management terminal 30. The "state" shown in FIG. 3 represents the current service usage status of each registered terminal. If the "state" is "connected", it indicates that the registered terminal is using the service, and if the "state" is "disconnecting", the registered terminal has finished using the service, that is, the service Indicates that it is not in use. When the “state” is “prohibited”, it indicates that the registered terminal corresponds to the above-described prohibited terminal and the use of the service is restricted. The example illustrated in FIG. 3 indicates that the terminal 40 whose terminal ID is E001 is using service # 2 and the terminal 40 whose terminal ID is E002 is using service # 1. Further, in the example shown in FIG. 3, the terminal 40 with the terminal ID E003 has finished using the service # 3, and the terminal 40 with the terminal ID E004 has finished using the service # 10, This shows that the terminal 40 with the terminal ID of E090 is set as a prohibited terminal and can not use the service # 1. In addition, when the service administrator selects "display" in the item of "history" by clicking with a mouse or the like, it is possible to check the usage history of the service of the registered terminal. For example, when the service administrator selects "Display" of "History" of a registered terminal whose terminal ID is E001, the management terminal 30 selects the service used by the registered terminal whose terminal ID is E001 in the past, and the service Display the usage start date and time on the display unit. The service use start date and time is the date and time represented by the "communication time" of the automatic registration terminal data 17-2 shown in FIG. Further, the confirmation function of the registered terminal includes a filter function for narrowing down the target terminals for which the service usage status is to be confirmed. The filter function accepts setting of conditions for all or part of the terminal ID, the user ID, and the service used, and extracts registered terminals that satisfy the set conditions.

  When “Authentication data registration” in the menu shown in FIG. 3 is selected, the management terminal 30 displays a screen for the service administrator to register new authentication data (see FIG. 2) in the authentication device 10. Display In addition, when “Terminal data registration” in the menu is selected, the management terminal 30 displays a screen for the service administrator to register new administrator registration terminal data (see FIG. 2) in the authentication device 10. Do. The restriction policy registered in the administrator registration terminal data is one of a plurality of kinds of restriction policies prepared in advance. That is, the service manager selects one of a plurality of types of restriction policies prepared in advance and registers it in the manager registration terminal data. The selection of the restriction policy is performed by the user of the terminal 40 corresponding to the information to be registered, and the service administrator registers the restriction policy selected by the user of the terminal 40 in the administrator registration terminal data. The selection result of the restriction policy by the user of the terminal 40 is notified from the user of the terminal 40 to the service manager, for example, at the time of application for service use.

  When “list of authentication data” in the menu is selected, the management terminal 30 displays a screen for the service administrator to confirm all authentication data registered in the authentication device 10. In addition, when “terminal data list” in the menu is selected, the management terminal 30 displays a screen for the service manager to confirm all the administrator registration terminal data registered in the authentication device 10. When the service administrator registers new authentication data or administrator registration terminal data in the authentication device 10, convenience may be enhanced as a configuration that allows batch registration using a file in CSV (Ccomma Separated Values) format or Excel format. Similarly, convenience may be enhanced as a configuration in which batch updating can be performed when updating registered authentication data or administrator registration terminal data.

  FIG. 4 is a diagram illustrating an example of hardware for realizing the authentication device 10 according to the first embodiment. The authentication device 10 can be realized by the processor 101, the memory 102, and the communication device 103 shown in FIG.

  The processor 101 is a central processing unit (CPU) (central processing unit, processing unit, processing unit, arithmetic unit, microprocessor, microcomputer, processor, also referred to as DSP (digital signal processor)), system LSI (Large Scale Integration), or the like. The memory 102 is a random access memory (RAM), a read only memory (ROM), an erasable programmable read only memory (EPROM), an EEPROM (registered trademark) (electrically erasable programmable read only memory), or the like.

  The authentication unit 11, the management terminal connection unit 12, the proxy processing unit 13, and the agent management unit 14 of the authentication device 10 are realized by the processor 101 executing programs for operating as these units. Programs for operating as the authentication unit 11, the management terminal connection unit 12, the proxy processing unit 13 and the agent management unit 14 are stored in advance in the memory 102. The processor 101 operates as the authentication unit 11, the management terminal connection unit 12, the proxy processing unit 13, and the agent management unit 14 by reading out the program from the memory 102 and executing the program.

  The data holding unit 15 is realized by the memory 102. The communication device 103 is used when the authentication device 10 communicates with another device, specifically, the device such as the server 20 and the management terminal 30.

  FIG. 5 is a diagram illustrating an example of hardware that implements the terminal 40 according to the first embodiment. The terminal 40 can be realized by the processor 201, the memory 202, the communication device 203, the input device 204, and the display device 205 shown in FIG.

  The processor 201 and the memory 202 are similar to the processor 101 and the memory 102 described above. The input device 204 is a mouse, a keyboard, a touch panel, or the like. The display device 205 is a liquid crystal monitor, a display or the like.

  The agent 41 of the terminal 40 is realized by the processor 201 reading out and executing application software stored in the memory 102 and downloaded from the agent management unit 14 of the authentication device 10.

  The communication device 203 is used when the terminal 40 communicates with another device, specifically, the device such as the authentication device 10 or the server 20. The input device 204 and the display device 205 are used when the user of the terminal 40 operates the terminal 40.

  The hardware configuration of the management terminal 30 is the same as the hardware configuration of the terminal 40. That is, the management terminal 30 can also be realized by the hardware having the configuration shown in FIG.

  Although the authentication device 10 and the management terminal 30 are separately configured in the present embodiment, the configuration in which the authentication device 10 includes the management terminal 30, that is, the configuration in which the authentication device 10 has the function of the management terminal 30. I don't care.

  Next, operations of the authentication device 10 and the terminal 40 that constitute the authentication system 1 will be described. FIG. 6 is a flowchart showing an outline of the operation of the authentication device 10 according to the first embodiment. Each time the authentication device 10 receives a signal from the terminal 40, the authentication device 10 performs an operation according to the flowchart shown in FIG.

  As shown in FIG. 6, when the authentication device 10 receives a signal from the terminal 40 (step S1), the authentication device 10 checks whether the terminal 40 of the signal transmission source corresponds to a prohibited terminal (step S2). When the authentication device 10 receives a signal from the terminal 40 in which the “prohibited terminal” of the administrator registration terminal data 17-1 shown in FIG. 2 is “corresponding”, the terminal 40 of the signal transmission source is a prohibited terminal. If it determines that it corresponds, and it receives a signal from the terminal 40 in which the “prohibited terminal” is “not applicable”, it determines that the terminal 40 of the signal transmission source does not correspond to the prohibited terminal.

  When the terminal 40 of the signal transmission source corresponds to a prohibited terminal (step S2: Yes), the authentication device 10 instructs the terminal 40 to restrict the use of the function (step S3). It should be noted that the terminal 40 that has received this instruction restricts the operation so that the user can not use the function specified by the restriction policy set in the own terminal.

  When the terminal 40 of the signal transmission source does not correspond to a prohibited terminal (step S2: No), the authentication device 10 executes processing in accordance with the information included in the signal received in step S1 (step S4). For example, when the information included in the signal received in step S1 indicates an authentication request, the authentication device 10 performs an authentication process on the use of the service for the terminal 40 of the signal transmission source, and permits the use of the service. It is determined whether or not. If the information contained in the signal received in step S1 indicates an access request to the server 20, the authentication device 10 determines whether or not to accept the request, and if the request is accepted, the signal received from the terminal 40 Are transferred to the server 20.

  FIG. 7 is a flowchart illustrating an example of the operation of the terminal 40 according to the first embodiment. When the terminal 40 receives from the user an operation for using the service provided by the server 20, the terminal 40 performs an operation according to the flowchart shown in FIG.

  When the terminal 40 starts operation, it first confirms whether or not the agent 41 has been installed (step S11). If the agent 41 has not been installed (step S11: No), the agent 41 authenticates the authentication device 10 Download and install (step S12). Here, the download of the agent 41 means download of application software operating as the agent 41 and information necessary for the operation of the agent 41. The information necessary for the operation of the agent 41 includes a restriction policy. In step S12, the terminal 40 requests the authentication device 10 to transmit application software and the like operating as the agent 41, and downloads application software and the like operating as the agent 41 from the authentication device 10. At this time, the request signal transmitted by the terminal 40 includes the terminal ID and the MAC address of the terminal 40. When the authentication device 10 receives this request signal, the information such as the terminal ID and MAC address of the request source terminal 40 included in the received signal is not registered in the administrator registration terminal data 17-1 of the terminal data 17. , Reject the request from the terminal 40. When the request from the terminal 40 is received, the agent management unit 14 of the authentication device 10 receives the restriction policy registered in association with the terminal ID of the request source terminal 40 in the manager registration terminal data 17 in the data holding unit 15. -1, and transmits to the terminal 40 together with application software operating as the agent 41 held by itself. When receiving the application software operating as the agent 41 and the restriction policy, the terminal 40 installs the application software and sets the restriction policy.

  If step S12 has been executed, and if the agent 41 has been installed (step S11: Yes), the terminal 40 receives login information from the user (step S13). The login information accepted by the terminal 40 is a user ID and a password.

  When receiving the login information from the user, the terminal 40 transmits a signal including the user ID and password as login information, and the terminal ID and MAC address of the own terminal to the authentication device 10 as a login request signal. The login request signal is a signal for logging in to a service, that is, requesting start of use of the service. When the login is successful (step S14: Yes), the terminal 40 performs periodic communication with the authentication device 10 (step S15). The fixed cycle communication is an operation in which the terminal 40 transmits a fixed cycle communication request signal including the terminal ID of the own terminal to the authentication device 10 at a fixed cycle, and receives a response signal thereto.

  When the terminal 40 receives the response signal to the periodic communication request signal, the terminal 40 confirms the information contained in the response signal, and confirms whether the terminal 40 corresponds to a prohibited terminal (step S16). The terminal 40 determines that the terminal corresponds to a prohibited terminal when the information included in the response signal indicates an instruction to execute an operation according to the set restriction policy. When it does not correspond to a prohibited terminal (step S16: No), the terminal 40 confirms whether or not the periodic communication has succeeded (step S17). The terminal 40 determines that the periodic communication is successful, when the information included in the response signal indicates the instruction to continue the periodic communication. If the periodic communication is successful (step S17), the terminal 40 returns to step S15, and transmits the periodic communication request signal again at a predetermined timing. Thereafter, the terminal 40 repeats steps S15 to S17 until it determines in step S16 that it corresponds to a prohibited terminal or until it determines in step S17 that the periodic communication has failed.

  When the terminal 40 fails in the periodic communication (step S17: No), that is, when the information included in the response signal from the authentication device 10 indicates the termination instruction of the periodic communication, the usage termination signal to the authentication device 10 To end the use of the service (step S18). Although the description in FIG. 7 is omitted, the terminal 40 can use the authentication device 10 also when receiving an operation from the user instructing the end of use of the service while performing the periodic communication. Send an end signal to end the use of the service.

  When the terminal 40 corresponds to a prohibited terminal (step S16: Yes), the terminal 40 performs an operation according to the restriction policy set for the terminal (step S20). The terminal 40 stops the operation for using the service when the own terminal corresponds to a prohibited terminal and the “limit policy” indicating “unusable” described above is set. In addition, when the terminal 40 corresponds to a prohibited terminal and the “limit policy” representing the “terminal reset” described above is set, the terminal 40 executes an operation of returning the terminal to the factory default state. Further, when the terminal 40 corresponds to a prohibited terminal and the “limit policy” representing “deletion of designated data” described above is set, the terminal 40 erases previously designated data. As the data to be erased, for example, when setting the restriction policy, the terminal 40 displays a menu screen for designating the data to be erased so as to make the user designate. In addition, when the terminal 40 corresponds to a prohibited terminal and the “limit policy” representing “app data deletion” described above is set, data obtained using an application designated in advance Erase For the specification of an application, for example, when setting a restriction policy, the terminal 40 displays a menu screen for specifying an application so as to make the user specify.

  When the terminal 40 fails in login (step S14: No), the terminal 40 confirms whether or not the own terminal corresponds to a prohibited terminal (step S19). Step S19 is the same process as step S16. If the terminal 40 indicates that the signal indicating login failure includes information indicating that the own terminal is a prohibited terminal, that is, the information indicating the execution instruction of the operation according to the set restriction policy indicates login failure. If it is included in the signal shown, it is determined that the terminal corresponds to a prohibited terminal.

  When the terminal 40 corresponds to a prohibited terminal (step S19: Yes), the terminal 40 performs an operation according to the restriction policy set for the terminal (step S20). If the terminal 40 does not correspond to a prohibited terminal (step S19: No), the terminal 40 returns to step S13.

  As described above, when the terminal 40 receives a signal from the authentication device 10, the terminal 40 confirms whether or not the own terminal corresponds to a prohibited terminal, and executes an operation according to the restriction policy if it corresponds to a prohibited terminal. Limit the functions available to the user.

  Next, the operation when the authentication device 10 receives a signal from the terminal 40 will be described in detail. FIG. 8 is a flowchart showing an example of the operation of the authentication device 10 according to the first embodiment.

  The authentication device 10 continues to wait to receive a signal from the terminal 40 (Step S31: No), and when a signal is received from the terminal 40 (Step S31: Yes), the terminal 40 of the signal transmission source becomes a prohibited terminal. It is checked whether or not it corresponds (step S32). Specifically, the authentication unit 11 collates the terminal ID included in the received signal from the terminal 40 with the terminal data 17, and the "prohibited terminal" of the terminal data 17 corresponding to the terminal ID included in the received signal is " Check if it is set to "Applicable". If the terminal corresponds to a prohibited terminal (step S32: Yes), the authentication unit 11 instructs the terminal 40 of the signal transmission source to restrict the use of the function (step S33). That is, the authentication unit 11 transmits, to the terminal 40 of the signal transmission source, a signal instructing execution of an operation according to the set restriction policy.

  When the terminal 40 of the signal transmission source does not correspond to a prohibited terminal (step S32: No), the authentication unit 11 checks whether the authentication request has been received, that is, whether the received signal indicates the authentication request (step S32) Step S34). The authentication request corresponds to the login request signal described above. Whether or not the received signal corresponds to the authentication request can be determined, for example, by confirming information indicating the type of the request included in the received signal. When the authentication unit 11 receives the authentication request (step S34: Yes), the authentication unit 11 collates the user ID and the password included in the received signal, and when the collation fails (step S43: No), a signal indicating an authentication failure response Are returned to the terminal 40 (step S47). If the verification of the user ID and password is successful, that is, if the user ID and password included in the received signal are registered in the authentication data 16 (step S43: Yes), the authentication unit 11 verifies the MAC address. When the verification of the MAC address fails (step S44: No), the authentication unit 11 returns a signal indicating an authentication failure response to the terminal 40 (step S47). If the verification of the MAC address is successful, that is, if the MAC address included in the received signal is registered in the administrator registration terminal data 17-1 of the terminal data 17 (step S44: Yes), the authentication unit 11 The terminal data of the terminal 40 is created (step S45). In the creation of the terminal data in step S45, the authentication unit 11 additionally registers the terminal ID and the user ID included in the received signal in the automatic registration terminal data 17-2 of the terminal data 17. When the creation of the terminal data in step S45 is completed, the authentication unit 11 sends an authorization token response (step S46). The authorization token response is processing for generating a response signal including an authorization token having a valid period and transmitting the response signal to the request source terminal 40. The authorization token is information that permits the use of one or more services. The terminal 40 transmits a signal including an authorization token in the periodic communication performed with the authentication device 10. The processes of steps S43 and S44 are authentication processes of the terminal 40. Step S43 is the first authentication, and step S44 is the second authentication.

  When the authentication unit 11 does not receive the authentication request (No in step S34), the authentication unit 11 confirms whether an authorization request has been received, that is, whether or not the received signal indicates an authorization request (step S35). If the authentication request is not received (step S35: No), the authentication unit 11 confirms whether or not the fixed cycle communication request has been received, that is, whether or not the received signal indicates the fixed cycle communication request (step S36). ). If it is not the reception of the periodic communication request (step S36: No), the process returns to step S31, and the authentication device 10 waits to receive the next signal from the terminal 40.

  When the fixed period communication request is received (step S36: Yes), the authentication device 10 acquires terminal data (step S37). That is, in step S37, the authentication unit 11 acquires terminal data included in the received signal. The terminal data acquired by the authentication unit 11 in step S37 is a terminal ID, a user ID, and a MAC address.

  Next, the authentication unit 11 confirms whether the terminal 40 ends the use of the service (step S38). The authentication unit 11 determines that the use is ended when the received periodic communication request includes information indicating the end of use. When the terminal 40 ends the use of the service (step S38: Yes), the authorization token is discarded (step S42), and the terminal data is updated (step S41). Specifically, the authentication unit 11 updates the “communication time” of the terminal 40 of the signal transmission source of the automatic registration terminal data 17-2 shown in FIG. 2 to the current time and sets the “status” to “end”. Do. For example, when the terminal ID of the terminal 40 of the signal transmission source is E001, and the current time is 9:05:10 on September 8, 2017, the authentication unit 11 selects “E001” of the automatic registration terminal data 17-2. The “communication time” corresponding to is set to “2017/09/08 09:05:10”, and the “state” is set to “end”.

  When it is not the use end (step S38: No), the authentication unit 11 confirms whether the authorization token has timed out (step S39). The authentication unit 11 confirms the valid period of the authorization token included in the periodic communication request, and determines that the authorization token has timed out if the current time is not within the valid period.

  When the authorization token has not timed out (step S39: No), the authentication unit 11 updates the valid period of the authorization token (step S40). That is, the authentication unit 11 updates the valid period of the authorization token included in the signal received from the terminal 40, generates a response signal including the authorization token after updating the valid period, and transmits it to the terminal 40. . Renewal of the effective period is to extend the effective period. For example, when determining that the authorization token has not timed out in step S39, the authentication unit 11 extends the effective period of the authorization token included in the received signal by a predetermined fixed length. After step S40, the authentication unit 11 executes step S41 to update terminal data. In step S41 executed subsequently to step S40, the authentication unit 11 updates the "communication time" of the terminal 40 of the signal transmission source of the automatic registration terminal data 17-2 shown in FIG. 2 to the current time.

  When the authentication token times out (step S39: Yes), the authentication unit 11 sends a time-out response (step S49), and returns to step S31. In the time-out response, the authentication unit 11 generates a response signal including information indicating that the request can not be accepted because the authorization token has timed out, and transmits the response signal to the terminal 40. The case where the authorization token times out occurs when the authentication device 10 continues to be unable to receive the periodic communication request. It is desirable that the valid period of the authorization token has a length that takes into consideration the period in which the terminal 40 transmits the periodic communication request. For example, when a fixed cycle communication request can not be received three times in a row, the authorization token is set to a valid period for timeout.

  When the authentication unit 11 receives the authorization request (step S35: Yes), the authentication unit 11 confirms whether the authorization token included in the received authorization request has timed out (step S48). If the authorization token times out (step S48: Yes), the authentication unit 11 sends a time-out response (step S49), and returns to step S31. When the authorization token has not timed out (step S48: No), the authentication device 10 performs transfer processing (step S50). In step S50, the authentication unit 11 outputs the signal indicating the approval request received from the terminal 40 to the proxy processing unit 13, and the proxy processing unit 13 transmits the signal indicating the approval request to the server 20 according to the content of the approval request. Proxy forwarding. After executing step S50, the authentication device 10 returns to step S31.

  The management terminal connection unit 12 of the authentication device 10 registers and corrects the authentication data 16 performed by the service administrator using the management terminal 30, even when the authentication device 10 is performing the operation shown in FIG. An operation such as registration and correction of the terminal data 17 is accepted, and the authentication data 16 and the terminal data 17 are updated according to the accepted operation content. Therefore, the service manager uses the management terminal 30 to use the management terminal 30 when there is a terminal 40 to which a restriction for preventing use by a third party exists, such as when the user of the terminal 40 loses the terminal 40. By setting the “prohibited terminal” of the terminal 40 to which restriction is to be applied in the data 17 to “corresponding”, the restriction can be given when the next signal is received from the terminal. Also, the terminal 40 can be restricted before the expiration date of the authorization token expires.

  As described above, in the authentication system 1 according to the present embodiment, the authentication device 10 is disposed between the server 20 providing the service and the terminal 40 receiving the provision of the service via the network 50 which is a public network. And holds information indicating whether the terminal 40 corresponds to a prohibited terminal which is a terminal whose use of the service is restricted, and when receiving a signal from the terminal 40 corresponding to the prohibited terminal, the terminal 40 of the signal transmission source Instructs to limit the operation. In addition, the authentication device 10 has a function of receiving a setting change of information indicating whether the terminal 40 corresponds to a prohibited terminal. According to the authentication device 10 according to the present embodiment, the security when the terminal 40 is lost can be improved, and unauthorized use of service using the terminal 40, leakage of data held by the terminal 40, etc. Can be prevented. Also, different limitations can be applied to each terminal 40. As described above, the authentication device 10 according to the present embodiment can realize the improvement of the security in the system for providing the service to the movable terminals.

Second Embodiment
FIG. 9 is a diagram of an exemplary configuration of an authentication system 1a according to a second embodiment. In FIG. 9, the same components as in the authentication system 1 described in the first embodiment are assigned the same reference numerals. In this embodiment, parts different from the first embodiment will be described.

  The authentication system 1a is provided with an authentication system 60 by replacing the authentication device 10 of the authentication system 1 described in the first embodiment with an authentication device 10a. The authentication device 10a is obtained by replacing the authentication unit 11 of the authentication device 10 described in the first embodiment with an authentication unit 11a. Also, the data holding unit 15 of the authentication device 10 a holds the terminal data 17. The authentication system 60 holds authentication data corresponding to the authentication data 16 described in the first embodiment, and performs an authentication process on the terminal 40 in place of the authentication device 10a. That is, in the authentication system 1 a, the authentication process of the terminal 40 performed by the authentication device 10 of the authentication system 1 is performed by the authentication system 60. The authentication unit 11 a performs the process other than the authentication process of the terminal 40 among the processes performed by the authentication unit 11.

  The authentication system 60 includes a general authentication server, receives from the authentication device 10a the user ID and password of the terminal 40 that has sent the login request signal to the authentication device 10a, and retains the received user ID and password. Check if it is registered in the authentication data. The authentication system 60 also notifies the authentication device 10a of the authentication result, that is, the confirmation result as to whether or not the user ID and password received from the authentication device 10a are registered in the authentication data held.

  FIG. 10 is a flowchart showing an example of the operation of the authentication device 10 a according to the second embodiment. The flowchart shown in FIG. 10 is obtained by replacing step S43 of the flowchart shown in FIG. 8 with step S53. The processes of the other steps are the same as the processes of the steps to which the same step numbers are attached in the flowchart shown in FIG.

  As shown in FIG. 10, when receiving the authentication request from the terminal 40 (step S34: Yes), the authentication device 10a performs authentication using the authentication system 60 (step S53). In the authentication using the authentication system 60, the authentication unit 11a notifies the authentication system 60 of the user ID and the password included in the received signal from the terminal 40 to request the authentication process. When the authentication system 60 receives a request for authentication processing from the authentication device 10a, the authentication system 60 authenticates the terminal 40, and transmits an authentication result to the authentication device 10a. Communication between the authentication unit 11a and the authentication system 60 is desirably encrypted communication.

  If the authentication by the authentication system 60 is successful (step S53: Yes), the authentication device 10a executes step S44. If the authentication by the authentication system 60 fails (No at step S53), the authentication device 10a executes step S47. Do.

  The operation of the terminal 40 according to the present embodiment is the same as that of the first embodiment, so the description will be omitted.

  Thus, the authentication device 10 a according to the present embodiment requests the external authentication system 60 to perform an authentication process using the user ID and password of the terminal 40. The authentication device 10a can achieve the same effects as the authentication device 10 according to the first embodiment. Further, the creation of the authentication data used by the authentication device 10a and the maintenance operation are not necessary, and the maintenance efficiency of the entire system can be improved. In addition, it is possible to realize a single satellite that can use a plurality of systems by one authentication, and to improve the convenience of the service user.

Third Embodiment
FIG. 11 is a diagram of an exemplary configuration of an authentication system 1b according to a third embodiment. In FIG. 11, the same components as in the authentication system 1 described in the first embodiment are assigned the same reference numerals. In this embodiment, parts different from the first embodiment will be described.

  The authentication system 1b is obtained by replacing the authentication device 10 of the authentication system 1 described in the first embodiment with an authentication device 10b. The authentication device 10 b replaces the authentication unit 11 of the authentication device 10 described in the first embodiment with an authentication unit 11 b and further includes a notification management unit 18. When the authentication unit 11 b receives an authentication request from a terminal 40 whose MAC address is not registered in the terminal data 17 in addition to the function of the authentication unit 11, the information of the terminal 40 is automatically converted to the terminal data 17. It has a function to register. When the terminal information is automatically registered in the terminal data 17, the notification management unit 18 notifies the service manager that automatic registration has been performed.

  Further, in the authentication system 1b according to the present embodiment, it is assumed that the agent 41b is installed in the terminal 40. The installation of the agent 41b is performed in the same procedure as the installation of the agent 41 described in the first embodiment. The agent 41 b holds a certificate 42 issued when the terminal 40 downloads application software operating as the agent 41 b from the authentication device 10 b. The certificate 42 is information indicating that the terminal 40 on which the agent 41 b is installed is a terminal capable of using a service. In the terminal 40, when communicating with the authentication device 10b, the agent 41b sends a signal including the certificate 42 to the authentication device 10b.

  FIG. 12 is a flowchart showing an example of the operation of the authentication device 10 b according to the third embodiment. The flowchart shown in FIG. 12 is obtained by adding steps S61 and S62 to the flowchart shown in FIG. The processes of the other steps are the same as the processes of the steps to which the same step numbers are attached in the flowchart shown in FIG. Steps S61 and S62 are executed when the verification of the MAC address fails in step S44.

  As shown in FIG. 12, when the verification of the MAC address fails in step S44 (step S44: No), the authentication device 10b automatically registers the information of the terminal 40 as the transmission source of the authentication request in the terminal data 17 (step S44) Step S61). In step S 61, the authentication unit 11 b automatically registers the terminal ID and the MAC address included in the received signal from the terminal 40 in the terminal data 17. When the terminal 40 transmits an authentication request to the authentication device 10b, the terminal 40 generates an authentication request including the certificate 42. When the authentication device 10 b receives an authentication request including the certificate 42, the authentication device 10 b automatically registers the terminal ID and the MAC address.

  Next, the authentication device 10b notifies the service administrator that automatic registration to the terminal data 17 has been performed (step S62), and executes step S45. In step S62, the notification management unit 18 notifies the service manager, for example, using an electronic mail. The service manager notified that the automatic registration has been performed on the terminal data 17 uses the management terminal 30 to confirm and edit the information of the terminal 40 automatically registered, and additionally register the missing information. Do the work. At this time, the service administrator registers at least the “limit policy”. As a result, the automatically registered information is formally registered, and the terminal 40 corresponding to the automatically registered information can use the service. When necessary information is additionally registered by the service manager and the terminal 40 as the transmission source of the authentication request can use the service, the authentication device 10b executes step S45. When automatically registering the information of the terminal 40 as the transmission source of the authentication request into the terminal data 17, the authentication device 10b automatically registers a predetermined restriction policy, and does not wait for the registration operation by the service manager. The terminal 40 that has sent the authentication request may be able to immediately use the service. The authentication device 10b executes step S62 to notify the service administrator even when automatically registering a predetermined restriction policy.

  As described above, when the authentication device 10 b according to the present embodiment receives an authentication request including the certificate 42 from the terminal 40 whose information is not registered in the terminal data 17, the authentication device 10 b transmits the information of the request source terminal 40 to the terminal It was decided to automatically register in the data 17 and notify the service manager that automatic registration was performed. The authentication device 10 b can achieve the same effects as the authentication device 10 according to the first embodiment. In addition, it becomes unnecessary to create terminal data used by the authentication device 10b in advance, and the workload of the service manager can be reduced.

Fourth Embodiment
FIG. 13 is a diagram of an exemplary configuration of an authentication system 1c according to the fourth embodiment. In FIG. 13, the same components as in the authentication system 1 described in the first embodiment are assigned the same reference numerals. In this embodiment, parts different from the first embodiment will be described.

  The authentication system 1c is obtained by replacing the authentication device 10 of the authentication system 1 described in the first embodiment with an authentication device 10c. Further, the authentication system 1 c does not require the management terminal 30. The authentication device 10c is obtained by replacing the management terminal connection unit 12 of the authentication device 10 described in the first embodiment with a management terminal connection unit 12c. The management terminal connection unit 12 c performs registration and correction of the authentication data 16, registration and editing of the terminal data 17, and the like in accordance with the request from the terminal 40.

  Further, in the authentication system 1c according to the present embodiment, it is assumed that the agent 41c is installed in the terminal 40. The installation of the agent 41c is performed in the same procedure as the installation of the agent 41 described in the first embodiment. The agent 41c holds the certificate 42 issued when the terminal 40 downloads application software operating as the agent 41c from the authentication device 10c. The certificate 42 is information indicating that the terminal 40 on which the agent 41 c is installed is a terminal capable of using a service. The agent 41 c has a function of operating as the management terminal 30 described in the first embodiment, in addition to the function of the agent 41 described in the first embodiment. Therefore, in the authentication system 1c, the service manager uses the terminal 40 to perform operations such as registration, confirmation and correction of authentication data, registration, confirmation and correction of terminal data, and confirmation of service usage status. These operations can be performed when the service administrator uses the terminal 40 that has been successfully authenticated by the authentication device 10c. In the terminal 40, when communicating with the authentication device 10c, the agent 41c transmits a signal including the certificate 42 to the authentication device 10c.

  FIG. 14 is a flowchart showing an example of the operation of the authentication device 10 c according to the fourth embodiment. The flowchart shown in FIG. 14 is obtained by adding steps S71 to S73 to the flowchart shown in FIG. The processes of the other steps are the same as the processes of the steps to which the same step numbers are attached in the flowchart shown in FIG. Steps S71 to S73 are executed when it is determined in step S36 that the reception of the periodic communication request is not received.

  As shown in FIG. 14, when the authentication device 10 c determines that the reception of the periodic communication request is not received in step S 36 (step S 36: No), the authentication device 10 c confirms whether or not the management function request is received (step S 71). . The authentication unit 11 executes the process of step S71. If the management function request has not been received (step S71: No), the authentication device 10c returns to step S31. If the management function request has been received (step S71: Yes), the authentication device 10c checks whether the authorization token has timed out (step S72). The authentication unit 11 executes the process of step S72. When the authorization token times out (step S72: Yes), the authentication device 10c sends a time-out response (step S49), and returns to step S31.

  When the authorization token has not timed out (step S72: No), the authentication unit 11 performs device maintenance (step S73), and returns to step S31. The device maintenance performed in step S73 is a process in which the management terminal connection unit 12c performs registration, correction, and the like of authentication data and terminal data in accordance with the contents of the operation performed by the service administrator on the terminal 40. The content of the operation performed by the service manager on the terminal 40 is notified from the terminal 40 to the management terminal connection unit 12 c of the authentication device 10 c in a management function request. For example, when the management function request includes information indicating that the service manager has performed an operation for confirming the service usage status, the management terminal connection unit 12 c displays the screen illustrated in FIG. 3. The information necessary for the management function request is transmitted to the terminal 40 of the transmission source of the management function request, and the screen shown in FIG.

  As described above, when the authentication device 10 c according to the present embodiment receives a management function request from the terminal 40 that has succeeded in authentication, registration of authentication data and terminal data is performed according to the contents of the information included in the management function request. , Data management operations for making corrections, etc., and operations for making the service administrator confirm the service usage status. The authentication device 10c can achieve the same effects as the authentication device 10 according to the first embodiment. Also, the authentication system can be constructed without using a dedicated management terminal, and the system configuration can be simplified.

Embodiment 5
FIG. 15 is a diagram of a configuration example of an authentication system 1d according to the fifth embodiment. In FIG. 15, the same components as in the authentication system 1 described in the first embodiment are assigned the same reference numerals. In this embodiment, parts different from the first embodiment will be described.

  The authentication system 1d is obtained by replacing the authentication device 10 of the authentication system 1 described in the first embodiment with an authentication device 10d. The authentication device 10d is obtained by replacing the authentication unit 11 of the authentication device 10 described in the first embodiment with an authentication unit 11d. Further, the data holding unit 15 of the authentication device 10 d holds the authentication data 16, the terminal data 17 d and the map data 19.

  In the authentication system 1d according to the present embodiment, the authentication device 10d manages the position of each terminal 40, and when the terminal 40 is out of a predetermined range, the authentication device 10d is out of the range. Limit the operation. In addition, the authentication device 10 d provides a function for the service administrator to confirm the position of the terminal 40 using the management terminal 30.

  FIG. 16 is a diagram of an example of the terminal data 17 d held by the data holding unit 15 of the authentication device 10 d according to the fifth embodiment. In FIG. 16, the description of the authentication data 16 and the map data 19 is omitted.

  The terminal data 17d is composed of administrator registration terminal data 17d-1 and automatic registration terminal data 17d-2.

  The administrator registration terminal data 17 d-1 has a configuration in which the effective range and the second restriction policy are added to the administrator registration terminal data 17-1 (see FIG. 2) described in the first embodiment. The first restriction policy corresponds to the restriction policy of the administrator registration terminal data 17-1. "Effective range" represents the range in which the terminal 40 can receive service. The terminal 40 can receive service if it is within the effective range and does not correspond to a prohibited terminal. When the terminal 40 corresponds to a prohibited terminal, the authentication device 10d instructs the terminal 40 to perform an operation according to the first restriction policy. In addition, when the terminal 40 does not correspond to a prohibited terminal and exists outside the effective range, the authentication device 10d instructs the terminal 40 to perform an operation according to the second restriction policy.

  The automatic registration terminal data 17 d-2 has a configuration in which position information is added to the automatic registration terminal data 17-2 described in the first embodiment. Position information is acquired using, for example, a GPS (Global Positioning System) system. In this case, the terminal 40 receives the GPS signal transmitted from the GPS satellite by the GPS receiver and executes the process of acquiring the position information in a constant cycle, and transmits the acquired position information to the authentication device 10d. When receiving the position information from the terminal 40, the authentication device 10d registers it in the automatic registration terminal data 17d-2.

  FIG. 17 is a flowchart showing an example of the operation of the authentication device 10 d according to the fifth embodiment. The flowchart shown in FIG. 17 is obtained by adding step S81 to the flowchart shown in FIG. The processes of the other steps are the same as the processes of the steps to which the same step numbers are attached in the flowchart shown in FIG. Step S81 is executed when it is determined in step S32 that the terminal does not correspond to a prohibited terminal.

  As shown in FIG. 17, when the authentication device 10 d determines that the terminal 40 of the signal transmission source is not a prohibited terminal in step S 32 (step S 32: No), the terminal 40 of the signal transmission source corresponds to a restricted terminal. Whether or not it is confirmed (step S81). A limited terminal corresponds to an out-of-range terminal which is a terminal existing outside the effective range. The authentication unit 11d executes the process of step S81. When the position of the terminal 40 of the signal transmission source is not included in the valid range registered in the terminal data 17 d, the authentication unit 11 d determines that the terminal corresponds to the restricted terminal. When it does not correspond to a limited terminal (step S81: No), the authentication device 10d executes step S34. On the other hand, when it corresponds to a limited terminal (step S81: Yes), the authentication device 10d executes step S33. In step S33 executed when the terminal 40 of the signal transmission source corresponds to the restricted terminal, the authentication unit 11d of the authentication device 10d follows the second restriction policy set for the terminal 40 of the signal transmission source. A signal instructing execution of the operation, that is, a signal instructing execution of the operation according to the restriction policy in the case of being applicable to the restricted terminal is transmitted.

  In the present embodiment, as shown in FIG. 16, the first restriction policy and the second restriction policy are registered in the terminal data 17d, and these two restriction policies are set in the terminal 40. The restriction policy may be one. That is, the administrator registration terminal data 17d-1 may be obtained by adding the effective range to the administrator registration terminal data 17-1 (see FIG. 2) described in the first embodiment. When the restriction policy is one, the authentication device 10d instructs the terminal 40 to perform an operation according to the set restriction policy when the terminal 40 corresponds to a prohibited terminal or exists outside the effective range. Do. That is, the authentication device 10d instructs the same contents in the case where the terminal 40 corresponds to a prohibited terminal and the case where the terminal 40 corresponds to a restricted terminal.

  The operation of the terminal 40 according to the present embodiment is the same as that of the first embodiment, so the description will be omitted.

  As described above, also when the authentication device 10 d detects that the terminal 40 does not exist within the predetermined effective range, the operation of the terminal 40 is restricted. Therefore, when the terminal 40 is taken out of the effective range due to theft or the like, the operation of the terminal 40 is automatically restricted even if the setting of the prohibited terminal by the service manager is not completed. This can further improve the safety when the terminal 40 is lost as compared to the first to fourth embodiments.

  The management terminal 30 of the authentication system 1d according to the present embodiment provides a service manager with a function of confirming the terminal 40 using position information, in addition to the functions described in the first embodiment.

  FIG. 18 is a diagram illustrating an example of a function provided to a service manager by the authentication system 1d according to the fifth embodiment. FIG. 18 shows an example of a function of indicating the position of each terminal corresponding to the terminal data 17d held by the authentication device 10d on a map and confirming the status of each registration terminal.

  As shown in FIG. 18, the service manager can monitor the position of each terminal 40 using the management terminal 30. The authentication device 10 d specifies the number of terminals 40 present in a certain range designated by the service manager based on the terminal data 17 d and the map data 19, for example, and causes the display unit of the management terminal 30 to display the number. When an operation of changing the scale of map display is performed, the authentication device 10 d updates the screen displayed on the management terminal 30. When an operation to magnify the map is performed and the scale is changed to a predetermined scale, the authentication device 10d causes the detailed position of each terminal 40 to be displayed on the map.

  The authentication device 10d can easily identify the terminal 40 corresponding to the prohibited terminal, the terminal 40 corresponding to the restricted terminal, and the terminal 40 not corresponding to any of the prohibited terminal and the restricted terminal. These may be displayed in different colors. In addition, when the numerical value is clicked while displaying the numerical value representing the number of the terminals 40 present in the predetermined range, the authentication device 10 d lists the states of all the terminals 40 present in the predetermined range. You may switch to a display that can be checked with.

  In addition, the authentication device 10 d holds position information periodically acquired from the terminal 40 for a certain period in the past, and when receiving a request from the management terminal 30, the movement path of the terminal 40 is You may make it display on a display part.

  As described above, the authentication system 1 d according to the present embodiment has a display function by which the service administrator can confirm the position and the state of the terminal 40, and hence the convenience of the service administrator can be improved.

  In the present embodiment, with respect to the authentication device 10 according to the first embodiment, whether or not the terminal 40 corresponds to the restricted terminal based on the information on the effective range of the terminal 40 and the position information on the terminal 40 Although the configuration has been described in which it is determined and the function of limiting the operation when it corresponds to the limited terminal has been described, the present invention is not limited to this configuration. It is also possible to add the above function to each of the authentication devices described in the second to fourth embodiments, to determine whether or not the terminal is a restricted terminal, and to limit the operation of the restricted terminal.

  Further, in the present embodiment, the setting of the prohibited terminal and the setting of the effective range are performed, and the operation is restricted when the terminal 40 corresponds to the prohibited terminal and when the terminal 40 is out of the effective range. Only the setting of the effective range may be performed. That is, the authentication apparatus may limit the operation when the terminal 40 is out of the valid range.

Sixth Embodiment
In the first to fifth embodiments, when installing the agent in the terminal 40, any one of the plurality of restriction policies is set in the terminal 40, and the terminal 40 is set when instructed to restrict the operation. To act according to the restriction policy. However, there is no need to set one restriction policy in advance.

  For example, when installing the agent, the terminal 40 downloads and holds all of the plural types of restriction policies selectable by the authentication system, and the authentication device instructs the terminal 40 to restrict the operation. Of the types of restriction policies, it may be specified which restriction policy is to be applied. For example, the user of the terminal 40 selects the restriction policy designated when instructing the terminal 40 to restrict the operation, and the service administrator registers the selection result by the user in the authentication device using the management terminal 30.

  As a result, when restricting the operation of the terminal 40, flexible operation restriction can be made, such as the user of the terminal 40 or the service administrator changing the method of restriction in consideration of the situation of the terminal 40.

  The configuration shown in the above embodiment shows an example of the contents of the present invention, and can be combined with another known technique, and one of the configurations is possible within the scope of the present invention. Parts can be omitted or changed.

  1, 1a, 1b, 1c, 1d authentication system, 10, 10a, 10b, 10c, 10d authentication device, 11, 11a, 11b, 11d authentication unit, 12, 12c management terminal connection unit, 13 proxy processing unit, 14 agent management , 15 data holding unit, 16 authentication data, 17, 17d terminal data, 17-1, 17d-1 administrator registration terminal data, 17-2, 17d-2 automatic registration terminal data, 18 notification management unit, 19 map data , 20 servers, 30 management terminals, 40 terminals, 41, 41b, 41c agents, 42 certificates, 50 networks, 60 authentication systems.

Claims (16)

An authentication device that authenticates the terminal between a server providing the service and the terminal,
A setting reception unit that receives a setting for setting the terminal in a state in which an operation related to the use of the service is restricted;
When receiving a signal from an operation restricted terminal which is a terminal set to a state in which an operation related to the use of the service is restricted, an operation related to the use of the service to the operation restricted terminal of the transmission source of the signal An authentication unit that transmits a response signal instructing restriction of the request, and receives a signal requesting an authentication process from a terminal that does not correspond to the operation restricted terminal, and performs an authentication process related to the use of the service;
An authentication apparatus comprising: A proxy processing unit that relays communication between the terminal and the server;
Equipped with
When the authentication unit receives a signal directed to the server from the terminal that has succeeded in authentication, the authentication unit outputs the received signal to the proxy processing unit.
The authentication device according to claim 1, characterized in that: The signal requesting the authentication process includes identification information of a user who uses the terminal, a password, and a physical address of the terminal.
The authentication unit performs a first authentication using the identification information and the password in the authentication process, and performs a second authentication using the physical address when the first authentication is successful.
The authentication device according to claim 1 or 2, characterized in that: The signal requesting the authentication process includes identification information of a user who uses the terminal, a password, and a physical address of the terminal.
In the authentication process, the authentication unit notifies the authentication system of the identification information and the password to request a first authentication, and when the first authentication by the authentication system succeeds, the physical address is used to Perform 2 authentication,
The authentication device according to claim 1 or 2, characterized in that: A data holding unit that holds information on terminals that can use the service;
Equipped with
Issue in advance a certificate indicating that the service can be used to the terminal,
The authentication unit is included in the received signal when the signal requesting the authentication process includes the certificate and the signal requesting the authentication process is received from the terminal of the transmission source of the received signal for the first time. Causing the data holding unit to hold information on the terminal of the transmission source of the received signal.
The authentication device according to any one of claims 1 to 4, characterized in that: Issue in advance a certificate indicating that the service can be used to the terminal,
The setting reception unit receives, via the terminal, a setting for setting the terminal in a state in which an operation related to the use of the service is restricted.
The authentication device according to any one of claims 1 to 5, characterized in that: Displaying information of the terminal on a display unit;
The authentication device according to any one of claims 1 to 6, characterized in that: The setting reception unit receives an operation of setting an effective range in which the terminal can use the service.
When the authentication unit receives a signal from an out-of-range terminal that is a terminal existing outside the effective range, the authentication unit restricts the operation related to the use of the service to the out-of-range terminal of the transmission source of the received signal. Sending a response signal indicating the request, and performing the authentication process when a signal requesting an authentication process is received from a terminal that does not correspond to any of the operation restricted terminal and the terminal outside the effective range;
The authentication device according to any one of claims 1 to 7, characterized in that: The setting reception unit receives an instruction content when the authentication unit instructs the operation restriction terminal to restrict the operation, and an instruction content when the authentication unit instructs the operation out-of-range terminal to restrict the operation ,
The authentication device according to claim 8, characterized in that: The display unit displays the position on the map of the terminal specified by the service administrator.
The authentication device according to claim 8 or 9, characterized in that: The terminal is set with any one of a plurality of restriction policies representing restriction contents of operation related to the use of the service,
The authentication unit instructs the terminal to perform an operation according to the set restriction policy, when instructing the terminal to restrict the operation related to the use of the service.
The authentication device according to any one of claims 1 to 10, characterized in that: In the terminal, a plurality of restriction policies representing restriction contents of operations related to the use of the service are set.
When the authentication unit instructs the terminal to restrict the operation related to the use of the service, the authentication unit specifies any one restriction policy out of a plurality of the restriction policies, and the operation related to the use of the service Indicate a restriction,
The authentication device according to any one of claims 1 to 10, characterized in that: The plurality of restriction policies include a restriction policy indicating an erasing operation of data held by the terminal.
The authentication device according to claim 11 or 12, characterized in that: An authentication apparatus for authenticating the terminal between a server providing a service and a terminal capable of using the service,
A setting accepting unit that accepts setting of an effective range for permitting the terminal to use the service;
When a signal is received from an out-of-range terminal which is a terminal existing out of the effective range, a response signal instructing the terminal outside the effective range of the transmission source of the signal to limit the operation related to the use of the service An authentication unit that transmits an authentication process related to the use of the service when it receives a signal requesting an authentication process from a terminal that does not correspond to the terminal outside the effective range;
An authentication apparatus comprising: An authentication method in which an authentication device disposed between a server providing a service and a terminal performs authentication of the terminal,
A setting step of receiving a setting for setting the terminal to a state in which an operation related to the use of the service is restricted;
A signal is received from an operation restricted terminal which is a terminal set to a state in which an operation related to the use of the service is restricted, and an operation restriction related to the use of the service to the operation restricted terminal of a signal transmission source Sending a response signal indicating
An authentication step of performing an authentication process related to the use of the service when receiving a signal requesting an authentication process from a terminal not corresponding to the operation restricted terminal;
An authentication method comprising: A terminal that accesses a server to receive a service;
An authentication device for authenticating the terminal;
Equipped with
The authentication device
A setting reception unit that receives a setting for setting the terminal in a state in which an operation related to the use of the service is restricted;
When receiving a signal from an operation restricted terminal which is a terminal set to a state in which an operation related to the use of the service is restricted, an operation related to the use of the service to the operation restricted terminal of the transmission source of the signal An authentication unit that transmits a response signal instructing restriction of the request, and receives a signal requesting an authentication process from a terminal that does not correspond to the operation restricted terminal, and performs an authentication process related to the use of the service;
Equipped with
When the terminal receives a signal instructing restriction of an operation related to the use of the service from the authentication device, the terminal executes an operation according to the instruction content indicated by the received signal.
An authentication system characterized by

Images