JPH07191939A - Illicit usage preventing mechanism for terminal controller - Google Patents

Abstract

PURPOSE:To not only prevent the illicit usage of the third person but also perform message reception from a host computer and offline operation even at the time when a user interrupts the use in the log-on state and leaves his seat. CONSTITUTION:With respect to the illicit usage preventing mechanism in the terminal controller connected to a host computer by a communication line, the terminal controller is provided with a download control means 101, an online control means, 102 an offline control means 103, and a terminal lock control means 104 which controls terminal lock, and the terminal lock control means is provided with a settable/resettable terminal lock flag; and when the flag is set, the function of the on-line control means is suppressed, and functions of the down-load control means and the offline control means are validated.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an unauthorized use prevention mechanism in a terminal control device of an online system, and more particularly,
BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an unauthorized use prevention mechanism for a terminal control device that is capable of performing download from a host computer, online operation, and offline operation, and is suitable for a system in which download and online operation occur asynchronously.

[0002]

2. Description of the Related Art Recently, the openness of online systems has become widespread, and as a result, the importance of technologies relating to security protection, such as prevention of unauthorized use, has increased. In the conventional technology for preventing unauthorized use of online systems, attention has been paid to how to prevent unauthorized use at logon. For example, the most common one is password utilization technology. This is done by letting the operator enter the password at the time of logon, comparing the password registered in advance with the password entered by the above operator, and if there is a mismatch, the operator is not allowed to use the system. It is a thing. However, with this password method, if the operator enters the correct password, logs on once, and then has to leave his / her seat for some reason, a third party may interrupt and use it illegally. Cannot be prevented. In addition, if a legitimate operator leaves the seat for some reason during job execution,
If you press the interrupt key such as the break key when you judge that you have forgotten the ending operation without knowing that the job is being executed by a third party, the job being executed ends midway and the line is turned off. turn into. To avoid this, be sure to log off when you leave your seat.
If you log off, you will have to re-enter your password to restart.

In order to prevent unauthorized use without logging off, a lock key is provided, and a hardware method or a lock command is used to prevent any further key input by pressing the lock key. Therefore, a method of software that does not accept key input is being considered. For example, Japanese Patent Application Laid-Open No. 60-5372 discloses a software method for locking and unlocking a terminal device connected to a host computer by using a lock command. The one disclosed in this publication prevents the interrupt input by a third party by inputting a lock command and prompts the user to input a password (keyword). When the password is input, it is temporarily stored in a buffer. Waiting for data input. After that, if there is a key input of data, it is compared with the contents stored in the buffer, and if they do not match, the current lock is displayed and no further key input is accepted. Only when they match, it is determined that the lock is released and control is passed to the job being processed.

[0004]

In the above-mentioned prior art, that is, the hardware method using the lock key and the software method disclosed in Japanese Patent Laid-Open No. 60-5372, the host computer is operated while the terminal is locked. However, there was a problem that the operability was very bad because the message reception and the offline operation could not be performed at all. The present invention has been made in view of the above circumstances, and an object thereof is to solve the above-mentioned problems in the above-mentioned conventional technology,
Another object of the present invention is to provide a mechanism for preventing unauthorized use of an online system, which has a good operability and enables message reception from a host computer and offline operation even when the terminal is locked.

[0005]

In order to achieve the above object, the present invention provides an unauthorized use prevention mechanism in a terminal control device connected to a host computer through a communication line,
The terminal control device has at least download control means for controlling message reception from the host computer, online control means for controlling online operation, offline control means for controlling offline operation, and terminal lock control means for controlling terminal lock. However, the terminal lock control means is provided with a terminal lock flag that can be set / released, and when the terminal lock flag is set, the function of the online control means is suppressed and the function of the download control means and the function of the offline control means are provided. The feature is that it is enabled.

[0006]

According to the present invention, the terminal lock control means is provided with a terminal lock flag which can be set / released, and when the terminal lock flag is set, the function of the online control means is suppressed and the function of the download control means and the off-line function. Since the function of the control means is made effective, when the operator leaves the terminal, etc., the terminal lock flag is set while the user is still logged on.
It is possible to configure an online system with good operability that can be downloaded from a host computer (receives a message online) and can be operated offline while preventing unauthorized use by a person.

[0007]

An embodiment of the present invention will be described below with reference to the drawings. FIG. 2 shows an overall configuration diagram of an online system to which the present invention is applied. In FIG. 2, 1 is a host computer, 2 is a communication line, and 3 is a terminal control device connected to the host computer 1 via the communication line 2. Figure 1
FIG. 3 is a control configuration diagram of the terminal control device 3 in FIG. 2.
In FIG. 1, 101 is a download control means, 102.
Is online control means, 103 is offline control means,
104 is a terminal lock control means, 105 is an operating system, 106 is a storage device, 107 is a CRT control means CRTC, 108 is a keyboard control means KBC, 10
Reference numeral 9 is line control means, 110 is CRT display means CRT, 1
Reference numeral 11 is a keyboard KB. Terminal lock control means 10
4 is provided with a terminal lock flag which, when set, suppresses the function of the online control means and enables the function of the download control means and the function of the offline control means.
It controls the release.

Next, a method of setting the terminal lock flag and a method of releasing the terminal lock flag will be described with reference to FIG. 3 showing the control of the terminal control device 3. First, a method of setting the terminal lock flag will be described. In this case, the operator inputs a predetermined command from the keyboard 111 to activate the terminal lock control means 104. Next, the operator selects "setting" with the keyboard 111 (step 301) and then inputs an arbitrary password from the keyboard to register it in the storage device 106 (step 302). By this registration, the terminal lock flag is turned on (step 303) and the process ends. In this state, that is, in the state where the terminal lock flag is on, the online operation is suppressed and only the download control means 101 and the offline control means 103 are enabled.

FIG. 4 shows an operation flowchart of the online control means 102. If a third party attempts to operate online with the device lock flag set,
A predetermined command is input from the keyboard 111 to activate the online control means 102. However, as shown in the flowchart of FIG. 4, since the terminal lock flag is turned on at this time (step 401), the online operation (step 402) is not performed and the process ends.

Next, a method for releasing the terminal lock flag will be described with reference to FIG. 1 again. In this case also, the operator
A predetermined command is input from the keyboard 111 to activate the terminal lock control means 104, and then the keyboard 111
After selecting "Cancel" in step 301 (step 301), enter an arbitrary password from the keyboard 111 (step 3).
04). At this time, the password previously registered in the storage device 106 in step 302 and the password newly input in step 304 are compared (step 30
5) If they match, the terminal lock flag is turned off (step 306) and the process ends. If they do not match as a result of the comparison in step 305, nothing is done, that is, the terminal lock flag is not released, and the process ends. By setting the password when setting the terminal lock flag in this way, it is possible to prevent a third party from unlocking the terminal without permission. Further, even if the contents of the terminal lock flag are lost due to power-off or the like, it is possible to prevent unauthorized use by a third party by checking the password registered at the time of logon, as in the conventional case.

As described above, according to the present invention, in the terminal control device connected to the host computer through the communication line, when the operator suspends the use while leaving the logon state, the terminal lock flag is set. By setting it, it is possible to suppress the subsequent online operation and enable only the reception of a message from the host computer and the offline operation. As a result, unauthorized host computer access can be prevented, and message reception from the host computer and offline operation are possible.

[0012]

As described above, according to the present invention, the terminal lock is set to prevent the subsequent online operation even when the operator leaves the seat after using the machine while logged on. In addition, it is possible to prevent an unauthorized access to the host computer by a third party, and to receive a message from the host computer and perform an offline operation.

[Brief description of drawings]

FIG. 1 is a control configuration diagram of a terminal control device.

FIG. 2 is an overall configuration diagram of an online system.

FIG. 3 is a diagram showing an operation flow chart of terminal lock control.

FIG. 4 is a diagram showing an operation flow chart of online control.

[Explanation of symbols]

 1 Host computer 2 Communication line 3 Terminal control device 101 Download control means 102 Online control means 103 Offline control means 104 Terminal lock control means 105 Operating system 106 Storage device 107 CRT control means 108 Keyboard control means 109 Line control means 110 CRT display 111 Keyboard

 ─────────────────────────────────────────────────── ─── Continuation of the front page (71) Applicant 592048741 1-6-5 Marunouchi, Chiyoda-ku, Tokyo Railway Information Systems Co., Ltd. (72) Inventor Shigeo Goto 1 Ikegami, Haruoka-cho, Owariasahi-shi, Aichi Hitachi, Ltd. Office Systems Division (72) Inventor Yu Machida 1 Ikegami, Haruoka-cho, Owariasahi-shi, Aichi Hitachi, Ltd. Office Systems Division (72) Inventor Nami Akiyama, Ikegami, Haruka-cho, Owariasaichi, Aichi Hitachi, Ltd. Office Systems Division (72) Inventor Fumio Sakamoto 1 120 120, Sachimachi, Inazawa, Aichi Central Hitachi Electric Co., Ltd. (72) Inventor Toshifumi Matsushita 6-81 Onoue, Naka-ku, Yokohama, Kanagawa Hitachi Software Engineering Co., Ltd. In-house (72) Inventor Length Makotoware Tokyo Tachikawa Akebonocho 3-chome 27 address 15

Claims (2)

[Claims] 1. An unauthorized use prevention mechanism in a terminal control device connected to a host computer by a communication line,
The terminal control device has at least download control means for controlling message reception from the host computer, online control means for controlling online operation, offline control means for controlling offline operation, and terminal lock control means for controlling terminal lock. However, the terminal lock control means is provided with a terminal lock flag that can be set / released, and when the terminal lock flag is set, the function of the online control means is suppressed and the function of the download control means and the function of the offline control means are provided. A mechanism for preventing unauthorized use in a terminal control device, characterized in that it is enabled. 2. The unauthorized use prevention mechanism in the terminal control device according to claim 1, wherein the terminal lock flag is set after the password is registered, and the terminal lock flag is released. An unauthorized use prevention mechanism in a terminal control device, wherein a password is compared with a registered password and the terminal lock flag can be released only when they match.