JP2009151568A - Security management system, security management method, information processing terminal device, and authentication device - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a security management system, a security management method, an information processing terminal device and an authentication device capable of improving the convenience and security of the system.
A security management system includes an information processing terminal device and a mobile terminal. The information processing terminal device 10 associates and stores a security risk level of the information processing terminal device 10 and a security management state for controlling the information processing terminal device 10 in accordance with the risk level. When the connection response signal transmitted from the portable terminal 30 cannot be received, the security management policy storage unit 15 is referred to extract the security management state corresponding to the security risk of the information processing terminal device 10 And a terminal state management unit 14 for controlling the information processing terminal device 10 in the security management state.
[Selection] Figure 1

Description

  The present invention relates to a security management system, a security management method, an information processing terminal device, and an authentication device including an information processing terminal device and an authentication device.

  A server client system including a server computer and a plurality of client computers has been widely adopted as a form of a system that uses a computer in a company or the like. In the server client system, various arithmetic processes and data accumulation are performed by a server computer, and various input / output processes are performed by a client computer. In such a server client system, a system provided with only minimum functions such as a communication function for connecting to a server computer and an interface function for a user to perform input / output on the client computer side is particularly a thin client system. It is said.

Patent Document 1 describes a server client system that improves security while improving user convenience. In this server client system, a storage device that records an application for operating the server computer and an application for encrypting communication between the client computer and the server computer is connected to the client computer via a reader / writer, The client computer communicates with the server computer and operates the server computer using an application recorded in the storage device. Therefore, if the server computer can be connected via the network, the system can be used regardless of the installation location of the client computer.
Japanese Patent No. 391827

  However, the conventional server client system has the following problems. That is, in the conventional server client system, if the storage device and the client computer are connected, the client computer can communicate with the server computer. For example, when the user leaves the client computer, Security is not maintained unless the connection between the storage device and the client computer is disconnected. Therefore, when the user resumes using the system after leaving the client computer, the storage device must be connected to the client computer and the application program recorded in the storage device must be restarted. It takes time to resume and the convenience is bad.

  The security management policy required for the system depends on the installation location of the client computer. For example, higher security is required when the client computer is installed in a room where entry and exit can be freely performed, compared to a case where the client computer is installed in a room where entry and exit are strictly restricted. If a uniform security management policy is applied to the system despite the different environments in which the client computers are installed, the convenience of the system and the security are reduced.

  Therefore, an object of the present invention is to provide a security management system, a security management method, an information processing terminal device, and an authentication device that can solve the above problems and improve the convenience and security of the system.

  In order to solve the above problems, a security management system of the present invention is a security management system including an information processing terminal device and an authentication device that communicates with the information processing terminal device, wherein the information processing terminal device includes the authentication A connection confirmation signal transmitting means for transmitting a connection confirmation signal to the communication apparatus; a connection response signal receiving means for receiving a connection response signal transmitted in response to the connection confirmation signal by the authentication apparatus; and security of the information processing terminal apparatus A security management policy storage means for associating and storing an upper risk level and a security management state for controlling the information processing terminal device according to the risk level; and when the connection response signal cannot be received, the security management policy A security management state corresponding to the security risk of the information processing terminal device with reference to the storage means; Control means for controlling the information processing terminal device, and the authentication device transmits a connection response signal in response to the connection confirmation signal and a connection confirmation signal receiving means for receiving the connection confirmation signal. And a connection response signal transmission means.

  In order to solve the above problem, the security management method of the present invention is the security management method of a security management system comprising an information processing terminal device and an authentication device that communicates with the information processing terminal device. A connection confirmation signal transmitting step in which a terminal device transmits a connection confirmation signal to the authentication device; a connection confirmation signal receiving step in which the authentication device receives the connection confirmation signal; and the authentication device includes the authentication device. A connection response signal transmitting step for transmitting a connection response signal in response to a connection confirmation signal; a connection response signal receiving step for the information processing terminal device to receive the connection response signal; and the information processing terminal device for connecting to the connection When the response signal cannot be received, the information processing terminal device is changed according to the security risk level of the information processing terminal device and the risk level. The information processing terminal device is controlled to be in a security management state corresponding to the security risk level of the information processing terminal device with reference to a security management policy storage unit that stores the security management state to be controlled in association with each other And a control step.

  With these configurations, when the connection response signal from the authentication device possessed by the user cannot be received, the security management state corresponding to the security risk of the information processing terminal device is extracted from the security management policy, and the information processing terminal The device can be controlled to the extracted security management state. Thus, based on whether or not the connection response signal is received from the authentication device, the information processing terminal device determines whether the user who owns the authentication device is in the vicinity of the information processing terminal device and the information processing terminal device. Recognize security risks. Since the security management state of the information processing terminal device is determined based on such information, security management according to the state of the user who uses the information processing terminal device can be performed. As a result, it is possible to improve the convenience of the system while maintaining the security of the information processing terminal device and the server device.

  In the security management system of the present invention, the risk is determined based on a time during which the connection response signal cannot be received, and the control means sets the time during which the connection response signal cannot be received at a predetermined time. When it is reached, it is preferable to control to a security management state corresponding to a higher degree of risk than a risk corresponding to the controlled security management state.

  With this configuration, it is determined that the degree of risk is high according to the time that has elapsed since the user who has the authentication device leaves the vicinity of the information processing terminal device, and the security of the information processing terminal device can be increased stepwise. Thereby, the security of the information processing terminal device can be ensured according to the state of the user, and at the same time, the convenience when the user resumes using the information processing terminal device can be improved.

  In the security management system of the present invention, the degree of risk is determined based on information about a distance between the authentication device and the information processing terminal device acquired based on the connection response signal, and the control means Preferably refers to the security management policy storage means to control the information processing terminal device so as to be in a security management state according to the degree of risk.

  With this configuration, the information processing terminal device can be controlled to be in a security management state according to the degree of risk determined based on the distance between the user who possesses the authentication device and the information processing terminal device. Accordingly, it is possible to ensure the security of an appropriate information processing terminal device.

  In the security management system of the present invention, the risk level is determined based on position information of the authentication device included in the connection response signal, and the control means refers to the security management policy storage means. It is preferable that the information processing terminal device is controlled to be in a security management state corresponding to the degree of risk.

  With this configuration, since the security level can be set according to the position of the user who possesses the authentication device, it is possible to ensure appropriate security of the information processing terminal device according to the state of the user.

  In the security management system of the present invention, the security management policy storage means includes, as the security management state, an I / F lock state that disables an input device of the information processing terminal device, and the I / F lock state. As the security management state corresponding to a higher security level, the application lock state for terminating the application program, and as the security management state corresponding to a higher security level than the application lock state, the information processing terminal device and the A VPN line disconnection state for disconnecting a VPN line with the server device, and a security management state corresponding to a higher security level than the VPN line disconnection state, between the information processing terminal device and the server device At least two of a communication line disconnection state for disconnecting the communication line and a power supply disconnection state for disconnecting the power supply of the information processing terminal device as a security management state corresponding to a higher security level than the communication line disconnection state It is preferable to include a state.

  With this configuration, it is possible to shift in stages to a security management state capable of ensuring a high level of security in accordance with the state of the user who possesses the authentication device. The security management state that can ensure higher security requires more time and labor when the user resumes the use of the information processing terminal device. Therefore, it is possible to achieve both ensuring the security of the system and improving the convenience of the system.

  Further, in the security management system of the present invention, the authentication device includes, as position information, information on the current position every predetermined time, and a position information transmission unit that transmits the information to a server device, and the position information according to the transmitted position information. Policy update receiving means for receiving security management policy identification information indicating the security management policy transmitted from the server apparatus; and policy change instruction means for transmitting the security management policy identification information to the information processing terminal apparatus. The security management policy storage means stores a plurality of the security management policies, and the control means selects the security management policy to be referenced based on the received security management policy identification information. Is preferred.

  With this configuration, the authentication device can acquire the security management policy identification information corresponding to the location information of the authentication device, and can notify the information processing terminal device of the security management policy identification information. As a result, the authentication device can recognize the security management policy selected according to the location of the authentication device from among the plurality of security management policies associated with the location information. It is possible to refer to a security management policy suitable for the location of the authentication device.

  Further, in the security management system of the present invention, the authentication device transmits a terminal connection confirmation signal for confirming a connection state with the information processing terminal device to the information processing terminal device. And a terminal connection response signal receiving means for receiving a terminal connection response signal transmitted from the information processing terminal device in response to the transmitted terminal connection confirmation signal, and server authentication including information for identifying a user of the authentication device Server authentication data transmitting means for transmitting data to the server apparatus; and authentication result receiving means for receiving authentication result information including information related to a result of determining the validity of the server authentication data from the server apparatus. The change instructing means receives the terminal connection response signal, and the determination result of the authentication result information is valid. The security management policy identification information is transmitted to the information processing terminal device, and the information processing terminal device receives terminal connection confirmation signal receiving means for receiving the terminal connection confirmation signal, and the terminal connection confirmation signal. It is preferable that the apparatus further comprises terminal connection response signal transmitting means for transmitting the terminal connection response signal.

  With this configuration, the authentication device transmits a terminal connection confirmation signal for confirming a connection state with the information processing terminal device to the information processing terminal device, and receives a terminal connection response signal corresponding to the terminal connection confirmation signal Only in this case, the security management policy identification information can be notified to the information processing terminal device. Therefore, the security management policy identification information is notified to the information processing terminal device only when the information processing terminal device exists in the vicinity of the authentication device. As a result, a security management policy suitable for the location of the information processing terminal device can be applied to the information processing terminal device. Also, information for authenticating the identity of the user who owns the authentication device is transmitted to the server device, the authentication result of the identity by the server device is received, and the security management policy identification is performed only when the identity is authenticated Information can be notified to the information processing terminal device. Accordingly, when the identity of the user is not authenticated, the security management policy identification information is not notified to the information processing terminal device, so that it is possible to prevent the user from impersonating when updating the security management policy.

  In the security management system of the present invention, the authentication device receives authentication source data used to generate the connection response signal generated by a server device capable of communicating with the authentication device. Receiving means; response signal authentication data generating means for generating response signal authentication data for the information processing terminal device to perform authentication processing of a connection response signal generated using the authentication original data; and the response signal authentication Response signal authentication data changing means for transmitting data to the information processing terminal device, wherein the information processing terminal device further comprises response signal authentication data receiving means for receiving the response signal authentication data. Is preferred.

  With this configuration, the authentication device receives the authentication source data generated by the server device, generates response signal authentication data for performing authentication processing of the connection response signal generated from the authentication source data, The response signal authentication data can be transmitted to the information processing terminal device. As a result, since the authentication device can periodically update the connection response signal, spoofing of the authentication device is prevented, and security in communication for checking the connection state between the information processing terminal device and the authentication device is prevented. Improvement is possible. In addition, it is possible to cause the information processing terminal device to perform authentication processing of the connection response signal that is periodically updated.

  In the security management system of the present invention, the authentication device includes server authentication data transmitting means for transmitting server authentication data including information for identifying a user of the authentication device to the server device, and the server authentication data. Authentication result receiving means for receiving from the server device authentication result information including information related to the validity judgment result of the server, and the response signal authentication data changing means is valid for the judgment result of the authentication result information. If it is, the response signal authentication data is preferably transmitted to the information processing terminal device.

  With this configuration, the authentication device transmits server authentication data for authenticating the identity of the user who possesses the authentication device to the server device, receives the authentication result of the identity by the server device, and the identity is authenticated. The response signal authentication data can be transmitted to the information processing terminal device only when it is done. Therefore, when the identity of the user is not authenticated, the response signal authentication data is not transmitted to the information processing terminal device, so that it is possible to prevent the user from impersonating when updating the response signal authentication data.

  In the information processing terminal device according to the present invention, in the information processing terminal device that communicates with the authentication device, a connection confirmation signal transmitting unit that transmits a connection confirmation signal to the authentication device; and the authentication device includes the connection A connection response signal receiving means for receiving a connection response signal transmitted in response to the confirmation signal, a security risk level of the information processing terminal device, and a security management state for controlling the information processing terminal device according to the risk level; Security management policy storage means for storing the information in association with each other, and when the connection response signal cannot be received, the security management status according to the security risk of the information processing terminal device with reference to the security management policy storage means And a control means for controlling the information processing terminal device.

  In the authentication apparatus of the present invention, in the authentication apparatus that communicates with the information processing terminal apparatus, a connection confirmation signal receiving unit that receives a connection confirmation signal transmitted from the information processing terminal apparatus; and the connection confirmation signal And a connection response signal transmitting means for transmitting a connection response signal including information for identifying the user of the authentication device.

  According to the security management system and the security management method of the present invention, based on whether or not a connection response signal has been received from an authentication device, the information processing terminal device allows the user possessing this authentication device to be in the vicinity of the information processing terminal device. And the security risk of the information processing terminal device can be recognized. Since the security management state of the information processing terminal device is determined based on such information, security management according to the state of the user who uses the information processing terminal device can be performed. As a result, it is possible to improve the convenience of the system while maintaining the security of the information processing terminal device and the server device.

  A security management system according to an embodiment of the present invention will be described with reference to the drawings. If possible, the same parts are denoted by the same reference numerals, and redundant description is omitted.

  FIG. 1 is a block diagram showing a functional configuration of a security management system 1 according to the first embodiment. The security management system 1 includes an information processing terminal device 10, a portable terminal 30, and a server device 40, and constitutes a so-called server client system. In the present embodiment, the mobile terminal 30 constitutes an authentication device that communicates with the information processing terminal device 10.

  The information processing terminal device 10 and the portable terminal 30 can communicate by wired or wireless communication means. Examples of the wired communication means include communication according to USB and IEEE 1394 standards. Examples of wireless communication means include communication using the IEEE 802.11 system, the Bluetooth (registered trademark) system, and the like.

  The information processing terminal device 10 and the server device 40 can communicate via the network 50. The information processing terminal device 10 accesses the server device 40 and establishes a communication session and further a VPN session. Then, the information processing terminal device 10 receives an operation system program, an application program, and the like from the server device, and performs information processing by executing these received programs.

  Functionally, the information processing terminal device 10 includes a short-range communication unit 11, a connection state confirmation unit 12, an authentication information storage unit 13, a terminal state management unit 14, a security management policy storage unit 15, a terminal IF management unit 16, an application A management unit 17, a VPN session management unit 18, a communication session management unit 19, a power device management unit 20, and a long-distance communication unit 21 are provided.

  FIG. 2 is a hardware configuration diagram of the information processing terminal device 10. As shown in FIG. 2, the information processing terminal device 10 physically includes a CPU 101, a RAM 102 and a ROM 103 which are main storage devices, an auxiliary storage device 105 such as a hard disk, and an input device 106 such as a keyboard and a mouse which are input devices. The computer system includes an output device 107 such as a display and a communication module 104 which is a data transmission / reception device such as a network card. Each function described in FIG. 1 has a communication module 104, an input device 106, and an output device 107 under the control of the CPU 101 by reading predetermined computer software on hardware such as the CPU 101 and the RAM 102 shown in FIG. This is realized by reading and writing data in the RAM 102 and the auxiliary storage device 105. Similarly to the information processing terminal device 10, the mobile terminal 30 and the server device 40 are also configured as a computer system.

  Hereinafter, each functional element will be described in detail with reference to FIG.

  The short-range communication unit 11 transmits a connection confirmation signal sent from the connection state confirmation unit 12 to the mobile terminal 30. The short-range communication unit 11 receives the connection response signal transmitted from the mobile terminal 30 in response to the connection confirmation signal, and sends the received connection response signal to the connection state confirmation unit 12. Wired or wireless communication means are used for transmitting and receiving these signals. Examples of the wired communication means include communication according to USB and IEEE 1394 standards. Examples of wireless communication means include communication using the IEEE 802.11 system, the Bluetooth (registered trademark) system, and the like.

  The connection state confirmation unit 12 sends a connection confirmation signal for confirming the connection state with the mobile terminal 30 to the short-range communication unit 11. Further, the connection response signal transmitted from the mobile terminal 30 is acquired via the short-range communication unit 11. When the connection response signal is acquired, the connection state confirmation unit 12 authenticates the electronic signature included in the acquired connection response signal. This authentication is performed using, for example, the electronic key information of the user of the mobile terminal 30 stored in advance in the authentication information storage unit 13. If the connection status confirmation unit 12 can authenticate that the connection response signal is from the user of the mobile terminal 30, the connection status confirmation unit 12 determines that the connection response signal has been received, and sends information to that effect to the terminal status management unit. 14 is notified.

  The authentication information storage unit 13 stores authentication information for authenticating the electronic signature included in the connection response signal. This authentication information is, for example, the public key or secret key of the user of the mobile terminal 30.

  The terminal state management unit 14 receives information regarding whether or not a connection response signal has been received from the connection state confirmation unit. The terminal state management unit 14 sets and stores a security level based on whether or not the connection response signal is received. This security level consists of a plurality of stages. Further, the terminal state management unit 14 refers to the security management policy storage unit 15 and extracts the security management state associated with the set security level. This security management state will be described later. Furthermore, the terminal state management unit 14 controls the terminal IF management unit 16, the application management unit 17, the VPN session management unit 18, the communication session management unit 19, and the power device management unit 20 based on the extracted security management state.

  The security management policy storage unit 15 stores a security management state and a security risk level of the information processing terminal device in association with a security level as a security management policy. This risk level is used as a condition for updating the security level. The security management state defines the state of the information processing terminal device 10 or the communication state between the information processing terminal device 10 and the server device 40. FIG. 6 is a diagram illustrating an example of the configuration of the security management policy. This security management policy includes a control activation time as a condition for updating the security level. For example, when the time during which no connection response signal is received reaches “120” seconds, the security level is updated to “1”, and the security management state is set to the “IF lock” state.

  The terminal IF management unit 16 controls the input device 106 of the information processing terminal device 10. More specifically, when the security management state is set to the “IF lock” state, the terminal state management unit 14 controls the terminal IF management unit 16 to disable input from the input device 106.

  The application management unit 17 manages an application program that is received and executed by the information processing terminal device 10 from the server device 40. More specifically, when the security management state is set to the “application lock” state, the terminal state management unit 14 controls the application management unit 17 to make it impossible to execute the application program.

  The VPN session management unit 18 manages a VPN session between the information processing terminal device 10 and the server device 40. More specifically, when the security management state is set to the “VPN line disconnection” state, the terminal state management unit 14 controls the VPN session management unit 18 to disconnect the VPN session.

  The communication session management unit 19 manages a communication session between the information processing terminal device 10 and the server device 40. More specifically, when the security management state is set to the “communication line disconnection” state, the terminal state management unit 14 controls the communication session management unit 19 to disconnect the communication line.

  The power device management unit 20 manages the power device of the information processing terminal device 10. More specifically, when the security management state is set to the “power off” state, the terminal state management unit 14 controls the power device management unit 20 to turn off the information processing terminal device 10 and exists in the RAM 102. Delete the operating system program

  The long-distance communication unit 21 communicates with the server device 40 via the network 50.

  Functionally, the portable terminal 30 includes a short-range communication unit 31 and an electronic signature processing unit 32.

  The short-range communication unit 31 receives the connection confirmation signal transmitted from the information processing terminal device 10. The short-range communication unit 31 transmits a connection response signal to the information processing terminal device 10 in response to the received connection confirmation signal. An electronic book name generated by the electronic signature processing unit 32 is attached to the connection response signal as information for authentication.

  The electronic signature processing unit 32 generates an electronic signature to be attached to the connection response signal. In addition, the electronic signature processing unit sends the generated electronic signature to the short-range communication unit 31.

  Functionally, the server device 40 includes a long-distance communication unit 41, an application management unit 42, a VPN session management unit 43, and a communication session management unit 44.

  The long-distance communication unit 41 transmits / receives data to / from the information processing terminal device 10 via the network 50.

  The application management unit 42 is downloaded to the information processing terminal device 10 and manages a state such as whether the application program executed by the information processing terminal device 10 is in use or in an end state.

  The VPN session management unit 43 manages a VPN session between the information processing terminal device 10 and the server device 40. More specifically, when there is a VPN communication line connection request from the information processing terminal device 10, the VPN session management unit 43 constructs a VPN line in response to the request. Further, when there is a VPN communication line disconnection request from the information processing terminal device 10, the VPN session management unit 43 disconnects the VPN line in response to the request.

  More specifically, the communication session management unit 44 constructs a communication line in response to a connection request for a communication line from the information processing terminal device 10 in response to the request. Further, when there is a communication line disconnection request from the information processing terminal device 10, the communication session management unit 44 disconnects the line in response to the request.

  Subsequently, an operation of the security management system 1 according to the present embodiment will be described, and a security management method according to the embodiment of the present invention will be described. FIG. 3 is a diagram illustrating a procedure performed by the information processing terminal device 10 to manage security in the security management system according to the present embodiment.

  First, the connection state confirmation unit 12 determines whether or not the first time has elapsed (S301). In this first time, an interval for transmitting a connection response signal to the mobile terminal 30 is set. In this way, the information processing terminal device 10 can transmit a connection response signal to the portable terminal 30 at regular time intervals.

  When the first time elapses, the connection state confirmation unit 12 transmits a connection confirmation signal to the portable terminal 30 via the short-range communication unit 11, thereby performing connection confirmation with the portable terminal 30 (S302). This connection confirmation signal can include, for example, information for identifying the user of the mobile terminal 30 and information regarding the time at which the connection confirmation signal was generated. When the connection response signal corresponding to the transmitted connection confirmation signal is received, the connection state confirmation unit 12 authenticates the received connection response signal. Specifically, the validity of the electronic signature included in the received connection response signal is verified. For verification of the validity of the electronic signature, information such as the public key or secret key of the user of the portable terminal stored in the authentication information storage unit 13 is used. If the electronic signature is valid as a result of the verification as described above, the connection state confirmation unit 12 recognizes that the connection response signal has been received, and displays information regarding whether or not the connection response signal has been received. It is sent to the state management unit 14.

  Subsequently, the connection state confirmation unit 12 determines whether or not a connection response signal from the mobile terminal 30 has been received (S303).

  When the connection response signal is received, the terminal state management unit 14 determines whether or not the second time has elapsed (S304). This second time is an elapsed time from when the connection response signal is not received until the timing when the security management state is changed to a higher level, and is controlled by the security management policy 15a stored in the security management policy storage unit 15. It is set as the startup time. When the time obtained by multiplying the first time, which is the interval at which the connection confirmation signal is transmitted, by the number of times the connection response signal is not received exceeds the second time, the terminal state management unit 14 It is determined that time 2 has elapsed.

  If it is determined that the second time has elapsed, the terminal state management unit 14 changes the security management state to a predetermined state defined in the security management policy 15a (S305). For example, when the security management state is the “normal” state, if the elapsed time after receiving the connection confirmation signal has reached “120” seconds, the terminal state management unit 14 Is changed to the “I / F lock” state.

  Subsequently, the terminal state management unit 14 controls the information processing terminal 10 to the changed security management state (S306). For example, when the security management state is changed to the “I / F lock” state, the terminal state management unit 14 receives input from various input devices 106 included in the information processing terminal device 10 in the terminal IF management unit 16. Make it impossible to control.

  On the other hand, when the connection response signal is received, the terminal state management unit 14 sets the security management state to the “normal” state (S307). This normal state is a state in which there are no particular security restrictions in input to the information processing terminal device 10, processing using an application program, and communication with the server device 40. Thereafter, these processes are repeated.

  FIG. 4 is a diagram illustrating a procedure performed for the mobile terminal 30 to manage security in the security management system according to the present embodiment.

  First, the short-range communication unit 31 determines whether or not a connection confirmation signal is received from the information processing terminal device 10 (S401).

  When the connection confirmation signal is received, the electronic signature processing unit 32 generates an electronic signature to be attached to the connection response signal (S402). For generation of the electronic signature, for example, a secret key possessed by the portable terminal 30 is used.

  Subsequently, the short-range communication unit 31 transmits a connection response signal including the electronic signature generated by the electronic signature processing unit to the information processing terminal device 10 (S403). This connection response signal can include information for identifying the user of the portable terminal 30 and information regarding the time at which the connection response signal was generated, in addition to the electronic signature. Thereafter, these processes are repeated.

  FIG. 5 is a diagram illustrating a procedure performed by the server device 40 to manage security in the security management system according to the present embodiment.

  First, the server device 40 determines whether or not there is a connection request from the information processing terminal device 10 (S501).

  If there is a connection request, the server device 40 establishes a communication line and a VPN line with the information processing terminal device 10 (S502). A communication session using a communication line and a VPN session using a VPN line are managed by a communication session management unit 44 and a VPN session management unit 43, respectively.

  Subsequently, the server device 40 causes the information processing terminal device 10 to download and execute a predetermined application program (S503). The state of downloading and executing the application program is managed by the application management unit 42.

  In the security management system according to the present embodiment, the information processing terminal device 10 does not include an application program for executing various processes. For this reason, the information processing terminal device 10 can execute information processing by the procedure of S501 to S503.

  Subsequently, the server device 40 determines whether or not there is any request from the information processing terminal device 10 (S504). This determination process is repeated until there is any request from the information processing terminal device 10.

  The server device 40 determines whether or not there is an application termination request from the information processing terminal device 10 (S505). This application termination request is information indicating that the information processing using the application program is terminated in the information processing terminal device 10.

  If there is an application termination request, the application management unit 42 recognizes that the execution of the application program has been terminated by the information processing terminal device 10, and manages that it is in this state (S506). In addition, the VPN session management unit 43 ends the VPN session with the information processing terminal device 10. Furthermore, the communication session management unit 44 ends the communication session with the information processing terminal device 10.

  If there is no application termination request, the application management unit 42 determines whether there is an application lock request (S507). This application lock request is information indicating that the security management state has been changed to the “application lock” state in the information processing terminal device 10.

  When the application lock request is received, the application management unit 42 recognizes that the security management state has been changed to the “application lock” state, and manages that the information processing terminal device 10 is in this state (S508). ).

  When the application lock request is not received, the VPN session management unit 43 determines whether there is a VPN disconnection request (S509). This VPN disconnection request is information indicating that the security management state has been changed to the “VPN disconnection” state in the information processing terminal device 10.

  When there is a VPN disconnection request, the VPN session management unit 43 disconnects the VPN line with the information processing terminal device 10 (S510).

  If there is no VPN disconnection request, the communication session management unit 44 determines whether there is a communication line disconnection request (S511). This communication line disconnection request is information indicating that the security management state has been changed to the “communication line disconnection” state in the information processing terminal device 10.

  When there is a communication line disconnection request, the communication session management unit 44 disconnects the communication line with the information processing terminal device 10 (S512). Thereafter, these processes are repeated.

  Next, functions and effects of the security management system 1 according to the first embodiment will be described. In the security management system 1 according to the first embodiment, based on whether or not a connection response signal is received from the mobile terminal 30, the information processing terminal device 10 allows the user who owns the mobile terminal 30 to process the information processing terminal device 10. Can be recognized. It can be considered that the greater the elapsed time after the connection response signal cannot be received, the greater the security risk. Accordingly, since the security management state of the information processing terminal device 10 is determined based on whether or not the connection response signal is received, it is possible to perform security management according to the state of the user who uses the information processing terminal device 10. It becomes. As a result, it is possible to improve the convenience of the system while maintaining the security of the information processing terminal device 10 and the server device 40.

  In this embodiment, the terminal state management unit 14 refers to the control activation time of the security management policy 15a, and performs security management according to the elapsed time since the connection response signal from the portable terminal 30 is not received. Although the state is determined, the terminal state management unit 14 can also determine the security management state according to the distance between the information processing terminal device 10 and the mobile terminal 30. For example, the terminal state management unit 14 can determine the security management state according to the distance between the information processing terminal device 10 and the mobile terminal 30 with reference to the security management policy 15b illustrated in FIG. Here, the distance between the information processing terminal device 10 and the portable terminal 30 is determined based on the connection response signal, a method using the electrolytic strength of the radio wave used for communication of the connection response signal, a method of examining the transition of the communication method, etc. Can be obtained by known methods. The above processing can be executed by the terminal state management unit 14 in step S307 of FIG. When the distance between the information processing terminal device 10 and the portable terminal 30 is large, it is considered that the degree of security risk is large. Therefore, by determining the security management state in this way, the security management of the information processing terminal device 10 is performed. It becomes possible to keep the state in an appropriate state.

  In addition, the terminal state management unit 14 can determine the security management state according to the location classification of the location where the mobile terminal 30 is located. For example, the terminal state management unit 14 can determine the security management state according to the location classification of the location of the mobile terminal 30 with reference to the security management policy 15c shown in FIG. Here, the location of the mobile terminal 30 can be acquired using information included in the connection response signal, and the method using the location information acquired by the GPS device included in the mobile terminal 30, the mobile terminal 30 communicates. Can be obtained by a known method such as a method of using identification information of a communication device provided for each area. The above processing can be executed by the terminal state management unit 14 in step S307 of FIG. For example, when the mobile terminal 30 and the information processing terminal device 10 are located in a place such as a cafeteria or a lobby, there are many other people in the place, so it is considered that the security risk is high. Therefore, by determining the security management state in this way, the security management state of the information processing terminal device 10 can be maintained in an appropriate state.

  In this embodiment, one security management policy stored in advance in the security management policy storage unit 15 is used. However, other modes are also conceivable. For example, the security management policy storage unit 15 stores a plurality of security management policies associated with each time zone in advance, and the terminal state management unit 14 refers to a security management policy corresponding to the time zone. You can also.

  Next, a security management system according to the second embodiment will be described. In the second embodiment, a plurality of security management policies corresponding to the location of the mobile terminal 30 are stored in the security management policy storage unit 15, and a security management policy to be referred to is determined based on the location information of the mobile terminal 30. It is what you do.

  FIG. 8 is a block diagram showing a functional configuration of the security management system 1 according to the second embodiment. A description of the same blocks as those in the first embodiment will be omitted.

  The security management policy storage unit 15 of the information processing terminal 10 stores a plurality of security management policies 15d, 15e, and 15f shown in FIG. 11 in association with security management policy numbers 1 to 3.

  The security management policy change control unit 33 determines whether or not the security management policy can be changed, and transmits information instructing the security management policy change to the information processing terminal device 10. Prior to changing the security management policy, the identity of the user of the portable terminal 30 is confirmed by confirming connection with the information processing terminal device 10 and transmitting / receiving information to / from the server device.

  The authentication information processing unit 34 processes information that proves the identity of the user of the mobile terminal 30. Specifically, the authentication information processing unit 34 receives input of information such as a PIN (Personal Identification Number) input to the mobile terminal 30 and user fingerprint data, and the received information is passed to the security management policy change control unit 33. To the server device 40.

  The position information acquisition unit 36 periodically measures the position of the mobile terminal 30, and transmits information related to the measured position as position information to the server device 40 via the long-distance communication unit 35. This positioning can be performed by a known method such as a method using a GPS device included in the mobile terminal 30 or a method using identification information of a communication device provided for each area with which the mobile terminal 30 communicates.

  The security management policy identification information extraction unit 45 refers to the location / security management policy correspondence table storage unit 46 based on the location information of the portable terminal 30 and extracts the security management policy number associated with the location information. .

  The location / security management policy correspondence table storage unit 46 stores the location information of the mobile terminal 30 and the security management policy number in association with each other. The location / security management policy correspondence table 46a shown in FIG. 10 includes location information and security management policy numbers. Here, the ID of the base station with which the mobile terminal 30 communicates is used as position information, but the present invention is not limited to this. For example, the latitude and longitude information to which the location of the mobile terminal 30 belongs can be used as the position information.

  FIG. 9 is a diagram illustrating a procedure performed to change the security management policy based on the location information of the mobile terminal 30 in the security management system according to the second embodiment.

  First, the position information acquisition unit 36 periodically measures the position information of the mobile terminal 30 (S901).

  Subsequently, the position information acquisition unit 36 notifies the server device 40 of the measured position information via the long-range communication unit 35 (S902).

  When the security management policy identification information extraction unit 45 receives the location information via the long-distance communication unit 41, the security management policy identification information extraction unit 45 refers to the location / security management policy correspondence table 46a and associates the security management policy associated with the received location information. Extract the number. The security management policy identification information extraction unit 45 determines that the security management policy needs to be changed when the extracted security management policy number is different from the number indicating the security management policy set in the security management policy storage 15. (S903).

  If it is determined that the security management policy needs to be changed, the security management policy identification information extraction unit 45 transmits the extracted security management policy number to the mobile terminal 30 via the long-distance communication unit 41 (S904). ).

  When the security management policy number is received, the security management policy change control unit of the portable terminal 30 confirms the connection with the information processing terminal device 10 prior to the change of the security management policy (S905). Specifically, the security management policy change control unit 33 transmits a signal for connection confirmation to the information processing terminal device 10.

  In response to the connection confirmation signal, the information processing terminal device 10 transmits a connection response signal to the portable terminal (S906).

  Furthermore, prior to the change of the security management policy, the identity of the user of the mobile terminal 30 is confirmed. The authentication information processing unit 34 receives input of PIN, fingerprint information, and the like (S907).

  Subsequently, the authentication information processing unit 34 transmits the received information as server authentication data to the server device 40 (S908). The server authentication data can be information obtained by encrypting the input PIN and fingerprint information. The server authentication data can also be an electronic certificate associated with the input PIN and fingerprint information. This electronic certificate is assumed to be stored in the mobile terminal 30 in advance.

  The server device 40 authenticates the identity of the user of the mobile terminal 30 based on the transmitted server authentication data, and transmits the authentication result to the mobile terminal 30 (S909). This identity authentication is performed by a known method, for example, based on data (not shown) for associating server authentication data provided in advance with the server device 40 and a user.

  Subsequently, the security management policy change control unit 33 determines whether the security management policy can be changed (S910). Specifically, the security management policy change control unit 33 receives a connection response signal from the information processing terminal device 10 and receives an authentication result from the server device 40 indicating that the identity has been authenticated. In such a case, it is determined that the security management policy can be changed.

  If it is determined that the security management policy can be changed, the security management policy change control unit 33 transmits a security management policy change instruction to the information processing terminal device 10 (S911). The security management policy change instruction includes the extracted security management policy number.

  When the security management policy change instruction is received, the security management policy storage unit 15 sets the security management policy corresponding to the received security management policy number as a security management policy to be referred to. For example, when the received security management number is “2”, the security management policy storage unit 15 sets the security management policy 15e as a security management policy to be referred to. When the setting is completed, the information processing terminal device 10 transmits a notification that the setting is completed to the mobile terminal 30 (S912). Thereafter, these processes are repeated.

  In this embodiment, a plurality of security management policies are stored in advance in the security management policy storage unit 15 of the information processing terminal device 10, and the server device 40 transmits the extracted security management policy number to the mobile terminal 30. The mobile terminal 30 is configured to transmit the received security management policy number to the information processing terminal device 10, but is not limited to this mode. For example, a plurality of security management policies are stored in advance in the mobile terminal 30, the server device 40 transmits the extracted security management policy number to the mobile terminal 30, and the mobile terminal 30 performs security management based on the received security management policy number. It is also possible to adopt a mode in which a policy is selected and the selected security management policy is transmitted to the information processing terminal device 10.

  In the security management system according to the second embodiment, the mobile terminal 30 can acquire a security management policy number corresponding to the location information of the mobile terminal 30, and the information processing terminal device 10 can receive this security management policy number. You can be notified. As a result, the mobile terminal 30 can recognize the security management policy selected according to the location of the mobile terminal 30 from the plurality of security management policies associated with the position information. It is possible to apply a security management policy suitable for the location of the mobile terminal 30. Further, in the security management system according to the second embodiment, the security management policy number is notified to the information processing terminal device 10 only when the information processing terminal device 10 exists in the vicinity of the mobile terminal 30. As a result, a security management policy suitable for the location of the information processing terminal device 10 can be applied to the information processing terminal device 10. Further, only when the identity of the user possessing the portable terminal 30 is transmitted to the server device 40 and the authentication result of the identity by the server device 40 is received and the identity is authenticated, security management is performed. The policy number can be notified to the information processing terminal device 10. Therefore, when the identity of the user is not authenticated, the security management policy number is not notified to the information processing terminal device 10, so that it is possible to prevent the user from impersonating when updating the security management policy.

  Next, a security management system according to the third embodiment will be described. In the third embodiment, authentication original data used for generating a connection response signal transmitted from the mobile terminal 30 to the information processing terminal device 10 can be periodically changed. The authentication source data includes, for example, an electronic key, an electronic certificate for certifying the user's identity, a hash function generated based on the time when the authentication source data was generated, and the mobile terminal 30 to function as a telephone. A telephone number used in the case, a combination thereof, or the like is used.

  FIG. 12 is a block diagram showing a functional configuration of the security management system 1 according to the third embodiment. Description of the same blocks as those in the first and second embodiments is omitted.

  The authentication source data change control unit 37 receives the authentication source data from the server device 40 via the long-distance communication unit 35. In addition, the authentication source data change control unit 37 stores the received authentication source data in the electronic signature processing unit.

  The authentication information generation unit 38 generates response signal authentication data necessary for authenticating the connection response signal generated using the authentication original data. This response signal authentication data is, for example, an electronic key.

  The authentication source data generation unit 47 periodically generates authentication source data. Further, the authentication source data generation unit 47 transmits the authentication source data to the mobile terminal 30 via the long-distance communication unit 41.

  FIG. 13 is a diagram illustrating a procedure performed to change authentication source data used for generating a connection response signal transmitted by the mobile terminal 30 in the security management system according to the third embodiment.

  First, the authentication source data generation unit 47 periodically generates authentication source data (S1301). Subsequently, the authentication source data generation unit 47 transmits the generated authentication source data to the mobile terminal 30 via the long-distance communication unit 41 (S1302).

  Here, the identity of the user of the portable terminal 30 is confirmed prior to the change of the authentication original data. The authentication information processing unit 34 receives input of PIN, fingerprint information, and the like (S1303).

  Subsequently, the authentication information processing unit 34 transmits the received information to the server device 40 as server authentication data (S1304). The server authentication data can be information obtained by encrypting the input PIN and fingerprint information. The server authentication data can also be an electronic certificate associated with the input PIN and fingerprint information. This electronic certificate is assumed to be stored in the portable terminal 30 in advance.

  The server device 40 authenticates the identity of the user of the mobile terminal 30 based on the transmitted server authentication data, and transmits the authentication result to the mobile terminal 30 (S1305). This identity authentication is performed by a known method, for example, based on data (not shown) for associating server authentication data provided in advance with the server device 40 and a user.

  Subsequently, the authentication source data change control unit 37 determines whether or not the authentication source data can be changed (S1306). Specifically, the authentication source data change control unit 37 determines that the authentication source data can be changed when the authentication result indicating that the identity is authenticated from the server device 40 is received. If it is determined that the authentication source data can be changed, the authentication source data change control unit 37 sends the received authentication source data to the electronic signature processing unit 32.

  Next, the authentication information generation unit 38 generates response signal authentication data (S1307). Subsequently, the authentication source data change control unit 37 transmits the generated response signal authentication data to the information processing terminal device 10 (S1308).

  The information processing terminal device 10 stores the received response signal authentication data in the authentication information storage unit and sets it as data to be used for authentication of the connection response signal. When the setting is completed, the information processing terminal device 10 transmits a notification that the setting is completed to the mobile terminal 30 (S1309). Thereafter, these processes are repeated.

  In the security management system according to the third embodiment, the mobile terminal 30 receives the authentication original data generated by the server device 40 and performs the authentication process of the connection response signal generated from the authentication original data. Response signal authentication data can be generated, and this response signal authentication data can be transmitted to the information processing terminal device 10. As a result, since the connection response signal can be updated periodically, spoofing of the mobile terminal 30 is prevented, and security in communication for checking the connection state between the information processing terminal device 10 and the mobile terminal 30 can be improved. Become. In addition, it is possible to cause the information processing terminal device 10 to perform authentication processing of the connection response signal that is periodically updated. In addition, the mobile terminal 30 transmits server authentication data for authenticating the identity of the user who owns the mobile terminal 30 to the server device 40, receives the authentication result of the identity by the server device 40, and the identity is authenticated. The response signal authentication data can be transmitted to the information processing terminal device 10 only when it is done. Therefore, when the identity of the user is not authenticated, the response signal authentication data is not transmitted to the information processing terminal device 10, so that it is possible to prevent the user from being impersonated when updating the response signal authentication data.

It is a functional block diagram of a security management system. It is a hardware block diagram of a security management system. It is a figure which shows the process sequence of the security management which the information processing terminal device of a security management system performs. It is a figure which shows the process sequence which the portable terminal of a security management system performs. It is a figure which shows the process sequence which the server apparatus of a security management system performs. It is a block diagram of a security management policy storage unit. It is a block diagram of a security management policy storage unit. It is a functional block diagram of a security management system. It is a figure which shows the process sequence of the change of the security management policy in a security management system. It is a block diagram of a position / security management policy correspondence table. It is a block diagram of a security management policy storage unit. It is a functional block diagram of a security management system. It is a figure which shows the process sequence of the change of the original data for authentication in a security management system.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 ... Security management system, 10 ... Information processing terminal device, 11 ... Short-range communication part, 12 ... Connection state confirmation part, 13 ... Authentication information storage part, 14 ... Terminal state management part, 15 ... Security management policy memory | storage part, 16 DESCRIPTION OF SYMBOLS ... Terminal IF management part, 17 ... Application management part, 18 ... VPN session management part, 19 ... Communication session management part, 20 ... Power supply device management part, 21 ... Long distance communication part, 30 ... Portable terminal, 31 ... Short distance communication 32 ... Digital signature processing unit 33 ... Security management policy change control unit 34 ... Authentication information processing unit 35 ... Far distance communication unit 36 ... Position information acquisition unit 37 ... Original data change control unit for authentication 38 ... authentication information generation unit, 40 ... server device, 41 ... long-distance communication unit, 42 ... application management unit, 43 ... session management unit, 44 ... communication session management unit 45 ... security management policy identification information extracting unit, 46 ... positional security management policy correspondence table storage unit, 47 ... original data generation unit for authentication.

Claims (12)

In a security management system comprising an information processing terminal device and an authentication device that communicates with the information processing terminal device,
The information processing terminal device
A connection confirmation signal transmitting means for transmitting a connection confirmation signal to the authentication device;
A connection response signal receiving means for receiving a connection response signal transmitted in response to the connection confirmation signal by the authentication device;
Security management policy storage means for storing a security risk level of the information processing terminal device and a security management state for controlling the information processing terminal device in accordance with the risk level;
Control means for controlling the information processing terminal device to enter a security management state according to the security risk of the information processing terminal device with reference to the security management policy storage means when the connection response signal cannot be received. And
The authentication device includes:
A connection confirmation signal receiving means for receiving the connection confirmation signal;
A security management system comprising: a connection response signal transmitting means for transmitting a connection response signal in response to the connection confirmation signal. The risk is determined based on a time when the connection response signal cannot be received,
When the time during which the connection response signal cannot be received reaches a predetermined time, the control means controls the security management state according to a higher risk than the risk corresponding to the controlled security management state. The security management system according to claim 1. The risk is determined based on information about a distance between the authentication device and the information processing terminal device acquired based on the connection response signal,
2. The security management system according to claim 1, wherein the control unit controls the information processing terminal device so as to be in a security management state corresponding to the degree of risk with reference to the security management policy storage unit. . The risk is determined based on position information of the authentication device included in the connection response signal,
2. The security management system according to claim 1, wherein the control unit controls the information processing terminal device so as to be in a security management state corresponding to the degree of risk with reference to the security management policy storage unit. . The security management policy storage means, as the security management state,
An I / F lock state that disables the input device of the information processing terminal device;
An application lock state for terminating the application program as a security management state corresponding to a higher security level than the I / F lock state;
A VPN line disconnection state for disconnecting a VPN line between the information processing terminal device and the server device as a security management state corresponding to a higher security level than the application lock state;
As a security management state corresponding to a higher security level than the VPN line disconnection state, a communication line disconnection state for disconnecting a communication line between the information processing terminal device and the server device;
The security management state corresponding to a higher security level than the communication line disconnection state includes at least two states of a power disconnection state in which the information processing terminal device is powered off. The information processing terminal device according to any one of? In a security management method of a security management system comprising an information processing terminal device and an authentication device that communicates with the information processing terminal device,
A connection confirmation signal transmission step in which the information processing terminal device transmits a connection confirmation signal to the authentication device;
A connection confirmation signal receiving step in which the authentication device receives the connection confirmation signal;
A connection response signal transmission step in which the authentication device transmits a connection response signal in response to the connection confirmation signal;
A connection response signal receiving step in which the information processing terminal device receives the connection response signal;
When the information processing terminal device cannot receive the connection response signal, the security risk level of the information processing terminal device is associated with the security management state for controlling the information processing terminal device according to the risk level. And a control step of controlling the information processing terminal device so as to be in a security management state according to a security risk level of the information processing terminal device with reference to a security management policy storage means to be stored. Security management method. The authentication device includes:
Position information transmission means for transmitting information on the current position as position information to the server device at predetermined time intervals;
Policy update receiving means for receiving security management policy identification information indicating the security management policy transmitted from the server device in accordance with the transmitted location information;
Policy change instruction means for transmitting the security management policy identification information to the information processing terminal device;
The security management policy storage means stores a plurality of the security management policies,
The security management system according to claim 1, wherein the control unit selects the security management policy to be referred to based on the received security management policy identification information. The authentication device includes:
A terminal connection confirmation signal transmitting means for transmitting a terminal connection confirmation signal for confirming a connection state with the information processing terminal apparatus to the information processing terminal apparatus;
Terminal connection response signal receiving means for receiving a terminal connection response signal transmitted from the information processing terminal device in response to the transmitted terminal connection confirmation signal;
Server authentication data transmitting means for transmitting server authentication data including information for identifying a user of the authentication device to the server device;
An authentication result receiving means for receiving authentication result information including information related to a determination result of the validity of the server authentication data from the server device;
The policy change instructing means transmits the security management policy identification information to the information processing terminal device when the terminal connection response signal is received and the determination result of the authentication result information is valid. ,
The information processing terminal device
Terminal connection confirmation signal receiving means for receiving the terminal connection confirmation signal;
The authentication apparatus according to claim 7, further comprising: a terminal connection response signal transmitting unit that transmits the terminal connection response signal when the terminal connection confirmation signal is received. The authentication device includes:
Authentication original data receiving means for receiving authentication original data used for generating the connection response signal generated by the server device;
Response signal authentication data generating means for generating response signal authentication data for the information processing terminal device to perform authentication processing of a connection response signal generated using the authentication original data;
Response signal authentication data changing means for transmitting the response signal authentication data to the information processing terminal device,
The information processing terminal device
The security management system according to claim 1, further comprising response signal authentication data receiving means for receiving the response signal authentication data. The authentication device includes:
Server authentication data transmitting means for transmitting server authentication data including information for identifying a user of the authentication device to the server device;
An authentication result receiving means for receiving authentication result information including information related to a determination result of the validity of the server authentication data from the server device;
The response signal authentication data changing means transmits the response signal authentication data to the information processing terminal device when the determination result of the authentication result information is valid. The security management system described. In an information processing terminal device that communicates with an authentication device,
A connection confirmation signal transmitting means for transmitting a connection confirmation signal to the authentication device;
A connection response signal receiving means for receiving a connection response signal transmitted in response to the connection confirmation signal by the authentication device;
Security management policy storage means for storing a security risk level of the information processing terminal device and a security management state for controlling the information processing terminal device in accordance with the risk level;
Control means for controlling the information processing terminal device to enter a security management state according to the security risk of the information processing terminal device with reference to the security management policy storage means when the connection response signal cannot be received. An information processing terminal device comprising: In the apparatus for authentication which communicates with the information processing terminal device according to claim 11,
A connection confirmation signal receiving means for receiving a connection confirmation signal transmitted from the information processing terminal device;
An authentication apparatus comprising: a connection response signal transmitting unit that transmits a connection response signal including information for identifying a user of the authentication apparatus in response to the connection confirmation signal.

Images