JP2009188777A - Authentication mail sending system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To register information of a receiving counterpart in advance irrespective of the accuracy of a filtering and send a mail only when the receiving counterpart authenticates, so that an information leakage by a mail erroneous sending is prevented. <P>SOLUTION: A sender of an e-mail registers a user ID as a destination permitted to send a mail to a sending permitting control table. A mail control server sends an authentication mail to a recipient of the e-mail, and the recipient of the e-mail accesses an authentication page of an authentication control server to input authentication information. The authentication control server inquires the authentication information to an authentication information control table, inquires a sending permission of the authenticated user to the sending permitting control table controlling users who are permitted to send by using the user ID as a key if the authentication information is coincident, and notifies the sending permission to the mail control server. The mail control server receives the sending permission from the authentication control server and sends a text of a mail to the recipient of the e-mail. <P>COPYRIGHT: (C)2009,JPO&INPIT

Description

  The present invention relates to an authentication mail transmission system, and more particularly to a method for preventing information leakage by electronic mail by authenticating a receiving party using authentication mail.

  As a conventional method for preventing erroneous transmission of e-mail, there is a known method for preventing information leakage by recording information for determining whether the transmission is erroneous in advance and mechanically monitoring the transmission information. ing. (See Patent Document 1 below)

As prior art documents related to the invention of the present application, there are the following.
JP 2006-235949 A

However, the above-described method has a problem in that not all erroneous transmissions can be prevented because erroneous transmission is determined based on information regarding erroneous transmission stored in advance.
The present invention has been made to solve the above-described problems of the prior art, and the object of the present invention is only when the receiving party information is pre-registered and the receiving party authenticates regardless of the accuracy of filtering. An object of the present invention is to provide an authentication mail transmission system capable of preventing information leakage due to erroneous mail transmission by transmitting mail.
The above and other objects and novel features of the present invention will become apparent from the description of this specification and the accompanying drawings.

Of the inventions disclosed in this application, the outline of typical ones will be briefly described as follows.
In order to achieve the above-mentioned object, the present invention provides a mail transmission client that transmits an e-mail, a mail management server that manages mail, and a database device that manages information and authentication information of a recipient who is permitted to transmit. An authentication management server that inquires the database device for information on the recipient and authentication information, a mail reception client that receives an email, the mail transmission client, the mail management server, the database device, An authentication mail transmission system comprising an authentication management server and a communication network for mutually connecting the mail receiving client,
The mail transmission client has an information registration unit for registering in advance in a database device information on a reception partner permitted to transmit, and a mail transmission unit for transmitting the email to the mail management server,
The mail management server includes an e-mail transmitted from the mail transmission client, a mail information receiving unit that receives a transmission permission notified from the authentication management server, and an authentication mail and an e-mail body for the mail receiving client. A transmission control unit for transmitting, and an information registration unit for registering mail information in the database device,
The database device includes a transmission permission management table for managing information on the reception partner, an authentication information management table for managing authentication information on the reception partner, the transmission permission management table, and the authentication information management table. Information registration, or an information registration unit for changing / deleting information of the receiving party in the transmission permission management table and the authentication information management table, the transmission permission management table, and the authentication information management table, An information inquiry section for inquiring the transmission permission information and authentication information of the receiving party;
The authentication management server includes an authentication information receiving unit that receives the authentication information of the reception partner transmitted from the mail receiving client, and an inquiry unit that inquires the transmission permission information and authentication information of the reception partner to the database device. A notification unit for notifying the mail management server of transmission permission based on the information inquired by the inquiry unit;
The mail receiving client includes a mail receiving unit that receives the electronic mail, and an authentication information transmitting unit that transmits authentication information input by a receiving party to the authentication management server.

The effects obtained by the representative ones of the inventions disclosed in the present application will be briefly described as follows.
According to the authentication mail transmission system of the present invention, regardless of the accuracy of filtering, information on the receiving party is pre-registered, and mail is transmitted only when the receiving party authenticates, thereby preventing information leakage due to erroneous mail transmission. It becomes possible.

Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.
In all the drawings for explaining the embodiments, parts having the same functions are given the same reference numerals, and repeated explanation thereof is omitted.
[Example 1]
FIG. 1 is a diagram showing an outline of an authentication mail transmission system according to an embodiment of the present invention.
In FIG. 1, 101 is the sender of the e-mail, 102 is a mail sending client used for sending e-mail, 103 is a mail management server for sending authentication mail and mail text and registering mail information, and 104 is sending permission management. , 105 is an authentication management server, 106 is an e-mail recipient, 107 is a mail receiving client used for receiving e-mail, and 108 is an authentication information management table.
The e-mail sender 101 sends an e-mail to the e-mail management server 103 (step S1), and the e-mail management server 103 sends a e-mail ID to the transmission permission management table 104 that manages users who are permitted to send. Then, mail information (mail ID) is registered (step S2).
In addition, the e-mail sender 101 registers a user ID, which is a destination to which e-mail transmission is permitted, in the transmission permission management table 104 (step S3).
The mail management server 103 transmits an authentication mail to the e-mail recipient 106 (step S4), and the e-mail recipient 106 accesses the authentication page of the authentication management server 105 from the address described in the authentication mail. Authentication information is input (step S5).
The authentication management server 105 inquires of the authentication information management table 108 that manages authentication information using the user ID as a key (step S6). If the authentication information matches, the authentication management server 105 transmits a user that allows transmission using the user ID as a key. The permission management table 104 is inquired about the transmission permission of the authenticated user (step S7), and the mail management server 103 is notified of the mail transmission permission (step S8).
The mail management server 103 receives the mail transmission permission from the authentication management server 105, and transmits the mail text to the e-mail recipient 106 (step S9).

FIG. 2 is a block diagram showing a schematic overall configuration of the authentication mail transmission system according to the embodiment of the present invention.
In FIG. 2, a mail transmission client 200 that transmits mail to the mail management server 210 includes an information registration unit 201 that registers mail transmission permission and a mail transmission unit 202 that transmits mail.
The mail management server 210 that transmits the authentication mail and the mail text and registers the mail information includes a mail information receiving unit 211 that receives mail and mail transmission permission, a control unit 212 that controls each process of the mail management server 210, An information registration unit 213 that registers information and a transmission control unit 214 that controls transmission of an authentication mail and a mail text are provided.
An authentication management server 220 that manages authentication information includes an authentication information receiving unit 221 that receives authentication information of a mail recipient, a control unit 222 that controls each process of the authentication management server 220, and a notification unit that notifies mail transmission permission. 223 and a query unit 224 that queries the database device 240 for authentication information and transmission permission information.
The database device 240 stores a transmission permission management table 244 that manages users who are permitted to transmit using a mail ID as a key, an authentication information management table 245 that manages user authentication information using a user ID as a key, and a transmission permission management table 244. An information registration unit 241 that registers a mail ID, a transmission-permitted user, and transmission-permitted user information, an inquiry unit 242 that inquires authentication information to the authentication information management table 245, and a control unit 243 that controls each process of the database device 240. Have.
The mail receiving client 250 that receives mail from the mail management server 210 includes a mail receiving unit 251 that receives mail and an authentication information transmitting unit 252 that transmits authentication information.
The mail transmission client 200, the mail management server 210, the authentication management server 220, the database device 240, and the mail reception line 250 are connected to each other via a wired or wireless communication network 230 such as the Internet.

FIG. 3 is a diagram showing a recording format 300 of the transmission permission management table 244 according to the present embodiment, which manages users who are permitted to transmit using a mail ID as a key.
In FIG. 3, 301 is a mail ID uniquely assigned to each mail, and 302 is a transmission permitted user ID of a user permitted to transmit.
FIG. 4 is a diagram showing a recording format 400 of the authentication information management table 245 of this embodiment that manages user authentication information using the user ID as a key.
In FIG. 4, 401 is a user ID, 402 is authentication information such as a password, and 403 is user information.
Note that authentication information 402 such as a password is registered in advance in the authentication information management table 245 by a user (in this case, the user of the receiving party).

FIG. 5 is a flowchart showing the processing procedure of the mail management server according to the embodiment of the present invention.
First, the mail management server 210 receives e-mail and information on authentication success notification (the above-mentioned mail transmission permission) via the mail information receiving unit 211 (step 501), and whether the received information is mail or authentication success. (Step 502).
If the determination result in step 502 is mail reception, the mail ID is registered in the database device 240 via the information registration unit 213 (step 503), and an authentication mail is transmitted to the mail reception client 250 (step 503). Step 504).
If the determination result in step 502 is an authentication success notification, the mail text is transmitted to the mail receiving client 250 via the transmission control unit 214 (step 505).
Note that the mail text is in a state of waiting for transmission permission in the mail management server 210 until a successful authentication notification is made. Accordingly, when the authentication success notification is not made because the mail receiving party is not authenticated or the like, the mail body is in a state of waiting for transmission permission in the mail management server 210 forever. After the elapse, the mail text will be returned to the sender.

FIG. 6 is a flowchart illustrating a processing procedure of the authentication management server according to the embodiment of this invention.
First, the authentication management server 220 receives the user ID, the authentication information, and the mail ID transmitted from the mail receiving client 250 via the authentication information receiving unit 221 (step 601). The database device 240 is inquired about authentication information corresponding to the user ID (step 602).
Next, it is determined whether the authentication information received from the mail receiving client 250 matches the authentication information notified from the database device 240 (step 603).
If the authentication information received from the mail receiving client 250 matches the authentication information notified from the database device 240, the authenticated user is the transmission-permitted user ID for the database device 240 via the inquiry unit 224. (Step 604).
Next, it is determined whether the authenticated user is a transmission-permitted user ID (step 605). If the determination result in step 605 is that the authenticated user is a transmission-permitted user ID, authentication is performed via the notification unit 223. A notification of success (the above-mentioned mail transmission permission) is transmitted to the mail management server 210 (step 606).
In step 603, if the authentication information received from the mail receiving client 250 and the authentication information received from the database device 240 do not match, and if the authenticated user is not a transmission-permitted user ID, the process ends.
As described above, according to the present embodiment, information on the recipient is registered in advance, and only when the recipient is successfully authenticated via the authentication email, information is leaked by sending an email text. Can be prevented.
As mentioned above, the invention made by the present inventor has been specifically described based on the above embodiments. However, the present invention is not limited to the above embodiments, and various modifications can be made without departing from the scope of the invention. Of course.

It is a figure which shows the outline | summary of the authentication mail transmission system of the Example of this invention. It is a block diagram which shows the schematic whole structure of the authentication mail transmission system of the Example of this invention. It is a figure which shows the recording format of the transmission permission management table of the Example of this invention. It is a figure which shows the recording format of the authentication information management table of the Example of this invention. It is a flowchart which shows the process sequence of the mail management server of the Example of this invention. It is a flowchart which shows the process sequence of the authentication management server of the Example of this invention.

Explanation of symbols

101 Email sender 102, 200 Mail sending client 103, 210 Mail management server 104, 244 Transmission permission management table 240 Database device 105, 220 Authentication management server 106 Email recipient 107, 250 Mail receiving client 108, 245 Authentication Information management table 201, 213, 241 Information registration unit 202 Mail transmission unit 211 Mail information reception unit 212, 222, 243 Control unit 214 Transmission control unit 221 Authentication information reception unit 223 Notification unit 224, 242 Query unit 230 Communication network 251 Mail reception Unit 252 authentication information transmission unit 300 transmission permission management table recording format 301 mail ID
302 Transmission permitted user ID
400 Authentication information management table recording format 401 User ID
402 Authentication information 403 User information

Claims (1)

An email sending client that sends emails;
A mail management server that manages mail;
A database device that manages the information of the recipient to whom transmission is permitted and the authentication information;
An authentication management server that inquires of the database device for information on the recipient and authentication information;
A mail receiving client for receiving e-mail;
An authentication mail transmission system comprising: a communication network that interconnects the mail transmission client, the mail management server, the database device, the authentication management server, and the mail reception client;
The mail transmission client includes an information registration unit for registering in advance in the database device information on a reception partner permitted to transmit,
A mail transmission unit that transmits the email to the mail management server;
The mail management server is configured to receive an email transmitted from the mail transmission client and a mail information receiving unit that receives a transmission permission notified from the authentication management server;
A transmission control unit for transmitting an authentication mail and an email body to the mail receiving client;
An information registration unit for registering mail information in the database device;
The database device includes a transmission permission management table for managing information on the receiving party;
An authentication information management table for managing authentication information of the recipient;
Registering the information of the reception partner in the transmission permission management table and the authentication information management table, or an information registration unit for changing / deleting the information of the reception partner in the transmission permission management table and the authentication information management table;
An information inquiry unit for inquiring the transmission permission information and authentication information of the reception partner with respect to the transmission permission management table and the authentication information management table;
The authentication management server includes an authentication information receiving unit that receives authentication information of the receiving party transmitted from the mail receiving client;
An inquiry unit that inquires the transmission permission information and authentication information of the receiving party to the database device;
Based on the information inquired by the inquiry unit, having a notification unit that notifies the mail management server of transmission permission,
The mail receiving client includes a mail receiving unit that receives the electronic mail,
An authentication mail transmission system comprising: an authentication information transmission unit configured to transmit authentication information input by a receiving party to the authentication management server.

Images