JP2010097428A - Installation method for software - Google Patents

Abstract

【Task】
A general user who does not know the administrator account can install software on the client terminal while ensuring security safety.
[Solution]
In addition to the restricted user account for allowing the user to use the sink line ant terminal, a setup account for permitting the installation of a predetermined program in the storage unit in the thin client terminal is set. An external storage device that stores a predetermined program that can be installed and a permission file that stores management information used for installing the predetermined program is connected to the thin client terminal, and the thin client terminal is activated. At the time of activation, a setup program for installing a predetermined program stored in the storage unit is activated based on authentication of the restricted user account. Under the execution of the setup program, the predetermined program in the external storage device is installed in the storage unit using the management information in the permission file in accordance with the logon of the setup account.
[Selection] Figure 1

Description

  The present invention relates to a software installation method, and more particularly to installation of software such as files and control programs in a thin client terminal of a thin client system.

  The thin client system is a system for improving security in which a server and a client terminal are connected via a network. The server holds application programs for executing data processing and data to be processed. On the other hand, the client terminal does not have software or data such as application programs for data processing. A series of processing is performed by connecting to a server from a client terminal via a network, performing necessary processing in the server, creating a necessary screen as a result, and transmitting it to the thin client terminal.

  Since the thin client system holds the processing target data in the server and restricts the processing data from being freely downloaded to the thin client terminal, the user can extract important information. It is not possible and is excellent in security. In addition, by restricting functions such as prohibiting writing to the storage unit in the thin client terminal so that a general user who uses the thin client terminal cannot change the software or change the OS setting, It is possible to further reduce the risk of leakage.

  In recent years, countermeasures against information leakage have become more important, and it is required to secure high security even in a thin client system. In response to this request, for example, Patent Document 1 discloses that a user can remotely operate a server from an unspecified client by using a storage device equipped with a tamper-resistant device, and can perform business seamlessly inside and outside the workplace. A system capable of using the function is disclosed.

JP 2007-58869 A

  However, in the above-described thin client system, when expanding the function of the client terminal, it may be necessary to newly install software corresponding to the function. In such a case, the general user cannot write information to the storage unit of the thin client terminal, so the administrator needs to expand the functions of the thin client terminal one by one and install software for that purpose. There is. This is very laborious and time consuming.

  As another method, by installing an administrator account to general users, installation of software accompanying a function change can be permitted. However, in this case, a general user may be able to use all the functions of the thin client terminal without restriction, and thus security safety cannot be ensured.

SUMMARY OF THE INVENTION An object of the present invention is to provide a thin client terminal of a thin client system and a software installation method in which a general user who does not know an administrator account can install software in the client terminal while ensuring security safety. It is to provide.
In addition, the present invention limits software installed on the thin client terminal by using the permission file.

The software installation method according to the present invention is preferably a software installation method in a thin client terminal used by connecting to an application program that executes data processing and a server that holds data to be processed.
In addition to the restricted user account for allowing the user to use the sink line ant terminal, set up a setup account that permits installation of a predetermined program in the storage unit in the thin client terminal,
An external storage device that stores a predetermined program that can be installed and a permission file that stores management information used for installation of the predetermined program, connected to the thin client terminal;
When starting up the thin client terminal, based on the authentication of the restricted user account, start up a setup program stored in the storage unit for installing the predetermined program,
Under execution of the setup program, the predetermined program in the external storage device is installed in the storage unit using the management information in the permission file in response to logon of the setup account. It is configured as a software installation method.

According to a preferred example, a software installation method according to the present invention includes an input / output unit that is operated by a user to input / output data, a communication unit connected to the server, and a sink lineant terminal. An OS, a program for operating each unit, a storage unit for storing files, and a program stored in the storage unit are executed to control each unit in the thin client terminal and to control input / output of data in the input / output unit A software installation method in a thin client terminal of a thin client system that uses a sink line ant terminal having a CPU for connecting to an application program that executes data processing and a server that holds data to be processed.
Setting a restricted user account for allowing a user to use the sink lineant terminal, and a setup account given to a user who is permitted to install the predetermined program;
Connecting an authorization file for storing management information used for installing the predetermined program and an external storage device for storing the predetermined program installable in the storage unit to the thin client terminal;
Activating a setup program for installing a predetermined program stored in the storage unit based on authentication of the restricted user account;
Installing the predetermined program stored in the external storage device in the storage unit in response to logging on to the setup account under execution of the setup program. Configured as

Preferably, the setup account is prohibited from inhibiting the network connection function and execution of other installed software, and is limited to execute only the predetermined program.
Preferably, the permission file includes, as the management information, a check activation permission password used when starting the setup program, a program name of the predetermined program permitted to be installed, and a file of the predetermined program. The unique information is recorded, and the permission file is encrypted.

Preferably, the setup program reads and decrypts the permission file from the external storage device connected to the thin client terminal when starting the program, and confirms the activation permission password recorded in the permission file. The installation work is started, and when the activation permission password cannot be confirmed, the installation work is finished.
Preferably, the setup program installs the predetermined program by automatically logging on to the setup account after starting the installation operation.

Preferably, the setup program calculates unique information of the file of the predetermined program, determines whether it matches the unique information of the file registered in the permission file, and if the result does not match, Finish the installation process.
Preferably, the setup program monitors a file whether or not a file not registered in the permission file is detected during installation, and if a file not registered in the permission file is found, the installation program Suspend and restart.
Preferably, the setup program performs a connection check of the external storage device during the installation work, and when the connection of the external storage device is newly detected or at the start of the installation work, If it is detected that the connection has been lost, the installation is interrupted and restarted.

According to a preferred example, the sink line ant terminal according to the present invention is a thin client terminal in a thin client system that is used in connection with an application program that executes data processing and a server that holds data to be processed.
An input / output unit that is operated by a user to input / output data, a communication unit connected to the server, an OS or a program that operates each unit in the sink lineant terminal, and a storage unit that stores files,
A CPU that executes a program stored in the storage unit to control each unit in the thin client terminal and input / output control data of the input / output unit, a predetermined program that can be installed in the storage unit, and the An external storage device that stores a permission file that holds management information for installation of a predetermined program, and is detachable from the thin client terminal; and
A restricted user account for allowing the user to use the sink line ant terminal and a setup account for permitting installation of the predetermined program are set,
In the storage unit, a setup program for installing the predetermined program in the storage unit is stored in advance,
The setup program is activated based on authentication of the restricted user account, and the predetermined program is installed in the storage unit in response to logging on to the setup account under execution of the setup program. As a thin client terminal.

  According to the present invention, a general user who does not know an administrator account can install software while ensuring security safety. In addition, by using the permission file, it is possible to limit the software installed on the thin client terminal.

Hereinafter, embodiments of the present invention will be described with reference to the drawings.
FIG. 1 shows the configuration of a thin client system.
This system is configured by connecting a plurality of thin client terminals (hereinafter simply referred to as terminals) 1 to a server 92 that performs business processing via a network 94.
The terminal 1 executes a program to control each device in the thin client terminal and control input / output of data, an input device such as a mouse 102 and a keyboard 103, a display device 104 that displays various information, A storage device 105 such as a hard disk (HDD) that stores an OS, a program, a file, and the like that operate each of the devices, a memory 106 that stores an operating OS, a program, and data, a wired or wireless LAN 107 that performs data communication with the server 92, Each unit includes a communication device such as the communication card 108 and an external storage device 12 such as a USB memory that is detachably attached to the adapter. Here, from the viewpoint of security, writing to the storage device 105 is restricted so that a general user who uses the terminal 1 cannot change software or OS settings.
The user performs an input operation using an input device such as a keyboard or a mouse on the terminal 1, and only the input is transmitted to the connection destination server 92. The server 92 performs data processing according to the input operation, and the result is obtained. A series of processing is performed by creating a screen and transmitting it to the terminal 1.

FIG. 2 shows a functional configuration of the thin client terminal.
What is characteristic about the terminal 1 is that a setup program 211 that sets up an account 20 to be used when executing the logon program and sets up software such as a program among the various programs 21 stored in the storage device 105. Is to be retained.
As the account 20, an administrator account 201, a restricted user account 202 used by the user of the terminal 1, and a setup account 203 are set.

Here, the setup account 203 is an account dedicated to installation work, which is given administrator authority but has a limited operation range of the terminal 1.
A general user starts a setup program 211 for performing installation work from the restricted user account 202, thereby automatically logging on to the setup account 203 to enable software installation work. At the time of software installation work, the software that can be installed is restricted by using the permission file 301 that lists the software that permits installation. The authority or restriction of each account will be described later with reference to FIG.

FIG. 3 shows the contents stored in the external storage device 12 of the thin client terminal.
The external storage device 12 is provided by the administrator only to users who have been given permission to use the terminal 1. The user uses the external storage device 12 connected to the adapter of the terminal 1, and manages it by removing it when not in use.
Characteristically, the external storage device 12 can be installed in the storage device 105 and the permission file 301 in which the management information for installing the software held in the external storage device 12 is recorded in the storage device 105. A plurality of installation programs 3021 to 302n are stored. The predetermined program that can be installed includes, for example, function control and function change in the terminal 1, such as a control program for the mouse 102, a display adjustment control program for the display 104, and a control program for changing the function of the communication card 108. There is an accompanying control program.
In the illustrated example, a plurality of installation programs 3021 to 302n are shown as installable software, but an installation file, data related thereto, and the like are also included.

FIG. 4 shows a detailed configuration of the permission file 301.
The permission file 301 includes an activation permission password section 41, an installation program name section 42, and an installation program section 43. Since the permission file itself is encrypted and managed, it is decrypted when it is used.
In the activation permission password section 41, an activation permission password 411 used in the activation permission determination performed when the setup program 211 is activated is recorded.
In the installation program name section 42, a plurality of installable program names 421 to 42m are recorded.

  In the installation program section 43, an execution program name 431 necessary for installing the program (installation programs 3021 to 302n), file names 432 and 433 to be copied at the time of installation, and unique information 4311 to 4331 of these files are recorded. Is done. Here, as the file unique information 4311 to 4331, for example, Hash values are used corresponding to the execution program name 431 and the file names 432 and 433.

The content recorded in the permission file 301 depends on the installation programs 3021 to 302n, and can be installed with only one installation execution program, or may be composed of one installation execution program and a plurality of installation files. .
As shown in the figure, in the case of a plurality of files, the installation execution program name 431, the installation execution program hash value 4311, the installation file a file name 432, the installation file a hash value 4321, and the installation file b file name All files and their hash values are recorded, such as 433 and the hash value 4331 of the installation file b.

Next, the account management table 80 will be described with reference to FIG.
In the account management table 80, an administrator account 801, a restricted user account 802, and a setup account 803 are set. The account management table 80 is stored in advance in the storage device 105 of the terminal 1 and is referred to when the terminal 1 is logged on.
Here, the administrator account 801 is an authority given to the administrator, and is an account that can use all the functions of the terminal 1. The administrator account 801 is used, for example, when changing various functions of the terminal 1 or changing network settings.

  The restricted user account 802 is an account with restricted user authority given to a user who uses the terminal 1. The installation of programs and the writing of information to the storage device 105 are restricted so that the software configuration and settings in the terminal 1 cannot be changed. However, network connection and browser activation functions are set to be usable.

  The setup account 803 can be installed as an administrator-privileged account, and information can be written to the storage device 105 of the terminal 1 only from the setup program. Functions that are not related to software installation are limited, and functions such as network connection and browser activation cannot be used, so security in security during installation is ensured.

Next, software installation execution processing will be described with reference to FIG.
FIG. 5 shows user operations and program processing from the startup of the terminal 1 until the installed program becomes available.
When the terminal 1 is activated (S503), the CPU 101 authenticates and logs on the user account input to the restricted user account 202 by the user (S504). The user connects the external storage device 12 owned by the user to the terminal 1 (S505), and activates the setup program 211 (S506).

  When the CPU 101 executes the setup program 211, first, the permission file 301 stored in the external storage device 12 is decrypted (S507), and it is checked whether the permission file 301 is valid (S508). That is, the activation permission password 411 recorded in the permission file 301 is checked against the other activation permission password stored in advance in the setup program 211 to determine whether the permission file 301 has been issued correctly. As a result of the determination, if it is confirmed that the permission file 301 has been issued correctly (that is, both activation permission passwords match), the process proceeds to the next process. On the other hand, if it cannot be confirmed that the password is valid, the execution of the setup program 211 is terminated (S509).

If the permission file 301 is valid, automatic logon setting is performed so that the logon to the setup account 203 is automatically performed (S510). After the setting is completed, in order to reflect the setting contents, processing for saving the changed contents is performed in the storage device 105 (S511), and the terminal 1 is restarted (S512). After the terminal 1 is restarted, the user automatically logs on to the setup account 203 (S513), and the setup program 211 is automatically started (S514).
After the setup program 211 is activated, a software installation work start check process (S515) and a drive check start process (S516) for checking the connection state of the external storage device 12 are performed. These processes will be described later with reference to FIGS.

  After the installation work start check process (S516), the process proceeds to a user operation. That is, the setup program 211 displays a list of installable install program names (421 to 42 m) recorded in the install program name section 42 read from the permission file 301 on the display device 104. The user operates the mouse 102 to select a necessary predetermined program from a list of a plurality of installable program names (421 to 42m) displayed on the display unit 104 (S517). In response to this selection operation, the installation program selected from the list is installed (S518). In other words, one of the installation programs 3021 to 302n stored in the external storage device 12 is stored in the storage device 105. When this installation operation is completed, the software installation operation is completed.

  After the installation work is completed, the process shifts to the setup program process to perform the installation work end process. That is, the drive check is terminated (S519), and then the automatic logon setting for the setup account is canceled (S520). Here, the cancellation of the automatic logon setting means returning from the setting for automatically logging on to the setup account 203 to the setting for authenticating and logging on to the restricted user account 202. After canceling this setting, the changed content is stored in the storage device 105 (S521) and restarted (522). Thereafter, after the terminal 1 is activated and the restricted user account 202 is authenticated and logged on (523), software such as programs and files installed in the storage device 105 can be used (S524).

Next, the software installation work start check process (S515) will be described with reference to FIG.
In the software installation work start check process, first, the stored contents of the connected external storage device 12 are checked to confirm whether the permission file 301 exists (S601). If the permission file 301 does not exist as a result of the confirmation, the installation operation is interrupted and restarted (S609). On the other hand, if the permission file 301 exists, it is determined whether or not the permission file 301 is a correct permission file. In the determination, first, the permission file 301 is decrypted (S602), and it is checked whether the activation permission password 411 registered in the permission file 301 is valid (S603). That is, the activation permission password 411 recorded in the permission file 301 and the other activation permission password stored in advance in the setup program 211 are collated to determine whether they match.

As a result of the determination, if the two do not match, it is determined that the permission file 301 is not valid, the software installation operation is interrupted, and the terminal 1 is restarted (S609).
On the other hand, if the result of the determination is that they match, it is determined that the permission file 301 is correct, the installation program or file stored in the external storage device 12 is read (S604), and the read file name is permitted. It is checked whether it is recorded in the file 301 (S605). As a result, if it is not recorded in the permission file 301, the installation operation is interrupted and restarted (S609).

  Next, the Hash value of the installation program or file is calculated (S606), and it is determined whether or not it matches with the Hash values 4311 to 4331 recorded in the installation program section 43 of the permission file 301 (S607). As a result, if they do not match, the installation operation is interrupted and restarted (S609). If the Hash values match as a result of the determination, the installation program is checked for all the installation programs stored in the external storage device (S608), and all the installation programs and files are recorded in the permission file 301. Then, the installation work start check process (S515) is terminated.

Next, the drive check flowchart shown in FIG. 7 will be described.
The drive check is a process for monitoring the connection state of the external storage device 12, and is always executed during software installation work. When the drive check is started, it is checked whether or not the connected external storage device 12 has been pulled out (S701). This is performed by reading the permission file 301 or predetermined information stored in the external storage device 12 at a fixed timing. If the permission file 301 cannot be read, it is determined that the external storage device 12 has been extracted.

Thereafter, it is checked whether a new external storage device 12 is connected (S702). This is performed depending on whether predetermined information can be read. When a new external storage device 12 different from the connected external storage device 12 is connected, the installation operation is immediately interrupted and restarted (S703).
In this way, by checking the connection state of the external storage device 12, the external storage device 12 is newly connected to the terminal 1 after the start of software installation work, and an unauthorized installation program (not registered in the original permission file 301) ( It is possible to prevent the terminal 1 from executing a completely different installation program, for example, in which the file name is disguised as the installation program name registered in the permission file.

In addition, this invention is not limited to the said Example, A various deformation | transformation can be implemented.
For example, the connection status check of the external storage device 12 is not limited to the above example. For example, a mechanical or electrical connection signal from an adapter into which the external storage device 12 is inserted may be used.

The figure which shows the structure of the thin client system in one Example. The figure which shows the function structure of the thin client terminal in one Example. The figure which shows the memory content of the external storage device 12 of the thin client terminal in one Example. The figure which shows the structure of the permission file in one Example. The flowchart which shows the installation installation process of the software in one Example. The flowchart which shows the software installation work start check process (S515) in one Example. The flowchart which shows the drive check start process (S516) in one Example. The figure which shows the structural example of the management table of the account in one Example.

Explanation of symbols

1: Thin client terminal 92: Server 94: Network
101: CPU 102: Mouse 103: Keyboard 104: Memory 105: Storage device 106: Display 107: LAN 108: Communication card 12: External storage device 20: Account 201: Administrator account 202: Restricted user account 203: Setup account 21: Program 211: Setup account
301: permission file 3021 to 302n: installation program
41: Activation permission password section 411: Activation permission password
42: Installation program name section 421-42m: Installation program name 43: Installation program section
431: Installation execution program name 4311: Hash value of installation execution program 432, 433: Installation file name 4321, 4331: Hash value of installation file.

Claims (10)

A software installation method in a thin client terminal used by connecting to an application program that executes data processing and a server that holds data to be processed,
In addition to the restricted user account for allowing the user to use the sink line ant terminal, set up a setup account that permits installation of a predetermined program in the storage unit in the thin client terminal,
An external storage device that stores a predetermined program that can be installed and a permission file that stores management information used for installation of the predetermined program, connected to the thin client terminal;
When starting up the thin client terminal, based on the authentication of the restricted user account, start up a setup program stored in the storage unit for installing the predetermined program,
Under the execution of the setup program, the predetermined program in the external storage device is installed in the storage unit using the management information in the permission file in response to logon of the setup account. How to install software. An input / output unit that is operated by a user to input / output data, a communication unit connected to the server, an OS or a program that operates each unit in the sink lineant terminal, and a storage unit that stores files, The program stored in the storage unit is executed, and data processing is performed on a sink lineant terminal having a CPU that controls each unit in the thin client terminal and performs data input / output control of the input / output unit. A software installation method in a thin client terminal of a thin client system used by connecting to an application program to be processed and a server holding processing target data,
Setting a restricted user account for allowing a user to use the sink lineant terminal, and a setup account given to a user who is permitted to install the predetermined program;
Connecting an authorization file for storing management information used for installing the predetermined program and an external storage device for storing the predetermined program installable in the storage unit to the thin client terminal;
Activating a setup program for installing a predetermined program stored in the storage unit based on authentication of the restricted user account;
Installing the predetermined program stored in the external storage device in the storage unit in response to logging on to the setup account under execution of the setup program. .   3. The setup account is restricted to prevent network connection functions and execution of other installed software, and is limited to execute only the predetermined program. How to install   The permission file records, as the management information, a check activation permission password used when the setup program is activated, a program name of the predetermined program permitted to be installed, and unique information of the predetermined program file. 4. The installation method according to claim 1, wherein the permission file is encrypted.   The setup program reads and decrypts the permission file from the external storage device connected to the thin client terminal when starting the program, confirms the activation permission password recorded in the permission file, and starts installation work 5. The installation method according to claim 4, wherein if the activation permission password cannot be confirmed, the installation operation is terminated.   The installation method according to any one of claims 1 to 5, wherein the setup program installs the predetermined program by automatic logon to the setup account after starting the installation operation.   The setup program calculates the unique information of the file of the predetermined program, determines whether it matches the unique information of the file registered in the permission file, and terminates the installation work if the result does not match The installation method according to claim 1, wherein:   The setup program monitors a file that is not registered in the permission file during installation and monitors the file. If a file that is not registered in the permission file is found, the setup program stops and restarts the installation. 8. The installation method according to claim 1, wherein the installation method is started.   The setup program checks the connection of the external storage device during the installation operation, and when the connection of the external storage device is newly detected or the connection of the external storage device connected at the start of the installation operation is disconnected. The installation method according to any one of claims 1 to 8, wherein the installation operation is interrupted and restarted when it is detected. A thin client terminal in a thin client system used by connecting to an application program for executing data processing and a server holding data to be processed,
An input / output unit that is operated by a user to input / output data, a communication unit connected to the server, an OS or a program that operates each unit in the sink lineant terminal, and a storage unit that stores files,
A CPU that executes a program stored in the storage unit to control each unit in the thin client terminal and input / output control data of the input / output unit, a predetermined program that can be installed in the storage unit, and the An external storage device that stores a permission file that holds management information for installation of a predetermined program, and is detachable from the thin client terminal; and
A restricted user account for allowing the user to use the sink line ant terminal and a setup account for permitting installation of the predetermined program are set,
In the storage unit, a setup program for installing the predetermined program in the storage unit is stored in advance,
The setup program is activated based on authentication of the restricted user account, and the predetermined program is installed in the storage unit in response to logging on to the setup account under execution of the setup program. A thin client terminal.

Images