JP2010287140A - Terminal device and authentication method thereof - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To shorten working hours, to improve working efficiency by providing an easy work procedure, and to prevent an artificial mistake by a clerk or the like during working in file update of a terminal device, or the like. <P>SOLUTION: An authentication file is generated and stored beforehand on the basis of the entire files in an external storage medium, the validity of authentication and the entire files is confirmed on the basis of the authentication file at timing when inserted into a terminal device, and a file operation is automatically performed, such as to copy an update file group into the terminal device, to eliminate a file in the terminal device, and to copy the file in the terminal device into the external storage medium according to a file operation definition file recording the file operation. <P>COPYRIGHT: (C)2011,JPO&INPIT

Description

  The present invention relates to a terminal device that performs various tasks by executing a program.

  In a terminal device that performs various tasks, a program in the terminal device may be updated due to a specification change by a customer who uses the business or a defective program in the terminal device. In addition, history information and logging information (hereinafter referred to as a log) may be acquired to clarify the cause when a failure occurs.

  Generally, when updating a program in a terminal device, it may be implemented by distributing the program from another device or the like connected via a network, but it is installed in a terminal device that is not connected to the network. It is necessary for workers to go directly to the site and update the program. The same applies when acquiring logs. In the program update work by the worker, after the terminal device is in a state in which the file in the terminal device can be operated, the file is updated using a tool that allows the worker to manually operate the file. .

  There is also a means for automating file update using a batch file. A batch file is also called a shell file in UNIX (registered trademark) and is also called a BAT file in Windows (registered trademark), and is a kind of program in which instructions for file operations and the like are described. Usually, variables and control of processing can be described in a batch file, and by describing processing for copying a file, the file can be automatically copied without burden on the operator.

  In Patent Document 1 (Japanese Patent Application Laid-Open No. 2004-303209), the validity of a program update operation using the electronic signature of each file related to each file to be updated in order to confirm the validity of the file to be updated. A method of confirming is proposed.

JP 2004-303209 A

  According to the prior art, after switching the state of the terminal device to a state in which the file in the terminal device can be operated, a tool capable of manipulating the file must be operated manually by an attendant or the like, The work time is required, and time for learning the work procedure is also required. Furthermore, there is a risk of inducing human error due to manual operation.

  If a batch file is used, file operations can be automated, but if the file name is the same even if the file in the external storage medium is replaced with an invalid file, the batch file The file in the terminal device may be updated or the file in the terminal device may be deleted in accordance with the contents described in (1).

  On the other hand, in Patent Document 1, when a specific program in an update storage medium and an electronic signature related to the program are replaced with an old version program and an electronic signature, the specific program and the electronic signature related to the program are deleted. In this case, since the other program is updated, the program in the terminal device may be configured in an unintended form.

  Further, in Patent Document 1, since only a program update (that is, file overwrite) means is provided, if there is an unnecessary program due to program update, an unnecessary file is directly stored in the terminal device. Since there are remaining problems, it is necessary to have a separate file deletion function that is unnecessary for the program to be updated.

  The object of the present invention is to shorten the work time in updating a file of a terminal device, etc., improve the work efficiency by making it an easy work procedure, and avoid human error caused by personnel at the time of work. Is to prevent.

  In order to solve the above-described problems, the present invention proposes a system having a function of automatically updating a file with security simply by inserting an external storage medium into a terminal device. This system includes a terminal device and an external storage medium.

  The terminal device has a detection function for detecting insertion and removal of an external storage medium, an authentication function for authentication of an external storage medium and the validity of all files, and a file operation definition file recorded with file operations. And a file operation function for performing file operations. The terminal device detects that the external storage medium has been inserted into the terminal device by the detection function, and after the terminal device becomes idle, makes the file in the terminal device operable.

  The external storage medium includes a file operation definition file, an update file group, and an authentication file. The update file group is stored in the external storage medium only when the file in the terminal device is updated. The authentication file is generated from the file operation definition file, the update file group, or, if there is no update file group, from only the file operation definition file through the authentication file generation algorithm.

  A file operation definition file is an operation definition for copying an update file group in an external storage medium to the terminal device, an operation definition for deleting a file in the terminal device, or a file in the terminal device is copied to an external storage medium. Record the operation definition to be performed.

  Next, the authentication function performs authentication based on the authentication file in the external storage medium, and confirms the validity of the file operation definition file in the external storage medium and the update file group.

  Next, when the authentication is successful, the file operation is performed according to the contents recorded in the file operation definition file in the external storage medium by the file operation function. If authentication fails, the file operation is not performed and an error is displayed on the display unit of the terminal device.

  Next, when it is detected by the detection function that the external storage medium has been removed from the terminal device, the terminal device is set to the idle state.

  Just by inserting the external storage medium into the terminal device, the terminal device and the external storage medium are authenticated, the validity of all the files in the external storage medium is confirmed, and the file operation definition file that records the file operations is used. The file in the terminal device can be updated. By making the operation only by inserting the external storage medium into the terminal device, the work time is reduced, the work procedure is easy, work efficiency is improved, and human error can be prevented. Since the authentication file in the external storage medium is generated from the file operation definition file and the update file group, if some files are altered or deleted, the other files are correct. However, the file in the terminal device is not updated.

  In addition to updating the file in the terminal device, the file in the terminal device can be deleted or the file in the terminal device can be acquired.

It is a schematic block diagram of an external storage medium. It is a figure which shows the example of a file operation definition file content. It is a figure which shows schematic structure of the terminal device in this invention. It is a flowchart explaining operation | movement of the terminal device in this invention.

  The contents of the present invention will be described below.

First, a schematic configuration of the external storage medium according to the present embodiment will be described with reference to FIG. FIG. 1 is a diagram showing an external storage medium according to the present embodiment. In FIG. 1, various files are stored in the external storage medium 6. In other words, the external storage medium creator and the terminal device commonly hold the master key 1 for guaranteeing the validity of each other, the file operation definition file 2 in which file operations are recorded, and the update to be copied to the terminal device An authentication file (authentication key) 4 and an authentication file (authentication data) 5 are generated from the file group 3 via an authentication file generation algorithm (not shown) and stored in the external storage medium 6. In addition, the file operation definition file 2 and the update file group 3 are also stored in the external storage medium 6.
Next, the file operation definition file in the external storage medium according to the present embodiment will be described with reference to FIGS. 1 and 2 described above. FIG. 2 shows an example of a file operation definition file in which file operation details are recorded.

  As shown in FIG. 2, the file operation definition file 2 basically includes an operation command statement 21, a file storage source 22, and a file storage destination 23. When copying the update file group 3 in the external storage medium 6 into the terminal device, “COPY” is stored in the operation command statement 21 and the update file group 3 in the external storage medium 6 is stored in the file storage source 22. The file name including the existing location and the file name including the location stored in the terminal device are recorded in the file storage location 23. Furthermore, when copying a file in the terminal device to the external storage medium 6, “COPY” is displayed in the operation command statement 21, and a file name including the location where the file in the terminal device is stored in the file storage source 22 The file name including the location to be stored in the external storage medium 6 is recorded in the file storage location 23. Alternatively, when deleting a file in the terminal device, “DEL” is recorded in the operation command statement 21 and a file name including the location where the file to be deleted in the terminal device is stored in the file storage source 22. To do.

  Next, a schematic configuration of the terminal device according to the present embodiment will be described with reference to FIG. 1 and FIG. 3 described above. FIG. 3 is a diagram illustrating a schematic configuration of the terminal device according to the present embodiment.

  As shown in FIG. 3, the terminal device 30 according to the present embodiment includes a display unit 31 that displays the operation status of the terminal device 30, an insertion unit 32 for inserting the external storage medium 6, and an application unit 33. It is structured. Further, the application unit 33 includes a master key 1 used for authenticating the external storage medium 6, a detection function 34 for detecting that the external storage medium 6 is inserted or removed, authentication of the external storage medium 6, and all It is basically composed of an authentication function 35 for confirming the validity of a file and a file operation function 36 for performing a file operation in accordance with the file operation definition file 2 in which the file operation is recorded.

  Next, the application unit of the terminal device having the above-described configuration will be described with reference to FIG. 1, FIG. 3, and FIG. FIG. 4 is a flowchart of the application unit executed by the terminal device.

  In step (hereinafter referred to as “S”) 401 in the application unit 33, when the worker inserts the external storage medium 6 into the insertion unit 32 of the terminal device 30, the external storage medium 6 is inserted by the detection function 34 of the application unit 33. It is detected that the terminal device 30 is in an idle state, and then the file in the terminal device 30 can be operated.

  Next, in step S402, the authentication function 35 of the application unit 33 reads the authentication file (authentication key) 4 from the external storage medium 6, and decrypts the authentication file (authentication key) 4 using the master key 1 of the terminal device 30. And generate an authentication key.

  Next, in S403, the authentication function 35 of the application unit 33 decrypts the authentication file (authentication data) 5 using the authentication key generated in S402 to generate authentication data.

  In step S404, the authentication function 35 of the application unit 33 reads the file operation definition file 2 and the update file group 3 from the external storage medium 6, and calculates a hash value from the read file.

  Next, in S405, the authentication function 35 of the application unit 33 confirms that the authentication data generated in S403 matches the hash value calculated in S404. If they match, the process proceeds to S406. If they do not match, the fact that the file is invalid is displayed on the display unit 31 of the terminal device 30 in S407, and the process proceeds to S408.

  In step S406, the file operation definition file 2 in the external storage medium 6 is read by the file operation function 36 of the application unit 33, and the file is operated according to the recorded contents. When the operation command statement 21 is “COPY”, the file recorded in the file storage source 22 is read, and the file is copied with the storage location and file name recorded in the file storage destination 23. When the operation command statement 21 is “DEL”, the file recorded in the file storage source 22 is deleted. When the file operation is completed, the display unit 31 of the terminal device 30 displays that the external storage medium 6 is to be removed.

  Next, when the external storage medium 6 is removed by the worker in S408, the detection function 34 of the application unit 33 detects that the external storage medium 6 has been removed, and the terminal device 30 is set in an idle state. When the file in the terminal device 30 is updated, the operation is performed with the updated file applied to the terminal device 30.

  In addition, this invention is not limited to the said Example, Of course, various improvement and deformation | transformation are possible within the range which does not deviate from the summary of this invention. For example, in this embodiment, the file operation is automatically started when the external storage medium 6 is inserted, but when the terminal device 30 has an external input device such as a personal identification number input device, the external storage medium 6 is inserted. Later, it may be configured to ask for the encryption number input. That is, after S401 in FIG. 4, a password input is requested, and it is determined that the worker is a valid worker, and then S402 is performed.

  Further, when the terminal device 30 includes a card reading device or the like, the terminal device 30 may be configured to request reading of the worker card after inserting the external storage medium 6. That is, after S401 in FIG. 4, reading of the worker card is requested, and it is determined that the worker is a valid worker, and then S402 is performed.

  In this embodiment, the external storage medium 6 is a single medium. However, the external storage medium 6 may be divided into a plurality of external storage media 6 and stored. In other words, in one example, the authentication file (authentication key) 4 and the authentication file (authentication data) 5 shown in FIG. 1 are recorded in separate external storage media 6, and the authentication file (authentication key) 4 is recorded in S402 of FIG. Is read out, the next external storage medium 6 is inserted, and S403 may be performed.

  Further, the file operation definition file 2 and the update file group 3 may be stored in the external storage medium 6 in an encrypted state. That is, after S401 in FIG. 4, the file operation definition file 2 and the update file group 3 are read out and decrypted, and then S402 is performed.

  Further, when copying a file in the terminal device 30 to the external storage medium 6, the file in the terminal device 30 may be copied to the external storage medium 6 in an encrypted state. That is, the file in the terminal device 30 may be encrypted and copied to the external storage medium 6 in S406 of FIG.

 DESCRIPTION OF SYMBOLS 1 ... Master key, 2 ... File operation definition file, 3 ... Update file group, 4 ... Authentication file (authentication key), 5 ... Authentication file (authentication data), 6 ... External storage medium, 21 ... Operation command sentence, 22 ... File storage source, 23 ... File storage destination, 30 ... Terminal device, 31 ... Display unit, 32 ... Insertion unit, 33 ... Application unit, 34 ... Detection function, 35 ... Authentication function, 36 ... File operation function

Claims (5)

In a terminal device comprising an insertion unit for inserting an external storage medium, a display unit for displaying guidance for operation, and an application unit for storing various files and controlling the operation of the device,
The application part is
A detection function for detecting insertion and removal of an external storage medium;
An authentication function that confirms the authenticity of all files and the authentication in the external storage medium;
A file operation function for performing file operations in accordance with instructions in the file operation definition file that records file operations,
The terminal device characterized by having. The terminal device according to claim 1,
The storage medium is
A file operation definition file that records file operations;
One or more update file groups for updating files in the terminal device;
An authentication file for confirming the validity of the file operation definition file and the update file group; and
A terminal device comprising: The terminal device according to claim 2,
Authenticate based on the authentication file,
The validity of the file operation definition file and the update file group is confirmed, and if the authentication is successful, the file operation is performed based on the previous file operation definition file, and if the authentication is not successful, the process is stopped. A terminal device characterized by that.   A storage medium used in the terminal device according to claim 2.   The software memorize | stored in the application part of the terminal device of Claim 3.

Images