JPH0248764A - Terminal controlling system - Google Patents

Abstract

PURPOSE:To give security effect to illegal interruption to a communication channel by inhibiting data transmission/reception except between terminal equipments approved by an administrative central processing unit. CONSTITUTION:The administrative central processing unit 101 checks the version check code of the started terminal equipment 100, and if it is correct, it gives a pass word and an approval code 202 to the terminal equipment 100. When the terminal equipment 100 receives the approval code 202, it adds this approval code 202 to the pass word 203 at the time of data transmission to other terminal equipment 102 in the communication channel 106. The receiving side terminal equipment 102 does not receive reception data from that terminal equipment unless the pass word and the approval code coincide. Thus, the data transmission/reception between a registered terminal equipment and an unregistered terminal equipment in the communication channel can be inhibited, and the security effect can be given.

Description

[Detailed Description of the Invention] [Industrial Application Field] The present invention relates to installing a management central processing unit on a communication path, and improving the security effect by managing terminal devices connected to the communication path. This is related to an effective terminal management method.

[Conventional technology]

The conventional terminal management method is an authentication method between a terminal device and a central processing unit that performs terminal management processing, as described in Japanese Patent Application Laid-Open No. 62-198947. It receives the password and sends and receives data.

[Problem to be solved by the invention]

In the above conventional technology, if a terminal device connected to a communication path knows the password of another central processing unit, it can access the other central processing unit without receiving approval from the managing central processing unit. .

An object of the present invention is to prohibit data transmission and reception between terminal devices registered in a management central processing unit and terminal devices that are not registered.

[Means to solve the problem]

The above purpose is to provide a management central processing unit in the communication path, give an authentication code to the terminal device that has approved activation, and allow the terminal device to send and receive data only with the other terminal device to which the authentication code has been added. achieved.

[Effect]

The management central processing unit checks the version check code of the activated terminal device, and if it is correct, gives the terminal device a password and an authentication code.

When the terminal device receives the authentication code, it adds this authentication code to the password when transmitting data to other terminal devices within the communication path. If the password and authentication code do not match, the receiving terminal device will not receive data from the terminal device. This makes it possible to prohibit data transmission and reception between registered terminal devices and unregistered terminal devices within the communication path.

〔Example〕

An embodiment of the present invention will be described below with reference to FIG. The communication path 106 includes a terminal device A100. Terminal device B102.
Terminal device n107. A management central processing unit 101 is connected and configured to allow mutual communication between terminal devices.

When the terminal device A 100 starts up 103, it transmits a version check code to the management central processing unit 101, and the management central processing unit 101 checks the version code, and if it is correct, sends a confirmation 104 response. The confirmation response is data obtained by adding an authentication code to the password, as shown by confirmation 202 in the security needs list 200 in FIG. When the terminal device A 100 receives the confirmation 104, an authentication code is subsequently assigned to the terminal device. Data transmission from the terminal device A 100 to the terminal device B 102 is shown in Figure 2 Data Transmission/Reception 2
The authentication code is added to the password shown in 03 and sent.

The terminal device B 102 checks the password and authentication code of the received data, and if the received data is from a terminal device approved by the management central processing unit 101, it accepts the received data. Received data is managed by a central processing unit 101
indicates that the received data has not been approved.

FIG. 3 shows a flow from when a terminal device within one communication path starts up to transmitting and receiving data with another terminal device. FIG. 3 will be explained below.

When the terminal device in the communication path starts up, it makes a connection activation report 300 to the management central processing unit and transmits a version check code 303 to the management central processing unit. The management central processing unit checks the version check code, and if it is correct, returns a frame 304 with an authentication code added to the password as a confirmation response to the terminal device. The terminal device is in a waiting state 301 until it receives an acknowledgment response, and after receiving the acknowledgment response, it starts transmitting and receiving data with the terminal device within the communication path 3.
02. Data transmission and reception between this terminal device and other terminal devices is performed using a frame 305 in which a password and an authentication code are added to the transmitted and received data.

This allows communication only between approved terminal devices.

According to this embodiment, data cannot be sent or received unless it is between terminal devices approved by the management central processing unit, and it is possible to prevent illegal interruptions to communication channels. [Effects of the Invention] According to the present invention, the management Since data transmission and reception is prohibited between terminal devices other than those approved by the central processing unit, there is a security effect against illegal interruptions to the communication path.

[Brief explanation of the drawing]

Figure 1 is a network configuration diagram of an embodiment of the present invention, Figure 2 is a network configuration diagram of an embodiment of the present invention.
The figure is a security code list explanatory diagram, and FIG. 3 is a terminal device startup flow diagram. 100... Terminal device A, 101... Management central processing unit, 102... Terminal device B, 103... Startup message, 104... Confirmation response, 105... Transmission/reception data, 106... Communication path, 107... terminal device n, 200... security code - view.

Claims (1)

[Claims] 1. In a terminal management method in a system in which a terminal device and a management central processing unit are connected to a communication channel, communication is performed between the terminal device and the management central processing unit before the start of business processing, and the terminal device and the management central processing unit are connected to the communication channel. All registered terminal devices are checked to see if they have been registered in the management central processing unit in advance, and if they are registered, an authentication code is given, and registered terminal devices and unregistered terminal devices are identified. If so, after identifying it as an unregistered terminal device, the sending terminal device adds the authentication code when transmitting/receiving data between the terminal devices, and the receiving terminal device checks the authentication code and identifies the registered terminal device. A terminal management method characterized by prohibiting data transmission and reception between a terminal device and an unregistered terminal device.