JPH03175558A - Device and method for information security - Google Patents

Abstract

PURPOSE:To improve the safety of a communication host by connecting an information security device as the adapter between the communication host and a MODEM. CONSTITUTION:An information security device (cell back security adapter) 2 consisting of a host-side transmission/reception part 22, a MODEM-side transmission/reception part 21, a password number register memory 23, a call back telephone number register memory 24, and a control part 25 is connected as the adapter between a host equipment 1 and a MODEM 3 in the telephone network where the host equipment is connected to a terminal console through the MODEM. In this case, the call back system is adopted where the terminal console cannot be connected to the communication host unless having a tele phone number registered in the call back security adapter. Thus, the communica tion host is kept safe.

Description

[Detailed Description of the Invention] [Field of Industrial Application] The present invention relates to an information security device and method that allows only terminal consoles with specific qualifications to access a host device containing information to be protected. be.

Here, the host device includes, for example, an exchange that serves as a computer that stores all information about telephone subscribers, and other large or small computers that store useful information. Information security refers to how such useful information is stored. It is used here to mean protecting the information from being stolen or compromised by someone who is not qualified to handle the information.

[Prior Art] For example, a communication host may collect all information (
(including fee information, etc.),
The people who are permitted to access the exchange using the terminal console and manually input information are limited to the staff of the telecommunications and telephone company and the customer (subscriber).
Other members of the public are not allowed.

If a person authorized to access the exchange, such as a staff member, attempts to access the exchange, he or she should make a call from the terminal console, connect to the communications host, enter the communications host's PIN number, and register with the communications host. If the PIN number used is lost, the device will be connected to the communication host.

[Problem to be solved by the invention]

Therefore, as long as the password can be entered from any terminal console, connection to the communication host is possible, and there is a relatively high possibility that the password will be inadvertently known to another person, which is insufficient for information security.

An object of the present invention is to provide an information security device and method that are sufficiently safer than conventional ones.

[Means for Solving the Problems] In order to achieve the above object, the present invention provides an information security device comprising a host-side transmitting/receiving section, a modem-side transmitting/receiving section, a PIN number registration memory, a callback telephone number registration memory, and a control section. , as an adapter, connected between a host device and a modem in a telephone network for connecting a host device to a terminal console via a modem.

[Operation] The control unit responds to the call from the terminal console by
After making a response via the side transceiver, when receiving the callback ID number sent from the terminal console, the modem side transceiver is instructed to disconnect from the terminal console, and the callback ID number is sent. Referring to the registration memory, retrieves the telephone number corresponding to the ID number, instructs the modem side transmitter/receiver to make a call to the telephone number and connect to the other party's terminal console, and once the connection is established, next:
By extracting the PIN from the PIN registration memory and transmitting it to the host device via the host-side transceiver,
It enters a communication state with the host device, and then instructs the host-side transceiver and modem-side transceiver to connect the terminal console and the host device.

In this way, it is impossible to connect to the post apparatus from a terminal having a telephone number other than that registered in the callback telephone number registration memory.

f Embodiment] FIG. 1 is a block diagram showing the connection relationship of an information security device as an embodiment of the present invention.

In the figure, l is a communication host, 2 is an information security device as an embodiment of the present invention, 3 is a modem, 4 is a general telephone network, and 5 is a terminal console.

Normally, when the information security device 2 according to the present invention is not used, the communication host 1 is directly connected to the modem 3, whereas when the information security device 2 is used, there is a connection between the communication host 1 and the modem 3. Connect as an adapter.

The operating principle of the information security device 2 is a callback method (the terminal console that has been called is
In the following explanation, it may also be referred to as a callback security adapter or simply an adapter because it adopts a method of disconnecting and calling again) and is used like an adapter.

FIG. 2 is a block diagram showing an outline of the configuration of an information security device (callback security adapter) 2 as an embodiment of the present invention.

In the figure, 21 is a modem side transmitting/receiving section, 22 is a communication host side transmitting/receiving section, 23 is a password registration memory, 24 is a callback telephone number registration memory, and 25 is a control section.

In FIG. 1, each terminal console 5 accommodated in a general telephone network 4 is assigned an ID (identification) number (referred to as a callback ID). If the terminal console 5 is a terminal console that is permitted to access the communication host l, the callback ID and the telephone number of the terminal console 5 are associated with each other, and the second
This is registered in advance in the callback phone number registration memory 24 shown in the figure, and in the case of a terminal console that is not permitted to access the communication host 1, no such registration is made.

FIG. 3 is a sequence diagram showing an operation sequence when the information security device (callback security adapter) 2 as an embodiment of the present invention is connected.

The operation will be explained below with reference to FIGS. 1 to 3.

■Finally, a call is made from the terminal console 5 to the telephone network 4, and the call is received by the modem 3 of the communication host 1 through the telephone network connection (note that the numbers correspond to the numbers in Figure 3, and other The same applies to the following numbers).

Upon receiving the incoming call, the modem 3 sends an incoming call instruction signal to the callback security adapter 2.

(2) When the callback security adapter 2 receives an incoming call instruction from the modem 3 via the modem side transmitter/receiver 21, it sends an incoming call response to the modem 3.

(2) The incoming call response received by the modem 3 from the call bank security adapter 2 is transmitted to the terminal console 5 side. After receiving the incoming call response, the terminal console 5
Sends <Callback ID).

■Callback ID sent from terminal console 5
) is transmitted to the callback security adapter 2 via the modem 3.

■After the callback security adapter 2 receives the <callback ID> via the modem side transmitter/receiver 21,
The modem 3 is instructed via the modem-side transmitting/receiving section 21 to disconnect from the telephone network.

■After disconnecting from the telephone network, the callback security adapter 2 retrieves the telephone number corresponding to the callback ID from the call bank telephone number registration memory 24, and instructs the modem 3 from the modem side transceiver section 21 (telephone number network transmission).

■After the other party's device (terminal console 5) responds, the call packet security adapter 2 receives an incoming call response signal and sends an incoming call response signal to the communication host 1 from the communication host side transmitter/receiver 22. Send.

■Callback security adapter 2 is connected to communication host l.
When the communication host-side incoming call response signal from -1 is received via the communication host-side transmitting/receiving section 22, the <PIN code> of the communication host 1 registered in the security code registration memory 23 of the adapter 2 is sent. Take it out and send it out.

■If the communication host 1 receives the correct PIN number from the call bank security adapter 2,
PIN number response signal> is sent to the callback security adapter 2.

[Phase] After receiving the notification of completion from the communication host 1, the callback security adapter 2 sends a modem-side transceiver 21 and a communication host-side transceiver 22 to connect the modem (terminal console) 3 side and the communication host l. and connect.

The above should give you an overview of the operation.

Next, referring again to FIG. 2, the functions of each element constituting the adapter 2 will be explained.

Modem Biyumi Uai 21 Receive the signal sent from the modem side. Incoming call instruction signal>
, <Call Punk ID>, or Incoming Call Response Signal> to the control unit 24. Further, in accordance with instructions from the control unit 25, a (response signal for incoming call), disconnection from telephone network, and transmission from telephone network are generated and transferred to the modem.

Kainami Saki 25 Performs the following operations according to the signal from the modem side transmitting/receiving section 21.

(a) When the incoming call instruction signal is received, the modem transmitter/receiver 21 is instructed to generate an incoming call response signal.

(b) If a callback ID> is received, check the corresponding telephone number from the callback telephone number registration memory 24 and send a message to the modem side transmitter/receiver 21 to disconnect the telephone network).
1, and then instruct the corresponding telephone number to make a telephone network call.

(c) When the terminal console incoming call completion signal) is received, it instructs the communication host side transmitter/receiver 22 to generate the incoming call instruction signal>.

The following operations are performed in accordance with signals from the communication host-side transceiver section 22.

(d) When the communication host side incoming call response signal> is received, the <password number> registered in the password registration memory 23 is retrieved and the communication host side transmitter/receiver 22 is instructed to generate it.

(e) If the <PIN response completion signal> is received,
The modem side transmitting/receiving section 21 and the communication host side transmitting/receiving section 22 are instructed to connect.

22 Receives the signal sent from the communication host l side, checks whether it is a <communication host side incoming call response signal> or a PIN number response completion signal>, and sends it to the control unit 25. contact. It also generates a personal identification number or an incoming call instruction signal according to instructions from the control unit 25 and transfers it to the communication host 1 side.

ll柾' iMemory 23 The password for communication host 1 is registered. In response to a request from the control section 25, the personal identification number of the communication host 1 is communicated to the control section 25.

Call bank 0 Memo +24 The phone number of the connected terminal console is registered.

In response to a request from the control unit 25 using the callback ID, the corresponding telephone number is communicated to the control unit 25.

[Effects of the Invention] As described above, according to the present invention, when connecting from a terminal console to a communication host, a callback that can only be connected from a console with a phone number registered in the callback security adapter is made. Because this method is adopted, there is no connection to the communication host from the outside, and the safety of the communication host is protected. Further, as an application field, it can be used not only as a communication host but also as an adapter for other devices that use security based on a personal identification number.

[Brief explanation of drawings]

FIG. 1 is a block diagram showing the connection relationship of an information security device as an embodiment of the present invention, FIG. 2 is a block diagram showing an outline of the configuration of the information security device as an embodiment of the present invention, and FIG. FIG. 2 is a sequence diagram showing an operation sequence when an information security device is connected. Explanation of symbols

Claims (1)

[Scope of Claims] 1) An information security device that allows only terminal consoles with specific qualifications to access a host device that has information to be protected, comprising a host-side transceiver unit connected to the host device side; It consists of a modem-side transmitting/receiving section connected to the terminal console side via the modem, a password registration memory, a callback phone number registration memory, and a control section, and the control section is configured to respond to calls from the terminal console. After making a response via the modem side transceiver, when receiving the callback ID number sent from the terminal console, the modem side transceiver is instructed to disconnect from the terminal console, and the callback ID number is sent from the terminal console. Refers to the telephone number registration memory, retrieves the telephone number corresponding to the ID number, instructs the modem transmitting/receiving section to make a call to the telephone number and connect to the other party's terminal console, and when the connection is established, the A communication state is established with the host device by extracting a password from the password registration memory and transmitting it to the host device via the host side transmitter/receiver, and then the host side transmitter/receiver and the host device connect the terminal console and the host device. An information security device characterized in that an instruction is given to a modem side transmitting/receiving section. 2) An information security method that allows access to a host device containing information to be protected only to terminal consoles with specific qualifications, in a telephone network through which the host device is connected to the terminal console via a modem, A first step of connecting the information security device according to claim 1 between the host device and the modem, and a step in which the information security device responds to a call from a terminal console via a modem-side transceiver section. After that, when the callback ID number transmitted from the terminal console is received, the second step is to instruct the modem side transmitter/receiver to disconnect from the terminal console, and to store the callback phone number registration memory. a third step of instructing the modem side transceiver to refer to and extract the telephone number corresponding to the ID number and make a call to the telephone number to connect to the other party's terminal console; A fourth stage in which the password is retrieved from the password registration memory and transmitted to the host device via the host-side transmitting/receiving unit to enter a communication state with the host device, and thereafter, the terminal console and the host device are connected. An information security method comprising: a fifth step of instructing a host-side transmitting/receiving unit and a modem-side transmitting/receiving unit.