JP6519376B2 - Connection management program and information processing apparatus - Google Patents

Description

  The present invention relates to a connection management program and an information processing apparatus.

  As a prior art, there has been proposed an information processing apparatus for setting an access right based on position information of a user (for example, see Patent Document 1).

  The information processing apparatus disclosed in Patent Document 1 includes an authentication unit that executes user authentication processing based on user authentication information received from a portable terminal device via a wireless LAN, and a position of the user in the facility. The position information acquisition unit for acquiring the position information to be shown, the access authority setting unit for setting the access authority of the user who has been authenticated based on the acquired position information, and the resource on the network based on the set access authority And an access control unit that controls whether or not the terminal can access.

JP, 2014-178873, A

  An object of the present invention is to provide a connection management program and an information processing program that omit input of information for user authentication when the brought-in terminal connects to the network, and maintain the same security level as when user authentication is performed. It is in providing an apparatus.

  One aspect of the present invention provides the following connection management program and information processing apparatus in order to achieve the above object.

[1] computer,
Time information indicating the attendance status of the user of the terminal that has sent the connection request for the network is working, and position information indicating the position of the terminal is within the range of the predefined location for the user And transmitting means for transmitting profile information, which is setting information used for the terminal to connect to the network, to the terminal .
Attendance management means for setting the attendance status of the attendance information according to the operation of the user who has established the authentication for connecting to the network in another terminal,
Connection management program to function as.
[ 2 ] Time information indicating the attendance status of the user of the terminal that has sent the connection request for the network is working, and location information indicating the position of the terminal is predefined for the user If it is within the scope of, and transmitting means for transmitting the profile information to the terminal is setting information to be used for the terminal connects to the network,
Attendance management means for setting the attendance status of the attendance information according to the operation of the user whose authentication for connecting to the network is established in another terminal;
An information processing apparatus having

According to the invention of claim 1 or 2 , while the input of information for user authentication when the brought-in terminal connects to the network is omitted, the same security level as when user authentication is performed is maintained. it can, also, the attendance state, Ru can be like authentication to connect to the network set by the user who established in another terminal.

FIG. 1 is a schematic view showing an example of the configuration of a connection management system according to the embodiment. FIG. 2 is a block diagram showing a configuration example of the attendance server according to the embodiment. FIG. 3 is a schematic view showing an example of the structure of attendance information. FIG. 4 is a flowchart showing the profile information transmission operation of the attendance server.

Embodiment
(Configuration of connection management system)
FIG. 1 is a schematic view showing an example of the configuration of a connection management system according to the embodiment.

  The connection management system 8 manages the information on the attendance of the user 7 and also manages the profile information necessary for the access to the network 6 of the terminal 3 and the accessibility to the attendance server 1 of the user 7 The authentication server 2 to be authenticated, the portable terminal 3 and the installation type terminal 4 are connected to be communicable with each other by the network 6. The terminal 3 performs wireless communication via the access point 5. The terminal 3 and the terminal 4 are operated by the user 7.

  The attendance server 1 is a server-type information processing apparatus, operates in response to requests from the terminals 3 and 4, and has a CPU (Central Processing Unit) having a function for processing information in the main body It has electronic components such as flash memory.

  The authentication server 2 is a server-type information processing apparatus, which operates in response to requests from the terminals 3 and 4 and has an electronic device such as a CPU or a flash memory having a function for processing information in the main body. It has parts.

  The terminal 3 is a portable information processing apparatus, and includes an electronic component such as a CPU or a flash memory having a function for processing information in a main body. The terminal 3 is, for example, a possession of the user 7 and is a brought-in terminal brought into the company to which the user 7 belongs, and assumes a situation called so-called BYOD (Bring your own device). Do. In addition, the terminal 3 has at least a communication function and a position information acquisition function.

  The terminal 4 is a built-in information processing apparatus such as a PC (Personal Computer), and includes an electronic component such as a CPU or a flash memory having a function for processing information in a main body. It is assumed that the terminal 4 is not the bring-in terminal but the property of the company to which the user 7 belongs. The terminal 4 may be connected by wireless communication.

  The network 6 is a communication network capable of high-speed communication, and is, for example, a wired or wireless communication network such as an intranet or a LAN (Local Area Network).

  In the above configuration, when the user 7 leaves the office, the user 7 operates the terminal 4 and inputs a user ID and a password to request the authentication server 2 to perform authentication. When authenticated by the authentication server 2, the user 7 operates the terminal 4 to access the attendance server 1, and sets the working status to "under work". Next, the terminal 3 which is a brought-in terminal requests the authentication server 2 to connect to the network 6 together with its own position information. The authentication server 2 inquires of the attendance server 1 in response to the request of the terminal 3, and the position information of the terminal 3 is within the range preset for the user, and the working status is "at work". The attendance server 1 causes the terminal 3 to transmit profile information which is setting information for connecting to the network 6. The terminal 3 receives the profile information and connects to the network 6.

(Configuration of information processing apparatus)
FIG. 2 is a block diagram showing a configuration example of the attendance server 1 according to the embodiment.

  The attendance server 1 includes a CPU and the like, controls each unit, and executes various programs, the control unit 10, a storage unit 11 including a storage medium such as a flash memory and storing information, and a network. And a communication unit 12 that communicates with the outside.

  The control unit 10 functions as an attendance management means 100 by executing an attendance management program 111 described later. The control unit 10 also functions as a position information determination unit 101 and a profile information transmission unit 102 by executing a connection management program 110 described later.

  The attendance management means 100 manages the attendance information 112 indicating the working status of the user, and the setting change of the attendance information 112 is made only by the request transmitted according to the operation of the user authenticated by the authentication server 2 To allow

  The position information determination unit 101 receives position information from the terminal 3 and determines whether the position information is within the range of the location set in advance in the attendance information 112.

  The profile information transmission unit 102 determines that the position information determination unit 101 determines that the position information of the terminal 3 is within the range of the preset position, and the work status indicated by the attendance information 112 managed by the attendance management unit 100 is “ If the user is at work, the profile information 113 is transmitted to the terminal 3.

  The storage unit 11 is a connection management program 110 that causes the control unit 10 to operate as each of the units 101 and 102, an attendance management program 111 that causes the control unit 10 to operate as the attendance management unit 100, attendance information 112, profile information 113, and the like. Remember.

(Operation of information processing apparatus)
Next, the operation of the present embodiment will be described divided into (1) basic operation, (2) profile information transmission operation, and (3) connection operation.

(1) Basic Operation First, upon leaving the office, the user 7 operates the terminal 4 installed in the office, inputs a user ID and a password, etc., and requests the authentication server 2 for authentication. The terminal 4 transmits the user ID and the password to the authentication server 2 together with the authentication request.

  When the authentication server 2 receives the user ID and the password together with the authentication request, the authentication server 2 collates with the user ID and password registered in advance. If they match, the authentication succeeds, and the attendance server 1 can be accessed.

  When authenticated by the authentication server 2, the user 7 operates the terminal 4 to access the attendance server 1 and sets the working status to “in work”.

  The attendance server 1 sets the working status of the user 7 in the attendance information 112 to “in service”.

  Next, the user 7 operates the terminal 3 to connect the terminal 3 which is a brought-in terminal to the network 6. The terminal 3 requests the authentication server 2 to connect to the network 6 together with its own position information.

(2) Profile Information Transmission Operation FIG. 3 is a schematic view showing an example of the configuration of attendance information 112. As shown in FIG. FIG. 4 is a flowchart showing the profile information transmission operation of the attendance server 1.

  When the authentication server 2 receives a connection request for the terminal 3, first, the working state is “working” with the user ID (for example, “001”) registered in advance in the ID of the terminal 3. It asks the attendance server 1 whether or not.

  When the attendance management means 100 of the attendance server 1 receives an inquiry for attendance information (S1; Yes), the attendance information 112 shown in FIG. 3 is referred to, and the working status of the user ID "001" is "under work" Since there is (S2; Yes), it responds to the authentication server 2 that it is "working" (S3).

  When the authentication server 2 receives from the attendance server 1 that it is "in service", next, the attendance server 1 determines whether the position information received from the terminal 3 is within the range preset for the user 7 or not. Contact

  When the position information judging means 101 of the attendance server 1 receives the judgment request of the position information (S4; Yes), it refers to the location of the attendance information 112 shown in FIG. 3 and the position information is within the range of the location (S5; Yes) The profile information 113 which is setting information for connecting to the network 6 is transmitted to the terminal 3 (S6).

  In step S5, if the position information is out of the range of the location (S5; No), it is transmitted to the terminal 3 that the profile information 113 is out of the connectable range and invalid (S7).

  In step S2, if the working status is not "in work" (S2; No), the authentication server 2 is notified that "out of work" (S8), and the authentication server 2 has access to the terminal 3 Reject (S9).

(3) Connection Operation Next, the terminal 3 receives the profile information 113 from the attendance server 1, executes connection setting using the profile information 113, and connects to the network 6.

  Note that the connection may be disconnected when it is out of the time period set as the normal working time of the attendance information 112 of FIG. 3.

(Effect of the embodiment)
According to the above-described embodiment, when the terminal 3 which is the brought-in terminal requests connection to the network 6, the working condition of the user registered in advance in the terminal 3 and the position information of the terminal 3 are set in advance as the conditions. Since the profile information 113 for connection is transmitted only when the information matches, the user authentication can be omitted at the terminal 3 which is the brought-in terminal, and the case of performing the user authentication An equivalent security level can be maintained.

  That is, for example, even if the terminal 3 is stolen and is taken over by a person other than the user 7, the user 7 can not connect to the network 6 unless he is working, and even if he is working, the user The security level does not decrease because the network 6 can not be connected unless the location is predetermined in 7.

Other Embodiments
The present invention is not limited to the above embodiment, and various modifications can be made without departing from the scope of the present invention. For example, even if there is a connection request from the terminal 3, the profile information 113 may not be transmitted if it is outside the time range set as the normal working hours of the attendance information 112 of FIG. 3.

  Further, the location of the attendance information 112 may be a predetermined location, or may be a location when the user 7 requests the authentication server 2 for authentication.

  Further, the function of the connection management program 110 of the attendance server 1 and the function of the attendance management program 111 may be executed on different servers. The attendance server 1 and the authentication server 2 may be configured as one server.

  In addition, after the terminal 3 establishes the connection to the network 6, even if the terminal 3 deviates from the location of the attendance information 112, the connection is permitted if the user possessing the terminal 3 is working. It is also good. As a result, when the user 7 who possesses the terminal 3 leaves the location temporarily due to a meal or a toilet, it is not necessary to repeat all the operations for reconnection.

  Although the functions of the respective units 100 to 102 of the control unit 10 are realized by a program in the above embodiment, all or a part of the respective units may be realized by hardware such as an ASIC. Also, the program used in the above embodiment can be provided by being stored in a recording medium such as a CD-ROM. In addition, replacement, deletion, addition, and the like of the above-described steps described in the above-described embodiment can be made within the scope of the present invention.

DESCRIPTION OF REFERENCE NUMERALS 1 attendance server 2 authentication server 3 terminal 4 terminal 5 access point 6 network 7 user 8 connection management system 10 control unit 11 storage unit 12 communication unit 100 attendance management unit 101 position information determination unit 102 profile information transmission unit 110 connection management program 111 Time management program 112 Time information 113 Profile information

Claims (2)

Computer,
Time information indicating the attendance status of the user of the terminal that has sent the connection request for the network is working, and position information indicating the position of the terminal is within the range of the predefined location for the user And transmitting means for transmitting profile information, which is setting information used for the terminal to connect to the network, to the terminal .
Attendance management means for setting the attendance status of the attendance information according to the operation of the user who has established the authentication for connecting to the network in another terminal,
Connection management program to function as. Time information indicating the attendance status of the user of the terminal that has sent the connection request for the network is working, and position information indicating the position of the terminal is within the range of the predefined location for the user And transmitting means for transmitting profile information, which is setting information used for the terminal to connect to the network, to the terminal .
Attendance management means for setting the attendance status of the attendance information according to the operation of the user whose authentication for connecting to the network is established in another terminal;
An information processing apparatus having

Images