JP6937120B2 - Access control device, access control method, and access control program - Google Patents

Description

The present invention relates to an access control device, an access control method, and an access control program.

Paragraph 0062 of Patent Document 1 states, "The EC server 300 is based on the first authentication based on the combination of the login ID and the password and the access to the randomly generated confirmation URL as the authentication process of the customer requesting the login. Perform the second authentication. ... The EC server 300 prevents unauthorized access such as impersonation of a customer by performing the double authentication process in this way. ] There is a description.

Further, Patent Document 2 discloses an information processing system including a portable browsing terminal, a gateway computer, and the like, and in paragraph 0036, a gateway computer that receives a request to display a login screen from the portable browsing terminal. Is described to display the login screen on the display of the terminal.

Japanese Patent No. 5691853 Japanese Unexamined Patent Publication No. 2001-331389

However, in the prior art, "when a user terminal accesses a URL for each user / transition site, the system analyzes the URL based on a predetermined master and performs a security check, and if the check is OK, logs in. There is a problem that the function of "displaying the screen on the user terminal" cannot be realized.

The present invention has been made in view of the above problems, and when a user terminal accesses a URL for each user or transition site, the system analyzes the URL based on a predetermined master and performs a security check. An object of the present invention is to provide an access management device, an access management method, and an access management program capable of displaying a login screen on the user terminal if the check is OK.

In order to solve the above-mentioned problems and achieve the object, the access management device according to the present invention is an access management device including a storage unit and a control unit, and the storage unit is a gateway account and a login. The control unit includes an account storage means for storing an account including an account, and the control unit has a gateway transmission means for transmitting a user-specific URL or a transition website-specific URL to the user based on the gateway account, and a gateway transmission means from the user terminal. When the URL for each user or the URL for the transition website is accessed, a display control means for displaying a login screen for authenticating the login account on the user terminal is provided. ..

Further, in the access management device according to the present invention, an accessible expiration date is set for the URL for each user and the URL for each transition website, and the display control means is used by the user within the expiration date. When the terminal accesses the URL for each user or the URL for the transition website, the login screen is displayed on the user terminal.

Further, in the access management device according to the present invention, when the control unit accesses the URL for each user or the URL for each transition website from an unknown user terminal, the user can use the unknown user terminal. Further provided with a security code transmitting means for transmitting an authentication security code, the display control means causes the user terminal to display the login screen when the security code is input from the unknown user terminal. It is characterized by.

Further, the access control device according to the present invention is characterized in that the URL for each user and the URL for each transition website are URLs set by the user.

Further, the access control device according to the present invention is characterized in that the URL for each user and the URL for each transition website are URLs set by the user in a secure environment.

Further, the access management device according to the present invention is characterized in that the gateway account includes an e-mail address of the user, access authority data of the user terminal, and / or identification data of the user terminal.

Further, the access control device according to the present invention is characterized in that the login account includes a user ID and / or a login password.

Further, the access management method according to the present invention is an access management method executed by an access management device including a storage unit and a control unit, and the storage unit is an account storage including a gateway account and a login account. A gateway transmission step of transmitting a user-specific URL or a transition website-specific URL to the user based on the gateway account, which is executed by the control unit, and a user-specific URL or the user terminal. It is characterized by including a display control step of displaying a login screen for authenticating the login account on the user terminal when the URL for each transition website is accessed.

Further, the access management program according to the present invention is an access management program for being executed by an access management device including a storage unit and a control unit, and the storage unit is an account including a gateway account and a login account. A gateway transmission step for transmitting a user-specific URL or a transition website-specific URL to a user based on the gateway account in the control unit, and a user-specific URL or the transition from the user terminal. When an access is made to a URL for each website, a display control step of displaying a login screen for authenticating the login account on the user terminal is executed.

According to the present invention, when a user terminal accesses a URL for each user or transition site, the system analyzes the URL based on a predetermined master and performs a security check, and if the check is OK, a login screen. Can be displayed on the user terminal.

FIG. 1 is a block diagram showing an example of the configuration of the access control device. FIG. 2 is a flowchart showing an example of processing of the access control device according to the present embodiment. FIG. 3-1 is a diagram showing an example of an operation flow. FIG. 3-2 is a diagram showing an example of an operation flow. FIG. 4 is a diagram showing an example of an operation flow. FIG. 5 is a diagram showing an example of an operation flow. FIG. 6-1 is a diagram showing an example of an operation flow. FIG. 6-2 is a diagram showing an example of the operation flow. FIG. 7 is a diagram showing an example of an operation flow. FIG. 8 is a diagram showing an example of the operation flow of the trainee system version. FIG. 9 is a diagram showing an example of the system flow. FIG. 10 is a diagram showing an example of the system flow. FIG. 11-1 is a diagram showing an example of the system flow. FIG. 11-2 is a diagram showing an example of the system flow. FIG. 12 is a diagram showing an example of the system flow. FIG. 13 is a diagram showing an example of a flow when managing a plurality of systems having different user management. FIG. 14 is a diagram showing an example of a flow when managing a plurality of systems having different user management. FIG. 15 is a diagram showing an example of a system configuration when introducing an external access gateway according to the present embodiment.

Embodiments of the present invention will be described in detail with reference to the drawings. The present invention is not limited to the present embodiment.

[1. Overview]
Conventionally, there has been a mechanism in which a different URL is issued for each user and the user is identified from the URL used to access the login authentication page, and the URL used for access is a password authenticated by the system. In this case, the login was permitted by omitting the input of the ID and password on the login authentication page. Therefore, in the conventional mechanism, if the URL is leaked, there is a high risk of unauthorized login to the system. That is, there is a risk that the login page of the Web / mobile system will be accessed by an outsider on a network whose security has not been established in the past.

Therefore, in the present embodiment, a security enhancement function by a user-specific URL is realized in a Web / mobile system on a network (Internet or the like) whose security has not been established. Specifically, in the present embodiment, in order to access the login page, an difficult-to-guess URL issued by the system is required to prevent access from outsiders.

That is, in the present embodiment, a different URL is issued for each user of the system, and which user's access is identified from the URL used for accessing the login page. In the login authentication in the present embodiment, login is permitted only when not only the conventional combination of ID / password but also the combination of users identified from the ID / password / URL is correct.

Therefore, in the present embodiment, even if there is a possibility that the URL, user ID, etc. have been leaked, it is possible to prevent unauthorized login by reissuing the URL for each user and invalidating the leaked URL. By allowing the user to reissue the URL, it is possible to quickly respond to the leak.

[2. composition]
An example of the configuration of the access control device 100 according to the present embodiment will be described with reference to FIG. FIG. 1 is a block diagram showing an example of the configuration of the access control device 100.

The access control device 100 is a commercially available desktop personal computer. The access control device 100 is not limited to a stationary information processing device such as a desktop personal computer, but is a portable type such as a commercially available notebook personal computer, a PDA (Personal Digital Assistants), a smartphone, or a tablet personal computer. It may be an information processing device.

The access management device 100 includes a control unit 102, a communication interface unit 104, a storage unit 106, and an input / output interface unit 108. Each part of the access control device 100 is communicably connected via an arbitrary communication path.

The communication interface unit 104 connects the access management device 100 to the network 300 so as to be communicable via a communication device such as a router and a wired or wireless communication line such as a dedicated line. The communication interface unit 104 has a function of communicating data with another device via a communication line. Here, the network 300 has a function of connecting the access management device 100 and the server 200 so as to be able to communicate with each other, and is, for example, the Internet or a LAN (Local Area Network).

Various databases, tables, files, and the like are stored in the storage unit 106. In the storage unit 106, a computer program for giving a command to a CPU (Central Processing Unit) in cooperation with an OS (Operating System) to perform various processes is recorded. As the storage unit 106, for example, a memory device such as a RAM (Random Access Memory) or a ROM (Read Only Memory), a fixed disk device such as a hard disk, a flexible disk, an optical disk, or the like can be used. The storage unit 106 includes an account database 106a.

The account database 106a stores a gateway account and an account including a login account. Here, the gateway account may include the user's e-mail address, the access authority data of the user terminal, and / or the identification data of the user terminal. Here, the access authority data includes access authority via the Internet, access authority via the intranet, access authority from outside the company, access authority from inside the company, access authority from the website for PC, and / or the Web for mobile. It may be data such as access authority from the site. Further, the identification data may be data for identifying the Web browser implemented in the user terminal (for example, Cookie saved in the Web browser). The login account may also include a user ID and / or a login password.

An input device 112 and an output device 114 are connected to the input / output interface unit 108. As the output device 114, a speaker or a printer can be used in addition to a monitor (including a home television). As the input device 112, in addition to a keyboard, a mouse, and a microphone, a monitor that cooperates with the mouse to realize a pointing device function can be used. In the following, the output device 114 may be referred to as a monitor 114, and the input device 112 may be referred to as a keyboard 112 or a mouse 112.

The control unit 102 is a CPU or the like that collectively controls the access management device 100. The control unit 102 has an internal memory for storing a control program such as an OS, a program that defines various processing procedures, required data, and the like, and performs various information processing based on these stored programs. Run. The control unit 102 conceptually includes a gateway transmission unit 102a, a user determination unit 102b, a security code transmission unit 102c, and a display control unit 102d.

The gateway transmission unit 102a transmits a URL for each user or a URL for each transition website to the user based on the gateway account. Here, the URL for each user and the URL for each transition website may have an accessible expiration date. Further, the URL for each user and the URL for each transition website may be a URL set by the user. Further, the URL for each user and the URL for each transition website may be a URL set by the user in a secure environment. Here, the secure environment may be an intranet environment.

When the user determination unit 102b accesses the URL for each user or the URL for each transition website, it determines whether or not the access is from the (authenticated) user terminal. Here, the user determination unit 102b identifies the (authenticated) Web browser based on the Cockie stored in the Web browser implemented in the user terminal, so that the access is from the (authenticated) user terminal. It may be determined whether or not. Further, the user determination unit 102b may determine whether or not the access is within the expiration date.

When the unknown user terminal accesses the URL for each user or the URL for each transition website, the security code transmission unit 102c transmits the security code for authentication of the unknown user terminal to the user. Here, the access from an unknown user terminal may include an access from a Web browser different from the authenticated Web browser implemented in the user terminal.

When the user terminal accesses the URL for each user or the URL for each transition website, the display control unit 102d causes the user terminal to display a login screen for authenticating the login account. Here, the display control unit 102d may display the login screen on the user terminal when the user terminal accesses the URL for each user or the URL for each transition website within the expiration date. Further, the display control unit 102d may display the login screen on the user terminal when the security code is input from the unknown user terminal. Here, the display control unit 102d may display the login screen on the display device of the user terminal by transmitting the login screen to the user terminal. Further, the display control unit 102d may display the security code input screen for inputting the security code on the user terminal.

[3. Concrete example]
A specific example of the processing of the access control device 100 according to the present embodiment will be described with reference to FIGS. 2 to 16.

[Access management process]
Here, an example of the access management process in the present embodiment will be described with reference to FIG. FIG. 2 is a flowchart showing an example of processing of the access control device 100 in the present embodiment.

As shown in FIG. 2, the gateway transmission unit 102a sets an expiration date for accessing the user's e-mail address based on the gateway account stored in the account database 106a. URL is transmitted (step SA-1).

Then, when the user determination unit 102b accesses the URL for each user or the URL for each transition website, the user determination unit 102b determines whether or not the access is within the expiration date (step SA-2).

Then, when the user determination unit 102b determines that the access is not within the expiration date (step SA-2: No), the user determination unit 102b denies the access and shifts the process to step SA-1.

On the other hand, when the user determination unit 102b determines that the access is within the expiration date (step SA-2: Yes), the process shifts to step SA-3.

Then, the user determination unit 102b authenticates by identifying the authenticated Web browser based on the gateway account stored in the account database 106a and based on the Cockie stored in the Web browser implemented in the user terminal. It is determined whether or not the access is from the completed user terminal (step SA-3).

Then, when the user determination unit 102b determines that the access is from an authenticated user terminal (step SA-3: Yes), the process shifts to step SA-7.

On the other hand, the user determination unit 102b is not an access from an authenticated user terminal (for example, an access from an unknown user terminal (for example, an access from a Web browser different from the authenticated Web browser implemented in the user terminal)). (Step SA-3: No), the process is shifted to step SA-4.

Then, the security code transmission unit 102c transmits a security code for authentication of an unknown user terminal to the user's e-mail address (step SA-4).

Then, the display control unit 102d transmits the security code input screen for inputting the security code to the user terminal, so that the security code input screen is displayed on the display device of the user terminal (step SA-5).

Then, the display control unit 102d determines whether or not the security code transmitted by the security code transmission unit 102c has been input to the security code input screen (step SA-6).

Then, when the display control unit 102d determines that the security code transmitted by the security code transmission unit 102c has not been input to the security code input screen (step SA-6: No), the display control unit 102d ends the process.

On the other hand, when the display control unit 102d determines that the security code transmitted by the security code transmission unit 102c has been input to the security code input screen (step SA-6: Yes), the display control unit 102d shifts the process to step SA-7.

Then, the display control unit 102d transmits a login screen for authenticating the login account to the user terminal, and displays the login screen on the display device of the user terminal to execute the login process by the user (step SA). -7), the process is completed.

Here, an example of the operation flow in the present embodiment will be described with reference to FIGS. 3-1 to 7. FIGS. 3-1 to 7 are diagrams showing an example of an operation flow.

As shown in FIG. 3-1 in the present embodiment, a gateway (G / W) account is prepared, and as shown in FIG. 3-2, the URL to be accessed is confirmed.

Further, in the present embodiment, when the terminal approval function is invalid, the system may be accessed from outside the company (insecure environment) as shown in the upper figure of FIG. Further, in the present embodiment, when the terminal approval function is enabled, the system may be accessed from outside the company (insecure environment) as shown in the lower figure of FIG. Here, in the present embodiment, in order to identify the user agent of the browser and the cookie stored on the user terminal side and determine whether or not the browser is approved, the same browser is used on the same version of the user terminal. Even if you access it, if the Cookie information is different, it may be treated as a separate terminal. Further, in the present embodiment, even when the cookie is deleted, it may be treated as an unknown user terminal.

Further, in the present embodiment, when the valid period of the URL has expired, access to the system from outside the company (insecure environment) may be denied as shown in the upper figure of FIG. Further, in the present embodiment, when the valid period of the URL has expired, the valid period may be extended for access to the system from the company (secure environment) as shown in the lower figure of FIG.

Further, as shown in FIG. 6-1 when accessing with another person's URL, that is, when Tanaka attempts to log in using Suzuki's URL on Tanaka's terminal and the user terminal approval function is invalid. In the present embodiment, the login screen itself is displayed, but since Suzuki's login ID and login password cannot be entered, login is not possible. Further, as shown in FIG. 6-2, when the user accesses the URL of another person, that is, when Tanaka attempts to log in using Suzuki's URL on Tanaka's terminal, and the user terminal approval function is enabled. In the present embodiment, it is determined that the access is not from an authenticated user terminal, and an access notification and a security code from an unknown user terminal are transmitted to Suzuki.

Further, as shown in FIG. 7, when there is a possibility that the URL has been leaked, in the present embodiment, the URL can be regenerated only from within the company (secure environment).

Further, here, an example of the operation flow of the trainee system of the driving school in the present embodiment will be described with reference to FIGS. 8 to 14. FIG. 8 is a diagram showing an example of the operation flow of the trainee system version. 9 to 12 are diagrams showing an example of the system flow. 13 and 14 are diagrams showing an example of a flow when managing a plurality of systems having different user management.

In the system used by students attending a driving school to reserve a curriculum for a driving school, as shown in Fig. 8, security settings for the driving school and preparation of a gateway account are carried out by the driving school employees in-house. It may be set from a network. Here, in the present embodiment, it is recommended that the individual URL be issued on the in-house secure network at the time of registration in the enrollment procedure of the trainee, but in order for the trainee to issue the individual URL, Since it takes time and effort to go to the training school, the individual URL to be accessed may be issued by the training school employee on a secure network instead of the trainee, and the trainee may be notified by e-mail.

Further, as shown in FIG. 9, in the account registration and security setting in the present embodiment, the Gx user and the account information used by the external access gateway are registered, and the user master and the G / W account master are the same. The association may be performed by holding the internal user GUID (Internal UserGuide). Further, in the present embodiment, security information such as how long the account can be accessed and when it can be accessed may be registered. In FIG. 9, the account can be accessed from 201X / 04/01 to 201X + 1 /. Inaccessible security has been set since 03/31.

Further, as shown in FIG. 10, the issuance of the access URL in the present embodiment is to issue a secure URL for authenticating as a registered account, and the user may acquire his / her own access URL. Further, as shown in FIGS. 11-1 and 11-2, in the access by the user in the present embodiment, the user accesses the system from the notified URL, and the corresponding page of the main system is accessed via the external access gateway. You may access to. Further, as shown in FIG. 12, regarding the deletion of the ticket data in the present embodiment, the ticket data issued by the gateway may be deleted from the gateway website, and the application is started in terms of internal processing of the system. Occasionally, you may set up an infinite loop thread to delete tickets and delete tickets at regular intervals.

Further, FIG. 13 shows a system flow when a plurality of Web systems having different login screens and / or different user authentication methods are managed by one external access gateway. Here, as shown in the left figure of FIG. 13, in the transition from the individual URL to the website in the present embodiment, the user of the business system and the user of the trainee system are individualized by the same external access gateway. It may be possible to access the "business system" and the "trainee system" from different Web systems by using the URL mechanism. Further, as shown in the right figure of FIG. 13, in order to realize the operation shown in the left figure of FIG. 13, in the present embodiment, the database for the external access gateway and the database for the business system (user for the business system). (Including authentication data) and a database for the trainee system (including user authentication data for the trainee system) may be provided. Specifically, as shown in FIG. 14, these databases may be used to make a transition from an individual URL to a website.

Further, an example of the system configuration in the present embodiment will be described with reference to FIG. FIG. 15 is a diagram showing an example of a system configuration (logical configuration of infrastructure) when introducing an external access gateway according to the present embodiment.

As shown in FIG. 15, in the present embodiment, access via the Internet is possible only for the server for external disclosure, and the Internet Information Server (IIS) for the intranet may not be possible because a secure connection cannot be secured. ..

As described above, in the present embodiment, the two-step authentication of the personalized URL and the login authentication of the system may be realized, and the authentication including the authentication code of the terminal authentication may be performed. Further, in the present embodiment, it is assumed that the URL will be changed when the authentication code is confirmed due to unauthorized access, and the individual user may be able to set the URL for each individual. Further, in the present embodiment, the expiration date may be set in the URL dedicated to each individual. Further, in the present embodiment, the internal access may be an intranet, and the external access may be assumed to be the Internet.

Further, in the present embodiment, since it is managed by a mechanism different from the user management, it may be used in combination with another user management (for example, user management in a driving school) mechanism. Further, in the present embodiment, the URL may not be issued by the personalized URL connection.

Therefore, in the present embodiment, the authentication function before opening the login screen is realized. Further, in the present embodiment, the authentication process is performed by combining the personal URL and the terminal authentication. Further, in the present embodiment, the setting of the individual-specific URL can be set for each individual, but the individual-specific URL may be issued in an intranet environment.

Further, in the present embodiment, the first is an access management device for managing access to a predetermined first link destination by using a browser from a user terminal as an information processing terminal of a plurality of users. When the information that the second link destination different from the link destination of is accessed to the second link destination uniquely assigned to each of a plurality of users is received, the first link destination is received. By referring to the user information master in which the user information about the user who can access the link destination is registered, the access to the second link destination can be performed from the user terminal of the user registered in the user information master. An access management device may be provided, which comprises a user determining means for determining whether or not the access corresponds to the above. As a result, in the present embodiment, a barrier of access to the second link destination can be provided prior to access to the first link destination (example: login screen) or authentication for the access, and the second. Unauthorized access to the link destination of 1 can be suppressed.

Further, in the present embodiment, when the access to the second link destination does not correspond to the access from the user terminal of the user registered in the user information master as a result of the user determination, the user determination means is concerned. An authentication means for transmitting authentication processing information for performing authentication processing using identification information for identifying a user to which the second link destination is assigned to a user terminal that has accessed the second link destination. An access control device may be provided that further comprises. Thereby, in the present embodiment, it is possible to prevent further access (login) of the person who intends to perform unauthorized access, and further, it is possible to obtain the identification information of the person who intends to perform unauthorized access.

Further, in the present embodiment, the first unit for acquiring terminal information consisting of one or both of the terminal identification information for identifying the user terminal and the browser identification information for identifying the browser used in the user terminal. The access history information regarding the acquisition means and the history of access from the user terminal to one or both of the first link destination and the second link destination is acquired in association with the terminal information acquired by the first acquisition means. A second acquisition means is further provided, and the user determination means includes the terminal information acquired by the user terminal accessing the second link destination by the first acquisition means and the access acquired by the second acquisition means. The user terminal that has accessed the second link destination is known as a result of including the terminal determination means for determining whether or not the terminal information associated with the information corresponds to a known terminal that matches each other and the terminal identification means. Provided is an access management device characterized in that, in the case of a terminal, it is determined that the access to the second link destination corresponds to the access from the user terminal of the user registered in the user information master. May be good. As a result, in the present embodiment, if the terminal authentication is completed, the access to the first link destination becomes easy.

Further, in the present embodiment, when it is determined that the user terminal that has accessed the second link destination does not correspond to a known terminal as a result of the determination by the terminal identification means, the user determination means goes to the second link destination. Further including an authentication means for transmitting authentication processing information for performing authentication processing using the grant information uniquely assigned to the user to which the second link destination is assigned to the accessed user terminal. An access control device characterized by the above may be provided. Thereby, in the present embodiment, a barrier of terminal authentication using the given information (security code) can be provided prior to the access to the first link destination.

Further, in the present embodiment, the access management device and the user terminal are provided in a secure environment in the communication system including the user terminal, and the access management device is used for a user registered in the user information master. It is further provided with an allocation means for assigning a link destination unique to the user as the link destination of 2 and a holding means for holding the link destination assigned by the allocation means in association with the user information registered in the user information master. A featured access control device may be provided. As a result, in the present embodiment, the second link destination can be assigned in a secure environment (intra-company), and the possibility that the second link destination assigned to a third party is leaked is reduced. Can be done.

Further, in the present embodiment, the token including the character string for identifying the authenticated user, which is issued in advance to the user registered in the user information master, is accessed to the first link destination. At the same time, an access management device may be provided that further includes an acquisition means acquired from a user terminal that accesses the first link destination. As a result, in the present embodiment, browsing is possible in a secure environment using the token after the authentication process.

[4. Other embodiments]
In addition to the above-described embodiments, the present invention may be implemented in various different embodiments within the scope of the technical ideas described in the claims.

For example, of each of the processes described in the embodiments, all or part of the processes described as being automatically performed may be manually performed, or all of the processes described as being performed manually. Alternatively, a part thereof can be automatically performed by a known method.

In addition, the processing procedure, control procedure, specific name, information including parameters such as registration data and search conditions of each processing, screen examples, and database configuration shown in the present specification and drawings are not specified unless otherwise specified. Can be changed arbitrarily.

Further, with respect to the access control device 100, each component shown in the figure is a functional concept and does not necessarily have to be physically configured as shown in the figure.

For example, with respect to the processing functions included in the access management device 100, particularly each processing function performed by the control unit 102, all or any part thereof is realized by the CPU and a program interpreted and executed by the CPU. It may be realized as hardware by wired logic. The program is recorded on a non-temporary computer-readable recording medium including a programmed instruction for causing the information processing apparatus to execute the process described in the present embodiment, and the access control apparatus is required. Read mechanically to 100. That is, a computer program for giving instructions to the CPU in cooperation with the OS and performing various processes is recorded in a storage unit such as a ROM or an HDD (Hard Disk Drive). This computer program is executed by being loaded into RAM, and cooperates with a CPU to form a control unit.

Further, this computer program may be stored in an application program server connected to the access control device 100 via an arbitrary network, and all or a part thereof can be downloaded as needed. be.

Further, the program for executing the process described in the present embodiment may be stored in a non-temporary computer-readable recording medium, or may be configured as a program product. Here, the "recording medium" includes a memory card, a USB (Universal Serial Bus) memory, an SD (Secure Digital) card, a flexible disk, a magneto-optical disk, a ROM, an EPROM (Erasable Programmable Read Only Memory), and an EEPROM (registration). Trademarks) (Electrically Erasable and Programmable Read Only Memory), CD-ROM (Compact Disk Read Only Memory), MO (Magnet-Optical Disk), MO (Magnet-Optical Disk), MO (Magnet-Optical Disc), DVD (Digital), DVD (Digital) It shall include any "portable physical medium".

The "program" is a data processing method described in any language or description method, regardless of the format such as source code or binary code. The "program" is not necessarily limited to a single program, but is distributed as a plurality of modules or libraries, or cooperates with a separate program represented by the OS to achieve its function. Including things. A well-known configuration or procedure can be used for a specific configuration and reading procedure for reading the recording medium in each device shown in the embodiment, an installation procedure after reading, and the like.

Various databases and the like stored in the storage unit are memory devices such as RAM and ROM, fixed disk devices such as hard disks, flexible disks, and storage means such as optical disks, and are used for various processes and website provision. Stores programs, tables, databases, files for web pages, etc.

Further, the access control device 100 may be configured as an information processing device such as a known personal computer or workstation, or may be configured as the information processing device to which an arbitrary peripheral device is connected. Further, the access control device 100 may be realized by mounting software (including a program or data) that realizes the processing described in the present embodiment on the device.

Further, the specific form of distribution / integration of the device is not limited to the one shown in the drawing, and all or a part thereof may be functionally or physically in an arbitrary unit according to various additions or functional loads. It can be distributed and integrated. That is, the above-described embodiments may be arbitrarily combined and implemented, or the embodiments may be selectively implemented.

The present invention is particularly useful in a Web / mobile system on a network whose security has not been established.

100 Access control device 102 Control unit 102a Gateway transmission unit 102b User judgment unit 102c Security code transmission unit 102d Display control unit 104 Communication interface unit 106 Storage unit 106a Account database 108 Input / output interface unit 112 Input device 114 Output device 200 Server 300 Network

Claims (4)

An access control device equipped with a storage unit and a control unit.
The storage unit
An account storage means for storing a gateway account, account data including a login account including a user ID and a login password , and access URL data including the gateway account, token, and transition URL.
With
The control unit
When the user terminal accesses the user-specific URL to which the token is added , the gateway account, ticket ID, and access associated with the token added to the user-specific URL based on the access URL data. A gateway transmission means that creates ticket data including a possible expiration date and transmits the transition URL of the user to which the ticket data is added to the user.
When the user terminal accesses the transition URL of the user within the expiration date, the display control means for displaying the login screen for authenticating the login account on the user terminal.
Equipped with a,
The display control means
Further, when the user ID and the login password of the user are entered on the login screen, the gateway account associated with the ticket ID added to the transition URL is used based on the ticket data. When the gateway account associated with the user ID is acquired based on the account data and the gateway account associated with the ticket ID is different from the gateway account associated with the user ID. An access control device that does not allow login. The control unit
A first acquisition means for acquiring terminal data consisting of one or both of the terminal specific data for identifying the user terminal and the browser specific data for specifying the browser used in the user terminal.
The access history data relating to the history of access from the user terminal to one or both of the transition URL and the user-specific URL to which the token is added is acquired in association with the terminal data acquired by the first acquisition means. Second acquisition means to do
The terminal associated with the terminal data acquired by the first acquisition means and the access history data acquired by the second acquisition means by the user terminal accessing the user-specific URL to which the token is attached. A terminal determination means for determining whether or not the data corresponds to a known terminal that matches each other,
As a result of determination by the terminal determination means, when the user terminal that has accessed the user-specific URL to which the token is attached corresponds to the known terminal, the access to the user-specific URL to which the token is added is the user. User determination means for determining that the access is from the user terminal of
The access control device according to claim 1, further comprising. It is an access management method executed by an access management device having a storage unit and a control unit.
The storage unit
An account storage means for storing a gateway account, account data including a login account including a user ID and a login password , and access URL data including the gateway account, token, and transition URL.
With
Executed by the control unit,
When the user terminal accesses the user-specific URL to which the token is added , the gateway account, ticket ID, and access associated with the token added to the user-specific URL based on the access URL data. A gateway transmission step of creating ticket data including a possible expiration date and transmitting the transition URL of the user to which the ticket data is added to the user.
When the user terminal accesses the transition URL of the user within the expiration date, a display control step for displaying a login screen for authenticating the login account on the user terminal and a display control step.
Only including,
In the display control step
Further, when the user ID and the login password of the user are entered on the login screen, the gateway account associated with the ticket ID added to the transition URL is used based on the ticket data. When the gateway account associated with the user ID is acquired based on the account data and the gateway account associated with the ticket ID is different from the gateway account associated with the user ID. An access management method that does not allow login. It is an access management program for executing an access management device having a storage unit and a control unit.
The storage unit
An account storage means for storing a gateway account, account data including a login account including a user ID and a login password , and access URL data including the gateway account, token, and transition URL.
With
In the control unit
When the user terminal accesses the user-specific URL to which the token is added , the gateway account, ticket ID, and access associated with the token added to the user-specific URL based on the access URL data. A gateway transmission step of creating ticket data including a possible expiration date and transmitting the transition URL of the user to which the ticket data is added to the user.
When the user terminal accesses the transition URL of the user within the expiration date, a display control step for displaying a login screen for authenticating the login account on the user terminal and a display control step.
To run ,
In the display control step
Further, when the user ID and the login password of the user are entered on the login screen, the gateway account associated with the ticket ID added to the transition URL is used based on the ticket data. When the gateway account associated with the user ID is acquired based on the account data and the gateway account associated with the ticket ID is different from the gateway account associated with the user ID. , An access control program for not allowing login.

Images