JP2001357020A - System and method for personal identification for network-connectable computer and recording medium with program or the like for performing personal identification recorded thereon - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a personal identification system for network-connectable computer, which is improved in security and can be utilized even by any computer. SOLUTION: Concerning the personal identification system for computer connectable to a network, in which a portable recording medium having an unreloadable initial recording area and an additional recording area additionally recordable is used, a procedure required for automatically connecting the computer to the network is recorded in the initial recording area as a program in advance, identification information for identifying the owner of the recording medium and a parameter required for operating the program are recorded in the additional recording area and the owner of the recording medium automatically connects the computer connectable to the network to the network by applying this recording medium to the computer and can use the computer with the attribute of the owner of the recording medium.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a personal identification system for a computer which can be connected to a network using a card-type hybrid optical card having an initial recording area which cannot be rewritten and an additional recording area which can be additionally recorded. The present invention relates to an authentication method and a recording medium on which a program for performing personal authentication is recorded.

[0002]

2. Description of the Related Art Conventionally, a local area network (LAN) or a wide area network (WAN)
It is widely practiced to use a large number of personal computers on a network using groupware.

[0003]

In the case described above, each personal computer is uniquely registered with personal authentication data, so that it is difficult for another person to use the personal computer as it is. In order to use a personal computer on the network by another person, which is virtually impossible to access the network by using, all the relevant setting values are used to temporarily replace the personal information registered on the computer. Must be converted manually. In addition, there is a problem that after use, the original data must be returned to the original data, and the data cannot be used practically.

When accessing a network from the outside, only a computer in which necessary data is set in advance can be used. For example, if you use your laptop on the network and take it out of the office, you need to manually reconfigure and use the related settings in advance and return to the original data after returning to the office . This setting and resetting requires a lot of trouble, and there is a problem that only a person having a certain level of personal computer knowledge can respond.

The present invention has been made under such a background and utilizes a recently developed hybrid optical disk card having both a read-only area and a write-once area to provide high security and to use a CD-ROM drive on a network. It is an object of the present invention to provide a personal identification system, a personal authentication method, and a recording medium for recording a program for performing personal authentication, which can be used by any computer as long as it has a computer.

[0006]

According to the first aspect of the present invention, it is possible to connect to a network using a portable recording medium having a non-rewritable initial recording area and an additional recording area capable of additional recording. In a personal authentication system for a computer, a procedure necessary for automatically connecting a computer to a network is recorded in the initial recording area in advance as a program, and the additional recording area identifies an owner of the recording medium. Identification information and parameters necessary for the operation of the program are recorded, and the owner of the recording medium applies the recording medium to a computer connectable to a network to automatically connect to the network, and stores the computer in the recording medium. Network-connectable computer individuals characterized in that they can be used with the attributes of the media owner To provide a proof system.

According to a second aspect of the present invention, in the personal identification system for a computer connectable to a network according to the first aspect, the information additionally recorded on the recording medium includes:
The security is ensured by a method such as encryption as necessary.

According to a third aspect of the present invention, there is provided a personal authentication method for a computer which can be connected to a network using a portable recording medium having an initial recording area which cannot be rewritten and an additional recording area which can be additionally recorded. A process of recording a procedure necessary for automatically connecting a computer to a network in advance in the initial recording area as a program, identification information for identifying an owner of the recording medium in the additional recording area, and an operation of the program A step of recording parameters necessary for the recording medium, a step of applying the recording medium to a computer connectable to a network by the owner of the recording medium, and automatically connecting to the network. A personal authentication method for a computer which can be connected to a network, the method comprising:

According to a fourth aspect of the present invention, in the personal authentication method for a computer connectable to a network according to the third aspect, information additionally recorded on the recording medium is encrypted by a method such as encryption if necessary. It is characterized by ensuring security.

According to a fifth aspect of the present invention, the portable recording medium is a card-type hybrid optical disc or a non-rewritable DVD having both the function of a non-rewritable CD-ROM and the function of an additional recordable CD-R. A card-type hybrid optical disc having the functions of a ROM and a DVD-R capable of additionally recording,
In the D-ROM or DVD-ROM area, a procedure necessary for automatically connecting a computer to a network is recorded in advance as a program, and the additional recordable CD-ROM is recorded.
Recording information on a card-type hybrid optical disc readable by a computer, wherein identification information for identifying an owner of the recording medium and parameters necessary for operation of the program are recorded in the R or DVD-R area. Medium.

According to a sixth aspect of the present invention, in the recording medium of the hybrid optical disk according to the fifth aspect, information additionally recorded on the recording medium is secured by a method such as encryption as necessary. It is characterized by the following.

[0012] The invention according to claim 7 is the invention according to claims 1 to 6.
The personal authentication system of a network connection computer according to any of the above, a personal authentication method, or a recording medium that records a program for performing personal authentication, the portable recording medium, the medical examination ticket, student ID or ID card It is characterized by being a recording medium that also serves as a recording medium.

[0013] The invention according to claim 8 is the invention according to claims 1 to 7.
A personal authentication system for a network connection computer according to any one of the above, a personal authentication method, or a recording medium that records a program for performing personal authentication, the portable recording medium is a recording medium combined with an IC card,
Alternatively, the recording medium is a recording medium having a magnetic recording area by a magnetic stripe or a recording medium on which a barcode is printed.

[0014] The invention according to claim 9 is the invention according to claims 1 to 8.
A personal authentication system for a network connection computer, a personal authentication method, a recording medium recording a program for performing personal authentication, or the like, wherein the network is a local area network (LAN), a wide area network (WAN), Alternatively, at least one network of the Internet is included.

[0015] A card is created in which an application program describing the setting of a procedure for accessing a network is written in a reproduction area of an optical disk card having both a reproduction area and an additional recording area. This part is common to all users. In the additional recording area, data for authenticating the individual is additionally recorded. The CD-ROM of the computer where you want to use this card
When the program is set in the ROM drive and the program is started, the groupware is used as if you are using your own computer, based on the personal authentication data written in the program and the unique data on the computer's network held by the computer itself Then, operations on the network such as sending and receiving e-mails can be performed.

[0016]

DESCRIPTION OF THE PREFERRED EMBODIMENTS One embodiment of the present invention will be described below with reference to the drawings. FIG. 1 is a diagram showing a configuration of a card-type hybrid optical disk (hereinafter abbreviated as a digital card) used in an embodiment of the present invention. The digital card 1 is, for example, a business card size,
FIG. 1A shows a front surface of a card, on which predetermined data is recorded, and as shown in FIG. 1B, an opening 2 which penetrates the front and rear surfaces and into which a drive shaft is inserted. The opening 2 is set on a drive shaft of a disk card drive of a computer.

A donut-shaped area surrounded by boundaries 3 and 4 in FIG. 1A is an area for recording information, and information is usually stored in a portion forming a continuous circle. Considering that the information to be stored is transmitted via a network,
When storing in a card, it is encrypted and stored.

The boundary of the recording section indicated by the boundary 4 is provided with, for example, a step in the thickness of the card at the boundary 4 in order to perform positioning for setting the above-mentioned card in the disk card drive. For example, the inside of the boundary 4 is thick and the outside is thin. As described above, this card has the functions of a CD-ROM and a CD-R, or a DV card.
It is assumed that the functions of the D-ROM and the DVD-R coexist (hybrid) on one disk. Note that this digicard may be a multipurpose card that also serves as a consultation ticket for a hospital or the like, a student ID issued by a school, an identification card, or the like.

FIG. 2 is a diagram showing a configuration of a computer system for performing authentication by applying the above-mentioned digital card. In this figure, a file server 12 for managing personal files and a groupware server 13 for sending and receiving e-mails are connected to an in-house LAN 11 and each terminal PC
.. 14n, the digital card 1 is set in any one of the CD-ROM drives 151, 152,.
, The authentication information, the groupware automatic setting program, and the network environment automatic setting program are read out, and the owner of the digital card 1 can access the server from the terminal on which the card is set.

In the case of a PC 31 outside the company, the digcard 1 is set in the connected CD-ROM 32 so that the authentication information, the groupware automatic setting program, the network environment automatic setting program, and the remote access automatic setting program can be obtained. The setting program is read and connected to the LAN 11 via the Internet 21 so that the owner of the digital card 1 can access the server from a terminal on which the card is set.

FIG. 3 is a flow chart for explaining the order of the operation that proceeds with the setting of the digital card 1. When the digital card 1 is set in step S1 (hereinafter referred to as S1 or the like) of this figure, the personal authentication information in the additional area of the digital card is read in S2, the authentication is confirmed in S3, and the authentication is not successful. Ends the processing. If the authentication is confirmed, the user logs in to the terminal in S4, starts the network environment automatic setting program in S5, starts the groupware environment automatic setting program in S6, and can use the groupware in S7. .

Next, a description will be given of an example in which a program enabling the following three usage methods is incorporated in the digica card 1. (1) Example of use when security of the original user of the personal computer is not strict on the network (2) Example of use when security of the original user of the personal computer is strict on the network (3) This is an example of use from outside the network.

(1) Example of use when security control of the original user of the personal computer concerned on the network is not strict The user prepares in the CD-ROM drive of the personal computer where the OS on the network is running. The user's DigiCard 1 is inserted and driven. The setting change program built in the read-only area of the digital card rewrites the connection setting information to the network using the user's personal authentication data built in the additional recording area. The original user's connection data is saved.

As a result, this computer is recognized as if it were the user's personal computer. Here, if the groupware software installed in all the personal computers on the network is started, functions such as sending and receiving e-mails can be used. Data can be read and written from the data area of the shared server (your own PC if your own PC is running). When the user removes the card from the CD-ROM drive and finishes using the card, it automatically returns to the initial state.

(2) Example of use when security management of the original user of the personal computer on the network is severe In this case, the user inserts the card and starts up the personal computer. The setting change program built in the read-only area of the digital card rewrites the connection setting information to the network using the user's personal authentication data built in the additional recording area. The original user's connection data is saved and saved, and the original user's data area is locked to protect the user from being altered or viewed.

(3) Example of use from outside the predetermined network When going out of the office, the CD-ROM of the notebook computer owned by the user is used.
Insert the Digicard into the ROM drive. This PC can be connected to the company's network by dial-up through a modem. When the program is started, the connection setting program in the playback-only area of the digital card establishes a dial-up connection to the company's network based on information such as the procedure for connecting to the company's connection point and the telephone number.
Of course, password security is applied. After that, you can work in the same environment as working in your company.

Another advantage in this case is that the user's personal digital card can be used for authentication, and the user is confirmed only by using a password. . If you lose your DigiCard, you can easily prevent unauthorized access by inputting it into the network management system.

As an example of another branch, if there are not many people who work in the office of a business office at all times, one or a plurality of personal computers are shared by all the employees, but all of them are individually registered in the groupware. Each person's data is registered and used on a server (one or more of the personal computers) that keeps the data alive at all times. In this way, groupware can be used even in an environment where there is no individual.

The digital card can be used for a variety of purposes, such as an ID card function by attaching a photograph, an IC card, a magnetic card, a bar code, and the like, and security control for entry and exit, a payment card function for a company cafeteria and the like.

The operation of one embodiment of the present invention has been described in detail with reference to the drawings. However, the present invention is not limited to this embodiment, and a design change or the like within a range not departing from the gist of the present invention. The present invention is also included in the present invention.

[0031]

As described above, according to the present invention, any computer on the network, regardless of the head office, branch, or office, can utilize the function of the groupware, resulting in a significant increase in business efficiency. The effect of being connected is obtained.

In addition, in a department where there are few persons enrolled in office hours due to reasons such as going out and traveling, there is no need to deploy as many personal computers as there are people, and the number of computers to be deployed can be reduced. And
Conversely, an effect can be obtained in that an office where the number of personal computers is smaller than the number of people can construct groupware in which all necessary personnel are added.

A person (digital card) having network access right from outside the predetermined network or from any personal computer (with a CD-ROM drive or connected as an accessory) provided that the groupware software is installed in advance. ) Can access the network without any special preparation and knowledge.

As long as a communication line can be secured anywhere in the world, the same environment as working on one's own network can be immediately obtained. By using a digital card for each individual,
The effect that the security of the network is remarkably improved as compared with the conventional method using only the password can be obtained.

[Brief description of the drawings]

FIG. 1 is a diagram showing a configuration of a card-type hybrid optical disk (a digital card) used in an embodiment of the present invention.

FIG. 2 is a diagram showing a configuration of a computer system that performs authentication by applying a digital card.

FIG. 3 is a flowchart for explaining the order of operations performed by setting a digit card;

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 1 ... Card type hybrid optical disk (Digit card) 11 ... Local area network (LAN) 12 ... File server 13 ... Groupware server 141, 142, ... 14n ... PC 152, 152, ... 15n ... CD-ROM drive 21 ... Internet 31 ... PC 32 ... CD-ROM drive

 ──────────────────────────────────────────────────続 き Continuing on the front page (72) Inventor Kazuhiro Kajio 2-3-1 Minatomirai, Nishi-ku, Yokohama-shi, Kanagawa Prefecture JGC Corporation (72) Inventor Yoshinori Tsukawaki 3-13-10 Nishiazabu, Minato-ku, Tokyo Parkside Sepia F-term in SAES Japan Co., Ltd. (reference) 5B085 AE11 AE12 AE23

Claims (9)

[Claims] 1. A personal authentication system for a computer which can be connected to a network using a portable recording medium having a non-rewritable initial recording area and an additional recording area capable of additionally recording, wherein said initial recording area In advance, a procedure necessary for automatically connecting a computer to a network is recorded as a program, and the additional recording area includes identification information for identifying an owner of the recording medium and parameters required for operation of the program. Wherein the owner of the recording medium applies the recording medium to a computer connectable to a network to automatically connect to the network, and enables the computer to be used with the attribute of the owner of the recording medium. A personal authentication system for computers that can be connected to a network. 2. The personal authentication system for a computer which can be connected to a network according to claim 1, wherein the information additionally recorded on the recording medium is secured by a method such as encryption as necessary. . 3. A personal authentication method for a computer connectable to a network using a portable recording medium having a non-rewritable initial recording area and an additional recording area capable of additionally recording, wherein the initial recording area Recording a procedure necessary for automatically connecting a computer to a network in advance as a program, and recording identification information for identifying an owner of the recording medium and parameters required for operation of the program in the additional recording area. A process in which the owner of the recording medium applies the recording medium to a computer connectable to a network and automatically connects to the network; and a process in which the computer can be used with the attribute of the recording medium owner. A personal authentication method for a computer that can be connected to a network, comprising: 4. The personal authentication method for a network-connectable computer according to claim 3, wherein the information additionally recorded on the recording medium is secured by a method such as encryption as necessary. . 5. The portable recording medium includes a non-rewritable CD-ROM and an additional recordable CD-ROM.
Card-type hybrid optical disk with R function or non-rewritable DVD-ROM and additionally recordable DV
A card-type hybrid optical disk having a function of DR, wherein the non-rewritable CD-ROM or DVD-RO
In the M area, a procedure necessary for automatically connecting the computer to the network is recorded in advance as a program, and in the additionally recordable CD-R or DVD-R area, an identification for identifying the owner of the recording medium is provided. A computer-readable recording medium on a card-type hybrid optical disk, wherein information and parameters necessary for the operation of the program are recorded. 6. The recording medium according to claim 5, wherein the information additionally recorded on the recording medium is secured by a method such as encryption as necessary. 7. The personal computer according to claim 1, wherein the portable recording medium is a recording medium that also serves as an examination ticket, a student ID card, or an identification card. A recording medium that stores an authentication system, an individual authentication method, a program for performing individual authentication, and the like. 8. The portable recording medium is a recording medium combined with an IC card, a recording medium having a magnetic recording area by a magnetic stripe, or a recording medium on which a barcode is printed. A recording medium on which a personal authentication system, a personal authentication method, a personal authentication program, or the like, for a network-connected computer according to any one of claims 1 to 7 is recorded. 9. The network according to claim 1, wherein the network includes at least one of a local area network (LAN), a wide area network (WAN), and the Internet. A recording medium that records a personal authentication system of a connected computer, a personal authentication method, a program for performing personal authentication, and the like.