Security management program, security management method, and portable terminal device

• US 20100299721A1
• Filed: 05/26/2010
• Published: 11/25/2010
• Est. Priority Date: 11/30/2007
• Status: Active Grant

• Current Assignee: Fujitsu Broad Solution & Consulting, Inc. (Fujitsu Limited)
• Original Assignee: Fujitsu Broad Solution & Consulting, Inc. (Fujitsu Limited)
• Inventors: Awamoto, Yasuhiko
• Granted Patent: US 8,448,223 B2
• Time in Patent Office: Days
• US Class Current: 726/3
• CPC Class Codes: G06F 21/445 by mutual authentication, e.g. between devices or programs

Abstract

A security management program stored in a computer-readable recording medium causes a computer to perform the following steps (1) to (4). (1) A security manager authenticates an authentication target with a prepared authentication method in response to a login request from the authentication target. (2) An application execution unit outputs an authentication request in response to an application execution request which is output from the security manager after the authentication succeeds. (3) A database access unit authenticates the authentication target with the authentication method in response to the authentication request. (4) In response to a database access request from the application execution unit, the database access unit accesses a database in a portable terminal device depending on the authentication performed by the database access unit.

Claims

1. A computer-readable recording medium storing a security management program for managing security of a portable terminal device, the security management program causing a computer to perform:

authenticating, by a security manager, an authentication target with a prepared authentication method in response to a login request from the authentication target;

outputting, by an application execution unit, an authentication request in response to an application execution request which is output from the security manager after the authentication by the security manager succeeds;

authenticating, by a database access unit, the authentication target with the authentication method in response to the authentication request; and

accessing, by the database access unit, a database provided in the portable terminal device depending on the authentication performed by the database access unit, in response to a database access request from the application execution unit.

2. The computer-readable recording medium according to claim 1, wherein:

data in the database is encrypted, and

the database access unit decodes the data stored in the database in response to the database access request from the application execution unit after the authentication by the database access unit succeeds, and outputs the decoded data to the application execution unit.

3. The computer-readable recording medium according to claim 1, wherein:

the security manager outputs a function including the authentication method, as the application execution request, to the application execution unit, and

the application execution unit outputs the authentication method included in the function to the database access unit.

4. The computer-readable recording medium according to claim 1, the security management program causing the computer to further perform:

storing content including an encrypted screen,

wherein the security manager decodes and displays the content when the authentication target is authenticated.

5. The computer readable recording medium according to claim 4, wherein:

the security manager displays the content on a web browser, and outputs an authentication request including the authentication method to the application execution unit in response to a database browsing request entered via the web browser.

6. The computer-readable recording medium according to claim 1, wherein the security manager determines in response to the login request whether offline content exists, and performs online authentication when the offline content does not exist.

7. A security management method for managing security of a portable terminal device, the security management method comprising:

authenticating, by a security manager, a source of a data access with a prepared authentication method in response to a data access request;

outputting, by an application execution unit, a database access request in response to the data access request from the security manager;

authenticating, by a database access unit, the source of the data access with the authentication method in response to the database access request; and

accessing, by the database access unit, a database depending on the authentication performed by the database access unit.

8. A portable terminal device for managing security, comprising:

a database;

a security manager to authenticate an authentication target with a prepared authentication method in response to a login request from the authentication target;

an application execution unit to output an authentication request in response to an application execution request which is output from the security manager after the authentication by the security manager succeeds; and

a database access unit to authenticate the authentication target with the authentication method in response to the authentication request, wherein the database access unit accesses the database depending on the authentication performed by the database access unit in response to a database access request from the application execution unit.