User identification data management scheme for networking computer systems using wide area network

• US 5,944,794 A
• Filed: 10/02/1995
• Issued: 08/31/1999
• Est. Priority Date: 09/30/1994
• Status: Expired due to Fees

• Current Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation)
• Original Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation)
• Inventors: Ishiyama, Masahiro, Shimbo, Atsushi, Okamoto, Toshio
• Primary Examiner(s): Maung, Zarni
• Assistant Examiner(s): Winder, Patrice L.
• Application Number:
  US08/537,594
• Time in Patent Office: 1,429 Days
• Field of Search: 395/187.01, 395/188.01, 395/186, 395/200.06, 395/200.55, 395/200.57, 395/200.47, 395/200.49, 380/23, 380/24, 380/25, 380/49, 380/30, 340/825.34, 364/286.4, 364/286.6, 709/225, 709/227, 709/217, 709/219, 713/201
• US Class Current: 709/225
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: G06F 2221/2137 Time limited access, e.g. to a computer or data
• CPC Class Codes: H04L 63/0846 using time-dependent-passwords, e.g. periodically changing passwords
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals

Abstract

A user identification data management scheme for a networking computer systems formed by a plurality of computers which are mutually connected through a network. In this scheme, at each computer, whether an access request from a user at another computer to each computer is to be permitted or not is judged, and access permission data necessary in checking whether a communication to each computer is from one user at one computer from which an access to each computer by that one user is permitted is generated. The generated access permission data are then stored in a memory. Then, whether an access to each computer is directly made at each computer or indirectly made from another computer through the network is detected, whether that access is proper or not is judged in a case that access is indirectly made, and that access is permitted in a case that access is judged as proper, according to the access permission data stored in the memory.

Claims

1. A computer system having a plurality of computers mutually connected through communication means for enabling communications among said plurality of computers, at least one computer among said plurality of computers being protected from an improper access, the system comprising:

management means for judging whether an access request to said at least one computer from another computer is to be permitted or not according to which one of said plurality of computers said another computer is, and generating access permission data to be used in checking whether a communication to said at least one computer is from one computer of said plurality of computers from which an access to said at least one computer is permitted; and

memory means for storing the access permission data generated by the management means.

2. The computer system of claim 1, wherein said access request indicates a source system identification data, a destination system identification data, and a system identification signature data, and the management means judges by authenticating the system identification signature data.

3. The computer system of claim 2, wherein the system identification signature data is obtained by encrypting the source system identification data and the destination system identification data by using a secret key of said another computer, and the management means authenticates by decrypting the system identification signature data by using a public key of said another computer.

4. The computer system of claim 2, wherein the system identification signature data is obtained by encrypting the source system identification data and the destination system identification data by using a secret key of said another computer and a public key of said at least one computer, and the management means authenticates by decrypting the system identification signature data by using a public key of said another computer and a secret key of said at least one computer.

5. The computer system of claim 1, wherein when the management means judges said access request to be permitted, the management means generates the access permission data including a key data to be used in a communication from said another computer to said at least one computer.

6. The computer system of claim 5, wherein the management means also notifies the key data to said another computer by encrypting the key data.

7. The computer system of claim 1, further comprising:

detection means for detecting whether a communication to said at one computer is directly made at said at least one computer or indirectly made from said another computer through the communication means, checking whether the communication is a proper access or not according to the access permission data stored in the memory means in a case the communication is indirectly made, so as to permit the proper access.

8. The computer system of claim 7, wherein the memory means stores a set of an external user identification data of one user at said one computer, and an external system identification data of said one computer;

and

the detection means judges said access as proper when the memory means stores a set of the external user identification data and the external system identification data coinciding with a user identification data and a system identification data indicated by communication data of said access.

9. The computer system of claim 8, wherein the memory means also stores an internal user identification data for said one user at said at least one computer corresponding to a set of the external user identification data and the external system identification data;

and

said at least one computer also has conversion means for converting a user identification data indicated by communication data of said access into the internal user identification data corresponding to the external user identification data which coincides with a user identification data indicated by communication data of said access, when the detection means judges said access as proper.

10. The computer system of claim 8, wherein the memory means also stores a key data corresponding to the external user identification data and the external system identification data;

and

said at least one computer also has data modification means for modifying communication data of said access by using the key data corresponding to the external user identification data which coincides with a user identification data indicated by communication data of said access when the detection means judges said access as proper.

11. The computer system of claim 7, wherein the memory means also stores a key data in correspondence to the access permission data for one user at said one computer;

and

said at least one computer also has data modification means for modifying communication data of said access by using the key data when the detection means judges said access as proper according to the access permission data.

12. The computer system of claim 11, wherein the key data is distributed among said at least one computer and said another computer in advance, the communication data of said access from said one computer contains a message authentication code generated from the key data, and the detection means also judges whether said access is proper or not by generating a message authentication code from the key data stored in the memory means and comparing a generated message authentication code with a message authentication code contained in the communication data of said access.

13. The computer system of claim 11, wherein the key data is distributed among said at least one computer and said another computer in advance, the communication data of said access from said one computer is encrypted by the key data, and the data modification means decrypts the communication data of said access by using the key data stored in the memory means.

14. The computer system of claim 7, wherein the memory means also stores a valid period of a communication from another user at said one computer to said at least one computer;

and

the detection means judges said access as proper according to the valid period stored in the memory means.

15. The computer system of claim 7, wherein each of said plurality of computers is managed according to a user identification data, and when said access is indirectly made, the detection means also detects whether said another computer is a computer managed according to a user identification data by which said at least one computer is managed or a computer managed according to another user identification data different from the user identification data by which said at least one computer is managed, and judges whether said access is proper or not in a case said access is made from a computer managed according to another user identification data.

16. The computer system of claim 1, wherein the management means judges whether the access request is to be permitted or not based also on a user who makes the access request, and generates the access permission data which is also to be used in checking whether the communication is by one user who is permitted to access said at least one computer.

17. The computer system of claim 16, further comprising storage means for storing access permission conditions indicating every combination of a user and a computer which is to be permitted to make an access to said at least one computer, such that the management means judges according to the access permission conditions stored in the storage means.

18. The computer system of claim 17, wherein the access permission conditions specify a user identification data for said one user at said at least one computer, and the management means judges by comparing the access permission conditions with a user identification data of a user at said at least one computer indicated by said access request.

19. The computer system of claim 18, wherein the access permission conditions also specify a system identification data for said one computer, and the management means judges by also comparing the access permission conditions with a system identification data of said another computer indicated by said access request.

20. The computer system of claim 18, wherein the access permission conditions also specify a temporary password for said one user at said one computer, and the management means judges by also comparing the access permission conditions with a temporary password of a user at said another computer indicated by said access request.

21. The computer system of claim 20, wherein the temporary password is issued to said one user at said at least one computer in advance, and said one user sends said access request from said another computer by specifying the temporary password issued at said at least one computer.

22. The computer system of claim 18, wherein the access permission conditions also specify a valid period of a communication from said one user at said another computer to said at least one computer, and when the management judges said access request to be permitted, the management means generates the access permission data including a user identification data for said user at said at least one computer and the valid period.

23. The computer system of claim 22, wherein the valid period is determined according to a personal schedule of said one user specified by said one user at said at least one computer in advance.

24. The computer system of claim 16, further comprising storage means for storing access permission conditions indicating a user identification data for one user at said at least one computer, said access request indicates a destination user identification data and a user identification signature data, and the management means judges by authenticating the user identification signature data and comparing the destination user identification data with the user identification data indicated by the access permission conditions stored in the storage means.

25. The computer system of claim 24, wherein the user identification signature data is obtained by encrypting the destination user identification data by a secret key of said user, and the management means authenticates by decrypting the user identification signature data by using a public key of said user.

26. The computer system of claim 24, wherein said access request also indicates a source user identification data.

27. The computer system of claim 26, wherein the user identification signature data is obtained by encrypting the source user identification data and the destination user identification data by a secret key of said user, and the management means authenticates by decrypting the user identification signature data by using a public key of said user.

28. The computer system of claim 26, wherein when the management means judges said access request to be permitted, the management means generates the access permission data including a system identification data for said another computer, and a user identification data for said user at said another computer.

29. The computer system of claim 28, wherein the management means generates the access permission data which also includes a user identification data for said user at said at least one computer.

30. The computer system of claim 28, wherein the access permission conditions also specify a valid period of a communication from said one user at said another computer to said at least one computer, and the management means generates the access permission data which also includes the valid period.

31. The computer system of claim 1, further comprising:

checking means for checking whether the communication to said at least one computer is a proper access or not according to the access permission data stored in the memory means, so as to permit the proper access.

32. A computer system, comprising:

a plurality of computer groups mutually connected through a network for enabling communications among said plurality of computer groups, wherein said plurality of computer groups includes at least one computer group having;

a data management server for judging whether an access request to a computer of said at least one computer group from a computer of another computer group is to be permitted or not according to which one of said plurality of computer groups said another computer group is, and generating access permission data to be used in checking whether a communication to a computer of said at least one computer group is from a computer of one of said plurality of computer groups from which an access to the computer of said at least one computer group is permitted; and

a security gateway including;

a memory for storing a key data in correspondence to the access permission data generated by the data management server; and

a unit communicatively connected to the memory, the unit checking whether a communication to a computer of said at least one computer group is a proper access or not according to the access permission data, so as to permit the proper access while modifying communication data of the proper access by using the key data.

33. The computer system of claim 32, wherein the security gateway is divided into a filtering router having functions of said checking and the memory, and a data processing server having functions of the memory and said modifying.

34. The computer system of claim 32, wherein the data management server judges whether the access request is to be permitted or not based also on a user who makes the access request, and generates the access permission data which is also to be used in checking whether the communication is by one user who is permitted to access said at least one computer.

35. A computer in a computer system formed by a plurality of computers mutually connected through a network for enabling communications among said plurality of computers, said computer comprising:

a management unit for judging whether an access request to said computer from another computer is to be permitted or not according to which one of said plurality of computers said another computer is, and generating access permission data to be used in checking whether a communication to said computer is from one of said plurality of computers from which an access to said computer is permitted; and

a memory communicatively connected to the management unit, the memory storing the access permission data generated by the management unit.

36. The computer of claim 35, further comprising:

a checking unit communicatively connected to the memory, the checking unit for checking whether the communication to said computer is a proper access or not according to the access permission data stored in the memory so as to permit the proper access.

37. A computer system, comprising:

a plurality of computers mutually connected through communication means for enabling communications among said plurality of computers, wherein said plurality of computers include at least one computer having;

detection means for detecting whether an access to said at least one computer is directly made at said at least one computer or indirectly made from another computer through the communication means, judging whether said access is proper or not in a case said access is indirectly made, and permitting said access in a case said access is judged as proper;

memory means for storing a set of an external user identification data of one user at one computer from which an access to said at least one computer by said one user is to be permitted, an external system identification data of said one computer, and an internal user identification data for said one user at said at least one computer, such that the detection means judges said access as proper when the memory means stores a set of the external user identification data and the external system identification data coinciding with a user identification data and a system identification data indicated by communication data of said access; and

conversion means for converting a user identification data indicated by communication data of said access into the internal user identification data corresponding to the external user identification data which coincides with a user identification data indicated by communication data of said access, when the detection means judges said access as proper.

38. A computer system, comprising:

a plurality of computers mutually connected through communication means for enabling communications among said plurality of computers, wherein said plurality of computers include at least one computer having;

storage means for storing access permission conditions indicating a set of an external user identification data of one user at one computer from which an access to said at least one computer by said one user is to be permitted, an external system identification data of said one computer, and an internal user identification data for said one user at said at least one computer;

detection means for detecting whether an access to said at least one computer is directly made at said at least one computer or indirectly made from another computer through the communication means;

management means for judging whether said access from a user at said another computer to said at least one computer is to be permitted or not in a case said access is indirectly made, and permitting said access in a case said access is judged to be permitted, the management means judges by authenticating a source system identification data of said another computer, obtaining a source user identification data encrypted by a secret key of said another computer, authenticating the source user identification data by decrypting the source user identification data by using a public key of said another computer, and checking the access permission conditions stored in the storage means for authenticated source user identification data and source system identification data; and

conversion means for converting a user identification data indicated by communication data of said access into the internal user identification data corresponding to the external user identification data which coincides with a user identification data indicated by communication data of said access, when the detection means judges said access as proper.

39. A method of managing a computer system formed by a plurality of computers which are mutually connected through a network, the method comprising the steps of:

judging whether an access request to one computer from another computer is to be permitted or not according to which one of said plurality of computers said another computer is;

generating access permission data to be used in checking whether a communication to said one computer is from a computer from which an access to said one computer is permitted; and

storing the access permission data in a memory.

40. The method of claim 39, wherein the judging step judges whether the access request is to be permitted or not based also on a user who makes the access request, and the generating step generates the access permission data which is also to be used in checking whether the communication is by one user who is permitted to access said at least one computer.

41. The method of claim 39, further comprising the step of:

checking whether the communication to said one computer is a proper access or not according to the access permission data stored in the memory, so as to permit the proper access.

42. The method of claim 41, wherein the storing step stores the access permission data including a key data, and the checking step modifies the communication data of the proper access by using the key data stored in the memory.

43. The method of claim 39, further comprising the steps of:

detecting whether a communication to said one computer is directly made at said one computer or indirectly made from another computer through the network; and

checking whether the communication to said one computer is a proper access or not according to the access permission data stored in the memory in a case the communication is indirectly made, so as to permit the proper access.

44. A method of establishing a data communications session between a user at a first computer and a second computer, the second computer being a part of a local area network, the first computer not being a part of the local area network but being capable of connecting with the local area network via a wide area network, the user having a first ID code for accessing the first computer, and the user having a second ID code for accessing the second computer when the user is accessing the second computer within the local area network, the method comprising the steps of:

a) sending a command from the user to the first computer to set up the data communications session with the second computer;

b) transmitting, from the first computer, a request to the second computer to set up the data communications session with the second computer, the request having associated data including;

i) a transmission source network address of the first computer used to access the first computer via the wide area network, ii) the first ID code of the user, iii) a destination network address of the second computer used to access the second computer via the wide area network, iv) the second ID code of the user, v) a unique signature code of the first computer, and vi) a unique signature code of the second computer, the unique signature code of the first computer being encrypted by a public key of the first computer that is also known to the second computer, the unique signature code of the second computer being encrypted by a secret key of the user known only to the user and the second computer;

c) receiving the request at the second computer, and authenticating the request by the following substeps;

c1) determining whether the request is being made by the user at the first computer, the determination being made by the second computer from the associated data included in the request;

c2) determining whether the request has been received within a period of time that the user is allowed to access the second computer from the first computer, the period of time being stored as access permission data in a memory at the second computer;

c3) if the request has been received within the allowed period of time as determined in the step c2), transmitting, from the second computer to the first computer, a session allowable message which includes a session ID for allowing the data communications session and transmitting the session ID to the user at the first computer, the session allowable message including;

i) a temporary cipher key for use by the user at the first computer for accessing the second computer only during the data communications session using the session ID, ii) the unique signature code of the first computer, and iii) the unique signature code of the second computer; and

c4) checking, by the first computer, to determine whether the session allowable message is a valid message sent from the second computer, the checking being made by determining if the unique signature code of the first computer and the unique signature code of the second computer as contained in the session allowable message are valid, the unique signature code of the first computer being decrypted at the first computer by using the public key of the first computer, the unique signature code of the second computer being decrypted at the first computer by using the secret key of the user.

45. A method of managing a computer system formed by a plurality of computers which are mutually connected through a network, comprising the steps of:

judging whether an access request for a communication to one computer from a user at another computer is to be permitted or not according to which one of said plurality of computers said another computer is;

generating access permission data to be used in checking whether each communication to said one computer corresponds to the access request judged to be permitted;

storing the access permission data including a key data stored in a memory; and

checking whether the communication to said one computer is a proper access or not according to the access permission data stored in the memory, so as to permit the proper access while modifying communication data of the proper access by using the key data stored in the memory.