Security device

[Detailed Description of the Invention]

[Industrial Application] The present invention relates to the security device used for the online information processing system which exchanges data between an information processor and a terminal using a communication line. [Description of the Prior Art] An online information processing system is used for financial-related business, for example, information processors, such as an electronic computer, and terminals, such as a personal computer, are tied with a communication line, respectively, and the data of a customer's deposited sum, a password, etc. is transmitted to it. When an information processor and a terminal are connected, the transmission control system between these devices is set up. This transmission control system has the regulation of the access speed and synchro system of data, transmission numerals, etc. sent out to a communication line. Among these, the access speed of data expresses the capacity of the data transmitted to unit time, and is denoted by the unit of a bit/second. There are a Preparation type and a synchronous method in a synchro system, among these a Preparation type adds a start pit and a stop bit to the head and the last of a frame which are transmitted, respectively, and it is used when performing low-speed degree transmission whose access speed is from 200 bits per second to 1200 bits per second. Another synchronous method is used when the access speed performs high-speed transmission of 2400 bits per second or more. There are the JIS (Japanese engineering standard specification) code, an ASCII code (information exchange U.S. standard code), etc. in transmission numerals, and it is used in order to decide transmission control procedures. In the former, when connecting a terminal with an information processor, it in the case of sending data to an information processor from the transmission control system and terminal in the case of sending data to a terminal from an information processor was set as the same method. When the data transmitted is a program after completing connection between an information processor and a terminal, compile, i.e., a program, is made into the form which is easy to change into a machine language in an addressee by changing a part of ASCII code system for the command (command) of the program. In this case, in order that access speed may change only a part of numerals method, namely, may change a protocol (transmission control procedures) among transmission control systems, without changing, the transmission control system of data is still the state where it fixed. [Problem(s) to be Solved by the Invention] Thus, the conventional data-communications control method had set the method which sends data to a terminal from an information processor, and the method which sends data to an information processor from a terminal as the same method. For this reason, the middle of the communication line which ties an information processor and a terminal, respectively is cut, by connecting this to a personal computer, this transmission control system can be analyzed and the data sent to a communication line can be stolen. For this reason, there is a possibility that the contents of secret-like of the data transmitted to the communication line may leak diplomatically. Then, the object of the present invention is to provide the security device considered so that the data transmitted to the communication line which ties an information processor and a terminal, respectively might not leak diplomatically. [Means for Solving the Problem] Terminal 11 which inputs predetermined data using a keyboard with which this was equipped as the present invention is theoretically shown in Drawing 1, Information processor 12 which performs predetermined information processing by receiving data inputted into this terminal 11, Going-up communication line 13 for transmitting data inputted into terminal 11 to information processor 12, It gets down for returning data to terminal 11 from information processor 12, and is with communication line 14, Transmission control system initial setting means 15 which goes up a transmission control system decided beforehand, and gets down with communication line 13, and it sets to communication line 14 respectively in first stage, Transmission control system registration means 16 gets down with a going-up transmission control system which is formed in information processor 12, is gone up by going-up communication line 13 and a user that gets down and uses communication line 14, and is set as communication line 13, and set to communication line 14 to get down and to register a transmission control system, respectively, Connection request means 17 which a user inputted using terminal 11 goes up user identification data which it has peculiar, and sends out to information processor 12 using communication line 13, and connection verifying means 18 which checks whether user identification data corresponds to a user, If it is checked that user identification data has been sent out by user by this connection verifying means 18, While changing a transmission control system beforehand set as going-up communication line 13 according to a going-up transmission control system registered into transmission control system registration means 16 A security device is made to possess transmission control system alteration means 19 which changes a transmission control system which got down beforehand according to the going-down transmission control system, and was set as communication line 14. That is, the present invention can change a transmission control system which got down with a going-up transmission control system beforehand registered into transmission control system registration means 16, went up according to a transmission control system, and got down with communication line 13 and in which initial setting was done to communication line 14 by user, respectively. Therefore, a respectively separate transmission control system can be set to going-up communication line 13 and going-down communication line 14 which tie terminal 11 and information processor 12. For this reason, if a transmission control system which got down with going-up communication line 12, and was set to communication line 13, respectively is not analyzed separately, data transmitted to these is unreceivable. Thereby, security of data transmitted to these communication lines can be carried out. [Example] A detailed description of the invention is carried out per example below. Drawing 2 shows the composition of the online information processing system used as a security device in one example of the present invention. Between terminal system 21 and information processing system 22, it gets down with going-up communication line 23, and communication line 24 is connected. Terminal 25 is provided in terminal system 21. A terminal side upstream interface part 26 and terminal side gets down to this terminal 25, and circuit interface part 27 is connected. A terminal side upstream interface part 26 and terminal side gets down, and the transmission control system for connecting terminal 25 and information processing system 22 by a user is set up in circuit interface part 27. Information processor 28 is formed in information processing system 22. In information processor 28, the same method as the transmission control system set as terminal side upstream interface part 26 at terminal 25 is set as information processor side upstream interface part 29. In an information processor side, the same method as the transmission control system as for which the terminal side got down at terminal 25 and which was set as circuit ink face part 27 gets down, and is set as circuit interface part 31. Drawings 3 and 4 show the procedure in which the security device used for the online information processing system shown in Drawing 2 performs online information processing. Among these, Drawing 3 shows the procedure in which a terminal performs online information processing, and Drawing 4 shows the procedure in which an information processor performs online information processing. A terminal side upstream interface part [ in terminal system 21 ] 26 and terminal side gets down, and initial setting of the transmission control system is done to circuit interface part 27 by the user, respectively (Drawing 3; Step ■). If initial setting of the circuit interface part by the side of terminal system 21 is completed, an information processor side upstream interface part [ in information processing system 22 ] 29 and information processor side will get down, and initial setting of the transmission control system will be carried out to circuit interface part 31, respectively (Drawing 4; Step ■). In this case, it gets down with the transmission control system of going-up communication line 23, and it of communication line 24 is set up identically. The transmission control system set up at this time shall be 300 bits per second in access speed, makes the modulation method of the data transmitted a frequency modulation method, makes a synchro system a start/stop system, and uses parity numerals for transmission numerals as numerals for performing error control using the JIS code. If these setup is completed, in order to perform connection procedure which considered the security of terminal 25 and information processor 28, The user identification data constituted with the TD (discernment) code and the password (watchword) using the keyboard which a terminal does not illustrate by a user is inputted (Drawing 3; Step ■). User identification data goes up from terminal side upstream interface part 26, passes along communication line 23, and is sent to information processor side upstream interface part 29. The user identification data sent to information processor side upstream interface part 29 is memorized by the user memory measure in information processing system 22 which is not illustrated. This user identification data is checked by information processor 28, and it is checked whether the connection demand from terminal 25 is just (Drawing 4; Step ■). the case where he is not a user to whom the user identification data sent from the terminal system 21 side corresponds when this connection demand is not just -- (-- the circuit of 4th [ The ] figure; step ■;N) and uphill communication line 23 grade is made into Disconnect, and it ends (Drawing 4; Step ■). Then, setting control of this transmission control system is completed. case a connection demand is just -- (-- Drawing 4; -- in an information processor side, step ■;Y) and the completion data of connection (not shown) get down, send and get down from circuit interface part 31, and are sent out to terminal system 21 through communication line 24 (Drawing 4; Step ■). The completion data of connection which the terminal side in terminal system 21 got down, and the information processing * device side got down by circuit interface part 27, got down from circuit interface part 31, and has passed along communication line 24 is received (Drawing 3; Step ■). In information processing system 22, after the completion data of connection is sent out to terminal system 21, the going-up transmission control system of going-up communication line 23 beforehand registered by the user with information processor 28 is set as information processor side upstream interface part 29. Going-down communication line 24 which was mentioned above and which was beforehand registered by the user gets down, and an information processor side gets down and it sets a transmission control system as circuit interface part 31 (Drawing 4; Step ■). On the other hand, in terminal system 21, after the completion data of connection sent from information processing system 22 receives, the going-up transmission control system of going-up communication line 23 beforehand registered by the user with terminal 25 is set as terminal side upstream interface part 26. Going-down communication line 24 beforehand registered by the user gets down, a terminal side gets down from a transmission control system, and it is set to circuit interface part 27 (Drawing 3; Step ■). The going-up transmission control system set as going-up communication line 23, Access speed shall be 1200 bits per second, the modulation method of the data transmitted is made into a frequency modulation method, a synchro system is made into a start/stop system, and parity numerals are used for transmission numerals as numerals for performing error control using a code coding code. The going-down transmission control system which gets down and is set as communication line 24, Access speed shall be 2400 bits per second, the modulation method of the data transmitted is made into a synchro system as phase encoding, and a cyclic code (CRC) method is used for transmission numerals as numerals for performing error control using a code coding code. If it gets down with going-up communication line 23 and the going-up transmission control system which gets down and is set up corresponding to communication line 24, respectively and both transmission control systems correspond to the transmission control system which the user registered beforehand, transmission and reception of data will be performed between terminal system 21 and information processing system 22. [Effect of the Invention] Thus, in the present invention, the transmission control system by which got down with the uphill communication line and initial setting was carried out to the communication line can be separately changed according to the transmission control system which the user registered, respectively. For this reason, since it can get down with an uphill communication line and a transmission control system with a communication line can be made into a thing different, respectively, security of the data transmitted to these communication lines can be carried out. Thereby, the reliability of an online information processing system improves.

[Brief Description of the Drawings]

Drawing 1 is a block diagram showing the theoretic composition of the security device in one example of the present invention, Drawing 2 is a system configuration figure showing the composition of the online information processing system used as a security device in one example of the present invention, The flow chart showing the procedure in which the terminal in which Drawing 3 was shown in Drawing 2 performs online information processing, and Drawing 4 are flow charts showing the procedure in which the information processor shown in Drawing 2 performs online information processing. 11 ...... terminal, 12 ...... information processor, 13 ...... an uphill communication line and 14 ...... It gets down and is a communication line, 15 ...... transmission control system initial setting means, 16 ...... transmission control system registration means, 17 ...... connection request means, 18 ...... connection verifying means, 19 ...... transmission control system alteration means. - Applicant NEC Corp.