Abstract:
The specification discloses a method for security control of network distant input using caller ID, which uses an ID decoder to decode and extract a caller ID from an incoming message and determine whether the caller ID exists in its database before starting a password checking step. The invention also discloses the corresponding device.

Description:
BACKGROUND OF THE INVENTION  
         [0001]    1. Field of Invention  
           [0002]    The invention relates to a method for security control of network distant input and the corresponding device and, in particular, to a method for security control of network distant input using caller ID and the corresponding device.  
           [0003]    2. Related Art  
           [0004]    Recently, network security techniques have become very important topics in the field of information technology. However, most current information security methods focus on enhancing the protection of firewalls. The firewall can protect against illegal invasion by anonymous persons. On the Internet, the function of the firewall is to prevent illegal users from entering the Intranet of an enterprise. It usually has the function of checking identities. Only verified persons are allowed to enter the Intranet system. At the same time, it also provides the host proxy services inside the enterprise, simplifying the channel from the enterprise Intranet to the Internet.  
           [0005]    For example, in practice, enterprises using the UNIX system in their Intranet can use Windows NT as the software firewall or routers as the hardware filtering network packets. Usually, software firewalls can provide more complicated functions, whereas hardware firewalls have faster processing speeds.  
           [0006]    Though firewall techniques are continuously evolving and improving , computer hackers always find some way to break into systems, committing many hacking related crimes. There is still not an effective solution to this problem . For example, an ex-employee of an IC design and manufacturing company can find a way to use the Internet to log into his former company&#39;s computer system, posing as the supervisor, and change the IC layouts. The company then uses incorrect IC layouts to manufacture its products, and loses money. Therefore, it is important to have a verification mechanism that can verify the true identity of any user.  
         SUMMARY OF THE INVENTION  
         [0007]    The invention provides a method for security control of network distant input using caller ID, which mainly uses an ID decoder to decode and extract the caller ID from an incoming message for the authentication of the caller before performing normal password checking. The purpose is to prevent computer hackers from breaking into the system through some channel or by cracking the password. Any registered user has to use an authorized phone line to connect to the network, achieving the goal of security control of network distant input. 
       
    
    
     BRIEF DESCRIPTION OF THE DRAWINGS  
       [0008]    The present invention will become more fully understood from the detailed description provided below. However, this description is for purposes of illustration only, and thus is not limitative of the present invention, wherein:  
         [0009]    [0009]FIG. 1 shows a structure of conventional security control of network distant input;  
         [0010]    [0010]FIG. 2 shows a structure of security control of network distant input using caller ID according to the invention;  
         [0011]    [0011]FIG. 3 shows a flowchart of security control of network distant input using caller ID according to the invention; and  
         [0012]    [0012]FIG. 4 is a flowchart of automatic connection monitoring according to the invention. 
     
    
     DETAILED DESCRIPTION OF THE INVENTION  
       [0013]    Enterprise network systems often have hosts for distant dialup. Through telephone line connections, data can be transmitted between personal users and the enterprise or between enterprises. As shown in FIG. 1, one party makes a phone call in order to send an incoming call message  10  to the computer host with which the party wishes to connect. Usually, the computer host has a power button  20  coupled to a microcontroller  30 . The microcontroller  30  receives the incoming call message  10  and initiates a verification mechanism to verify the identity of the user. After verification, the user logs on and a power switch  40  is turned on.  
         [0014]    However, conventional security control methods make use of user passwords. If any password is released or cracked, computer hackers can easily invade the computer system illegally. This makes effective security control impossible.  
         [0015]    Therefore, the invention proposes a method for security control of network distant input using caller ID. It utilizes the caller&#39;s telephone ID for identity verification. Only authorized user phones are allowed to connect for users to continue on to conventional password verification. This method provides extra protection for the enterprise computer network system.  
         [0016]    With reference to FIG. 2, one party makes a phone call in order to send an incoming call message  10  to the power on circuit of the computer to be connected with. Usually, the computer has a power button  20  coupled to a microcontroller  30 . However, before the microcontroller  30  receives the incoming call message  10 , an ID decoder  25  verifies whether the ID of the incoming call exists in a database. After the telephone ID is verified, the microcontroller  30  initiates a verification mechanism to verify the user&#39;s identity. Once the user is identified to be legitimate, he can then log into the system and turn on the power switch  40 . Using the method disclosed herein, even if a computer hacker knows any password or is able to crack the password, he still cannot enter the system until he can access the phone line of any authorized user.  
         [0017]    As shown in FIG. 3, the computer host is initially on standby (step  100 ) to wait for any incoming call message. The host system then determines whether the power button is on (step  200 ). If the power button is on, then the person who dials up can directly enter the password verification procedure to determine whether the password provided is correct (step  600 ). If the power button is not on, then the person dialing up sends out an incoming call message (step  300 ). The ID decoder then reads the incoming phone number (step  400 ). Once the caller&#39;s telephone ID is obtained, it is checked with the authorized ones stored in a database (step  500 ). If the database does not contain the caller ID, that means the person dialing up is not using an authorized phone number for connection, and he or she is not able to continue on to the password verification phase. The computer host automatically disconnects with the caller and returns to the standby state (step  100 ). If the caller ID exists in the database, then the user is calling from an authorized phone line and can continue on to the password verification phase to determine whether his password is correct. Once the user&#39;s identity is verified, the power is turned on (step  700 ).  
         [0018]    As shown in FIG. 4, after the user logs onto the computer host, an automatic monitoring program runs to monitor the connection status (step  800 ) and determine whether the connection is broken (step  900 ). As long as the user is not disconnected, the program continues monitoring. Otherwise, the computer host automatically shuts down.  
         [0019]    Certain variations as would be apparent to those skilled in the art are to be considered within the spirit and scope of the claimed invention.