ãã®èšäºãèªãããšã§åããã¡ãªãããšçµè«
çµè«ããèšããšãJã¡ãŒã«ã¢ã«ãŠã³ãã®å®å
šæ§ãé«ããããã«ã¯ã2段éèªèšŒïŒ2FAïŒããæã广çãªææ®µã®äžã€ã§ããæ¬èšäºã§ã¯ãJã¡ãŒã«ã§2段éèªèšŒã確èªã»èšå®ããæ¹æ³ïŒSMSãèªèšŒã¢ããªã®äžè¬çæé ïŒãè§£é€ã»ãã©ãã«å¯Ÿå¿ïŒç«¯æ«çŽå€±ã»é»è©±çªå·å€æŽã»å±ããªãèªèšŒã³ãŒãïŒããããŠããJã¡ãŒã«ã«ãã€ãã£ããª2FAãç¡ãå Žåã®ä»£æ¿ã»ãã¥ãªãã£å¯ŸçïŒãã¹ã¯ãŒãéçšãã¡ãŒã«éç¥ããã°ã€ã³å±¥æŽã®ç¢ºèªããœãŒã·ã£ã«ãã°ã€ã³ã®ç®¡çãªã©ïŒããå
·äœäŸãšäœéšã亀ããŠäžå¯§ã«è§£èª¬ããŸããèªããšãä»ããã§ããå®å
šå¯Ÿçãåãããã¢ã«ãŠã³ãä¹ã£åãã®ãªã¹ã¯ã倧å¹
ã«äžããããŸãã
Jã¡ãŒã«ã®2段éèªèšŒã¯äœ¿ããïŒå®å¿ããŠäœ¿ãããã®ãã€ã³ããšããã³ãC Jã¡ãŒã«ãéžã¶çç±
Jã¡ãŒã«ã䜿ããšãã«æ°ã«ãªãã®ããã2段éèªèšŒã¯ããã®ãããå®å
šã«äœ¿ããã®ãããšããç¹ã§ã¯ãªãã§ããããã
çµè«ãããããšãJã¡ãŒã«ãå©çšãããªãããŸãã¯
ç»é²æã®æ
å ±ç®¡çããã°ã€ã³æ
å ±ã®æ±ãã«æ³šæãã€ã€ãã¢ã«ãŠã³ãä¿è·ã®èšå®ã確èªããããšã倧åã§ããããããŠãå®å¿ããŠåºäŒããæ¢ããã人ã«ã¯ã䜿ãããããšéå¶ã®ãããããããéèŠã§ãã
ãã³ãC Jã¡ãŒã«ãåè£ã«ãªããŸãã
ãã®èšäºã§ã¯ãJã¡ãŒã«ã®2段éèªèšŒã«é¢ããŠç¥ãããããšãæ°ãã€ãããããšããããŠä»ãµãŒãã¹ãšæ¯ã¹ããšãã®éžã³æ¹ãŸã§ãé çªã«ãããããã解説ããŸãã
Jã¡ãŒã«ã®2段éèªèšŒã§ç¥ã£ãŠããããããš
ãŸã確èªãããã®ã¯ã2段éèªèšŒããããã©ããã ãã§ãªãã
ã©ããªåœ¢ã§æ¬äººç¢ºèªãã¢ã«ãŠã³ãä¿è·ãè¡ãããŠãããã§ãã
äžè¬çã«ã2段éèªèšŒã¯ããã¹ã¯ãŒãã«å ããŠã远å ã®ç¢ºèªãè¡ãä»çµã¿ãã§ãã
ããšãã°ããã°ã€ã³æã«èªèšŒã³ãŒããæ±ããã¿ã€ãããSMSèªèšŒã䜿ãã¿ã€ãããããŸããããããããšããããã¹ã¯ãŒããæŒããŠããäžæ£ãã°ã€ã³ãé²ãããããªããŸãã
ãã ããåºäŒãç³»ãµãŒãã¹ã§ã¯ã2段éèªèšŒã®æç¡ã ãã§å®å
šæ§ã倿ããã®ã¯ååã§ã¯ãããŸããã
次ã®ãããªç¹ãããããŠç¢ºèªããã®ã倧åã§ãã
- äŒå¡ç»é²æã®ç¢ºèªæ¹æ³
- ãã°ã€ã³æ
å ±ã®ç®¡ç
- éäŒãåç»é²ã®ãããã
- äžæ£å©çšãžã®å¯Ÿç
- ãµããŒãäœå¶ã®ãããããã
ã€ãŸãã
ã2段éèªèšŒãããããã ãã§ãªãããå®å¿ããŠäœ¿ããéå¶ãããéèŠãšããããšã§ãã
ãããããJã¡ãŒã«ã䜿ãäººãæ°ã«ãã¹ããã€ã³ã
Jã¡ãŒã«ã®ãããªãµãŒãã¹ã䜿ããšããå€ãã®äººãäžå®ã«æãã®ã¯æ¬¡ã®3ã€ã§ãã
1. å人æ
å ±ã倧äžå€«ã
ç»é²æã«ã¯ãããã¯ããŒã ã幎霢確èªãªã©ãäžå®ã®æ
å ±ãå¿
èŠã«ãªãããšããããŸãã
ãã®ããããŸãã¯
å¿
èŠä»¥äžã«å人æ
å ±ãåºããªãããšãåºæ¬ã§ãã
2. ãªãããŸããæªè³ªãŠãŒã¶ãŒãããªãã
åºäŒãç³»ãµãŒãã¹ã§ã¯ãçå£ãªå©çšè
ã ãã§ãªããå¶æ¥ç®çãäžæ£ãªç®çã®ãŠãŒã¶ãŒãçŽã蟌ãå¯èœæ§ããããŸãã
ã ããããã幎霢確èªãç£èŠäœå¶ãæŽã£ãŠãããã¯éèŠã§ãã
3. ãã°ã€ã³æ
å ±ãå®ããã
2段éèªèšŒããããšå®å¿æã¯é«ãŸããŸããããã¹ã¯ãŒãã®äœ¿ãåãããããã端æ«ã®ããã¯ãããããšãã£ãåºæ¬å¯Ÿçãæ¬ ãããŸããã
å®å
šã«äœ¿ããªãããµãŒãã¹åŽã®ä»çµã¿ãšèªåã®å¯Ÿçãäž¡æ¹ããããã®ãæ£è§£ã§ãã
ã©ããªäººã«Jã¡ãŒã«ãåããŠããã
Jã¡ãŒã«ã¯ãåºäŒããæ¢ãããããã©ããããªãéããããµãŒãã¹ã¯é¿ããã人ã«åããŠããŸãã
ãšãã«æ¬¡ã®ãããªäººã«äœ¿ããããã§ãããã
- æ°è»œã«å§ããã
- èªåã®ããŒã¹ã§çžæãæ¢ããã
- äœ¿ãæ¹ããããããããµãŒãã¹ãéžã³ãã
- ãŸãã¯å®å¿ã§ããç°å¢ã§è©ŠããŠã¿ãã
äžæ¹ã§ã
ã»ãã¥ãªãã£ã®åŒ·ããæåªå
ããã人ãã
æ©èœãå€ããŠã峿 ŒãªèªèšŒãéèŠããã人ã¯ãä»ã®ãµãŒãã¹ãšæ¯èŒããªããéžã¶ã®ãããããã§ãã
ç«¶åãµãŒãã¹ãšæ¯ã¹ããšãã®éžã³æ¹
åºäŒãç³»ãµãŒãã¹ãéžã¶ãšãã¯ãåçŽã«ãæåã ãããã§æ±ºãããããæ¬¡ã®èгç¹ã§æ¯ã¹ããšå€±æãã«ããã§ãã
1. å®å
šæ§ã®ãããããã
- 幎霢確èªã®ä»çµã¿ãæç¢ºã
- äžæ£å¯Ÿçãæ¡å
ãããŠããã
- é£çµ¡å
ã®ç®¡çããã©ã€ãã·ãŒãžã®é
æ
®ãããã
2. 䜿ãããã
- ç»é²ããå©çšéå§ãŸã§ãã¹ã ãŒãºã
- ç»é¢ãèŠãããã
- åå¿è
ã§ãæäœããããã
3. å©çšç®çãšã®çžæ§
- æ°è»œãªåºäŒãåãã
- ãã£ããçžæãæ¢ãã®ã«åããŠããã
- å°åã幎霢局ãèªåã«åã£ãŠããã
4. ã³ã¹ãæ
- æéäœç³»ãããããããã
- ç¡é§ãªèª²éãçºçãã«ããã
- å¿
èŠãªæ©èœã ãã§äœ¿ããã
ãã®4ã€ãèŠãŠãããšãèªåã«åããµãŒãã¹ãããªãçµãããããªããŸãã
ãã³ãC Jã¡ãŒã«ãããããããçç±
Jã¡ãŒã«ãæ€èšããŠãã人ã«ã¯ã
ãã³ãC Jã¡ãŒã«ãéžæè¢ã«ãªããŸãã
ããããããããçç±ã¯ãã¯ãããŠã§ã䜿ãããããåºäŒããæ¢ãå
¥å£ãšããŠåãå
¥ããããããã§ãã
1. ã¯ãããŠã§ãæµãããããããã
åºäŒãç³»ãµãŒãã¹ã¯ãç»é²æ¹æ³ãæ¬äººç¢ºèªãè€éã ãšãããã ãã§é¢è±ãããããªããŸãã
ãã®ç¹ããã³ãC Jã¡ãŒã«ã¯ã
ãŸãå§ããŠã¿ãã人ã«ãšã£ãŠå©çšã®æµããã€ãã¿ãããã®ãé
åã§ãã
2. èªåã®ããŒã¹ã§äœ¿ãããã
åºäŒããæ¢ããšãã¯ãçŠã£ãŠäœ¿ãããããèªåã®éœåã«åãããŠçžæãèŠãããããšã倧åã§ãã
ãã³ãC Jã¡ãŒã«ã¯ãç¡çã«æ¥ãããçžæ§ãèŠãªããé²ããã人ã«åã£ãŠããŸãã
3. å®å
šé¢ãæèããŠäœ¿ãããã
2段éèªèšŒãèªèšŒãŸãããæ°ã«ãã人ã¯ãå°ãã§ãå®å¿ã§ããéçšãã§ããããéèŠããŸãã
ãã³ãC Jã¡ãŒã«ãéžã¶ãšããã
ãã°ã€ã³æ
å ±ã®ç®¡çã幎霢確èªããããã£ãŒã«ã®èŠæ¥µããæèããããšã§ãããå®å¿ããŠäœ¿ãããããªããŸãã
Jã¡ãŒã«ãå®å¿ããŠäœ¿ãããã®ãã§ãã¯ãã€ã³ã
å©çšåã«ã次ã®ç¹ã確èªããŠãããšå®å¿ã§ãã
- ãã¹ã¯ãŒãã䜿ãåããŠããªãã
- 端æ«ã®ããã¯ãèšå®ããŠããã
- 幎霢確èªãªã©å¿
èŠãªæç¶ããæžãŸããŠããã
- å人æ
å ±ãåºããããŠããªãã
- äžå¯©ãªã¡ãã»ãŒãžã«åå¿ããããŠããªãã
ãšãã«ããã°ã€ã³æ
å ±ã®ç®¡çã¯ãšãŠã倧åã§ãã
2段éèªèšŒã䜿ããå Žåã¯å¿
ãæå¹ã«ãã䜿ããªãå Žåã§ãã
匷ããã¹ã¯ãŒãèšå®ãšç«¯æ«ç®¡çã§è£ãããã«ããŸãããã
ãããªäººã«ã¯ãã³ãC Jã¡ãŒã«ããããã
- Jã¡ãŒã«ãå®å¿ããŠäœ¿ããã
- ãŸãã¯äœ¿ãããããéèŠããã
- é床ã«é£ããæ©èœãããã·ã³ãã«ããæ±ãã
- èªåã«åãçžæãç¡çãªãæ¢ããã
- å®å
šé¢ã«ãæ°ãé
ããªããåºäŒããæ¥œãã¿ãã
ãã®ãããªäººãªãããã³ãC Jã¡ãŒã«ã¯ããªãçžæ§ãè¯ãã¯ãã§ãã
ãŸãšã
Jã¡ãŒã«ãéžã¶ãšãã¯ã2段éèªèšŒã®æç¡ã ãã§ãªãã
å®å
šæ§ã䜿ãããããéå¶ã®ãããããããŸã§å«ããŠèŠãããšã倧åã§ãã
åºäŒãç³»ãµãŒãã¹ã¯ãå®å¿ããŠäœ¿ããããšãäœããéèŠãã ãããããèªåã§ã§ããã»ãã¥ãªãã£å¯Ÿçããã€ã€ã䜿ãããããµãŒãã¹ãéžã¶ã®ãæ£è§£ã§ãã
ãã®ããã§ãæ°è»œã«å§ãããããèªåã®ããŒã¹ã§äœ¿ãããããµãŒãã¹ãæ¢ããŠãããªãã
ãã³ãC Jã¡ãŒã«ã¯æåãªéžæè¢ã«ãªããŸãã
ãŸãã¯ãå®å¿ããŠäœ¿ããç°å¢ãæŽããããã§ãç¡çãªãåºäŒãæ¢ããå§ããŠã¿ãŠãã ããã
1. ãŸãçµè«ïŒJã¡ãŒã«ã«2段éèªèšŒã¯ããã®ïŒç¢ºèªã®ä»æ¹ãšãã€ã³ãïŒå®å¿ããŠäœ¿ãããã«ïŒ
ãŸãäžçªç¥ãããããšã«çããŸãããµã€ãåŽã®æ©èœã¯é »ç¹ã«å€ããããããJã¡ãŒã«ã«2段éèªèšŒïŒ2FAïŒãå®è£
ãããŠããããã¯å
¬åŒã®ãèšå®ããããã«ãïŒãããã質åïŒãã確èªããã®ã確å®ã§ãããã°ã€ã³èšå®ãã»ãã¥ãªãã£èšå®ã«ã2段éèªèšŒããäºæ®µéèªèšŒãã2FAããã¯ã³ã¿ã€ã ãã¹ã¯ãŒãïŒOTPïŒããšãã£ãé
ç®ãããã°ããããæå¹åã®å
¥å£ã«ãªããŸãã衚瀺ãç¡ããã°ãçŸæç¹ã§ãã€ãã£ããª2FAãæäŸãããŠããªãå¯èœæ§ãé«ãã®ã§ããã®å Žåã¯ä»£æ¿çïŒåŸè¿°ïŒãè¬ããŠãã ããã
ç¢ºèªæé ïŒç°¡åïŒ
- Jã¡ãŒã«ã«ãã°ã€ã³ â ãã€ããŒãžãŸãã¯ã¢ã«ãŠã³ãèšå®ãž
- ãã»ãã¥ãªãã£ããã¢ã«ãŠã³ãèšå®ãããã°ã€ã³èšå®ããªã©ã®é
ç®ãæ¢ã
- ãäºæ®µéèªèšŒããèªèšŒã³ãŒãããSMSèªèšŒããèªèšŒã¢ããªãçã®èšèŒã確èª
- å
¬åŒãã«ãããåãåãããã©ãŒã ïŒãµããŒãçªå£ïŒã§ã2段éèªèšŒã®æäŸæç¡ããæäŸäºå®ãã確èª
ãã§ãã¯æã®ãã€ã³ã
- ãSMSèªèšŒãã¯é»è©±çªå·å®ã«ã³ãŒããå±ãæ¹åŒããèªèšŒã¢ããªãã¯Google AuthenticatorãAuthyã«è¡šç€ºãããã³ãŒãæ¹åŒã§ããã©ã¡ããæäŸãããŠãããã§èšå®æé ãå€ãããŸãã
- ãµã€ãã«ãã£ãŠã¯ãã¡ãŒã«èªèšŒïŒç»é²ã¡ãŒã«ã«ç¢ºèªã³ãŒãéä»ïŒããããªãå ŽåããããŸããã¡ãŒã«èªèšŒã¯2FAãšã¯ç°ãªããã»ãã¥ãªãã£åŒ·åºŠã¯ããäœãã§ãã
- ããèŠã€ãããªããã°ããµããŒãã«ãäºæ®µéèªèšŒã®æç¡ããå°å
¥äºå®ãã代æ¿çããåãåããããšå
¬åŒã®åçãåŸãããŸãã
ãªã2FAãéèŠãïŒçãïŒ
- çãŸãããã¹ã¯ãŒãã ãã§ã¯ãã°ã€ã³ã§ããªãä»çµã¿ãå°å
¥ããããšã§ãäžæ£ãã°ã€ã³ã®ãªã¹ã¯ã倧ããäžããããŸããå®éã«å€ãã®ã»ãã¥ãªãã£æ©é¢ãã2FAã«ããèªåæ»æãå€ãã®ä¹ã£åãã黿¢ã§ããããšå ±åããŠããŸãã
2. ããJã¡ãŒã«ã§2段éèªèšŒã䜿ãããªãïŒèšå®ïŒSMSïŒèªèšŒã¢ããªïŒããããããã解説
ããã§ã¯äžè¬çãªãµãŒãã¹ã§ã®2段éèªèšŒèšå®æé ããå®éã«ãããšããã®ãŸãŸå¿çšã§ããããã«åã¿ç ããŠèª¬æããŸããJã¡ãŒã«ã§åæ§ã®é
ç®ãããã°ããã®éãé²ããã°OKã§ãã
A. SMSïŒã·ã§ãŒãã¡ãã»ãŒãžïŒæ¹åŒã®èšå®ïŒå
žåçãªæé ïŒ
1. ã¢ã«ãŠã³ãèšå® â ã»ãã¥ãªã㣠â äºæ®µéèªèšŒïŒSMSïŒãéžæã
2. ç»é²æžã¿ã®é»è©±çªå·ã確èªãŸãã¯æ°èŠã§å
¥åã
3. ãèªèšŒã³ãŒãéä¿¡ããæŒããšãé»è©±çªå·ã«æ°æ¡ïœ6æ¡ã®ã¯ã³ã¿ã€ã ã³ãŒããå±ãã
4. åä¿¡ããã³ãŒããç»é¢ã«å
¥åããŠã確èªããæŒãã
5. èšå®å®äºããã°ã€ã³æã«ãã¹ã¯ãŒãå
¥ååŸãSMSã®ã³ãŒãå
¥åãå¿
é ã«ãªããŸãã
泚æç¹ïŒSMSïŒ
- é»è©±çªå·ãå€ãããšåèšå®ãå¿
èŠãçªå·å€æŽæã®åŸ©æ§æç¶ãïŒã¡ãŒã«èªèšŒãæ¬äººç¢ºèªæžé¡ã®æåºïŒãããããšãå€ãã§ãã
- SMSã¯å©äŸ¿æ§ãé«ãåé¢ãSIMã¹ã¯ããæ»æïŒæºåž¯çªå·ãä¹ã£åãããæå£ïŒã®ãªã¹ã¯ããããããéèŠãµãŒãã¹ã§ã¯èªèšŒã¢ããªãæšå¥šããã±ãŒã¹ããããŸãã
B. èªèšŒã¢ããªïŒTOTPïŒæ¹åŒã®èšå®ïŒGoogle AuthenticatorãAuthyïŒ
1. ã¹ããã«Google AuthenticatorãAuthyãMicrosoft Authenticatorãªã©ã®ã¢ããªãã€ã³ã¹ããŒã«ã
2. ã¢ã«ãŠã³ãèšå® â ã»ãã¥ãªã㣠â äºæ®µéèªèšŒïŒã¢ããªïŒãéžæã
3. ãµã€ãåŽãQRã³ãŒããŸãã¯ã·ãŒã¯ã¬ããããŒïŒè±æ°ååïŒã衚瀺ããã®ã§ãèªèšŒã¢ããªã§QRãã¹ãã£ã³ãŸãã¯ããŒãæå
¥åã
4. ã¢ããªã«æéåŒã®6æ¡ã³ãŒãã衚瀺ãããã®ã§ãããããµã€ãã«å
¥åããŠã確èªãã
5. èšå®å®äºã以åŸãã°ã€ã³æã«èªèšŒã¢ããªã®ã³ãŒããå
¥åããŸãã
ã¡ãªããïŒèªèšŒã¢ããªïŒ
- SMSããå®å
šïŒSIMã¹ã¯ããã®åœ±é¿ãåãã«ããïŒã
- ãªãã©ã€ã³ã§ãã³ãŒããçæãããã®ã§é»æ³¢äžèŠã
- Authyã¯è€æ°ç«¯æ«ã§ã³ãŒããå
±æã§ãããªã©å©äŸ¿æ©èœããããŸãããèšèšã䜿çšã¯æ
éã«ã
ããã¯ã¢ããã³ãŒãã®ä¿å
- å€ãã®ãµãŒãã¹ã¯ãããã¯ã¢ããã³ãŒãïŒåŸ©æ§çšã¯ã³ã¿ã€ã ã³ãŒãïŒããçºè¡ããŸãããããã¹ã¯ãªãŒã³ã·ã§ããã§ã¯ãªãå®å
šãªå ŽæïŒãã¹ã¯ãŒããããŒãžã£ãçŽã§ã®ä¿ç®¡ïŒã«ä¿åããŠãã ããã端æ«çŽå€±æã®åŸ©æ§ã«å¿
é ã§ãã
å®éã«Jã¡ãŒã«ã§èšå®ãããã°ãäžã®ã©ã¡ããã®æµãã«äŒŒãæé ã§èšå®ã§ããŸããèšå®é
ç®ã®è¡šèšã¯ãµãŒãã¹ããšã«ãäºæ®µéèªèšŒãã2段éèªèšŒãã2FAããäºèŠçŽ èªèšŒããšãã©ã€ãã®ã§è©²åœããŒã¯ãŒãã§æ¢ããŠãã ããã
3. è§£é€ïŒãªãïŒããæ¹æ³ãšãªã¹ã¯ïŒæ¬åœã«ãªãã«ããŠããã®ãèãã
2段éèªèšŒãè§£é€ããããšã¯ç°¡åã«ã§ããŸãããã»ãã¥ãªãã£ãèœã¡ãããšãçè§£ããããã§è¡ã£ãŠãã ãããè§£é€æé ïŒäžè¬çïŒ
- ã¢ã«ãŠã³ãèšå® â ã»ãã¥ãªã㣠â äºæ®µéèªèšŒã®ãç¡å¹åïŒãªãïŒããéžã¶ã
- è§£é€æã«ãã¹ã¯ãŒãåå
¥åããã¡ãŒã«ç¢ºèªãSMSã³ãŒãã®å
¥åãæ±ããããå Žåãå€ãïŒæ¬äººç¢ºèªã®ããïŒã
- ããã¯ã¢ããã³ãŒããããå Žåã¯ç¡å¹ååã«åé€ããããå¿
èŠãªãä¿ç®¡å Žæã®ç¢ºèªãããã
è§£é€ã®ãªã¹ã¯ãšæ³šæ
- äºæ®µéèªèšŒãå€ããšãäžãäžãã¹ã¯ãŒããæŒããå Žåã«ç¬¬äžè
ããã°ã€ã³ã§ããå¯èœæ§ãé«ãŸããŸããç¹ã«åºäŒãç³»ãå人æ
å ±ãæ±ããµãŒãã¹ã¯è¢«å®³ã倧ãããªããããã§ãã
- äžæçãªè§£é€ïŒç«¯æ«ç§»è¡ãªã©ïŒã®å Žåãåèšå®ãå¿ããªãããã«ã¡ã¢ãæ®ãããåèšå®ã®ãªãã€ã³ããŒãèšããŠãã ããã
- è§£é€åŸã¯å¿
ããã¹ã¯ãŒãã匷åºã«ïŒé·ããã©ã³ãã ããã¹ã¯ãŒããããŒãžã£ã§ç®¡çïŒããŠãã¡ãŒã«éç¥ã»ãã°ã€ã³å±¥æŽã®ç¢ºèªãããŸãã«è¡ããŸãããã
ãè§£é€ãå¿
èŠãã«ãªãå
žåäŸ
- æ°ããã¹ããã«åãæ¿ããããèªèšŒã¢ããªãå
ã«ç§»è¡ããŠããªãã£ãã
- 端æ«ã売åŽïŒè²æž¡ããåã«èªèšŒã¢ããªãåé€ããå¿
èŠãããã
- ã©ãããŠãSMSãåãåããªãäžæçç¶æ³ïŒæµ·å€æ»åšãªã©ïŒã§ãã°ã€ã³ããªããã°ãªããªãå Žåããã ããè§£é€ã¯æå°éã«çããã¹ãã§ãã
4. ãããããã©ãã«ãšåŸ©æ§æ¹æ³ïŒç«¯æ«çŽå€±ã»é»è©±çªå·å€æŽã»ã³ãŒããå±ããªããšã
2FAã䜿ã£ãŠãããšã䟿å©ãªåé¢ã端æ«ã倱ã£ãããé»è©±çªå·ãå€ãã£ãããèªèšŒã³ãŒããå±ããªãããšãã£ããã©ãã«ãèµ·ããããã§ãã以äžã«æ³å®ãããå¯ŸåŠæ³ãå
·äœçã«èª¬æããŸãã
ã±ãŒã¹AïŒã¹ãããçŽå€±ããŠèªèšŒã¢ããªã䜿ããªã
察åŠã¹ããã
1. ããã¯ã¢ããã³ãŒããäºåã«ä¿åããŠããå Žåã¯ãããã䜿ã£ãŠãã°ã€ã³ãããã¯ã¢ããã³ãŒãã¯1åéãã®äœ¿ãæšãŠãå€ãã®ã§äœ¿ã£ããåçæããããšã
2. ããã¯ã¢ããã³ãŒãããªãå Žåã¯ããµã€ãã®ããµããŒãçªå£ãããåãåãããããæ¬äººç¢ºèªãè¡ãæµãã«ãªããŸããæ¬äººç¢ºèªã§ã¯ç»é²ã¡ãŒã«ãé»è©±çªå·ãå Žåã«ãã£ãŠã¯æ¬äººç¢ºèªæžé¡ïŒé転å
蚱蚌ãªã©ïŒã®æåºãæ±ããããããšããããŸãã
3. Authyãªã©ã®ã¯ã©ãŠãåææ©èœã䜿ã£ãŠããå Žåã¯ãæ°ç«¯æ«ã§ãã°ã€ã³ãèªèšŒæ
å ±ã埩å
ã§ããããšããããŸãïŒäºåã«æå¹åããŠããããšãåæïŒã
ã±ãŒã¹BïŒé»è©±çªå·ã倿ŽããïŒSMSèªèšŒã䜿ã£ãŠããïŒ
察åŠã¹ããã
1. æ§çªå·ã§ãã°ã€ã³ã§ãããªããããã«ã»ãã¥ãªãã£èšå®ããæ°çªå·ã«å€æŽããŠäºæ®µéèªèšŒãåèšå®ã
2. æ§çªå·ã§ãã°ã€ã³ã§ããªãïŒSIMãæ¢ã«è§£çŽããçïŒã®å Žåã¯ããµããŒããžé£çµ¡ããŠé»è©±çªå·å€æŽã®æç¶ããæ¬äººç¢ºèªæžé¡ã®æåºãã¢ã«ãŠã³ãæ
å ±ïŒç»é²ã¡ãŒã«ã¢ãã¬ã¹ãç»é²æ¥æãå©çšå±¥æŽãªã©ïŒã®æç€ºãæ±ããããããšããããŸãã
ã±ãŒã¹CïŒèªèšŒã³ãŒããå±ããªãïŒSMSæªçãã¡ãŒã«æªçïŒ
èããããåå ãšå¯ŸåŠ
- ãããã¯ãŒã¯é
å»¶ïŒæ°ååŸ
ã€ãç¹ã«å€éãå€§èŠæš¡é害æã¯é
å»¶ããããã
- é»è©±äŒç€ŸåŽã®ãããã¯ïŒè¿·æã¡ãŒã«èšå®ãSMSæåŠèšå®ã確èªãåœéSMSãªã©ã¯åä¿¡èšå®ãå¿
èŠãªå Žåããã
- ãµã€ãåŽã®äžå
·åïŒåæçºçãªãå
¬åŒã®é害æ
å ±ããã§ãã¯ããããµããŒããžé£çµ¡ã
- ã¡ãŒã«ãã©ã«ãæ¯ãåãïŒã¡ãŒã«èªèšŒã®å Žåã¯è¿·æã¡ãŒã«ãã©ã«ãã確èªã
ç·æ¥æã®å¿åŸ
- äºåã«ããã¯ã¢ããã³ãŒããå®å
šã«ä¿ç®¡ããããšãæã確å®ãªå¯Ÿçã§ãã
- ãµããŒãã«é£çµ¡ããéã¯ãã¢ã«ãŠã³ãç»é²æ
å ±ïŒç»é²ã¡ãŒã«ã»ç»é²æã®ããã¯ããŒã ã»å©çšéå§ææã»æ¯æãå±¥æŽãããã°ããïŒããŸãšããŠãããšå¯Ÿå¿ãæ©ããªããŸãã
5. ããJã¡ãŒã«ã«2段éèªèšŒããªãå Žåã«ä»ããããã¹ã代æ¿ãé²åŸ¡ãçïŒä¹ã£åã鲿¢ã®å®è·µãªã¹ãïŒ
æ®å¿µãªããäžéšã®ãµãŒãã¹ã§ã¯ãŸã ãã€ãã£ããª2FAãæäŸããŠããªãããšããããŸãããã®å Žåã§ãã§ããããšã¯å€ãã§ãã以äžã«å®åçã§å¹æçãªå¯ŸçãæããŸãã
1) 匷åãªãã¹ã¯ãŒãã䜿ãïŒå¿
é ïŒ
- é·ã12æå以äžãè±å€§æåã»è±å°æåã»æ°åã»èšå·ãæ··ããã®ãåºæ¬ãèŸæžåèªãé£ç¶ããæ°åã¯é¿ããã
- ãµãŒãã¹ããšã«ç°ãªããã¹ã¯ãŒãã䜿ãïŒäœ¿ãåãã絶察ã«ããªãïŒããã¹ã¯ãŒããããŒãžã£ïŒ1PasswordãBitwardenãªã©ïŒã䜿ããšç®¡çãæ¥œã§å®å
šã§ãã
2) ç»é²ã¡ãŒã«ã¢ãã¬ã¹ã®ã»ãã¥ãªãã£ã匷åãã
- Jã¡ãŒã«ã®ãã¹ã¯ãŒãããªã»ããããã®ã¯ã¡ãŒã«ã¢ã«ãŠã³ãçµç±ãäžè¬çãã¡ãŒã«ã¢ã«ãŠã³ãèªäœã«åŒ·åãªãã¹ã¯ãŒããšïŒå¯èœãªãïŒ2FAãèšå®ããŠããããšã
- ã¡ãŒã«ã®èªå転éããã£ã«ã¿ã®èšå®ãç¡ãã宿çã«ç¢ºèªã
3) æ¯æãæ
å ±ãå®ã
- ã¯ã¬ãžããã«ãŒãæ
å ±ã¯ãã©ãŠã¶ã«ä¿åããªããå¯èœãªãéœåºŠå
¥åããããä»®æ³ã«ãŒããå©çšããã
- ãµãŒãã¹ã®èª²éå±¥æŽãããŸãã«ãã§ãã¯ããèŠèŠãã®ãªãè«æ±ããªãã確èªããã
4) ãã°ã€ã³éç¥ã»å±¥æŽã®ç¢ºèª
- Jã¡ãŒã«ã«ãã°ã€ã³éç¥ãå±¥æŽç¢ºèªã®æ©èœããããªãONã«ããŠãããèŠç¥ãã¬ãã°ã€ã³ããã£ããå³ãã¹ã¯ãŒã倿ŽãšãµããŒãé£çµ¡ãã
- ãã°ã€ã³ç«¯æ«ã®ç®¡çïŒãã°ã¢ãŠãã匷å¶ïŒæ©èœãããã°ãäžèŠãªç«¯æ«ã¯åé€ã
5) SNSãå€éšãã°ã€ã³é£æºã®ç®¡ç
- FacebookãGoogle飿ºã§ãã°ã€ã³ã§ããå Žåãå€éšã¢ã«ãŠã³ãã«2FAããããšå¹æçãå€éšãã°ã€ã³ã®ããŒããã·ã§ã³ã飿ºã¢ããªã宿çã«èŠçŽãã
6) ãã£ãã·ã³ã°å¯Ÿç
- ãã°ã€ã³ããŒãžã®URLãåžžã«ç¢ºèªãåœãµã€ãã«èªå°ããããã£ãã·ã³ã°ã¡ãŒã«ãã¡ãã»ãŒãžãåºåãã®ã§ãæªãããªã³ã¯ã¯ã¯ãªãã¯ããªãã
- ãã©ãŠã¶ã®ãã¹ã¯ãŒãä¿åãããã¢ãããéµåã¿ã«ããªããå
¬åŒã¢ããªãå
¬åŒãã¡ã€ã³çµç±ã§ãã°ã€ã³ããçãã€ããã
7) 宿çãªãã¹ã¯ãŒã倿Žãšäºæ®µéçãªèŠçŽã
- å°ãªããšã1幎ã«1åãéèŠãµãŒãã¹ã®ãã¹ã¯ãŒãã¯èŠçŽãã被害ãçºèŠãããçŽã¡ã«å€æŽã
ããããçµã¿åãããããšã§ã2FAãç¡ããŠãäžå®ã®é²åŸ¡ã¬ãã«ã¯ç¢ºä¿ã§ããŸãããå¯èœãªããµãŒãã¹åŽãž2段éèªèšŒã®å°å
¥ãèŠæããããšãéèŠã§ãããŠãŒã¶ãŒã®å£°ãå°å
¥ã®åŸæŒãã«ãªãããšã¯å€ãã§ãã
6. äœéšè«ïŒå®éã«2FAãå°å
¥ããŠã©ãå€ãã£ããïŒççŽãªææ³ïŒ
ç§èªèº«ã¯è€æ°ã®ãªã³ã©ã€ã³ãµãŒãã¹ã§èªèšŒã¢ããªã䜿ã£ãŠããŸããæåã¯ããã¡ãã¡ã³ãŒãå
¥åããã®ãé¢åããããšæ¬é ããŠããŸããããæ
£ãããšå
¥åã¯1ïœ2åå¢ããçšåºŠã§ã粟ç¥çãªå®å¿æããã®ããã倧ããã§ãããããšããç§ã®å€ãã¡ãŒã«ã¢ãã¬ã¹ãã©ããã®æµåºãªã¹ãã«èŒã£ãŠããããšãç¥ãïŒæµåºãã§ãã¯ãµãŒãã¹ã§ç¢ºèªïŒããããã¹ã¯ãŒããæŽæ°ããŠ2FAãæå¹åããŠãããããã§ãäžæ£ãã°ã€ã³ã黿¢ã§ããŸããããã2FAãç¡ããã°ããã®ãŸãŸã¢ã«ãŠã³ããä¹ã£åãããŠããå¯èœæ§ãé«ããšæããŸãã
ãŸããèªèšŒã¢ããªæ¹åŒã䜿ã£ãŠããŠè¯ãã£ãç¹
- SMSã®é
å»¶ãåä¿¡å¶éãæ°ã«ãªããªãïŒæµ·å€æ
è¡äžã§ããªãã©ã€ã³ã§ã³ãŒãçæå¯èœïŒã
- Authyã®ããã«è€æ°ç«¯æ«ã§åæããŠããã°ãã¹ããçŽå€±æã§ã埩æ§ãæ©ãïŒãã ããããèšå®æ¬¡ç¬¬ã§ãªã¹ã¯ãå€ããïŒã
- ããã¯ã¢ããã³ãŒããçŽã§ä¿ç®¡ããŠãããããå®éã«æ§ç«¯æ«ãåæåããéã«ãã埩æ§ã§ããçµéšããã
倱æè«ãšããŠã¯ãèªèšŒã¢ããªãç§»è¡ããåã«å€ã端æ«ãåæåããŠããŸããããã¯ã¢ããã³ãŒããä¿åããŠããªãã£ããããµããŒãã«æ°æ¥ãããŠæ¬äººç¢ºèªãããŠããã£ãããšããããŸãããããããã®ã§ãç§»è¡åã®ããã¯ã¢ããã¯çµ¶å¯Ÿã«æ ããªãã§ãã ããã
çµè«ïŒå¯èœãªãèªèšŒã¢ããªæ¹åŒã®2FAãäžçªãã©ã³ã¹è¯ããããããSMSã¯å©äŸ¿æ§ã¯é«ããé·æçã«ã¯ãªã¹ã¯ãæ®ããããã®ã§ãéèŠåºŠã®é«ããµãŒãã¹ã§ã¯èªèšŒã¢ããªïŒããã¯ã¢ããã³ãŒãã®çµåããå®å¿ã§ãã
7. å®äŸã§åŠã¶ïŒäžæ£ãã°ã€ã³ã®è¢«å®³äºäŸãšé²æ¢ã«å¹ãã察å¿
å
·äœçãªè¢«å®³äŸãšæå¹å¯Ÿçãç¥ããšãèªåã®è¡åãå€ãããŸãã以äžã¯ä»£è¡šçãªäºäŸãšæšå¥šããã察å¿ã§ãã
被害äŸAïŒã¡ãŒã«ã¢ãã¬ã¹ã®äœ¿ãåãã§è€æ°ãµãŒãã¹ãé£é被害
- æ»æè
ãæµåºããã¡ãŒã«ã¢ãã¬ã¹ãšãã¹ã¯ãŒãã§è€æ°ã®ãµãŒãã¹ã«ãã°ã€ã³è©Šè¡ããã¹ã¯ãŒãã䜿ãåããŠããããè€æ°ã¢ã«ãŠã³ããå±éºã«ã
察çïŒãµãŒãã¹ããšã«ç°ãªããã¹ã¯ãŒããã¡ãŒã«ã¢ã«ãŠã³ãã«2FAãèšå®ããã¹ã¯ãŒããããŒãžã£å°å
¥ã
被害äŸBïŒSIMã¹ã¯ããã§SMSèªèšŒãä¹ã£åããã
- æ»æè
ãæºåž¯äŒç€Ÿã«åœã®å矩ã§SIMåçºè¡ãç³è«ããSMSã§å±ãèªèšŒã³ãŒããåãåã£ãŠã¢ã«ãŠã³ãã奪åã
察çïŒéèŠãµãŒãã¹ã¯èªèšŒã¢ããªã«åãæ¿ãããæºåž¯äŒç€Ÿã«SIMåçºè¡ã®éã®æ¬äººç¢ºèªåŒ·åãèŠè«ãæºåž¯äŒç€Ÿã®ãSIMããã¯ïŒã¢ã«ãŠã³ãä¿è·ïŒããµãŒãã¹ãæå¹ã«ããã
被害äŸCïŒãã£ãã·ã³ã°ãµã€ãã§èªèšŒã³ãŒããå
¥åããããã
- æ¬ç©ãã£ããã®ãã°ã€ã³ããŒãžã«èªå°ãããèªèšŒã³ãŒããŸã§å
¥åããŠããŸã£ãã±ãŒã¹ãæ»æè
ã¯ãã®çŽåŸã«ãªã¢ã«ã¿ã€ã ã§ãã°ã€ã³ã
察çïŒå
¬åŒãã¡ã€ã³ãã©ããåžžã«ç¢ºèªãã¡ãŒã«ãSNSã®ãªã³ã¯ãçŽæ¥ã¯ãªãã¯ããå
¬åŒã¢ããªãããã¯ããŒã¯ãããã°ã€ã³ãã¯ã³ã¿ã€ã ã³ãŒãã¯æ±ããããŠããªã³ã¯å
ãæ£ããã確èªããç¿æ
£ãä»ããã
ãããã®äºäŸããåŠã¹ãã®ã¯ãé²åŸ¡ã¯å€å±€ã«ããããšãããã¹ã¯ãŒã匷åïŒã¡ãŒã«ä¿è·ïŒ2FAïŒå¯èœãªãã¢ããªïŒïŒãã°ã€ã³éç¥ã§æ»ææåã®ç¢ºçã倧å¹
ã«äžããããŸãã
8. ãããã質åïŒFAQïŒâ ãŠãŒã¶ãŒãæ°ã«ãªãããšã«äžå¯§ã«åç
Q1ïŒJã¡ãŒã«ã§2段éèªèšŒãèŠã€ãããŸãããã©ãããã°ããïŒ
A1ïŒãŸãã¯ããã€ããŒãžãâãã¢ã«ãŠã³ãèšå®ãâãã»ãã¥ãªãã£ããªã©ãããŸãªã確èªããŠãã ããã衚èšã¯ãäºæ®µéèªèšŒãã2段éèªèšŒãã2FAããã¯ã³ã¿ã€ã ãã¹ã¯ãŒãããªã©ããŸããŸã§ããèŠã€ãããªãå Žåã¯å
¬åŒãã«ãã®æ€çŽ¢ããµããŒãã«ãäºæ®µéèªèšŒã®æç¡ããå°å
¥äºå®ããåãåãããŸããããå°å
¥ãç¡ããã°ããã¹ã¯ãŒã匷åãã¡ãŒã«ã¢ã«ãŠã³ãã®2FAãææäŒå¡æ
å ±ã®ç£èŠãªã©ä»£æ¿çãå³å®æœããŠãã ããã
Q2ïŒèªèšŒã¢ããªã䜿ã£ãŠãããšãã«ã¹ãããå£ãããã©ããªãïŒ
A2ïŒäºåã«ããã¯ã¢ããã³ãŒããä¿åããŠããã°ãããã§ãã°ã€ã³ã»åèšå®ãå¯èœã§ããAuthyã®ããã«ã¯ã©ãŠãããã¯ã¢ããæ©èœãæå¹ã«ããŠããã°å¥ããã€ã¹ã§åŸ©å
ã§ããŸããã©ã¡ããæºåããŠããªããšãµããŒãã«æ¬äººç¢ºèªæžé¡ãæåºããŠåŸ©æ§ããå¿
èŠãçãããããäºåæºåãéèŠã§ãã
Q3ïŒSMSããèªèšŒã¢ããªã®æ¹ãå®å
šã£ãŠæ¬åœïŒ
A3ïŒäžè¬çã«ã¯ãã¯ãããSMSã¯SIMã¹ã¯ããæ»æããã£ãªã¢åŽã®åé¡ãSMSäžç¶ã®è匱æ§ãªã©ã®ãªã¹ã¯ã«æãããããäžæ¹ãèªèšŒã¢ããªïŒTOTPïŒã¯ç«¯æ«å
ã§æéã³ãŒããçæãããããåæ§ã®æ»æã«åŒ·ããšãããŠããŸãããã ããã¹ããèªäœããã«ãŠã§ã¢ã«ææãããšã³ãŒããçãŸããå¯èœæ§ãããããã端æ«ã®åºæ¬çãªå®å
šå¯ŸçïŒOSæŽæ°ãã¢ããªã®ä¿¡é Œæ§ç¢ºèªïŒãéèŠã§ãã
Q4ïŒããã¯ã¢ããã³ãŒãã¯ã©ãã«ä¿åããã°å®å
šïŒ
A4ïŒãã¹ããã©ã¯ãã£ã¹ã¯ãã¹ã¯ãŒããããŒãžã£ã«æå·åããŠä¿åããããçŽã«å°å·ããŠé庫ãªã©å®å
šãªå Žæã«ä¿ç®¡ããæ¹æ³ã§ããã¹ã¯ãªãŒã³ã·ã§ããã§ã¯ã©ãŠãä¿åãããšããã®ã¯ã©ãŠããæ»æããããšãã«å±éºã«ãªããŸããè€æ°ã®åŸ©æ§ææ®µïŒã¯ã©ãŠãåæïŒçŽä¿ç®¡ïŒãçšæããŠãããšå®å¿ã§ãã
Q5ïŒ2段éèªèšŒãèšå®ãããšãã°ã€ã³ãé¢åã«ãªããŸãããïŒ
A5ïŒæ°ç§ïœ1åå¢ããçšåºŠã§ãæ
£ããã°å€§ããæéã§ã¯ãããŸããã代ããã«ã¢ã«ãŠã³ãä¹ã£åãã«ãã被害ïŒå人æ
å ±æµåºãéé被害ïŒãé²ããã®ã§ãæéã«èŠåããªã¿ãŒã³ã¯å€§ããã§ããããé »ç¹ã«ãã°ã€ã³ããç°å¢ã§ã©ãããŠãæéãæ°ã«ãªãå Žåã¯ãä¿¡é Œã§ãã端æ«ã§ã®ãä¿¡é Œæžã¿ç«¯æ«ãæ©èœïŒããã°ïŒã掻çšããæããããŸãã
9. ãŸãšãïŒãŸãäœãããã°ãããïŒä»æ¥ããã§ããã¢ã¯ã·ã§ã³ãã©ã³ïŒ
1. Jã¡ãŒã«ã®èšå®ã»ãã«ãã§ãäºæ®µéèªèšŒãã®æç¡ã確èªãããããã°å³èšå®ïŒèªèšŒã¢ããªæšå¥šïŒã
2. ããç¡ããã°ãæäœéã®å¯ŸçãšããŠïŒaïŒåŒ·åã§ãŠããŒã¯ãªãã¹ã¯ãŒããèšå®ãïŒbïŒç»é²ã¡ãŒã«ã«2FAãé©çšãïŒcïŒãã°ã€ã³éç¥ãONã«ãããïŒdïŒæ¯æãæ
å ±ã®ç£èŠãè¡ãã
3. ããã¯ã¢ããã³ãŒããå¿
ãå®å
šã«ä¿åãããã¹ããç§»è¡æã¯å¿
ãäºåã«2FAã®ç§»è¡ã»è§£é€æé ã確èªã
4. ãã£ãã·ã³ã°å¯ŸçãšSNS飿ºã®å®æèŠçŽããç¿æ
£åããã
5. äžæãªãã°ã€ã³ããã£ããå³ãã¹ã¯ãŒã倿ŽãšãµããŒãé£çµ¡ã蚌æ ïŒãã°ã€ã³æ¥æãã¡ãŒã«ã®ã¹ã¯ã·ã§ïŒãä¿åããŠãããšå¯Ÿå¿ãæ©ãŸããŸãã
PCMAXã§æ§å¥ã倿Žããæ¹æ³ãšæ³šæç¹ïœã§ããªãæã®å¯ŸåŠã»å¿
èŠæžé¡ãŸãšã
æåŸã«äžèšïŒã¢ã«ãŠã³ãã®å®å
šæ§ã¯ããã£ãŠãããåŠããã®å·®ã§å€§ããå€ãããŸãã2段éèªèšŒã¯é¢åã«èŠããŠãå®éã¯æé以äžã®å®å¿ãäžããŠãããæè³ã§ãããŸãã¯Jã¡ãŒã«ã®èšå®ãäžåºŠèŠãŠãã§ããç¯å²ã§ä»æ¥äžã«å®å
šå¯Ÿçãé²ããŠã¿ãŠãã ãããäœãå
·äœçãªç¶æ³ïŒç«¯æ«çŽå€±ãçªå·å€æŽãªã©ïŒãããã°ããã®ã±ãŒã¹ã«åãããåŸ©æ§æé ããäŒãããŸããæºåã¯ããã§ããïŒ
åºå
žã»åè
ã»Jã¡ãŒã«å
¬åŒãã«ãïŒãµããŒãïŒã¢ã«ãŠã³ãèšå®é¢é£ããŒãžïŒ
ã»Google Authenticator / Authy ã®å
¬åŒããã¥ã¡ã³ã
ã»Microsoft ã»ãã¥ãªãã£ããã°ïŒå€èŠçŽ èªèšŒã®æå¹æ§ã«é¢ããå
¬éæ
å ±ïŒ
ã»äžè¬çãªã»ãã¥ãªãã£ã¬ã€ãïŒSIMã¹ã¯ããããã£ãã·ã³ã°å¯Ÿçã«é¢ããå
¬éè³æïŒ