JP5005746B2 - Password verification apparatus and method - Google Patents

Description

  The present invention relates to a password verification apparatus and method, and more particularly to a password verification apparatus and method for handling a case where a password is erroneously input.

  Conventionally, in financial institutions and various online transactions, passwords etc. are used together with identification information to identify the operator in order to determine whether the person who performs the operation has a legitimate authority or to authenticate the operator. Is used to compare whether or not the password matches a previously registered password or the like. Here, in order to avoid getting a correct password or being authenticated by inputting random passwords that can be considered by an unauthorized operator one after another, the number of times the password is entered is limited and fixed. A method of making the registered password itself unusable (revoked) is widely used when there is an incorrect input more than the number of times and there is an unauthorized access. When such a method is used, if the password becomes unusable due to the need to ensure safety, the password must be set again, and it can be used by a legitimate operator simply due to incorrect input or misunderstanding. When it becomes impossible, a burden is large for an operator.

  In order to alleviate such a burden, basically when a wrong input is made more than a certain number of times, a valid operator can be used by combining several authentication methods while disabling the password to ensure safety. In this case, an authentication method that is difficult to be disabled has been proposed (see, for example, Patent Documents 1 to 3).

JP 2000-259276 A Japanese Patent Laid-Open No. 2005-208764 JP 2005-208765 A

  However, the technology that has been proposed in the past is not reliable because it determines that the password is doubled and the system load is high, or if the wrongly entered value is not a password registered by someone else, However, there is a problem that there is no authentication method that appropriately considers the convenience of an operator having a legitimate authority.

  The present invention has been made in view of such problems, and an object of the present invention is to provide a password verification apparatus and method that take into account the convenience of an authorized operator without compromising the security of the password. To do.

  In order to achieve such an object, the invention according to claim 1 is a password verification device, which compares a value input as a password with a preset password, and if they do not match, A password verification device comprising password determination means for counting the number of times and password invalidation means for invalidating a preset password when the counted number of erroneous inputs reaches a predetermined number, as a password When an input value does not match a preset password, an erroneous input storage means for storing the input value is provided, and a value input as a password is input when it does not match a preset password. The value is stored in the incorrect input storage means together with the time when the value is input, and the password determination means is preset with the value input as the password. If the passwords do not match, the incorrect input value stored in the incorrect input storage means is compared with the value input as the password. When the time is within a predetermined period, the number of times is not counted as an erroneous input.

  According to the second aspect of the present invention, in the password verification device according to the first aspect, when the preset password becomes invalid, the password determination means executes the process regardless of which value is entered as the password. It is characterized by not.

  According to a third aspect of the present invention, in the password verification device according to the first or second aspect, when a preset password becomes invalid, it is notified that the password has become invalid.

  According to a fourth aspect of the present invention, in the password verification device according to any one of the first to third aspects, if a value entered as a password is compared with a preset password and the password does not match, authentication is performed. It is characterized by notifying the failure.

  According to a fifth aspect of the present invention, in the password verification device according to any one of the first to fourth aspects, the password determining means stores a plurality of erroneous input values stored in the erroneous input storage means. In addition, when any of the erroneous input values matches the value input as the password, the number of times of erroneous input is not counted.

  According to a sixth aspect of the present invention, in the password verification device according to any one of the first to fourth aspects, the password determination unit stores the latest value when there are a plurality of erroneous input values stored in the erroneous input storage unit. It is characterized in that the erroneously entered value is compared with the value entered as the password.

  The invention according to claim 7 is the password verification device according to any one of claims 1 to 6, wherein the password determination means compares the value input as the password with a preset password to make a match. In this case, the erroneous input value stored in the erroneous input storage means is deleted.

  The invention according to claim 8 is the password verification device according to any one of claims 1 to 7, wherein the error input value stored in the error input storage means has passed a predetermined period from the input time. It is deleted afterwards.

  According to a ninth aspect of the present invention, in the password verification device according to any one of the first to seventh aspects, the password determination means compares the value input as the password with a preset password to make a match. If not, the erroneous input value stored in the erroneous input storage means and deleted for a predetermined period from the input time is deleted.

  The invention according to claim 10 is a password verification method, which compares a value input as a password with a preset password, and counts the number of times as an erroneous input when they do not match, When the counted number of erroneous inputs reaches a predetermined number, it was entered when the password invalidation step for invalidating the preset password and when the value entered as the password did not match the preset password An incorrect input storage step for storing a value, and when the value input as a password does not match a preset password, the input value is stored together with the input time, and in the password determination step, as a password If the entered value and the preset password do not match, Comparing the wrong input value stored in the storing step with the value entered as the password, and if the time when the same incorrect input value is input is within a predetermined period, the number of erroneous inputs is counted. It is characterized by not counting.

  As described above, according to the present invention, it is possible to improve the convenience of an operator having a legitimate authority without compromising the safety of the password.

It is a block diagram which shows the whole system of this embodiment. It is a figure which shows the functional module of the password verification apparatus of this embodiment. It is a flowchart of the password collation process of this embodiment. It is a figure which shows the example displayed on the personal computer etc. of this embodiment. It is a figure for demonstrating the update of the table at the time of the password collation process of this embodiment.

Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.
(Configuration of this embodiment)
FIG. 1 is a block diagram showing the entire system of this embodiment. FIG. 1 assumes a case in which, for example, a personal computer or the like is connected to a server via a network and authentication for receiving a service provided by the server is executed using an ID and a password. However, the present invention is not limited to this. This embodiment can be used for authentication processing and password processing of various applications, such as performing financial transactions from ATMs in financial institution stores. The system shown in FIG. 1 is a case where a contractor accesses a site that provides services to a predetermined contractor via a network, for example, and the user accesses the Web server 102 from the personal computer 101 via the network. The Web server 102 displays and inputs an ID and password input screen as shown in FIG. 4 and presses the login button 401 in order to confirm that the user is a valid contractor when accessed by the user. The ID and password input by pressing the login button 401 are transferred from the Web server 102 to the business processing server 103 and compared with the password registered for each contractor stored in the contract database 104, that is, as a password. Check if it matches the entered value. Here, in the contractor information table 111 of the contract database 104, the number of erroneous input at the time of password input is recorded together with the contractor name, ID, password, and the like. This erroneous input count may be reset when a correct password is subsequently input, or the cumulative count may be stored as it is.

  In addition, since temporary data is mainly managed in the temporary server 105, the erroneous input data table 112 is provided for managing erroneous input data, which is a feature of the present embodiment, and the time when the server is accessed. That is, the erroneously input value when there is an incorrect input is recorded together with the time when the password is input. For example, in the erroneous input data table 112 shown in FIG. 1, the erroneously input value of the contractor A is recorded from erroneous 1 to erroneous 3 because the erroneous input is 3 times when referring to the contractor information table 111. In this embodiment, the erroneous input data table 112 in the temporary server 105 is used to manage erroneous input values. However, the present invention is not limited to this, and an item is added to the contractor information table 111 for management. It can also be managed by any method known in the art. Further, in the present embodiment, an erroneously input value is stored together with the input time, and processing is performed in consideration of the passage of time as will be described later, but not limited to this, the input time is not recorded. Alternatively, it is possible not to consider the passage of time.

  The erroneous input data table 112 according to the present embodiment is generated when any of the contractors erroneously inputs a password. As described later, if there is no erroneous input for a certain period of time, the erroneous input information (incorrect input data). Value, input time, etc.), but if any contractor does not make an incorrect input for a certain period of time, the table itself can be deleted. This is because, in this embodiment, the erroneous input information is intended to avoid revoke due to short-term erroneous input to the last, and therefore it takes into account the security risks associated with retention beyond a certain period, However, the present invention is not limited to this, and any method known in this technical field can be used for table management, such as not deleting a table even after a certain period. Further, since the number of erroneous inputs in the contractor information table 111 is normally initialized once it is correctly authenticated, the initial information such as deleting the contractor information correctly input in the erroneous input data table 112, etc. Can be

  In FIG. 1, the password is a four-digit number. However, the present invention is not limited to this, and in the present embodiment, any password known in this technical field, such as various characters having various numbers of digits, or the like. Can be used. Further, the contract database 104 and the temporary server 105 can include various information in addition to the information shown in FIG. Further, in the present embodiment, a server, a database, and the like as shown in FIG. 1 are used. However, this is an example for achieving the present invention, and any method known in this technical field can be used with a different server or database. It is also possible to combine databases.

  FIG. 2 is a diagram illustrating functional modules included in the business processing server 103. The processing of this embodiment is executed according to these functional modules. The password verification processing of this embodiment is completed as a whole by executing the modules shown in FIG. 2, but the password receiving unit 201 is input to the personal computer 101 and input as a password via the network and the Web server 102. Receive a value. The password determination unit 202 compares the value received by the password reception unit 201 with a preset password stored in the contract database 104, and compares the password. If the password does not match, the number of erroneous inputs is counted. . The incorrect input storage unit 203 records the input value as an incorrect input when the value input as the password does not match the preset password. On the other hand, the password invalidation unit 204 invalidates a preset password when the number of erroneous inputs becomes a certain number or more, and executes processing associated with the invalidation.

(Process of this embodiment)
FIG. 3 is a flowchart showing the processing of the business processing server of this embodiment. FIG. 5 is a diagram for explaining processing of the present embodiment and update of an erroneous input data table. Here, the erroneous input data tables 510 and 520 more specifically show the erroneous input data table 112 shown in FIG. Referring to FIGS. 3 and 5, when the password input by the personal computer or the like is received by the password receiving unit 201 (S301), the value input for the password verification process and the registered password are received by the password determination unit 202. Compare (S302). In this way, if the result of the collation is that they match, the collation processing is assumed to have been successful, and the processing that is originally scheduled is executed after successful authentication such as providing information (S303). In this case, since the erroneous input state is once reset, the number of erroneous inputs in the contractor information table 111 can be set to 0, and the erroneous input information in the erroneous input data table 510 of the contractor can be deleted. Here, although not shown in the figure, if the number of erroneous inputs in the contractor information table 111 exceeds the specified number and is invalid, no processing regarding password determination is performed regardless of which value is entered as the password, and authentication is performed. It is also possible to notify that the password has failed or that the password is invalid.

  As a result of the collation in step S302, if they do not match, it is compared whether or not the input value matches the value recorded in the erroneous input data table 112 (S304). Only the user is notified via the personal computer 101 (S305), and the registered password is not invalidated (revoked). Here, in the present embodiment, as shown in FIG. 5, the erroneously input value is compared with only the value input within a certain time after the input. That is, the erroneously input value is compared with the recorded erroneous input value in the erroneous input data table 510, but the input time recorded together with the erroneous input value is from the input time of the value that is currently compared. If it is within a certain time, it will not be counted as an erroneous input. For example, as shown in FIG. 5, when a password is entered for authentication at 15:02 on August 18, and a certain time during which no erroneous input is counted is one day, the contractor B is “3457”. ”, There is a record 512 that it was mistakenly entered at 13:33 on August 18 as mistake 2. Therefore, the number of wrong entries increases with the recorded wrong entry value as valid. Will not. In this case, the record 512 is updated to the latest value, and the input time is new as indicated by the record 522.

  On the other hand, if the predetermined time has been exceeded, even if the same value as the temporary input is recorded in the erroneous input data table 510, it is determined that there is no identical erroneous input information in step S304, and a new erroneous The number of erroneous inputs is incremented by one (S306). For example, as shown in FIG. 5, if the password is entered for authentication at 15:08 on August 18, and the fixed time not counted as erroneous input is one day, the contractor C is “5677”. If you enter the wrong password, "There is a record 511 that it was mistakenly entered at 21: 9 on August 15 as an error 1. However, since it has exceeded a certain time that is not counted, If the number of erroneous inputs exceeds the upper limit of the number of erroneous inputs, the revoke process is executed. In this case, the record 511 is updated in the same manner as in the above example. However, since the record 513 is no longer valid in time, the invalid input value that is not valid is deleted. It is recorded that “5677” is input at 15:08 on the day, and other inputs are deleted as in record 523.

  As described above, in the present embodiment, even if an erroneous input value is recorded, if a certain time or more has elapsed due to the input time, it is determined that such an erroneous input value is not recorded. However, instead of this, or together with this, for example, the erroneous input data table 510 may be checked at regular time intervals, and records that have passed a certain time at that time may be deleted. Furthermore, in the present embodiment, processing is performed on the premise of erroneously input time, but it can be processed only by comparing with the erroneous input that was input most recently, and some or all erroneous input recorded in the database. The same processing can be performed when either of them is compared with the value of. In addition, notifying that the authentication has failed is not only informing that the authentication has failed, but also informing that the same password has already been entered incorrectly and prompting the user to enter the correct password. it can.

  In step S304, if the input value does not match the value recorded in the erroneous input data table 112, the number of erroneous inputs is accumulated (S306), and a predetermined number of times to invalidate the password has been reached. It is checked whether or not (S307). When the number of times for invalidating the password is reached, the password invalidation unit 204 invalidates the password (S309). When invalidating a password, any process known in the art can be performed, such as deleting the password from the database or notifying the user that the password has been invalidated.

  If it is determined in step S307 that the number of times for invalidating the password has not been reached, a value different from the registered password entered as the password is recorded by the erroneous input storage unit 203 (S308). It is notified that the authentication has failed (S310). In the example shown in FIG. 1, the contractor A has a wrong input three times and is recorded as an error 1 to an error 3. The value of the erroneous input recorded in this way is compared with a value that is subsequently input as a password and does not match the registered password.

  As described above, in the present embodiment, when a value is input as a password, a comparison process is performed in comparison with a registered password, and when it is determined that the password is incorrect, a recorded erroneous input is further recorded. Compared with the value, if they match, the number of erroneous inputs is not counted. As a result, even if a value different from the registered password is entered more than once, only one incorrect entry is counted, so even if the password is invalidated uniformly in the past, it should be invalidated. It is possible to avoid complicated processing due to. That is, for example, when the user sets a new password, when the user forgets to change the password and repeatedly inputs the previous password, or even if the password is correctly input, the input mode of the personal computer 101 is not intended by the user. Even when different passwords are sent to the Web server 102 due to being in a state, the password registered simply by the number of erroneous inputs is simply invalidated, and a new password is set for the user, etc. It is possible to protect the password only against unauthorized input without performing complicated processing.

Claims (10)

When a value entered as a password is compared with a preset password and if they do not match, password determination means for counting the number of times as an erroneous input, and when the counted number of erroneous inputs reaches a predetermined number Is a password verification device comprising password invalidation means for invalidating the preset password,
When the value input as the password does not match the preset password, an erroneous input storage means for storing the input value is provided, and the value input as the password is the same as the preset password. When they do not match, the input value is stored in the erroneous input storage unit together with the input time, and the password determination unit compares the value input as the password with the preset password and does not match When the error input value stored in the error input storage means is further compared with the value input as the password, the time at which the corresponding error input value is input is a predetermined period. password collation apparatus characterized by not counting the number of times as an erroneous input when the inner.   The password verification device according to claim 1, wherein when the preset password becomes invalid, the password determination unit does not execute the process regardless of which value is input as the password.   The password verification device according to claim 1 or 2, wherein when the preset password becomes invalid, the password is notified.   4. The password verification device according to claim 1, wherein when the value input as the password and the preset password do not coincide with each other, an authentication failure is notified. .   The password determination means, when there are a plurality of erroneous input values stored in the erroneous input storage means, if any of the stored erroneous input values matches the value input as the password The password verification device according to claim 1, wherein the number of times is not counted.   The password determination unit compares the most recently stored erroneous input value and the value input as the password when there are a plurality of erroneous input values stored in the erroneous input storage unit. The password verification apparatus in any one of Claim 1 thru | or 4. The password determination unit compares the value input as the password with the preset password, and deletes the erroneous input value stored in the erroneous input storage unit when they match. claims 1 and password verification apparatus according to any one of 6. The value of the stored erroneous input to the erroneous input storage means, the password verification apparatus according to any one of claims 1, characterized in that it is removed after a predetermined period of time has elapsed from the input time 7. The password determination unit compares the value input as the password with the preset password, and if they do not match, the password determination unit stores a predetermined period from the input time stored in the erroneous input storage unit. password collation apparatus according to any one of claims 1 to 7, characterized in that removing the value of the elapsed erroneous input. A password determination step that compares a value input as a password with a preset password and counts the number of times as an incorrect input when they do not match,
A password invalidation step for invalidating the preset password when the counted number of erroneous inputs reaches a predetermined number;
An erroneous input storing step of storing the input value when the value input as the password does not match the preset password, and the value input as the password is the preset password The input value is stored together with the input time, and in the password determination step, the value input as a password is compared with the preset password, and when the password does not match, The erroneous input value stored in the erroneous input storage step is compared with the value input as the password. If the values match and the time when the corresponding erroneous input value is input is within a predetermined period, A password verification method characterized in that the number of times is not counted as input.

Images