JP5258258B2 - Password generating apparatus, password generating method and program - Google Patents

Description

  The present invention relates to a password generation device, a password generation method, and a program.

  There is an apparatus that inputs original data including a feature for authentication by a simple input method and generates a password by performing data processing without impairing the feature of the input original data (see Patent Document 1).

In order to increase security in password authentication,
(1) A password in which various password elements such as letters, numbers, symbols, etc. are evenly arranged is used. (2) It is necessary to lengthen the password.

JP-A-11-66005

  However, in the technique of Patent Document 1, as described in paragraph No. 0021 of Patent Document 1, it is necessary to set m so that the maximum value of the m-bit string is equal to the size of the dictionary table. In other words, a huge term dictionary table had to be prepared. However, since the constituent elements of the term dictionary are limited, the term dictionary table becomes very redundant, and the generated password is biased with respect to the constituent elements of the term dictionary, and there has been a problem in terms of security regarding the password.

Furthermore, the technology of Patent Document 1
m ≧ (password parameter) / (number of characters in the password of the existing authentication system)
It was necessary to satisfy.
(Password parameter) / (Number of characters in the password of the existing authentication system)
In this case, it is necessary to use a dictionary whose component is larger than “(password parameter) / (number of characters of password of existing authentication system)”. For this reason, constituent elements that are never used appear in the constituent elements of the dictionary. Therefore, the generated password is biased with respect to the constituent elements of the term dictionary, and there is a problem regarding the security regarding the password.

  Further, satisfying the above-described conventional techniques (1) and (2) and a password that is easy to remember are contradictory, and there is a problem that they cannot be compatible.

  The present invention has been made in view of such problems, and an object of the present invention is to generate a highly secure password for an easily memorized input value.

Accordingly, the password generation device of the present invention includes a dictionary order determining unit that determines the order of the dictionaries constituting the dictionary sequence, and a one-way function applying unit that applies a one-way function to the input value that is input and obtains the value. And a password generating means for generating a password, wherein the password generating means determines the value obtained by the one-way function applying means as the number of elements constituting a dictionary used for determining a password element. Dividing to obtain a remainder, password element determination means for determining a password element using the dictionary element corresponding to the calculated remainder, and the password element determination means has determined the password elements for the elements constituting the password If it is determined that the password elements for the elements constituting the password have not been determined, the password element determination means The input to the one-way function application means the value had as an input value, used in the obtained value and the password element determination means based on the order of dictionary constituting the dictionary sequence determined in the dictionary order determination means and the following sequence of dictionary of the dictionary that is, by using, in the password element determination means and Rukoto to have a, a password generation control means for controlling so as to determine the next password element.

  By adopting such a configuration, for example, a one-way function is applied to the input value, a value is obtained, and the obtained value is divided by the number of elements constituting the dictionary to obtain a remainder, and the obtained remainder is obtained as a numerical value. A password element is determined using a corresponding dictionary element, and when the next password element is determined, the value is used as an input value, a one-way function is applied to the input value, and a value is obtained. Is divided by the number of elements constituting the dictionary to obtain a remainder, and a password element is determined using a dictionary element corresponding to the obtained remainder. By repeating such a process, a password that does not cause bias in the components of the dictionary is generated. Therefore, a highly secure password can be generated for easily remembered input values.

  Here, the one-way function corresponds to, for example, a hash function described later. The value obtained by applying the one-way function corresponds to, for example, a hash value described later.

  The present invention may be a password generation method and program.

  According to the present invention, a highly secure password can be generated for an input value that is easy to remember.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings.

<Embodiment 1>
FIG. 1 is a diagram illustrating an example of a hardware configuration of a password generation device (computer). As shown in FIG. 1, the password generation device 1 includes a CPU 11 as a hardware configuration.
The CPU 11 performs processing based on a program stored in the storage device 13 to realize functions or flowcharts described later.

In addition, an input device 12, a storage device 13, and a display device 14 are connected to the CPU 11 via the bus 10. The storage device 13 includes, for example, a ROM, a RAM, a hard disk device, and the like, and stores data (for example, a dictionary described later) used in processing based on the program in addition to the above-described programs. The display device 14 is, for example, a display that displays information. The input device 12 is, for example, an operation key for inputting information.
A more specific example of the password generation device 1 is a smart card, a security hardware token, or the like.

  FIG. 2 is a diagram illustrating an example of a functional configuration of the password generation device. As shown in FIG. 2, the password generation device 1 includes a display control unit 21, a passphrase acquisition unit 22, a hash function application unit 23, a dictionary sequence determination unit 24, and a dictionary order determination unit 25 as functional configurations. And a password generation unit 26.

  The display control unit 21 controls display on the display device 14 such as a screen. For example, examples of the screen include a passphrase input screen for inputting a passphrase, a password display screen for displaying a generated password, and the like. The passphrase acquisition unit 22 acquires a passphrase input via a passphrase input screen or the like.

  The hash function application unit 23 obtains a hash value by applying a hash function to the input value. Here, the input value includes a passphrase acquired by the passphrase acquiring unit 22 or a hash value.

The dictionary sequence determination unit 24 determines a dictionary sequence for the generated password elements (password elements). In the present embodiment, description will be made by taking three types of dictionaries as an example: alphabet lower case letters (hereinafter simply referred to as lower case letters), alphabet upper case letters (hereinafter simply referred to as upper case letters), and numbers. Details of the dictionary string determination unit 24 are shown in FIG.
Here, the element of the password means an element constituting the password. For example, when the password is “C3gM14tT”, “C”, “3”, “g”, “M”, “1”, “4”, “t”, and “T” are elements of the password. The dictionary string is a matrix having various dictionary types as described above as elements.

The dictionary order determining unit 25 determines the dictionary order (arrangement) of the dictionary sequence determined by the dictionary determining unit 24. Details of the dictionary order determination unit 25 are shown in FIG.
The password generation unit 26 generates a password using the dictionary sequence in the dictionary order determined by the dictionary order determination unit 25. Details of the password generation unit 26 are shown in FIG.

FIG. 3 is a diagram illustrating an example of the configuration of the dictionary sequence determination unit.
The dictionary sequence determination unit 24 includes a dictionary / numerical value association unit 31, a dictionary addition unit 32, and a dictionary addition control unit 33.

The dictionary / numerical value association unit 31 associates a dictionary type with a numerical value.
The dictionary / numerical value association unit 31 is, for example,
Lower case: 0
Capital letter: 1
Number: 2
Etc. are associated with a dictionary type and a numerical value.
In the present embodiment, the dictionary / numerical value association unit 31 is described so as to associate the dictionary type with the numerical value. However, an application or the like may be implemented in the password generation apparatus 1 by programming in advance by associating the dictionary type with the numerical value, or a file in which the dictionary type and the numerical value are associated in advance. May be stored in the storage device 13 or the like, and the dictionary adding unit 32 may refer to this file.

The dictionary addition unit 32 prepares (adds), for example, a dictionary required by the target authentication system or the like, and divides the hash value by the number of types of dictionary (3 in the example of the present embodiment) Add a dictionary of the type corresponding to the remainder to the dictionary string.
For example, if the dictionary required by the target authentication system is lowercase letters, uppercase letters, and numbers, the dictionary addition unit 32 includes a dictionary string: “lowercase letters, uppercase letters, and numbers”.
Prepare.
Then, the dictionary adding unit 32 divides the hash value by the number of types of dictionary (3 in the example of the present embodiment), and when the remaining numerical value is 2, for example, a dictionary of numbers is converted into a dictionary string as shown below. Add to
Dictionary string: "Lowercase letters, uppercase letters, numbers, numbers"
In the following, for the sake of simplicity, lowercase letters are described as “small”, uppercase letters as “large”, and numbers as “numbers” for simplicity.

  Here, the dictionary information prepared by the dictionary adding unit 32 may be acquired from, for example, an authentication system, or may be input by the user in the same manner as a passphrase. In the present embodiment, the dictionary adding unit 32 is described as preparing (adding) a dictionary to a dictionary string. However, for example, if the authentication system or the user does not specify a required dictionary, the dictionary is not necessarily used. There is no need to prepare the dictionary string. That is, the dictionary adding unit 32 may simply divide the hash value by the number of types of dictionary (3 in the example of the present embodiment) and add a dictionary of a type corresponding to the remaining numerical value to the dictionary string. In this case, the number of types of dictionaries may be described in advance in a file or the like, for example, or may be input by the user as with a passphrase.

The dictionary addition control unit 33 gives the hash value used by the dictionary addition unit 32 as an input value to the hash function application unit 23, receives the hash value output by the hash function application unit 23, and receives the received hash value as a dictionary addition unit. The process of inputting to 32 and controlling the dictionary to be added to the dictionary string as described above is repeated until the dictionary string has as many dictionaries as the number of password elements. Here, the number of elements of the password may be described in a file or the like in advance, for example, or may be input by the user as with the passphrase.
For example, if the number of password elements is 8 and the dictionary string is “lowercase letters, uppercase letters, numbers, numbers”, the dictionary addition control unit 33 controls the dictionary addition unit 32 to add the dictionary to the dictionary sequence four times later. Then, the dictionary string is determined (or generated). In the present embodiment, for example, it is assumed that the dictionary string is as follows.
Dictionary string: “Small, Large, Number, Number, Large, Large, Number, Small”

FIG. 4 is a diagram illustrating an example of the configuration of the dictionary order determination unit.
As shown in FIG. 4, the dictionary order determination unit 25 includes a new dictionary sequence generation unit 41 and a new dictionary sequence generation control unit 42.

  The new dictionary string generation unit 41 divides the input hash value by the size of the input dictionary string, extracts the dictionary located at the remainder of the number from the dictionary string, and adds it to the new dictionary string. Then, the new dictionary string generation unit 41 prepends the dictionary order of the original dictionary string by the amount of the extracted dictionary. The new dictionary sequence generation unit 41 first receives the hash value used by the dictionary sequence determination unit 24 as an input value from the dictionary sequence determination unit 24, for example.

Here, FIG. 5 is a diagram for explaining an example of processing in the new dictionary sequence generation unit.
Here, as described above, the dictionary sequence determined by the dictionary sequence determination unit 24 is as follows.
Dictionary string: “Small, Large, Number, Number, Large, Large, Number, Small”
0, 1, 2, 3, 4, 5, 6, 7
Suppose that
For example, when the remainder obtained by dividing the input hash value by the size of the input dictionary string (8 in the case of the dictionary string) is 4, the new dictionary string generation unit 41 has a dictionary located at 4 (“large”). ) From the dictionary column and add it to the new dictionary column. Then, the new dictionary string generation unit 41 prepends the dictionary order of the original dictionary string by the amount of the extracted dictionary.

Returning to the description of FIG. 4 again, the new dictionary sequence generation control unit 42 gives the hash value used by the new dictionary sequence generation unit 41 to the hash function application unit 23 as an input value, and the hash function application unit 23 outputs the hash. A value is received and the received hash value is input to the new dictionary sequence generation unit 41, and the original dictionary sequence in which the order of the dictionary is prepended is input to the new dictionary sequence generation unit 41. Control is performed to repeat the process of adding a dictionary to a column until there are no more dictionaries in the original dictionary column. In the present embodiment, for example, it is assumed that a new dictionary string is as follows.
New dictionary string: “Large, Number, Small, Large, Number, Number, Small, Large”

FIG. 6 is a diagram illustrating an example of the configuration of the password generation unit.
As shown in FIG. 6, the password generation unit 26 includes a dictionary content / numerical value association unit 51, a password element determination unit 52, and a password generation control unit 53.

The dictionary contents / numerical value association unit 51 associates the contents of the dictionary (elements of the dictionary) with the numerical values. For example, in the case of an uppercase dictionary, the dictionary content / numerical value association unit 51
A and 0, B and 1, C and 2, ..., Z and 25
Are associated with the contents of the dictionary and the numerical values. In the case of a lowercase dictionary, the dictionary contents / numerical value association unit 51 similarly associates the contents of the dictionary with the numerical values.
In the present embodiment, the description is made so that the dictionary content / numerical value association unit 51 associates the contents of the dictionary with the numerical values. However, an application or the like may be implemented in the password generation apparatus 1 by programming the contents of the dictionary in association with the numerical values in advance, or a file in which the contents of the dictionary are associated with the numerical values in advance. May be stored in the storage device 13 or the like, and the password element determination unit 52 may refer to this file.
When the dictionary is a number, the dictionary content / numerical value association unit 51 does not perform the association process.

  The password element determination unit 52 divides the input hash value by the size of the input dictionary (the number of elements constituting the dictionary), and determines a character corresponding to the remaining numerical value as a password element. For example, when the input dictionary is uppercase, the password element determination unit 52 divides the input hash value by the size (26) of the uppercase dictionary. For example, when the remainder is 2, the password element determination unit 52 determines the character C corresponding to the remainder 2 as a password element.

The password generation control unit 53 gives the hash value used by the password element determination unit 52 as an input value to the hash function providing unit 23, receives the hash value output by the hash function application unit 23, and uses the received hash value as the password element A process of inputting to the determination unit 52 and inputting the next dictionary to the password element determination unit 52 based on the dictionary order determined by the dictionary order determination unit 25 and controlling to determine the password element as described above. Then, control is performed so that the number of dictionaries in the dictionary sequence is repeated. In the present embodiment, for example, it is assumed that the password is as follows.
Password: “C3gM14tT”

Hereinafter, an example of password generation processing will be described using a flowchart.
FIG. 7 is a flowchart illustrating an example of the password generation process.
In step S10, the passphrase acquisition unit 22 acquires the passphrase input via the passphrase input screen or the like.

In step S11, the hash function application unit 23 and the dictionary sequence determination unit 24 determine a dictionary sequence for the password element. Details of the processing in step S11 are shown in FIG.
In step S12, the hash function application unit 23 and the dictionary order determination unit 25 determine the dictionary order (arrangement) of the dictionary string determined in step S11. Details of the processing in step S12 are shown in FIG.

  In step S13, the hash function application unit 23 and the password generation unit 26 generate a password using the dictionary sequence in the dictionary order determined in step S12. Details of the processing in step S13 are shown in FIG.

FIG. 8 is a flowchart illustrating an example of the dictionary sequence determination process.
In step S20, the hash function application unit 23 receives the passphrase acquired by the passphrase acquisition unit 22 in step S10 as an input value, applies a hash function, and obtains a hash value. The hash function application unit 23 passes the obtained hash value as an input value to the hash function application unit 23.

In step S21, the dictionary / numerical value association unit 31 associates a dictionary type with a numerical value.
In step S <b> 22, the dictionary adding unit 32 prepares (adds), for example, a dictionary required by the target authentication system or the like in the dictionary string.

  In step S23, the dictionary adding unit 32 divides the hash value obtained as the input value by the number of types of dictionary, and adds a type of dictionary corresponding to the remaining numerical value to the dictionary string.

  In step S <b> 24, the dictionary addition control unit 33 determines whether or not the dictionary string has a dictionary for the password elements constituting the password. If it is determined that the dictionary string has a dictionary corresponding to the password elements constituting the password, the dictionary addition control unit 33 gives the hash value as an input value to the dictionary order determining unit 25 and determines the determined dictionary string in the dictionary order. The processing shown in FIG. 8 is terminated. On the other hand, if it is determined that the dictionary string does not have a dictionary for the password elements constituting the password, the dictionary addition control unit 33 proceeds to step S25. Here, it is assumed that the dictionary addition control unit 33 gives the hash value as an input value to the dictionary order determination unit 25 when it is determined that the dictionary string has a dictionary for the password elements constituting the password. However, the hash value may be given to the hash function application unit 23 as an input value, the hash value output from the hash function application unit 23 may be received, and the received hash value may be given to the dictionary order determination unit 25 as an input value. .

  In step S <b> 25, the dictionary addition control unit 33 gives the hash value as an input value to the hash function application unit 23, receives the hash value output from the hash function application unit 23, and inputs the received hash value to the dictionary addition unit 32. Then, the process proceeds to step S23.

  Then, in step S23, the dictionary addition unit 32 again performs a process of dividing the hash value obtained as the input value by the number of types of dictionary and adding a type of dictionary corresponding to the remaining numerical value to the dictionary string.

FIG. 9 is a flowchart illustrating an example of the dictionary order determination process.
In step S30, the new dictionary sequence generation unit 41 divides the hash value received as the input value by the size of the dictionary sequence, takes out the dictionary located at the remainder, and adds it to the new dictionary sequence.

In step S31, the new dictionary sequence generation unit 41 prepends the dictionary order of the original dictionary sequence (the dictionary sequence on the side from which the dictionary is extracted) by the amount of the dictionary extracted.
In step S32, the new dictionary sequence generation control unit 42 extracts the dictionary from the original dictionary sequence, adds it to the new dictionary sequence, and determines whether or not all dictionary orders (dictionary orders) have been determined (that is, the password is configured). Whether or not password elements corresponding to the elements to be determined have been determined). When it is determined that all the dictionary orders have been determined, the new dictionary sequence generation control unit 42 gives the hash value as an input value to the password generation unit 26 and uses the generated new sequence of dictionary sequences as a dictionary sequence to generate a password generation unit. 26, and the process shown in FIG. On the other hand, if it is determined that not all dictionary orders have been determined, the process proceeds to step S33. Here, the new dictionary sequence generation control unit 42 has been described as giving the hash value as an input value to the password generation unit 26 when it is determined that all dictionary orders have been determined. As an input value to the hash function application unit 23, a hash value output from the hash function application unit 23 may be received, and the received hash value may be provided as an input value to the password generation unit 26.

  In step S33, the new dictionary sequence generation control unit 42 gives the hash value as an input value to the hash function application unit 23, receives the hash value output by the hash function application unit 23, and generates the received hash value as a new dictionary sequence. The data is input to the unit 41, and the process proceeds to step S30.

  Then, again, in step S30, the new dictionary sequence generation unit 41 divides the hash value received as the input value by the size of the original dictionary sequence (the dictionary sequence on the side from which the dictionary is extracted), and positions it as the remaining numerical value. The dictionary to be extracted is extracted and added to a new dictionary string.

FIG. 10 is a flowchart illustrating an example of the password generation process.
In step S40, the dictionary contents / numerical value association unit 51 associates the contents of the dictionary with the numerical values.

In step S41, the password element determination unit 52 initializes the variable i. For example, the dictionary contents / numerical value association unit 51 sets 0 to the variable i.
In step S42, the password element determination unit 52 divides the hash value obtained as the input value by the size of the dictionary in the order of the dictionary sequence indicated by the variable i obtained as the input value, and the character associated with the remaining numerical value (Or the remaining number when the dictionary is a number) is determined as the password element.

In step S43, the password generation control unit 53 determines whether or not the process of step S42 has been performed for each dictionary in the dictionary sequence (that is, whether or not the password element has been determined using a dictionary for the necessary password elements). ). When it is determined that the process of step S42 has been performed on each dictionary in the dictionary string, the password generation control unit 53 passes the generated password to the display control unit 21, for example, and ends the process illustrated in FIG. When receiving the password from the password generation control unit 53, the display control unit 21 generates a password display screen including the received password and displays it on the display device 14. The user views the displayed password and logs in to the authentication system (or to a desired system via the authentication system) using the displayed password.
In the present embodiment, the password generation control unit 53 provides the generated password to the display control unit 21 and displays a password display screen including the password received by the display control unit 21 on the display device 14. . However, the password generation control unit 53 may pass the generated password directly to the authentication system. In such a configuration, the user can log in to the authentication system (or to a desired system via the authentication system) simply by inputting a passphrase.

On the other hand, if it is determined that the process of step S42 is not performed for each dictionary in the dictionary row, the password generation control unit 53 advances the process to step S44.
In step S44, the password generation control unit 53 gives the hash value as an input value to the hash function application unit 23, receives the hash value output by the hash function application unit 23, and receives the received hash value in the password element determination unit 52. Then, the process proceeds to step S45.

In step S45, the password element determination unit 52 increments the value of the variable i by one and advances the process to step S42.
Then, again, in step S42, the password element determination unit 52 divides the hash value obtained as the input value by the size of the dictionary in the order of the dictionary sequence indicated by the variable i obtained (incremented) as the input value, A process of determining a character associated with the remainder value (or a remainder number when the dictionary is a number) as a password element is performed.

  As described above, according to the above-described embodiment, it is possible to generate a highly secure password such that a bias related to a component of the dictionary does not occur with respect to an easily remembered input value such as a passphrase.

<Embodiment 2>
In the first embodiment described above, the password generation device 1 determines a dictionary sequence as shown in FIG. 7, for example, and then determines the dictionary order and uses the determined dictionary order to generate a password. went. However, the password generation device 1 may determine the dictionary sequence and the dictionary order. That is, the password generation device 1 divides the hash value obtained as the input value by the number of dictionary types in step S23 of FIG. 8, selects a type of dictionary corresponding to the remainder, and sets the dictionary sequence of this dictionary. May also be determined. For example, the password generation device 1 determines the order as shown in FIG.

  Similarly, the password generation device 1 may determine a password element when determining the order.

<Embodiment 3>
In the first embodiment described above, as shown in step S20 of FIG. 8, the hash function application unit 23 receives the pass phrase acquired by the pass phrase acquisition unit 22 as an input value, applies the hash function, and calculates the hash value. I explained to get. However, the hash function application unit 23 may receive the password length as an input value together with the passphrase and apply the hash function to obtain a hash value.

  By adopting such a process, the password generation device 1 can generate different passwords with different password lengths even for the same passphrase. In addition, this password length shall be made to be input by a user like a passphrase, for example.

<Embodiment 4>
In the first embodiment described above, as shown in step S20 of FIG. 8, the hash function application unit 23 receives the pass phrase acquired by the pass phrase acquisition unit 22 as an input value, applies the hash function, and calculates the hash value. I explained to get. However, the hash function application unit 23 may receive a unique character string (for example, a product number) of the password generation device 1 as an input value together with the pass phrase, and apply the hash function to obtain a hash value.

  By setting it as such a process, the password production | generation apparatus 1 can produce | generate a different password for every password production | generation apparatus 1, even if it is the same passphrase.

As described above, according to each of the embodiments described above, it is possible to generate a highly secure password such that a bias related to the constituent elements of the dictionary does not occur with respect to an easily remembered input value such as a passphrase.
Further, according to each of the above-described embodiments, only a hash function is used to generate a password without using a special function or the like. Here, the hash function outputs the same result regardless of the programming language. In other words, each of the above-described embodiments can be executed on any platform.
Further, according to each of the above-described embodiments, since a completely different password is generated only by slightly changing an input value such as a passphrase, a highly secure password can be easily generated.
In addition, according to the above-described embodiment, it is possible to easily generate a highly secure password without being restricted by the specification related to the password of the existing authentication system and using the existing authentication system without changing it. Can do.

  The preferred embodiments of the present invention have been described in detail above, but the present invention is not limited to such specific embodiments, and various modifications can be made within the scope of the gist of the present invention described in the claims.・ Change is possible. For example, the above-described embodiments may be implemented in any combination.

It is a figure which shows an example of the hardware constitutions of a password production | generation apparatus (computer). It is a figure which shows an example of a function structure of a password production | generation apparatus. It is a figure which shows an example of a structure of a dictionary row | line | column determination part. It is a figure which shows an example of a structure of a dictionary order determination part. It is a figure for demonstrating an example of the process in a new dictionary row | line | column production | generation part. It is a figure which shows an example of a structure of a password production | generation part. It is a flowchart which shows an example of a password production | generation process. It is a flowchart which shows an example of a dictionary row | line | column determination process. It is a flowchart which shows an example of a dictionary order determination process. It is a flowchart which shows an example of a password production | generation process.

Explanation of symbols

1 Password generator 11 CPU
12 Input device 13 Storage device 14 Display device

Claims (7)

Dictionary order determining means for determining the order of the dictionaries constituting the dictionary string;
A one-way function application means for applying a one-way function to an input value and obtaining a value;
A password generation means for generating a password;
Have
The password generation means includes
Dividing the value obtained by the one-way function applying means by the number of elements constituting the dictionary used for determining the password element to obtain a remainder, and using the dictionary element corresponding to the obtained remainder A password element determining means for determining a password element;
If the password element determination means determines whether or not the password elements for the elements constituting the password have been determined, and determines that the password elements for the elements that constitute the password have not been determined, the password element determination means The password element determining means inputs the used value as an input value to the one-way function applying means, and based on the obtained value and the order of the dictionaries constituting the dictionary sequence determined by the dictionary order determining means. A password generation control means for controlling the password element determination means to determine a next password element using a dictionary in the next order of the used dictionary; and
Password generation device according to claim Rukoto to have a. Dictionary order determining means for determining the order of the dictionaries constituting the dictionary string;
A one-way function application means for applying a one-way function to an input value and obtaining a value;
A password generation means for generating a password;
Have
The dictionary order determining means includes
The value obtained by the one-way function applying means is divided by the size of the dictionary string to obtain a remainder, a dictionary located at the obtained remainder is taken out of the dictionary string, and the extracted dictionary is replaced with a new dictionary string. A new dictionary sequence generation means to be added to
When the new dictionary sequence generation means determines whether or not all the dictionaries of the dictionary sequence are added to the new dictionary sequence, and it is determined that all the dictionaries of the dictionary sequence are not added to the new dictionary sequence The value used in the new dictionary sequence generation unit is input to the one-way function application unit as an input value, and the obtained value, the extracted dictionary, and the dictionary sequence in the dictionary sequence are prepended. The new dictionary sequence generation means takes out a dictionary from the dictionary sequence using the dictionary sequence, and controls to add the extracted dictionary to the new dictionary sequence. New dictionary sequence generation control means for ordering;
I have a,
The password generation means includes
Dividing the value obtained by the one-way function applying means by the number of elements constituting the dictionary used for determining the password element to obtain a remainder, and using the dictionary element corresponding to the obtained remainder A password element determining means for determining a password element;
If the password element determination means determines whether or not the password elements for the elements constituting the password have been determined, and determines that the password elements for the elements that constitute the password have not been determined, the password element determination means The password element determination is performed based on the obtained value and the order of the dictionaries constituting the new dictionary sequence determined by the dictionary order determination unit by inputting the used value as an input value to the one-way function application unit. A password generation control means for controlling the password element determination means to determine the next password element using a dictionary in the next order of the dictionary used in the means;
Password generating device characterized in that it have a. A dictionary determining means for determining a dictionary constituting the dictionary string;
The password generation apparatus according to claim 1, wherein the dictionary order determining unit determines the order of the dictionaries constituting the dictionary sequence determined by the dictionary determining unit. The dictionary determining means includes
Association means for associating the types of dictionaries included in the dictionary string with numerical values;
A dictionary in which the value obtained by the one-way function applying means is divided by the number of types of dictionaries constituting the dictionary sequence to obtain a remainder, and a dictionary of a type corresponding to the obtained remainder is added to the dictionary sequence Additional means,
When the dictionary adding means determines whether or not a dictionary for password elements constituting a password has been added to the dictionary string, and it is determined that a dictionary for password elements constituting a password has not been added to the dictionary string The dictionary addition means adds the value used in the dictionary addition means to the one-way function application means as an input value, and uses the obtained value and the number of types of dictionaries constituting the dictionary string. Means for obtaining a remainder, and a dictionary addition control means for controlling to add a dictionary of a type corresponding to the obtained remainder to the dictionary string;
The password generation device according to claim 3, further comprising:   5. The password generation apparatus according to claim 1, further comprising display control means for displaying a password generated by the password generation control means. A password generation method in a password generation device having a one-way function application means for applying a one-way function to an input value and obtaining a value,
A dictionary order determining step for determining the order of the dictionaries constituting the dictionary string;
Dividing the value obtained by the one-way function applying means by the number of elements constituting the dictionary used for determining the password element to obtain a remainder, and using the dictionary element corresponding to the obtained remainder A password element determination step for determining a password element;
In the password element determination step, it is determined whether or not the password elements for the elements constituting the password have been determined, and when it is determined that the password elements for the elements constituting the password have not been determined, In the password element determination step, the used value is input to the one-way function application means as an input value, and the obtained value and the order of the dictionaries constituting the dictionary sequence determined in the dictionary order determination step. A password generation control step for controlling to execute the process of the password element determination step again to determine the next password element using a dictionary in the next order of the used dictionaries;
Password generation method characterized by including the. Computer
Dictionary order determining means for determining the order of the dictionaries constituting the dictionary string;
A one-way function application means for applying a one-way function to an input value and obtaining a value;
A password generation means for generating a password;
To function,
The password generation means includes
Dividing the value obtained by the one-way function applying means by the number of elements constituting the dictionary used for determining the password element to obtain a remainder, and using the dictionary element corresponding to the obtained remainder A password element determining means for determining a password element;
If the password element determination means determines whether or not the password elements for the elements constituting the password have been determined, and determines that the password elements for the elements that constitute the password have not been determined, the password element determination means The password element determining means inputs the used value as an input value to the one-way function applying means, and based on the obtained value and the order of the dictionaries constituting the dictionary sequence determined by the dictionary order determining means. A password generation control means for controlling the password element determination means to determine a next password element using a dictionary in the next order of the used dictionary; and
Program characterized Rukoto to have a.

Images