JPH0480854A - Password control system - Google Patents

Abstract

PURPOSE:To improve the security in a password control system by taking successively the characters at the positions corresponding to the values of the password keys registered previously out of the character strings produced at random for production of a password character string. CONSTITUTION:The contents of a random character string table 36 are outputted to a user terminal 39 and displayed there in a character string form via a random character string display processing part 32. Then the password character string designated by a user is inputted through the terminal 39, a password input processing part 33 stores the input character string in a password input character string table 38. A password comparison processing part 34 compares a produced password character string table 37 with a password input character string table 38, i.e., the password designated by the user. When the coincidence is secured between both tables, a correct user is decided. Meanwhile an illicit user is decided if no coincidence is obtained between both tables.

Description

DETAILED DESCRIPTION OF THE INVENTION [Field of Industrial Application] The present invention relates to a password management method, particularly to a password management method for checking usage rights at the time of connection in TSS and computer communications.

[Conventional technology]

Conventionally, this type of password management system uses a method in which a user directly specifies a character string registered in advance as a password at the time of connection.

[Problem to be solved by the invention]

In the conventional password management method described above, the user directly specifies a pre-registered character string when connecting, so it is easy for the entered password to be stolen when input from a terminal or by monitoring the communication line. There is a drawback.

[Means to solve the problem]

The password management method of the present invention is a password management method for checking usage rights at the time of connection in computer communication, and includes a password key registration means for registering using a password key method, and a password key registration means for generating random numbers to create a random character string. Random character string generation means; password conversion processing means for creating a password string from the random character string created by the random character string generation means and the password key registered by the password key registration means; and the random character string generation means. a random character string display processing means for displaying the random character string created by the above on a user terminal; and a password created by the user from the random character string displayed on the user terminal and the password key and sent from the user terminal. a password input processing means for inputting a character string;
The password comparison processing means compares the password character string created by the password conversion processing means with the password character string inputted by the password input processing means from the user to determine whether the password character string is acceptable or not.

〔Example〕 Next, the present invention will be explained with reference to the drawings.

FIG. 1 is a block diagram of an embodiment of the present invention. The embodiment shown in FIG. 1 includes a password key registration means 1 for registering a password key agreed upon with a user from an input device 11 into a password key file 12, and generating a random number to create a random character string. A random character string generating means 2 is set in the random character string character string 36, and a password key is inputted from the password key file 12 and set in the password key character 35.
．． The password conversion processing unit 31 generates a password character table 37 by sequentially extracting characters at positions corresponding to the values of the password key 35 from the random character string table 36. User terminal 3
The random character string display processing unit 32 displays and outputs a password string to the password input string table 38, which generates and inputs a password string created by the user from the character string displayed on the user terminal 39 and the agreed-upon password key. The password conversion testing means 3 is composed of a password input processing section 33 for setting a password, and a password comparison processing section 34 for comparing a password string table 37 and a password input character table 38 to determine whether or not the user has passed the password.

FIG. 2 shows an example of the contents of a table used by the random character string generation means 2. FIG. 2(a) shows the contents of the number table 21 for storing generated random numbers. b) shows the contents of the character table 22 that stores characters for creating a random character string.

FIG. 3 is a diagram showing an example of the contents of a table used by the password conversion inspection means 3, and FIG. 3(a) shows the contents of the bus key F stored in the password key table 35, and FIG. ) is the content of the random character string created by the random character string generating means 2 stored in the random character string table 36, and FIG. It shows the contents of the password string. Further, the password input character table 38 also stores contents in the same format as the password character table 37.

FIG. 4 is a flowchart of the processing of the password key registration means 1.
Steps to enter the password key from the input device 11 ■
), the password key is output to the password file 12 (by 4).

FIG. 5 is a flowchart of the processing of the random character string generating means 2, in which random numbers are generated and each generated numerical value is stored in the random number square 21 (step 2). Next, the counter n is set to 0 (step 0), and the end of the random number table 21 is determined (step 0). The determination is made based on whether the counter n has reached the number stored in the random number table 21.

If it has not finished, increase the counter n by 1 (
step 0). The nth value in the random number table 21 is set in the counter m (step o).

The mth character of the character table 22 is taken out and stored in the nth character of the random number character string table 36 (step @). Then return to step 0. Random number table 21 at step 0
The processing of the random character string generating means 2 is ended at the time when it is determined that the random character string generating means 2 has ended. FIG. 7 shows the data relationship between each table resulting from a series of repeated processing from step 0 to step @.

FIG. 6 is a flowchart of the processing of the password conversion inspection means 3.
First, input the password key from the password key file 12 into the password key table 35 (step ■)
. Next, the random character string generation means 2 is called and the random character string is stored in the random character string table 36 (step Φ). Next, the password conversion processing unit 31 extracts characters in the random character string table 36 corresponding to the key values for each key from the beginning of the password key table 35, and stores them in the password character string table 37 (step entrance). FIG. 8 shows the data relationship between each table in step O. On the other hand, the contents of the random character string table 36 are output as character strings to the user terminal 39 for display via the random character string display processing section 32 (step @). Therefore, when a password character string specified by the user is input from the user terminal 39, the password input processing section 33 stores this password character string in the password input character string file 38 (step [phase]).

The password comparison processing unit 34 compares the password string table 37 created in step Φ with the password input string table 38 which is the password specified by the user input in step [phase] (step @). The comparison results are determined, and if the comparison results match, it is interpreted as a valid user (step [phase]), and if they do not match, it is interpreted as an unauthorized user (step @).

〔Effect of the invention〕

As explained above, the present invention sequentially extracts the characters at the positions corresponding to the password key values registered in advance from a randomly generated character string to create a password string, so that the password string is different each time. This method has the effect of improving security compared to the method of specifying a registered fixed password character string.

[Brief explanation of drawings]

FIG. 1 is a block diagram of an embodiment of the present invention, FIG. 2 is a diagram showing an example of the contents of a table used in the random character string generation means of FIG. 1, and FIG. 3 is a password registration means of FIG. 1. Figure 4 is a flowchart of the processing of the password registration means in Figure 1, Figure 5 is a flowchart of the processing of the random character string generation means in Figure 1, and Figure 6 is a diagram showing an example of the contents of the chifur used in Figure 1. 1, FIG. 7 is a diagram showing an example of the process in FIG. 5, and FIG. 8 is a diagram showing an example of the process in FIG. 6. 1...Password key registration means, 2...
・Random character string generation means, 3... Password conversion inspection means, 11... Input device, 12...
Password key file, 31... Password conversion processing unit, 32... Random character string display processing unit, 33...
... Password input processing unit, 34... Password comparison processing unit, 35... Password key table, 36... Random character string table, 37...
... Password string table notebook 38 ... Password input string table, 39 ... User terminal. Agent Susumu Uchihara, Patent Attorney Figure (b) Figure (a) Figure (b) Figure (C) Figure

Claims (1)

[Claims] In a password management method for checking usage rights when connecting in computer communication, a password key registration means for registering a password using a key method, a random character string generation means for generating a random character string by generating random numbers, and a random character string generation means for generating a random character string by generating a random number are used. password conversion processing means for creating a password string from the random character string created by the character string generation means and the password key registered by the password key registration means; Random character string display processing means for displaying on a terminal, and password input processing means for inputting a password character string created by a user from the random character string displayed on the user terminal and the password key and sent from the user terminal. and password comparison processing means for comparing the password character string created by the password conversion processing means and the password character string from the user input by the password input processing means to determine pass/fail. Password management method.