JPH06124266A - Pass word managing device and method - Google Patents

Abstract

PURPOSE:To easily release the registration of a pass word, and to realize a secrecy holding mechanism whose reliability is high. CONSTITUTION:When a floppy disk drive 22 is connected at the time of the registration of the pass word, the pass word equal to the pass word registered in a system is stored in the prescribed sector of a key floppy disk 23 set at the floppy disk drive 22. At the time of releasing the registration of the pass word, the key floppy disk 23 is set at the floppy disk drive 22, and the pass word is read from the prescribed sector of the key floppy disk 23. When the read pass word is matched with the pass word registered in the system, the pass word registered in the system and the pass word stored in the key floppy disk 23 are deleted.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION This invention is for registering a password /
The present invention relates to a password management device and management method applied to a computer system having a verification function.

[0002]

2. Description of the Related Art In recent years, as a personal computer system, a laptop type computer system, which is compact and lightweight in consideration of portability, has become widespread. In addition, a computer system that is smaller and lighter than a laptop personal computer and has improved portability has been developed and is being commercialized. In this computer system, a dedicated pen,
Since various data, commands, etc. are input by a tablet or the like, it can be said, so to speak, a pen input type computer system.

In such a computer system,
The password is registered from the viewpoint of security. That is, when using this system, the user enters a password into the system. The system compares the entered password with the password already registered in the system, and if the two passwords match, the system starts up.

Therefore, in the computer system having the password registration function as described above, when the password is once registered, when the system is powered on to use the system thereafter, the password registered by the user is the same as the registered password. If you do not enter the same password, the system will not boot. For example, if the user forgets the registered password after registering the password in the system, the system cannot be started unless the registered password is entered.

In such a case, the system can be started by releasing the password registered in the system. However, in a system in which a password can be registered, the password cannot be easily released in order to realize a highly reliable confidentiality protection mechanism.

[0006]

SUMMARY OF THE INVENTION In the above conventional method,
The following work is being done to remove the password registered in the system. That is, by disassembling the system main body and shutting off the voltage supply from the battery backup circuit in the RTC (real time clock) memory in which the password is backed up by the battery and the password is stored, a bad battery error state is generated, which causes the password to be lost. Information including is deleted. In addition, a special circuit is formed by using a special jig to erase the stored information including the password. Thus, in each case special skills and work were required, and in addition a lot of time and effort was required.

Therefore, it is difficult for a general user to cancel the password registered in the system, and the password must be canceled by a specific engineer who is familiar with the system configuration.

The present invention has been made in view of the above circumstances, and in a computer system having a password registration / verification function, by supporting a recording medium such as a floppy disk or a memory card for password verification, the user can An object of the present invention is to provide a password management device and a management method capable of managing a password so that a legitimate user can start the system even if the password is forgotten.

[0009]

A password management device according to the present invention is a password management device in which a recording medium can be set, and an input means for inputting a password and a storage for storing the input password. Means and
Means for determining whether the recording medium is set in the password management device when the password is input; and the input password when the recording medium is set in the password management device. And a writing control means for writing on the recording medium.

Further, the password management device is a password management device in which a recording medium can be set and has a password memory for storing a password, and means for displaying a setup menu having a key input area, and the key input area. Generates coordinate information indicating a touched position in the tablet means for inputting this coordinate information as a password, pen means for touching the tablet means, and when the password is input from the tablet means, A means for determining whether the recording medium is set in the password management device, and a means for writing the password in the recording medium when the recording medium is set in the password management device. Characterize.

Further, the password management device is a password management device capable of setting a recording medium and having a password memory for storing a password, wherein the storage medium storing the first password is set in the password management device. And a second password stored in the password memory is stored in the storage medium when the storage medium storing the first password is set in the password management device. Means for determining whether the password is equal to the password, and the second password stored in the password memory when the second password stored in the password memory is equal to the first password stored in the storage medium. Means for erasing the first password stored in the storage medium. And wherein the Rukoto.

A password management method according to the present invention is a password management method in a data processing system in which a recording medium can be set and which has a password memory for storing a password. If it is stored and the password is input, it is determined whether or not the recording medium is set in the data processing system, and if the recording medium is set in the data processing system, the input password is It is characterized by writing on the recording medium.

Further, the password management method is a password management method for a data processing device which can set a recording medium and has a password memory for storing a password,
It is determined whether the recording medium storing the first password is set in the data processing device, and the password memory is set when the recording medium storing the first password is set in the data processing device. It is determined whether the second password stored in the storage medium is equal to the first password stored in the recording medium, and the second password stored in the password memory and the first password stored in the recording medium are determined. When the two are equal, the second password stored in the password memory and the first password stored in the recording medium are erased.

[0014]

In the password management device capable of setting the recording medium such as the floppy disk, the input means inputs the password by the operation of the operator. Further, the storage means stores this password.

When the password is input, it is determined whether the recording medium is set in the password management device, and the writing control means writes the input password in the recording medium when the recording medium is set. Put in. As a result, a key floppy disk used for canceling the password is created.

Further, in the password management device according to the present invention, it is determined whether or not the storage medium storing the first password is set in the password management device, and when the storage medium is set, it is stored in the password memory. It is determined whether the generated second password and the first password are the same.

When the first password and the second password are the same, the second password stored in the password memory and the first password stored in the recording medium are erased. As a result, even if the user forgets the password, a legitimate user having the key floppy disk can cancel the password registered in the system. Therefore, it is possible to easily cancel the registration of the password and start the system while realizing a highly reliable confidentiality maintaining mechanism.

Further, in the password management device according to the present invention, a setup menu having a key input area is displayed. When this key input area is touched using the pen input means, the tablet means generates coordinate information indicating the touched position and inputs this coordinate information as a password.

When the password is input from the tablet means, it is determined whether the recording medium is set in the password management device. Further, when the recording medium is set,
The password is written on the recording medium. As a result, even in a pen-input type computer system, a key floppy disk can be created as described above.

[0020]

Embodiments of the present invention will be described below with reference to the drawings. 1 is a block diagram showing the configuration of a computer system according to a first embodiment of the present invention. In FIG. 1, the computer system includes a system bus 10A, an internal bus 10B, a CPU (central processing unit) 11 that controls the entire computer system, and a BIOS (basi) that stores BIOS such as an initialization program.
c input and output system) -ROM (read only me
mory) 12, a RAM (random a) used as a main memory for storing a program to be processed, data, etc.
ccess memory) 13, DMAC (direct memory access controller) 1 for direct memory access control
4, RSG (refresh signal generator) 15 for generating a refresh signal for memory refresh, PIT (programmable interva) which can be set by a program
l timer) 16, RT backed up by an operating battery (not shown) and used as a timer module
It has a C (real time clock) memory 17, a weight controller (WAIT-CONT) 18, and an additional RAM 19.

The CPU 11 is a power switch (not shown)
When is turned on, the BIOS-ROM 12 is accessed and the BIOS stored in the BIOS-ROM 12 is activated. In accordance with this BIOS, the CPU 11 executes a system startup process including a key floppy disk creation process for password registration or a password deregistration process using the created key floppy disk disk.

The RTC memory 17 stores necessary information such as system control information in addition to date and time information. The password in this system is stored in the RTC memory 17.

The wait controller 19 switches the waiting time for determining the read / write cycle time according to the extension RAM 18 to be set, and controls access to the extension RAM 18.

The computer system also has a floppy disk controller (FDC) 21 and a floppy disk drive (FDD) 22. The floppy disk controller 21 accesses the floppy disk drive 22 under the control of the CPU 11.

The floppy disk drive 22 is read / written by the floppy disk controller 21. The key floppy disk (KEY-FD) 23 is set in the floppy disk drive 22 at the time of creating the key floppy disk in the password registration and at the time of deregistering the password using the key floppy disk.

In the key floppy disk 23, a predetermined sector on the data recording surface designated by the BIOS is formatted when the password is registered. In this formatted sector, the password registered in the system is stored together with the key ID code unique to the key floppy disk 23.

Further, the present computer system has an expansion bus connec (ECC) capable of connecting the expansion unit 30 used for expanding the function of the system to the present system.
tor) 31, a hard disk controller (HDC) 33 that controls a hard disk drive (HDD) 32,
Floppy disk drive (FD) that is selectively connected
D) 34 or a UART (universal asynchronous receiver / transmit) to which a printer controller (PRT-CONT) 36 for controlling the printer 35 and an RS232C interface (RS232C-IF) 37 can be connected.
ter) 38, a keyboard 39, a keyboard controller (KBC) 40 for controlling key input of the keyboard 39,
Plasma display (PDP) 41, display controller (DISP-CONT) 43, VRAM4
4, power interface (PS-IF) 45, AC
It has an (alternating current) adapter 46 and a power supply circuit 47.

The display controller 43 is a plasma display 41 or a CR which is selectively connected.
The display of the T (cathode ray tube) display 42 is controlled. The power supply interface 45 performs data transmission with the power supply circuit 47. The AC adapter 46 rectifies / smooths an AC voltage supplied from an external power supply (not shown) and supplies a predetermined DC voltage to the power supply circuit 47. The power supply circuit 47 supplies a drive voltage to each component in the computer system.

FIG. 2 is a flow chart showing the key floppy disk creation processing in the password registration of the first embodiment, which is executed according to the BIOS stored in the BIOS-ROM 12.

In FIG. 2, step A1 is a system setup menu (FIG.
(See) is a step for displaying on the plasma display 41, for example.

Step A2 is a step of determining whether or not the password is input from the keyboard 39 by the user. Step A3 is a step for storing the input password from the keyboard 39 in the RTC memory 17. By this, the password is registered in the system.

Step A4 is a step of judging whether or not the key floppy disk 23 is set in the floppy disk drive 22. Step A5 is
This is a step for formatting a predetermined sector on the recording surface of the key floppy disk 23. The predetermined sector is designated by the BIOS.

In step A6, the RTC memory 1 is stored in the formatted predetermined sector of the key floppy disk 23.
This is a step of writing the input password stored in 7. In this case, the formatted predetermined sector contains
A predetermined key ID code unique to the key floppy disk 23 is written together with the input password. The input password to be written is data compressed and converted. For example, the input password is treated as a binary bit string, and this bit string is divided by a predetermined polynomial.
The remainder in the division result becomes the input password that has been data-compressed and converted. Therefore, in such data compression conversion, the data length of the input password after conversion becomes almost constant regardless of the data length of the input password before conversion.

FIG. 4 and FIG. 5 are flowcharts showing a password deregistration process using the key floppy disk in the first embodiment, which is executed according to the BIOS stored in the BIOS-ROM 12.

The step B1 is whether or not the password is registered in the system, that is, the RTC memory 17
This is a step of determining whether or not a password is stored in.

Step B2 is a step of determining whether or not the operator has input the password from the keyboard 39 when the password is stored in the RTC memory 17.

Step B3 is a step of determining whether or not the input password from the keyboard 39 matches the password stored in the RTC memory 17.
Step B4 is a step of determining whether or not a password cancellation command indicating cancellation of the password has been input from the keyboard 39 when the password is stored in the RTC memory 17.

Step B5 is a step of determining whether or not the key floppy disk 23 is set in the floppy disk drive 22 when the password release command is input, and the key floppy disk 23 is set in the floppy disk drive 22. Until step B6, the processing from step B6 is suspended.

Step B6 is a step of reading data from a predetermined sector of the key floppy disk 23 when the key floppy disk 23 is set in the floppy disk drive 22. This predetermined sector is the BIOS in the process of step A5 when the password is registered.
Specified by and corresponds to the formatted sector.

In step B7, the data read from the predetermined sector is the key I unique to the key floppy disk 23.
This is the step of determining whether or not it is a D code.
Step B8 is a step of reading the password from the predetermined sector when the data read from the predetermined sector is the key ID code unique to the key floppy disk 23.

Step B9 is a step of determining whether the password read from the predetermined sector matches the password stored in the RTC memory 17. Step B10 is a step of releasing the password when the password registered in the system and the password stored in the key floppy disk 23 match. That is, the password stored in the RTC memory 17, the password stored in a predetermined sector of the key floppy disk 23, and the key ID code are erased, and a normal boot process is performed.

The operation of the first embodiment of the present invention will be described with reference to FIGS. 2, 4, and 5. First, a process for creating a key floppy disk in registering a password will be described with reference to the flowchart shown in FIG.

When the power switch is turned on, the system setup menu (see FIG. 3) is displayed on the plasma display 41 (step A1). As shown in FIG. 3, the item "password specified" in the displayed system setup menu is "no registration".
When registering the password, the user inputs the password from the keyboard 39. Here, the input password is
Consists of less than 10 characters.

At step A2, it is determined whether or not a password has been input from the keyboard 39. When the password is entered, the user is again required to enter the password for confirmation. When the password re-entered by the user matches the previously entered password, the input password is stored in the RTC memory 17 (step A3). By this, the password is registered in the system. If the passwords do not match, an error message is displayed and the user is prompted to enter the password again.

Further, in order to create the key floppy disk 23, the user needs to use the floppy disk drive 2
Set the key floppy disk 23 to 2. In step A4, it is determined whether the key floppy disk 23 is set in the floppy disk drive 22.

When the key floppy disk 23 is set in the floppy disk drive 22, a predetermined sector designated by the BIOS is formatted on the recording surface of the key floppy disk 23 (step A).
5).

At step A5, the input password stored in the RTC memory 17 and the key ID code peculiar to the key floppy disk 23 are written in the formatted predetermined sector on the recording surface of the set key floppy disk 23. (Step A6). As a result, the item “password designation” in the system setup menu becomes “registered”.

When the creation of the key floppy disk is completed by the above processing, the user is requested to take out the key floppy disk 23. After the user takes out the key floppy disk 22 from the floppy disk drive 23, the reboot process is performed.

As described above, by setting the key floppy disk 23 used for releasing the password in the floppy disk drive 22, a predetermined sector on the recording surface of the key floppy disk 23 is formatted under the control of the BIOS. , The password registered in the system is written in the predetermined sector.

Next, the password registration cancellation processing using the key floppy disk will be described with reference to the flowcharts shown in FIGS. When the power switch is turned on, it is determined whether the password is registered in the system (step B1). That is, it is determined whether or not the password is stored in the RTC memory 17, and when the password is registered in the system, it is determined in step B2 whether or not the password is input from the keyboard 39.

When the password is input from the keyboard 39, it is determined in step B3 whether the input password matches the password stored in the RTC memory 17.

If the password is not registered in the system, or if the password is registered in the system and the registered password matches the input password, the boot process is performed.

If the input password does not match the password stored in the RTC memory 17 in step B3, it is determined in step B4 whether the password cancel command has been input.

When the password release command is input in step B4, the key floppy disk 23
Is set in the floppy disk drive 22 (step B5). Here, the processing after step B6 is suspended until the key floppy disk 23 is set in the floppy disk drive 22.

When the key floppy disk 23 is set in the floppy disk drive 22 in step B5, data is read from a predetermined sector on the recording surface of the key floppy disk 23 (step B).
6).

In step B7, the data read from the predetermined sector on the recording surface of the key floppy disk 23 is stored in the key floppy disk 2 in which the password is stored.
It is determined whether or not the key ID code is peculiar to No. 3. When the data read from the predetermined sector is the key ID code in step B7, the password is read from the predetermined sector (step B8).

In step B9, it is determined whether the read password matches the password stored in the RTC memory 17. If both passwords match in step B9, the password stored in the RTC memory 17 and the key floppy disk 23
The password stored in the predetermined sector of the recording surface of is deleted. The key ID code stored in a predetermined sector on the recording surface of the key floppy disk 23 is also erased. As a result, the item "password designation" in the system setup menu becomes "no registration". Therefore, the password registered in the system is released, and normal boot processing is executed.

Thus, when the system is started up,
By setting the key floppy disk 23 in the floppy disk drive 22 and inputting a password release command from the keyboard 39, the password stored in the key floppy disk 23 and the password registered in the system are controlled under the control of the BIOS. Be compared. When the two passwords match, the password registered in the system is released and the password stored in the key floppy disk 23 is erased.

By using the password releasing function using the key floppy disk as described above, the user creates the key floppy disk when registering the password, so that even if the user forgets the password, the key floppy disk is used to register in the system. It is possible to easily cancel the password that has been set, and it is possible to realize a highly reliable confidentiality protection mechanism by making it impossible for a third party to unlock the password unfairly.

In the first embodiment, when the password stored in the key floppy disk is compared with the password registered in the system, if both passwords match, the password registered in the system and the key floppy disk are compared. Each password stored on the disc is erased. However, according to the present invention, it is possible to execute a process of deleting only the password registered in the system. In this case, by registering another password after the password is canceled, the key floppy disk that stores the previously registered password can be disabled, which is effective in terms of security. To be kept.

Further, in the first embodiment, the creation of the key floppy disk and the cancellation of the registered password using the key floppy disk are executed at the time of system startup. It is possible to create a key floppy disk and cancel the registered password by using an instruction command or a pop-up menu.

Next, a second embodiment of the present invention will be described. FIG. 6 is a block diagram showing the configuration of a pen input type computer system according to the second embodiment of the present invention.

A pen input type computer system 60 shown in FIG. 6 includes a CPU 50, a BIOS-ROM 51,
Main memory 52, input / output gate array 53, additional memory card 54, power supply controller 56, system integration circuit 57, floppy disk drive (FDD) connector 58, PRT / FDD connector 5
9, floppy disk drive (FDD) 60, 6
1, RS232C connector 62, hard disk drive (HDD) 63, tablet 64, tablet controller 65, LCD 66, LCD controller 67, backlight unit 68, VRAM 69, IC card 7
0, 71, IC card controllers 72, 73, keyboard 74, keyboard controller 75, buses 55, 7
6 and the backup memory 77.

In the pen input type computer system 80 shown in FIG. 6, the system main body (not shown) has a flat plate shape, for example, 210 mm × 300.
It has a size of about mm × 20 mm. A liquid crystal display (LCD) 66 is provided on a predetermined surface of the system body.
Is placed, and a transparent tablet 6 is placed on top of it
4 are arranged.

The tablet 64 is controlled by the tablet controller 65, and when a predetermined position is touched with a pen or the like, coordinate data indicating the predetermined position is generated. The generated coordinate data is output to the tablet controller 65. The tablet controller 65 receives the coordinate data output from the tablet 64 and outputs the received coordinate data to the system integration circuit 57.

The system integration circuit 57 includes
For example, the coordinate data output from the tablet controller 65 is serially received by the bus 76, the received coordinate data is converted into parallel data, and the parallel data is stored in an internal buffer (not shown).

The LCD 66 displays character data on its display surface,
Display image data etc. LCD controller 67
It is connected to the bus 76 and controls the display of the LCD 66. B
The IOS-ROM 51 is connected to the bus 55 and stores a basic input / output system (BIOS) such as a setup program. This setup program includes processing routines for executing password registration processing and password registration cancellation processing described later.

The power supply controller 56 is connected to the system integration circuit 57 and controls the voltage supplied to each component of this system. CPU50
Are connected to buses 55 and 7 via input / output gate array 53.
6 to control the entire system. When a power switch (not shown) of this system is turned on and a voltage is supplied from the power controller 56 to each component, the CPU 50 activates the BIOS stored in the BIOS-ROM 51. Further, the CPU 50 reads the data stored in the internal buffer of the system integration circuit 57.

The backup memory 77 is backed up by a battery (not shown) and stores a password. This password is input by the user from the tablet 64 or the like in the system setup menu displayed on the display surface of the LCD 66 when the setup program is activated.

The additional memory card 54 is used as an optional memory, and stores the password input from the tablet 64 or the like if it is connected to the bus 55 during the password registration process described later.

Next, the password registration processing and password registration cancellation processing at the time of system startup of the pen input type computer system according to the second embodiment will be described.

First, the password registration process will be described with reference to FIG. When the power switch of this system is turned on and a voltage is supplied from the power controller 56 to each component, the CPU 50 causes the BIOS-ROM 5 to operate.
Boot the BIOS stored in 1. As a result, the setup program is executed.

At step C1, as shown in FIG.
A system setup menu is displayed on the display surface of the CD 66. When the item "7." Specify password "in this system setup menu is" No registration ", when the user touches the [Ent] key on this system setup menu with a pen etc. to register the password, A window as shown in FIG. 9A is displayed.

When the user further touches the [Ent] key on this window with a pen or the like, as shown in FIG.
The window is displayed as shown in FIG. Where 4
It is possible to enter a password consisting of numbers within one digit. If a password having 5 or more digits is input, the 5th or more digits are ignored. Re-entry is possible. As shown in FIG. 9C, the number that is the input password is not displayed on the window, and the symbol “*” is displayed instead of the number.

At step C2, it is judged whether or not the password is inputted by the user through the tablet 64. When the password is entered, the user is again required to enter the password for confirmation (Fig. 9).
(D)). When the password re-entered by the user matches the password previously input, the input password is stored in the backup memory 77 (step C3). By this, the password is registered in the system. The stored input password is data compressed and converted. For example, the input password is 2
It is treated as a binary bit string, and this bit string is divided by a predetermined polynomial. The remainder in the division result becomes the input password that has been data-compressed and converted.

In step C4, the additional memory card 54
Is connected to the bus 55. In step C4, the additional memory card 54 is transferred to the bus 55
Connected to the, the input password stored in the backup memory 77 and the ID unique to this input password are stored at a predetermined address of the additional memory card 54.
The code is written (step C5). This predetermined address is designated by the booted BIOS. As a result, the item “7. Specify password” in the system setup menu becomes “Registered”.

The FDD6 which is an optional device
If 1 or 62 is connected to the connector 58 or 59 and the floppy disk (FD) is set in the FDD 61 or 62, the set floppy disk is used as the key floppy disk in the first embodiment. The password will be registered by the process shown in 2.

Next, the password registration cancellation processing using the additional memory card will be described with reference to the flowcharts shown in FIGS. When the power switch of this system is turned on and a voltage is supplied from the power controller 56 to each component, the CPU 50 causes the BIOS-RO to operate.
Boot the BIOS stored in M51. As a result, the setup program is executed.

As shown in FIG. 7, when the item “7. Password designation” of the system setup menu displayed on the display surface of the LCD 66 is “Registered”, the user has to cancel the password. When the [Ent] key on the system setup menu is touched with a pen or the like, a window as shown in FIG. 12A is displayed.

When the user further touches the [Ent] key on this window with a pen or the like, FIG.
The window is displayed as shown in FIG. Here, as in the case of password registration, it is possible to enter a password consisting of 4 digits or less, but if a password having 5 or more digits is entered, the 5th or more digits Is ignored. In addition, as shown in FIG. 12C, the number that is the input password is not displayed on the window, and the symbol “*” is displayed instead of the number.

Here, in step D1, it is judged whether or not a password is registered in this system. That is, it is determined whether or not the password is stored in the backup memory 77.

If the password is stored in the backup memory 77 in step D1, step D
At 2, it is determined whether a password has been entered. When the password is input in step D2, it is determined whether the input password matches the password stored in the backup memory 77 (step D3).

When the password is not registered, or when the password is registered and the same password as the registered password is input,
Normal boot processing is executed.

If the input password matches the password stored in the backup memory 77 in step D3, it is determined whether or not a password cancel command indicating cancellation of the password has been input (step D4).

When the password release command is input in step D4, it is determined in step D5 whether the additional memory card 54 is connected to the bus 55. If the additional memory card 54 is not connected to the bus 55, the processing after step D6 is suspended until the additional memory card 54 is connected.

When it is determined in step D5 that the additional memory card 54 is connected to the bus 55, data is read from a predetermined address of the additional memory card 54 (step D6).

In step D7, the additional memory card 54
It is determined whether or not the data read from the predetermined address is the ID code unique to the additional memory card 54 in which the password is registered. If the read data is the ID code in step D7, the password is read from the predetermined address (step D).
8).

In step D9, the additional memory card 54
It is determined whether or not the password read out from the predetermined address of is the same as the password stored in the backup memory 77. If both passwords match in step D9, the password stored in the backup memory 77 and the password stored in the additional memory card 54 are erased. The ID code is also deleted. Therefore, the password registered in the system is released, and normal boot processing is executed.

As described above, at the time of password registration at system startup, if an additional memory card is connected, the password is also stored in this additional memory card. When the password release command is entered, the password stored in the expansion card memory is compared with the password registered in the system. If both passwords match, the password registered in the system is deleted. , The password stored in the additional memory card is also deleted.

As described above, the password is
It includes a user password that the user registers on the system setup menu, and a master key that the dealer pre-registers with a maintenance test program to deal with the case where the user forgets the registered password.

As described above, the password is composed of numbers within 4 digits and supports ASCII codes 30h to 39h. Therefore, input of other ASCII codes is ignored.

The user password and master key are
A 2-byte data value obtained by a CRC (Cyclic Redundancy Check) operation is stored in the following address of the backup memory 77.

User password: CMOS 35h, 36h Master key: CMOS 33h, 34h CMO if password is not registered in the system
The values stored in S33h to S36h are all 00h. Even if the master key is registered, if the user password is not registered, the user is not required to enter the password when the system is started up.

CRC for user password and master key
When the data value obtained by the calculation is 0000h, the values obtained by adding 1 to the data value 0000h are CMOS 35h, 36h, CMOS 33h, 34, respectively.
stored in h. However, in the CRC calculation, a character string of a password is made into a series of binary number bit strings, and this binary number bit string is divided by a predetermined polynomial (X ¹⁶ + X ¹² + X ⁵ ). When the remainder of this division is used as the encoding result, the password is 16-bit encoded.

If the value stored in the CMOS 35h, 36h is a value other than 0000h, the user password has been registered. Therefore, if the password is not input at system startup, the system will not be started.
On the other hand, when the system is started up, the value obtained by CRC calculation of the input password is the CMOS
If it matches the value stored in 35h, 36h or CMOS 33, 34h, the system boots.

When a checksum error or a bad battery error occurs in the IRT (initial reliability test), all the values stored in the CMOS 33h to 36h are set to 00h. , The registered password is canceled. When the setup program is activated by a checksum error or a bad battery error, the data value 00h is written in the CMOS 33h to 36h.

If a value other than 00h is accidentally written in the CMOS 35h and 36h at the time of manufacturing the computer system, the checksum error does not occur. However, in this case, even though the user password has not been registered yet, the system will not start unless the password is entered at system startup.
In order to prevent this, for example, if the folded connector of the printer is connected to the system, the data value 00h is written in the CMOS 35h and 36h without requiring the user to input the password during the boot process or the suspend process. Processing is performed.

Further, if the system has a resume function, the process shown in FIGS.
The window as shown in is displayed, and the password is entered in the same procedure as described above.

Even if the user forgets the password, the user stores the password in the floppy disk so that the user can start the password, and the password can be released only when the floppy disk is inserted. This is called a service disk. The setup program saves the password to the floppy disk.

When the password is registered, after the power is turned on and the window for inputting the password is displayed, when the first key input is the [Ent] key, the following processing is performed. If the drive A has an FDD, it is determined whether or not a floppy disk is inserted. If the floppy disk is not inserted, the process returns to the password input waiting process. When a floppy disk is inserted, the ID "K" indicating the password service disk starts from the 0th byte of head 0, track 0, and sector 2 of the floppy disk.
EY "is stored and the 2nd byte from the 3rd byte is C
It is compared whether the values match with the values of the MOS memory addresses 33h and 36h.

If there is a match, the CMOS address 35h,
The value of 36h and 5 bytes up to 0th to 4th bytes of head 0, track 0 and sector 2 of the floppy disk are zero-cleared. If the ID or password do not match, the process returns to the password input waiting process. After the above processing is completed, the FDD motor (not shown) is stopped.

When the ID and the password match, the result shown in FIG.
Display as shown in 3 and wait for key input. here,
If you select "YES" and press the [Ent] key, the setup program starts.

When "NO" is selected and the [Ent] key is input, the message "Eject disk and tip the screen with the stylus pen, or press any key to continue the process" is displayed on the screen. Display on top line and wait for pen or key input. Boot when the pen is tipped anywhere on the screen or any key is pressed.

As described above, since the pen input type computer system has the function of registering and deregistering the password by using the additional memory card, even if the user forgets the password, the password registered in the system can be easily canceled. Therefore, it is possible to eliminate the unauthorized release of the password by a third party and realize a highly reliable confidentiality protection mechanism. Although the embodiments of the present invention have been described above, the present invention is not limited to the above embodiments and various modifications can be made within the scope of the gist of the present invention.

[0105]

As described above in detail, according to the present invention,
By using the password unlock function using the key floppy disk, the user can create the key floppy disk when registering the password, so that even if the user forgets the password, the password registered in the system using the key floppy disk can be easily used. It is possible to cancel, and it is possible to realize a highly reliable confidentiality protection mechanism by making it impossible for a third party to unreasonably cancel the password.

Further, since the pen input type computer system has the function of registering and deregistering the password by using the additional memory card, the password registered in the system can be easily canceled even if the user forgets the password. It is possible to realize a highly reliable confidentiality protection mechanism by eliminating improper password release by three parties.

[Brief description of drawings]

FIG. 1 is a block diagram showing the configuration of a computer system according to a first embodiment of the present invention.

FIG. 2 is a flowchart showing a key floppy disk creation process in password registration according to the first embodiment of this invention.

FIG. 3 is a display example of a setup menu according to the first embodiment of the present invention.

FIG. 4 is a flowchart showing a password deregistration process using a key floppy disk according to the first embodiment of the present invention.

FIG. 5 is a flowchart showing a password deregistration process using a key floppy disk according to the first embodiment of the present invention.

FIG. 6 is a block diagram showing the configuration of a pen-input type computer system according to a second embodiment of the present invention.

FIG. 7 is a flowchart showing a key floppy disk creation process in password registration according to the second embodiment of the present invention.

FIG. 8 is a display example of a setup menu including password designation in the second embodiment of the present invention.

9A to 9D are window display examples for explaining the password registration processing in the second embodiment of the present invention.

FIG. 10 is a flowchart showing password registration cancellation processing in the second embodiment of the present invention.

FIG. 11 is a flowchart showing password registration cancellation processing in the second embodiment of the present invention.

FIGS. 12A to 12C are window display examples for explaining the password registration cancellation processing in the second embodiment of the present invention.

FIG. 13 is a window display example for explaining password registration cancellation processing using a floppy disk in the second embodiment of the present invention.

[Explanation of symbols]

10A ... system bus, 10B ... internal bus, 11 ... CP
U, 12 ... BIOS-ROM, 13 ... RAM, 14 ... D
MAC, 15 ... RSG, 16 ... PIT, 17 ... RTC memory, 18 ... Wait controller, 19 ... Expansion RA
M, 21 ... FDC, 22 ... FDD, 23 ... Key floppy disk, 30 ... Expansion unit, 31 ... EBC, 32
... HDD, 33 ... HDC, 34 ... FDD, 35 ... Printer, 36 ... Printer controller, 37 ... RS232C
-IF, 38 ... UART, 39 ... Keyboard, 40 ... K
BC, 41 ... PDP, 42 ... CRT display, 43
… Display controller, 44… VRAM, 45…
PS-IF, 46 ... AC adapter, 47 ... Power supply circuit.

Claims (5)

[Claims] 1. A password management device capable of setting a recording medium, input means for inputting a password, storage means for storing the inputted password, and when the password is inputted, the recording medium is the password. And a writing control means for writing the entered password in the recording medium when the recording medium is set in the password management device. Password management device characterized by. 2. A password management method in a data processing system in which a recording medium can be set and which has a password memory for storing a password, the password is input, the input password is stored, and the password is input. In this case, it is determined whether the recording medium is set in the data processing system, and when the recording medium is set in the data processing system, the input password is written in the recording medium. And password management method. 3. A password management device having a password memory in which a recording medium can be set and which stores a password, a means for displaying a setup menu having a key input area, and a contact position in the key input area. Tablet means for generating the coordinate information shown and inputting the coordinate information as a password, pen means for contacting the tablet means, and when the password is input from the tablet means, the recording medium is used for the password management. A password management device comprising: means for determining whether the password is set in the device; and means for writing the password in the recording medium when the recording medium is set in the password management device. 4. A password management apparatus having a password memory in which a recording medium can be set and which stores a password, and means for determining whether the storage medium storing a first password is set in the password management apparatus. And determining whether the second password stored in the password memory is equal to the password stored in the storage medium when the storage medium storing the first password is set in the password management device. And the second password stored in the password memory is equal to the first password stored in the storage medium, the second password stored in the password memory and the storage medium stored in the storage medium. And a means for deleting the first password. Word management device. 5. A password management method for a data processing device, wherein a recording medium can be set and has a password memory for storing a password, and whether the recording medium storing the first password is set in the data processing device. When the recording medium storing the first password is set in the data processing device, the second password stored in the password memory is equal to the first password stored in the recording medium. When the second password stored in the password memory is equal to the first password stored in the recording medium, the second password stored in the password memory and the recording medium are stored. A password management method characterized by erasing the generated first password.