JPS59200363A - Pass word certifying system - Google Patents

Abstract

PURPOSE:To improve the privacy protecting function at the side of a central processor by storing the code conversion information to a novolatile memory means and checking the propriety of a pass word with said pass word converted by the code conversion information. CONSTITUTION:An operator of a terminal device 2 reads nonvolatile medium 5 such as a magnetic card, etc. given to the operator through the device 2. The cord conversion information is recorded to the medium 5 and then stored in a conversion table 6 of the device 2. Then a user number and a pass word are sent to a central processor 1 from the device 2. The user number is sent as it is to the processor 1, and the pass word is converted by the table 6 and sent to the processor 1. The processor 1 compares the pass word with a check pass word 9 corresponding to the user number. If the coincidence is obtained from this comparison, the device is hereafter allowed to refer to the secret information, etc.

Description

DETAILED DESCRIPTION OF THE INVENTION [Field of Application of the Invention] The present invention relates to a password conversion method, and particularly to a password conversion method suitable for protecting the security of passwords transmitted from a terminal device to a central processing unit.

[Background of the invention]

Conventionally, when referring to confidential information on the central processing unit side from the terminal device side, in order to protect the security, a password was simply entered from the terminal device and checked on the central processing unit side, or an operator-specific password was written. A non-volatile medium such as a magnetic card is set in the terminal device, and after the password is entered manually, the password is checked in the terminal device and the password in the non-volatile medium is set.

Many systems have been adopted in which the password is sent to the central processing unit only when the password and the manually entered password match. In these conventional methods, confidential information on the central processing unit side can be accessed and destroyed using someone else's password that has been stolen, or the password can be discovered by decoding the non-volatile medium that has been picked up and confidential information can be accessed or destroyed. There was a drawback. Another disadvantage is that the password in the data transmitted between the central processing unit and the terminal device is stolen, and when this password is input from the terminal device, confidential information on the central processing unit side is referenced and destroyed.

[Purpose of the invention]

The purpose of this invention is to eliminate the above-mentioned problems of the conventional methods, and the non-volatile media that have been collected cannot be used.
In addition, a known password cannot be used, and a password stolen between the central processing unit and the terminal device cannot be used even if it is entered from the terminal device. Confidentiality on the device side.

This is to strengthen the protection function.

[Summary of the invention]

In this invention, code conversion information is stored in a nonvolatile storage medium such as a magnetic card, and the operator causes a terminal device to read this medium and inputs a password. The password is converted using the information read from the medium, and the validity of the password is checked based on the converted password f.

[Embodiments of the Invention] Next, embodiments of the present invention will be described in detail with reference to the drawings.

FIG. 1 shows an example of the configuration of a password conversion method that is an embodiment of the present invention.

The terminal device 2 is connected to the central processing unit 1 through a transmission line 11, has a built-in display device 6, and is connected to an input device 4. The code conversion table 6 is set externally using the nonvolatile medium 5.

The operation of the above embodiment will be described in detail below. The operator of the terminal device 2 first causes the terminal device 2 to read a nonvolatile medium 5 such as a magnetic card given to each person. Code conversion information is recorded on the nonvolatile medium 5, and when this is read, it is stored in the conversion table B in the terminal device 2.

When the initial screen data is transmitted from the central processing unit 1 to the terminal device 2, the initial screen is displayed on the display device #6. In the case of the embodiment shown in FIG. 1, the initial screen is "USER, +
It is PASSWORD+J. While the initial screen was busy, the operator entered user number 1 "A42" and password "325".
6" is input from the input device 4, a screen 8 is displayed. In this case, the password entry system is processed by the DFC (Define Field) according to instructions from the central processing unit 1.
However, this field is detected during transfer to the central processing unit, and is processed according to its busy schedule. Code conversion is not performed when displaying. Therefore, the characters entered into the password entry area from the input device 4 are displayed as they are.

When the user number and password on screen 8 are sent from the terminal device 2 to the central processing unit 1, the user number "A42J" is sent from the terminal device 2 to the central processing unit 1.
is sent as is to the central processing unit 1. On the other hand, the password "3256" is detected as D by the code conversion instruction detector 7.
Since the FC is checked and password entry is detected, the code is converted using the code conversion table 6 read by the non-volatile medium 5 when the terminal device 2 is initialized. The code conversion instruction detector 7 has a function of detecting this special FC, since the code conversion instruction is usually made using a DFC (field definition character), which will be described later.

FIG. 2 shows the simplest example of the code conversion table 6. Now, when this code conversion table 6 is used, the password r3256J is converted to r6187J and sent to the central processing unit 1. The password “61” is entered in the central processing unit 1.
87" is the user number "87" which is stored in the password storage area 10 and then read out from a device provided in the central processing unit 1 that stores the cheek password corresponding to the user number.
"6187" of cheek password 9 corresponding to A42J
” is compared. If they match, the terminal device 2 is permitted to reference confidential information etc. from now on. Note that the code conversion table 6 in FIG. 2 is arranged irregularly in the nonvolatile medium 5, and is rearranged when the terminal device 2 creates the code conversion table 6.

FIG. 3 shows the definition of DFC (Field Definition Character). The DFC defines the attributes of the field that follows it (the field immediately before the next DFC). Specific field attributes include color, brightness, blink/reverse, input enable/disable, transfer/non-transfer, and the like. In Figure 6,
The fields defined by DFC12 are the following DF
This refers to the field immediately before C, that is, field 16. Although the DFC takes one to several bytes when transferred9, it is compressed to one character on the screen and is not displayed. In the above embodiment, since the presence or absence of code conversion is instructed by the DFC, there is an input field immediately before the password input field.
DFCs called transfer and code conversion cloth are set in the initial screen.

The above control in the terminal device 2 is performed by a microprogram control device (not shown) within the terminal device 2. DF for which the code conversion instruction detector 7 instructs code conversion
When C is detected, the code conversion processing operation of the microprogram is executed based on the output thereof, and processing is started.

FIG. 4 is a schematic diagram when a password is transmitted from the central processing unit 1 side and displayed on the terminal device 2. The password is displayed on the terminal device 2, for example, in order to confirm that the data entered from the keyboard 4 has been received by the central processing unit 5.

Now, the display data 16 in the central processing unit 1 is transferred to the terminal device 2.
When sending to , enter the password “61” in display data 16
A code conversion cloth instruction is given to the DFC 17 immediately before "87". When the terminal device 2 receives the display data 16 and the code conversion instruction detector 7' detects the DFC 16 of the code conversion cloth, it reversely converts the code conversion table 6. Fourth
In the example shown in the figure, the password "6187" becomes l'-3256J through inverse conversion, and is displayed as screen 8 on display device 6.

Within the screen 8, the DFC 17 occupies an area for one character and is not displayed.

Because of the above operation, the password input from the terminal device 2 side or the password displayed is always the same, and only one password is visible to the operator. In other words, the operator knows that his password is
It is not known that the password is different from the password checked on the central processing unit 1 side. On the other hand, even if the user's password is known on the central processing unit 1 side, the code conversion table 6
If you do not know the password, you will not be able to enter the password from the terminal device.

FIG. 5 shows a plurality of code conversions within the terminal device 2.

This is an example in which a table is provided.

Inside the terminal device 2, a plurality of code conversion tables 6a*6b, . . . 6 are defined by a non-volatile medium 5.
There is n. When the code conversion instruction detector 7.7' detects DFC1, that is, the password area of the code conversion cloth, it performs code conversion and code inverse conversion.

In this case, the DFC indicates whether code conversion is to be performed or not, as well as the type of code conversion, that is, the type of code conversion table to be used. Therefore, the code conversion instruction detectors 7, 7
In the case of code conversion cloth, code conversion table 6a + 6b . . . 6n is selected and record conversion and code inverse conversion are performed using DFC.

On the other hand, on the central processing unit 1 side, there is a password table 19 for each user, and the password table 18 is referred to for each code conversion table to be used. For example, if the use of the code conversion table 6b is instructed in the password entry box 'C', the password table 18b will be used in the password check. Therefore, the password on the transmission line between central processing unit 1 and terminal device 2 is 9.
, can be made variable by changing the DFC of the password entry mechanism of the central processing unit 1, and is also effective against password eavesdropping.

The configuration example and operation of one embodiment of the present invention have been described above, but the code conversion table 6 in FIG. 2 may contain not only numbers 0 to 9 but also English characters, Chinese characters, etc. Furthermore, in FIG. 1, the user number may be stored in the non-volatile medium 5 in advance instead of being input from the input device 4. Furthermore, one embodiment of the present invention is DlI''
Although the field attribute screen using C was described, a character attribute screen in which character attributes can be changed character by character may also be used. in this case,
The password entry system instructs code conversion for each character using the attribute attribute. Furthermore, it is even more effective if the code conversion table used for each character is changed.

〔Effect of the invention〕

With the configuration as described above, the present invention provides the following effects.

(1) When referring to confidential information on the central processing unit side from the terminal device side using a password, an operator-specific code conversion table is used and the input password is converted and sent to the central processing unit side. Confidential information can be protected even when passwords are used.

(2) Even if you analyze someone else's non-volatile medium, the password is not written on it, so you cannot use the non-volatile medium you found.

(6) Confidential information can be protected because the password is intercepted between the central processing unit and the terminal device, and even if the password is entered from the terminal device, it will not become a valid password.

(4) Since the password code is converted using attributes such as DFC on the display screen, the password can be input and displayed in the same way.

[Brief explanation of drawings]

Figure 1 is a diagram showing the password conversion method (terminal device → central processing unit), Figure 2 is a diagram showing an example of a code conversion table, Figure 6 is a diagram showing the definition of DFC, and Figure 4 is a diagram showing the password conversion method. (Central processing unit→terminal device), FIG. 5 is a diagram showing a password conversion method when the terminal device has a plurality of code conversion tables. 1... Central processing unit, 2... Terminal device, 3... Display device, 4... Input device, 5... Non-volatile medium, 6
...Code conversion table, 7.Code conversion instruction detector, 8.Screen, 9.Check password, 1.
0...Password storage area, 11...Transmission line, 1
2, l...DFC, 13, 15...Field, 17..., DFC11810, password table, 19...Password table for each user.

Claims (1)

[Claims] A password authentication method for an information processing system comprising a reading means for reading code conversion information from a non-volatile storage medium in which the code conversion information is stored, and a password input means for an operator, the password being input by the input means. The password is converted into a code using the code conversion information read by the reading means, and the converted password and information corresponding to the password stored in advance have a predetermined relationship. 1. A password authentication method, characterized in that when the above-mentioned relationship is detected, subsequent processing is permitted.