JP2001160032A - Information processing system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an information processing system with a password input procedure for reducing errors, at the time of inputting a circulation password in a password authentication procedure including the circulation password. SOLUTION: When an inputted user name or a fixed password matches, the registration position of a circulation password to be used this time is displayed from the records of the circulation password used the previous time.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a display for inputting a password as a means for authenticating a user's valid use qualification, that is, an access right in an information processing system.

[0002]

2. Description of the Related Art Conventional information processing systems use a pre-registered user name and password as a means for authenticating a proper use qualification of the information processing system, that is, an access right, immediately before using the information processing system. When the user name and password entered in the password match the user name and password of the user registered in advance, it was possible to authenticate as a person who has a proper use qualification and use the information processing system. Since the password is always the same unless the registration is changed, Japanese Patent Application No. 11-142424 proposes a management method incorporating a cyclic password. The cyclic password is composed of a fixed password section composed of characters or symbols registered in advance, and a cyclic password section that circulates and uses characters or symbols of previously registered candidates in a certain direction. As
This password management method is characterized in that character or symbol candidates are circulated according to the number of times of authentication and used for authentication.

[0003]

SUMMARY OF THE INVENTION The aforementioned Japanese Patent Application No. 11-14 / 1999
In the cyclic password part proposed in 2424, the character or symbol candidates registered in advance become valid in order for each authentication, so that the user stores the candidates valid for the previous authentication. Must be kept.
This is because there is a problem that it is difficult to know in what order the registered cyclic password is valid as the cyclic password to be input when performing the next authentication operation.

[0004] It is an object of the present invention to solve the problem that when an authentication means including a cyclic password is used, the cyclic password to be input at the next authentication is not understood.

[0005]

Means for Solving the Problems The present invention provides at least:
Display means for notifying information of the information processing unit by display, voice, etc., input means for inputting information by operation, and information processing means having a control unit and a storage unit and performing storage and control An information processing system that manages users who have access rights as a user name consisting of characters or symbols registered in advance and a fixed password part consisting of characters or symbols registered in advance. A password is constituted by a cyclic password part that circulates a candidate character or symbol in a predetermined direction, and as the cyclic password part, whether the character or symbol candidate is circulated according to the number of times of authentication and used for authentication. Or, according to the use procedure registered in advance, the character or symbol candidate is circulated according to the number of authentications and used for authentication. When performing the password input process for, if the user name or fixed password entered matches, to determine circulation password used for this authentication from the recording of the circulation password used in the previous,
An information processing system for displaying the number of the registered cyclic password in the cyclic password.

As described above, if the entered user name or fixed password matches, the registered cyclic password is the order of the registered cyclic password from the record of the previously used cyclic password. Or display. Therefore, it becomes clear in what order the registered circular password is valid for the circular password to be input at the next authentication. As a result, the problem that the cyclic password to be input for the next authentication cannot be understood can be solved.

[0007] A computer-readable recording medium on which a program characterized by the above-described password input method is recorded is also one aspect of the present invention for solving the problem.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS An embodiment of the present invention will be described in detail below, including a description of a cyclic password proposed in Japanese Patent Application No. 11-142424. FIG. 1 is a flowchart of an authentication procedure of the information processing system of the present invention. FIG. 2 is a conceptual diagram of a configuration of a password including a cyclic password used in the authentication procedure of the information processing system of the present invention. FIG. 3 is an explanatory diagram showing a basic operation state of a password including a cyclic password used in an authentication procedure of the information processing system of the present invention. FIG.
Is an example of an information processing system.

The configuration of the password 10 shown in FIG. 2 includes a fixed password section 20 and a cyclic password section 30. The general information processing system 40 illustrated in FIG. 4 includes a display unit 50, an input unit 60, and an information processing unit 70 including a control unit 80, a storage unit 90, and the like.

[0009] The display means 50 is connected to the information processing means 70, and performs display or notification by light, color, sound, or the like based on information from the information processing means 70.

[0010] The input means 60 is connected to the information processing means 70 and transmits information such as a user name and a password to the information processing means 70 from the input means 60.

The information processing means 70 is connected to the display means 50 and the input means 60, and performs processing for storing and controlling information from the input means 60, transmitting and controlling information to be displayed on the display means 50, and the like. . Further, a user name and a password of the user are registered in advance in order to perform user management as to whether or not the user has the access right, and control and the like for performing authentication processing at the start of access are also performed.

The fixed password section 20 registers a password used in the authentication procedure in the information system in advance, like the conventional password. The recorded password is compared with a password input when performing an authentication procedure to start access to the information system, and it is determined whether or not they match.

The fixed password section 20 of this embodiment will be described by way of an example where four characters "a, b, c, d" are set. Therefore, "a, b, c, d" is always input to the fixed password part during the authentication procedure.

The cyclic password unit 30 registers a password used in the authentication procedure in the information processing system in advance. In this embodiment, a case where "x, y, z1" of three circulations are set will be described as an example. That is, "x" is registered as the first candidate for the cyclic password. Similarly, “y” is registered as a candidate for the second cyclic password. Further, “z1” is registered as the third candidate for the cyclic password. Here, the cyclic password means a password or character that is registered in advance and used in a certain direction. For this reason, character candidates to be used cyclically are registered in the order of use. In addition, regarding the character candidates actually used cyclically during password authentication,
Recorded each time a password is authenticated. The character valid at the time of authentication when starting access for the first time is “x” registered as a candidate for the first character of the cyclic password. Therefore, the first cyclic password part is input as "x", and authentication is performed only when both the fixed password part and the cyclic password part match. That is, "a, b, c,
The user is authenticated by inputting "d, x". When the user is further authenticated, the fact that the user has been authenticated by "a, b, c, d, x" is recorded in the storage unit 90 of the information processing system.

When the user enters a user name in the authentication procedure at the time of starting access next time, the information processing system reads out the record used at the time of the previous authentication and the registered contents of the cyclic password part from the storage part 90. As a result, by judging that the previous cyclic password part was “x”, it is determined that the character of the cyclic password part valid this time is “y” which is a candidate in the next order of x. Recognizes. The information processing means 70 transmits to the display means 50 information that the second candidate cyclic password is valid. The display means 50 performs display according to the information from the information processing means 70. According to the display, the user sets “a,
If the user inputs "b, c, d, y", both the fixed password portion and the cyclic password portion match and are authenticated.
The fact that the user has been authenticated with a, b, c, d, y ″ is recorded in the storage unit 90 of the information processing system.

Further, when the user inputs a user name in the authentication procedure at the time of starting the next access, the information system reads out from the storage unit 90 the record used in the previous authentication and the registered contents of the cyclic password unit. By judging that the previous cyclic password part was “y”, the character of the cyclic password part valid this time is “z”.
The information processing means 70 recognizes that the password is "1". The information processing means 70 transmits to the display means 50 information indicating that the third candidate cyclic password is valid.
0 performs display according to the information from the information processing means 70.
According to the display, the user sets “a, b, c, d, z1” as the password including the third candidate cyclic password.
Then, both the fixed password portion and the cyclic password portion match and authentication is performed. Further, "a, b, c, d,
The storage unit 9 of the information processing system confirms that the authentication has been performed with z1 ″.
Record at 0.

As described above, in the cyclic password part, only a part of the cyclic password is valid.
Only when “x” and the user is authenticated as a valid user, the next registered “y” becomes valid for the next authentication. Only when the user is authenticated, the next authentication is valid for the next registered “z1.” Further, only when the user is authenticated as the authorized user with the “z1”, the validity is valid for the next authentication. Is the first registered “x”, and thereafter, this cycle is repeated, and the above-described password cycle is schematically shown in FIG.

Therefore, when the user inputs the user name, the information processing system reads the record used in the previous authentication and the registered contents of the cyclic password section from the storage section 90. As a result, the candidate of the cyclic password section valid this time is obtained. By notifying the user of the number by displaying or by sound or the like, errors in password input can be reduced.

The password “a, b, c,
An example in which the (n + 1) -th authentication procedure is started in the information processing system in a state where there is a record authenticated at d, x "will be described with reference to the flowchart of FIG.

An authentication procedure for accessing the information processing system 40 is started. (S1)

The information processing system 40 displays and requests the display means 50 to input a user name. The user name is input from the input means 60. The input means 60 converts the input user name information into information processing means 7.
Transmit to 0. (S2)

The information processing means 70 receives the information from the input means 60 and compares the information with the user name registered in the storage unit 90. The comparison reveals that it matches the registered user name. (S3) Further, the record of the cyclic password used last time with the user name is read out, and it is determined in which order the cyclic password to be validated next is registered as the cyclic powered. The information processing means 70 displays information on the number of the cyclic password which is the next valid cyclic password.
Output to

In accordance with the information from the information processing means 70, the display means 50 displays that the next valid cyclic password is the second registered cyclic powered.
(S4) Note that the displayed content is that the valid cyclic password is the second registered cyclic password, and does not display the registered content itself.

Next, the display means 5 prompts the user to input a password.
The password “a, b, c, d, y” including the second cyclic password portion is input from the input means 60 to be displayed and requested at 0. The input unit 60 transmits the input password information to the information processing unit 70. (S
5)

The information processing means 70 receives the information from the input means 60 and compares the information with the fixed password part registered in the storage part 90. It is found by comparison that the password matches the registered fixed password part. If the fixed passwords match, the record of the previous (n-th) authentication is read, the cyclic password of the current (n + 1) th is read, and compared with the inputted cyclic password. (S6) If the user name and the password do not match, a process of not authenticating (S9) is performed, and the authentication procedure is performed from the beginning.

If the passwords match, authentication is performed as if the user has a proper access right, that is, use qualification, and the password used for the current authentication is recorded. (S
7)

Since the authentication procedure has been completed, access to the information processing system is permitted. (S8)

As described above, by inputting the user name, the record of the cyclic password used for the previous authentication is read, and the cyclic password which becomes valid this time is determined to be the registered cyclic password. Can be displayed.

In the above-described embodiment, by inputting the user name, the record of the cyclic password used for the previous authentication is read out, and it is determined which cyclic password is valid this time. After the user name and the fixed password part match, the record of the cyclic password used for the previous authentication is read, and the cyclic password registered this time becomes the valid cyclic password. May be determined and displayed.

The information processing means 70 generally includes a communication means and the like, and a user name and a password may be registered in another information processing means.

[0031]

As described above in detail with the embodiments, the following effects can be obtained. According to the present invention, when a cyclic password part is included as a component of a password, an effective password for preventing incorrect input is displayed by displaying which cyclic password is valid when performing an authentication operation when an authentication operation is performed. Authentication means can be realized.

[Brief description of the drawings]

FIG. 1 is a flowchart of an authentication procedure of the information processing system of the present invention.

FIG. 2 is a conceptual diagram of a password configuration including a cyclic password used in an authentication procedure of the information processing system of the present invention.

FIG. 3 is an explanatory diagram showing a basic operation state of a password including a cyclic password used in an authentication procedure of the information processing system of the present invention.

FIG. 4 is an example of an information processing system.

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 10 Password 20 Fixed password part 30 Circulation password part 40 Information processing system 50 Display means 60 Input means 70 Information processing means 80 Control part 90 Storage part

[Procedure amendment]

[Submission date] June 16, 2000 (2006.1.
6)

[Procedure amendment 1]

[Document name to be amended] Statement

[Correction target item name] Claim 1

[Correction method] Change

[Correction contents]

[Procedure amendment 2]

[Document name to be amended] Statement

[Correction target item name] Claim 2

[Correction method] Change

[Correction contents]

[Procedure amendment 3]

[Document name to be amended] Statement

[Correction target item name] 0005

[Correction method] Change

[Correction contents]

[0005]

According to the first aspect of the present invention,
It comprises at least display means for notifying a user of information by display or voice, input means for inputting information by operation, and information processing means having control means and storage means for performing storage, calculation and control. A method of managing users who have access right or not is a user name consisting of characters or symbols registered in advance and a fixed password part consisting of characters or symbols registered in advance. A password is constituted by a circulating password portion that circulates and uses the candidate characters or symbols in a predetermined direction. As the circulating password portion, the character or symbol candidates are circulated according to the number of times of authentication and used for authentication. Or, according to the use procedure registered in advance, select characters or symbols according to the number of authentications If the entered user name or fixed password matches when performing the password input method used for authentication at the same time, the cyclic password to be used for the current authentication is determined from the record of the previously used cyclic password. To display the information about the number of the registered cyclic password, or the information about the number of the cyclic password and the information about the number of the registered cyclic password. An information processing system characterized by the following.

[Procedure amendment 4]

[Document name to be amended] Statement

[Correction target item name] 0007

[Correction method] Change

[Correction contents]

[0007] A computer-readable recording medium on which a program characterized by the password input method according to claim 2 is also an aspect of the present invention for solving the problem.

[Procedure amendment 5]

[Document name to be amended] Statement

[Correction target item name] 0011

[Correction method] Change

[Correction contents]

The information processing means 70 is connected to the display means 50 and the input means 60, and processes information from the input means 60, storage processing of information, arithmetic processing of information,
Transmission and control of information to be displayed at 0 are performed. Further, a user name and a password of the user are registered in advance in order to perform user management as to whether or not the user has the access right, and control and the like for performing authentication processing at the start of access are also performed.

[Procedure amendment 6]

[Document name to be amended] Statement

[Correction target item name] 0031

[Correction method] Change

[Correction contents]

[0031]

As described above in detail with the embodiments, the following effects can be obtained. According to the present invention, when a cyclic password part is included as a component of a password, information on which cyclic password is valid when performing an authentication operation is displayed, or how many times the cyclic password is valid. By displaying information as to whether or not the password is the second registered cyclic password, it is possible to realize a password authentication means effective for preventing incorrect input. In addition, when a third party authenticates illegally, it can be seen that a cyclic password effective for authentication is advanced. In other words, the information on the cyclic password required for the current authentication displayed as a result of the input operation for authenticating the user to perform the authentication is not the next cyclic password of the cyclic password used for the previous authentication by the user. It can be determined. Therefore, it is possible to realize a password authentication unit effective for detecting unauthorized use.

Claims (2)

[Claims] 1. An information processing apparatus having at least a display unit for notifying a user of information by display or voice, an input unit for inputting information by operation, a control unit and a storage unit, and performing storage and control. An information processing system that consists of the following means: A user name consisting of characters or symbols registered in advance and a fixed password consisting of characters or symbols registered in advance. A password is composed of a part and a circulating password part that uses a previously registered candidate character or symbol by circulating in a predetermined direction, and as the circulating password part, the character or symbol candidate is circulated according to the number of authentications. Either use it for authentication, or change the character or symbol candidate If the entered user name or fixed password matches when performing the password input method used for authentication by cyclically determining the cyclic password to be used for the current authentication from the record of the previously used cyclic password And displaying the order of the registered cyclic password. 2. A method of inputting a user name and a password used to authenticate a valid use qualification of each information processing system, that is, an access right, includes a user name including characters or symbols registered in advance and a character or symbol registered in advance. A password is composed of a fixed password part consisting of a symbol and a cyclic password part that circulates and uses in advance a candidate character or symbol in a predetermined direction, and as the cyclic password part, the character or symbol candidate is used for the number of times of authentication. If the entered user name or fixed password matches when performing the password input method used for authentication according to the cycle, the cyclic password used for the current authentication will be changed from the record of the previous cycle password used. Judgment is made, and in what order is the circular password registered Displaying whether the password, the computer-readable recording medium recording a program for managing a password wherein the.