JP2001175600A - Method and device for reporting illegal access - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a method for detecting and processing the possibility of illegal access by impersonating in the case of user authentication when a user logs in through the internet to a job application. SOLUTION: A user authentication application judges whether inputted user ID and password are coincident with a previously registered password or not and when it is judged that the password is not coincident with the registered password, it is judged whether the password is not coincident continuously more than prescribed times or not. When the password is not coincident more than prescribed times, while referring to a mail address registered concerning the relevant user, electronic mail reporting illegal access is transmitted to that mail address.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a method of authenticating a user, and more particularly, to a method of detecting impersonation improper access to a legitimate user and notifying the legitimate user when logging in to a business system.

[0002]

2. Description of the Related Art When a user accesses a server machine executing a business application via a wide area network such as the Internet, the server machine determines whether or not the accessor is a legitimate business user when the user logs in to the business system. It is necessary to check whether or not. This type of business system displays a user authentication screen on a terminal device when the business user logs in to the business system, and the user ID and password of the business user whose business user has entered a valid user ID and password through the screen. Check if ID and password. If an incorrect password is input, a user authentication error occurs. If the number of errors exceeds a certain number, login to the business system is disabled to prevent unauthorized access.

[0003]

According to the conventional method for preventing unauthorized access, if a legitimate business user attempts to log in and cannot log in, whether his or her own user ID has been used illegally by another person is determined. Alternatively, there is a problem that it is difficult to know whether an error has occurred due to other causes. Particularly in a business system using the Internet, it is considered that such a problem is very likely to occur.

[0004] It is an object of the present invention to provide a method for detecting and treating unauthorized use of a user ID by another person.

[0005]

According to the present invention, it is determined whether or not a password entered by a user matches a password registered in advance, and when it is determined that the password does not match the registered password, a continuous operation is performed. Unauthorized access notification that determines whether or not there is a mismatch at least a predetermined number of times, and if it determines that there is a mismatch at least a predetermined number of times, refers to the registered email address of the user and sends an email notifying unauthorized access to that email address Features a method and an apparatus.

[0006]

Embodiments of the present invention will be described below in detail with reference to the drawings.

FIG. 1 is a configuration diagram of a business system using the Internet according to the present embodiment. In FIG. 1, reference numeral 10 denotes a server machine on which a business application is mounted, reference numeral 20 denotes a terminal used by a business system user, and reference numeral 30 denotes the Internet for connecting the server machine 10 and the terminal 20. Although only one terminal 20 is shown in the present embodiment, a plurality of terminals 20 can be connected to the server machine 10. In this system, when the terminal 20 logs in to the server machine 10, user authentication is required.

[0008] The server machine 10 has a user authentication application 12 and a user management DB (database) 11.
And a user authentication screen 21 for inputting a password. The user ID and password input by the business user via the user authentication screen 21 are sent to the server machine 10 via the Internet 30 and received by the user authentication application 12. The user authentication application 12 refers to the user management DB 11 and uses the user ID
User authentication is performed by checking the password.

[0009] The program of the user authentication application 12 is stored in a storage medium and read into the memory of the server machine 10 via a drive connected to the server machine 10, or a drive connected to another computer, The data can be transmitted to the server machine 10 via the computer and the network, and can be executed by the server machine 10.

Next, the configuration of the user management DB 11 will be described with reference to FIG. FIG. 2 shows the contents of the management data in the user management DB 11. User management DB
11 records correspond to the user I corresponding to each business user.
D41, password 42, mail ID 43, error occurrence count 44, and erroneous input password 45 are stored. The user ID 41 and the password 42 are a user ID and a password issued to the business user, and the mail ID 43 is an electronic mail address of the business user. The number of error occurrences 44 is the number of times a password input error has occurred,
The erroneous input password 45 is a list of erroneously input passwords.

Next, a user authentication processing procedure of the user authentication application 12 will be described with reference to the flowchart of FIG. When the user authentication application 12 receives the user ID and the password input by the business user via the user authentication screen 21 displayed on the terminal, the user authentication application 12 calculates the number of errors 44 in the user management DB 11 based on the received user ID. The number of times of user authentication error occurrence is checked by referring to the area (step 51).
9). If the number is less than the predetermined number, the password of the corresponding business user is searched from the user management DB 11 based on the received user ID, and it is checked whether the user is a valid business user (step 52). If you are a legitimate business user,
Display the business system menu screen (step 5
3). For business users whose passwords do not match,
The number of errors is stored in the area of the number of errors 44 relating to user authentication in the user management DB 11 (step 5).
4). In addition, the erroneous input password 45 of the user management DB 11
The received erroneous input password is stored in the area (step 55). Thereafter, the number of times of error occurrence 44 in the user management DB 11 is checked (step 56). If the number is less than the predetermined number, a re-input error screen is displayed (step 57). If the number of times is equal to or more than a certain number, an e-mail notifying that the user ID may be illegally used by another person is transmitted to the corresponding business user (step 58), and a business continuation impossible screen is displayed. Is displayed (step 59).

If the number of times of error occurrence 44 is equal to or more than a predetermined number in step 51, a notification is sent to a legitimate user in the past to send an e-mail. Emails to legitimate users include the user ID
Together with a notification that there is a possibility that the user has been used illegally by another person, and attach the erroneous input password 45 of the user. When a legitimate user receives this email,
It is possible to determine whether or not the user ID is used improperly by referring to the erroneous input password 45 attached.
If the user ID is used illegally, it is possible to present an e-mail to the system administrator and change the user ID and the password.

The user I via the user authentication screen 21
The input of D and the password may be manually input by the business user, or may be input from an IC card owned by the business user.

As for the mail transmission, a mail transmission program may be mounted on the server machine 10 and a command for requesting the mail transmission may be issued from the user authentication application 12 in real time. Error occurrence count 44
, An email may be sent via a mail sending program for a user whose user authentication error has occurred a certain number of times or more. In the case of batch processing, a flag is set for a record to which mail has been transmitted, and mail is transmitted only once. If the IP address of the illegally accessed terminal 20 and the like are recorded together with the erroneous input password 45, the illegally accessed terminal can be tracked.

As shown in step 61 of FIG. 4, when the password check is successful, the user management D
The error occurrence count 44 of B11 may be cleared to zero. When the number of times of error occurrence 44 exceeds a certain number, a new user ID may be re-registered for a valid business user. The timing of clearing 0 may not be the timing of OK in the password check, but may be cleared in units of one day.

[0016]

As described above, according to the present invention, when the number of error occurrences at the time of user authentication becomes a predetermined number or more, there is a possibility that a legitimate business user may be illegally accessed. Since the notification is made, the business user can determine whether an unauthorized access is caused by impersonation of another person or an error occurs due to other causes, and take countermeasures accordingly.

[Brief description of the drawings]

FIG. 1 is a configuration diagram of a system according to an embodiment.

FIG. 2 is a diagram illustrating a configuration of a user management DB according to the embodiment.

FIG. 3 is a flowchart illustrating a user authentication processing procedure according to the embodiment;

FIG. 4 is a flowchart illustrating a user authentication processing procedure according to another embodiment.

[Explanation of symbols]

10: Server machine, 11: User management DB, 12: User authentication application, 20: Terminal, 30: Internet, 41: User ID, 42: Password, 4
3: Email ID, 44: Number of error occurrences, 45: Mistyped password

Claims (5)

[Claims] In a method of authenticating a user by a user ID and a password, it is determined whether a password input by the user matches a previously registered password, and that the password does not match the registered password. Then, it is determined whether or not there is a mismatch more than a predetermined number of times in succession, and when it is determined that there is a mismatch more than a predetermined number of times, an e-mail for notifying unauthorized access is transmitted to the mail address by referring to a registered mail address of the user. Unauthorized access notification method. 2. The unauthorized access notification method according to claim 1, wherein a list of erroneously entered passwords is attached to the notification by e-mail. 3. A method for authenticating a terminal user by a computer in a system in which a computer executing a business application and a terminal are connected via the Internet,
It is determined whether the set of user ID and password input from the terminal matches the set of user ID and password registered in advance, and when it is determined that the password does not match the registered password, the predetermined It is characterized in that it is determined whether or not the number of mismatches is equal to or more than a predetermined number of times, and when it is determined that the number of mismatches is equal to or more than a predetermined number of times, an e-mail for notifying unauthorized access is transmitted to the mail address by referring to a mail address registered for the user. Unauthorized access notification method. 4. A storage medium for storing a computer-readable program, wherein the program is a program for authenticating a user with a user ID and a password, and the program includes a program having the following functions: Storage medium: a function for determining whether or not a password input by a user matches a previously registered password, and determining whether or not the password does not match a predetermined number of times continuously when it is determined that the password does not match the registered password And a function of notifying unauthorized access to a destination registered for the user when it is determined that there is no match a predetermined number of times or more. 5. A server machine connected to the Internet and authenticating a user with a user ID and a password, wherein the server machine corresponds to a user ID corresponding to each user.
D, a database for registering a password and a mail address, means for determining whether a set of a user ID and a password input by a user matches a set of a user ID and a password registered in the database, Means for continuously determining whether the password does not match the registered password for a predetermined number of times or more,
Means for sending an electronic mail for notifying unauthorized access to the mail address by referring to a mail address registered for the user when it is determined that the user does not match the predetermined number of times or more, a server for notifying unauthorized access Machine.