JP2003030147A - Password input system, character string input system, password input method, and password input program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To overcome the problem that if a regular user of a computer system makes a key input error when inputting a password, even the regular user should input the password again. SOLUTION: For a log-in system, constitution is provided which registers information regarding up to what extent of an input error a password is regarded as a regular password in case of a password input error and determines the adequacy of the password according to the registered contents. Password determination is performed by referring to the registration contents of a password determination level allowing the password input error and regarding an input error meeting the registered rule as the original password. Thus, when the extent of the password input error is within the prescribed range, log-in is allowed.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a password input in a login system such as a computer, which is regarded as an original password if a preset password is different from the entered password and a preset mistake is made. The present invention relates to an input system, a character string input system, a password input method, and a password input program.

[0002]

2. Description of the Related Art Generally, a login system which performs a user authentication process by judging whether a user who requests the use of a computer or the like is a legitimate user is a correct password when the user makes a mistake in inputting the password. Is requested again, and for example, if the input error continues for a prescribed number of times, the login is controlled so that the user cannot log in.

[0003]

Therefore, even if a legitimate user happens to make a key input mistake,
There was a problem that the password had to be entered again. When the length of the password to be input exceeds 10 characters, it is further annoying because it makes the user aware that it is a valid user to input the password again. When a legitimate user happens to enter a password that is different from the original password due to a mistake, a legitimate user does not enter a password that is far from the correct password. In many cases, the mistake is about one character.

According to the present invention, the contents of an input error pattern expected to occur in the login system are registered in advance, and an error corresponding to the registered input error pattern is regarded as a normal password without being regarded as a password input error. A password input system, a character string input system, a password input method, and a password input program in a login system are provided.

[0005]

The first password input system of the present invention is a login system for authenticating a user with a user name and a password input by a user who uses a computer system. A password decision level storage unit that has registered a password decision level that specifies a range for allowing mistakes, and if the entered password does not match the original password, the entered password, the original password, and the password decision level storage unit. And a password determination unit that determines whether or not to consider the password entered as the original password.

In a second password input system of the present invention, in the first invention, the password determination level storage unit has common contents for users of the entire system or has unique contents for individual users. The password determination level is registered.

In a third password input system of the present invention, in the first invention, when there is an input error in the input password, it is stored as history information together with the corresponding user name, and the password determination level is generated. It is provided with input information.

According to a fourth password input system of the present invention, in the first invention, when the keys on both sides of the key originally intended to be entered as the contents of the password decision level are entered, the key originally intended to be entered is entered. When there is an input of a key on both sides of the above and below, a case of inputting a lowercase letter in the case of an uppercase letter, and a case of inputting an uppercase letter in the case of a lowercase letter, it has a plurality of contents.

A first character string input system of the present invention specifies a range in which an input error is allowed in inputting a predetermined character string including a user name and a password input by a user who uses a computer system. A character string determination level storage unit that stores a character string input error determination level, and if the input character string does not match the original character string, the input character string, the original character string, and the character string determination level storage unit And a character string determination unit that determines whether or not the character string input by and is regarded as an original character string.

According to a first password input method of the present invention, in a login process for authenticating a user with a user name and a password input by a user who uses a computer system, a first user name registered in the system is accepted. Step, the second step of accepting the entered password, the original password corresponding to the user name accepted in the first step and the password accepted in the second step are compared, and if they match, The third step of terminating the login process normally, and in the case of disagreement, transferring the control to a means for judging whether or not the entered password is regarded as the original password, and the original password passed from the third step. If there is a typo in the password accepted in the second step and the password, And a password decision level indicating the content that allows the password, and a fourth step of determining whether or not to consider the input password as the original password, and the result of the determination in the fourth step, the determination to consider as the original password. And a fifth step of normally ending the login process.

A first password input program of the present invention is a first password acceptance program for accepting a user name registered in the system in a login process for authenticating a user with a user name and a password input by a user using a computer system. Step, the second step of accepting the entered password, the original password corresponding to the user name accepted in the first step and the password accepted in the second step are compared,
If they match, the login process ends normally, and if they do not match, the control is transferred to a unit that determines whether or not the entered password is regarded as the original password. The third step, which is originally passed from the third step Fourth, it is determined whether or not the entered password is regarded as the original password, based on the password of the above step, the password accepted in the second step, and the password decision level indicating the content that allows the input error if there is an input error. Step, the fourth
As a result of the determination of the step, if the password is determined to be the original password, the fifth step of normally ending the login process is executed.

[0012]

Embodiments of the present invention will now be described in detail with reference to the drawings.

FIG. 1 is a block diagram showing the configuration of an embodiment of the present invention, and FIG. 2 is a flow chart showing the operation of the embodiment of the present invention.

As shown in FIG. 1, the configuration of an embodiment of the present invention is a login process for authenticating a user in various systems including an ATM terminal such as a computer system and a bank, and includes an interface control unit 10 and A login control unit 20, a user name input unit 30, a password input unit 40, a password determination unit 50, a password determination level storage unit 60, a user name password storage unit 70,
It consists of

The interface control unit 10, the login control unit 20, the user name input unit 30, the password input unit 40, and the password determination unit 50 are realized as software programs.

Hereinafter, description will be made assuming a computer system.

The interface control unit 10 has an interface with a host device in the computer system main body and an interface with the login control unit 20, and controls login processing for performing a security check. The password determination level is set in advance in the password determination level storage unit 60 for each login system or each user.

The password determination level is registered in the password determination level storage unit 60 by a password maintenance program which is a program that operates on the host device. The password decision level is input by a system administrator or the like from a keyboard (not shown) connected to a host device, the content is confirmed by a display device (not shown), and the password decision level is stored via the interface control unit 10. It is set on the section 60. On the contrary, the contents set in the password determination level storage unit 60 are retrieved by the password maintenance program, and the contents can be corrected, deleted, or added.

When the login control unit 20 receives a login request from the interface control unit 10, the login control unit 20 requests the user name input unit 30 for the user name and the password input unit 40 for the password. The login control unit 20 that has acquired the user name and the password input by the user allows the user to log in if the password is correct, but if not, the password determination unit 50 determines the validity of the password. Make a request.

The password determination unit 50 acquires a password determination level that specifies how much key input error is allowed from the password determination level storage unit 60, and checks it based on the password input by the password input unit 40. To do.

The content of the pattern for permitting a password input error stored in the password determination level storage unit 60 is as follows:
For example, (1) When you enter the keys that are on both sides of the key that you originally intended to input (2) When you enter the keys that are on both sides of the key that you originally intended to input and the keys that are above and below (3) When the uppercase letters are lowercase letters, If uppercase letters are entered in the case of lowercase letters (4) In case of typographical error in Romaji / Kana (5) Insufficient number of letters is less than 1 or N characters (6) Original key and the key next to or above or below the key When either of the keys is entered (7) When the password is changed due to expiration, when the old password is specified (8) When the password length is shorter than n characters, enter 1 character There are several levels, including the case of not allowing a mistake (9) and the case of not allowing a single input error. One or more of these pattern contents are registered in the password determination level storage unit 60. If a plurality of passwords are registered, if the password matches any of the patterns, the password that was mis-input is considered to have been input as the original password. Also, 2
There may be an input error in which two or more patterns are combined, but since it becomes complicated, it is omitted in the following description.

It is considered that the level of key input error varies depending on the user. Therefore, not only the contents defined in the password decision level storage unit 60 are uniformly applied to all users, but the password decision level can be uniquely defined for each user.
In this case, the password determination level at which the user is likely to make an input error may be defined for each user.
In addition, by combining these, you can define a unique password decision level for a user name and apply a common password decision level defined for the entire system if you do not define your own password decision level. Is.

The login control unit 20 receives the result about the validity of the password from the password determination unit 50, prompts the user to input the password again if the input error exceeds the allowable range, and if the input error is within the allowable range, it logs in. Permits and notifies the login result to the host device via the interface unit 10.

In the user name / password storage unit 70, one or a plurality of user names and passwords are registered as a pair for the user registered in the computer system.

Next, the operation of the embodiment of the present invention will be described with reference to the flowchart of FIG.

When the login control unit 20 receives a request for login processing with the user from the host device (step S1),
The login control unit 20 prompts the user name input unit 30 to input the user name. The user name input unit 30 displays a user name input screen on the display device (step S2). The user name input unit 30 requests the user to input the user name, acquires the input user name, and notifies the login control unit 20 of the user name (step S3).

The login control unit 20 searches the user name password storage unit 70 to check whether the input user name is registered in the system (step S4). If the corresponding user name is not registered (step S
Returning to 2), the user name input unit 30 is prompted again to input the user name. One or more sets of user names and corresponding passwords are registered in advance in the user name / password storage unit 70.

When the input user name is registered in the system, the login control unit 20 requests the password input unit 40 to input the password corresponding to the user name, and the password input unit 40 displays the password input screen. Is displayed on the display device to prompt the user to input the password (step S5).

The password input unit 40 requests the input of a password, and when the input password is acquired, it is passed to the login control unit 20 (step S6). The login control unit 20 checks from the contents of the user name password storage unit 70 whether or not the received password corresponds to the user name (step S7), and if the passwords match, the login control unit 20 notifies the user name as a valid user. The login process is completed by performing the process to the host device via the interface control unit 10.

If the received password does not correspond to the user name, the login control unit 20 passes the entered password, the correct password, and the user name to the password determination unit 50 and entrusts the validity judgment (step S).
8).

The password determination unit 50 retrieves the password determination level from the password determination level storage unit 60 in which the pattern of the input error registered in advance by the system administrator is registered (step S9) and acquires it in (step 8). From the password and the original password, it is determined whether or not it can be regarded as the original password within the allowable range, and the result is reported to the login control unit 20.

For example, the password decision level storage unit 60
If "When the number of input characters is one or less than N characters is insufficient" is registered as the content of, the password determination unit 5
For 0, the entered password size is compared with the correct password size, and if the entered password size is shorter and the difference is N characters or less, both passwords are compared one by one from the left and registered. Determine pass / fail with the content. In this way, all the password decision levels registered are compared with each other, and if any one of them matches, the password which has been erroneously entered is regarded as the original password.

If the password determination level corresponding to each user name is registered, the password determination unit 50 searches the password determination level storage unit 60 with the user name, and the password determination level set for the user. Check according to.

The password determination unit 50 does not perform a search when the password determination level is the same for all users who use the system.

The password determination unit 50 notifies the login notification unit 20 of the result of the determination thus made (step 10). The login control unit 20 checks the notification content (step S11), and if it can be regarded as a valid password, the login control unit 20 sets the user name as the interface control unit 10.
To the upper device through (step 12).

If the password is not judged to be valid, the process returns to step S5 to prompt the user to re-enter the password.

Although the password in the login system has been described as an example of the input error, not only the password but also the character string to be input in advance when the user name is input is defined. It can be applied to a character string input program for inputting. The application method in that case is the password determination unit 5 described above.
It can be realized by providing a character string determination unit for 0 and a function equivalent to that for the password determination level storage unit 60 as a character string determination level storage unit.

Next, a second embodiment of the present invention will be described. The configuration of the second embodiment is obtained by adding an input error password storage unit 80 to the configuration of the first embodiment as shown in FIG.

When the user makes an input error when inputting the password, the login control unit stores the password of the input error in the input error password storage unit 80 as history information.

The format of this history information is user name + input date and time + input error password 1 + input error password 2 + ...
-It consists of + success / failure discrimination. The password determination unit 50 generates data of this format when a password input error occurs regardless of whether information is set in the password determination level storage unit 60, and the input error password storage unit 80 is generated.
Remember. Success / unsuccessful identification indicates whether the password input is successful or the password input is unsuccessful even if an input error is made. Even when an input error is permitted within the allowable range at the password determination level stored in the password determination level storage unit 60, the input error password is stored as a history.

The stored typo password is checked by the administrator of the system at a proper time to retrieve the contents using the password maintenance program. For example, when creating the password decision level, the password decision level can be created with reference to which user made what type of input error and what type of input error is common throughout the users of the system. Finally, if the password input fails and the system administrator is not requested to notify the correct password, it is possible that an unauthorized user could use the system. You can refer to what is said.

[0042]

According to the present invention, the pattern contents of an input error expected to occur in the login system are registered in advance,
It provides a password input method in a login system that regards a registered input error pattern as a normal password without making it a password input error. Even if there is no need to re-input, it is effective in improving operability.

[Brief description of drawings]

FIG. 1 is a block diagram showing a configuration of a first exemplary embodiment of the present invention.

FIG. 2 is a flowchart illustrating the operation of the first exemplary embodiment of the present invention.

FIG. 3 is a block diagram showing a configuration of a second exemplary embodiment of the present invention.

[Explanation of symbols]

10 Interface control unit 20 Login control section 30 User name input section 40 Password input section 50 Password determination unit 60 Password decision level storage 70 user name password storage 80 Typo password storage

Claims (7)

[Claims] 1. In a login system that authenticates a user with a user name and a password input by a user who uses a computer system, a password that registers a password determination level that specifies a range in which an input error in the password input is allowed. If the decision level storage unit and the entered password do not match the original password, whether or not the entered password, the original password, and the password entered by the password decision level storage unit are to be regarded as the original password. A password input system, comprising: a password determination unit for determining. 2. The password decision level storage unit is registered with the password decision level having common contents for users of the entire system or having unique contents for individual users. Password entry system described in 1. 3. The password according to claim 1, wherein if there is an input error in the input password, the input password is stored as history information together with the corresponding user name, and the password determination level is used as the input information. Input system. 4. In the case of inputting the keys on both sides of the key originally intended to be input as the contents of the password decision level, when inputting the keys on both sides of the key originally intended to be input, and the keys above and below, or in the case of capital letters. 2. The password input system according to claim 1, wherein the password input system has a plurality of contents including a case where an upper case character is input when a lower case character is input. 5. A character that stores a character string input error determination level that specifies a range in which an input error is allowed when inputting a predetermined character string including a user name and password input by a user who uses a computer system. When the string determination level storage unit and the input character string do not match the original character string, the input character string, the original character string, and the character string input by the character string determination level storage unit are used as the original character strings. A character string input system, comprising: a character string determination unit that determines whether or not the character string is regarded as a character string. 6. A first step of accepting a user name registered in the system in a login process for authenticating a user with a user name and a password input by a user who uses a computer system, and an input password. The second step of accepting is compared with the original password corresponding to the user name accepted in the first step and the password accepted in the second step, and if they match, the login process ends normally and there is a mismatch. If the entered password is regarded as the original password, the control is transferred to the third means.
And the password entered from the third step, the password accepted in the second step, and the password decision level indicating the content allowing the erroneous input if there is a typo in the password. A fourth step of determining whether the password is regarded as the original password, and a fifth step of normally terminating the login process when the judgment of the original password is obtained as a result of the determination in the fourth step. A method for inputting a password, which comprises: 7. A first step of accepting a user name registered in the system in a login process for authenticating a user with a user name and password entered by a user of a computer system, and accepting the entered password. In the second step, the original password corresponding to the user name accepted in the first step is compared with the password accepted in the second step. If they match, the login process ends normally, and if they do not match, The control is transferred to the means for judging whether or not the inputted password is regarded as the original password.
Step, the password input from the original password passed from the third step, the password accepted in the second step, and the password decision level indicating the content allowing the input error if there is an input error In order to execute the fourth step of determining whether the password is regarded as the original password, and the fifth step of normally terminating the login process when the judgment of the original password is obtained as a result of the determination in the fourth step. Password input program.