JP2005141549A - Log-off device, log-off method, computer program, and recording medium - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To obtain a log-off device capable of driving automatic log-off when a user carelessly forgets the log-off of a software application for processing information of high secrecy and capable of preventing the recurrence of omission of log-off. <P>SOLUTION: When automatic log-off for forcedly performing the log-off of a user is driven, a time required for driving the automatic log-off is shortened, and when the user spontaneously performs log-off, a time required for driving the automatic log-off is extended. Consequently chances for leaking secret information to third persons can be reduced by shortening an automatic log-off time in the case of a user who is frequently put to the automatic log-off and extending the automatic log-off time in the case of a user who accurately performs log-off. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

  The present invention relates to a logoff device, a logoff method, a computer program, and a recording medium. In particular, in a software application that requires user authentication for use, the user is forcibly logged off if no operation is performed at a predetermined time. The present invention relates to a logoff device. In particular, the present invention relates to auto-logoff in software applications that handle highly confidential information such as patient medical information.

  From the viewpoint of maintaining confidentiality, it is no longer common to perform user authentication with a password when using a computer (logon) and log off at the end. In addition, from the viewpoint of power saving and effective use of computer resources, there are operating systems (OS) and software applications provided with an auto logoff mechanism for forcibly logging off a user if the user does not perform an operation within a certain time. .

  However, the time until the above auto log-off is activated (referred to as auto log-off time) is fixed for all users or can be freely changed by the user, resulting in low power consumption of computers and the spread of personal computers. Now that the abundance of computer resources has been achieved, auto logoff has become less used for its original purpose.

  On the other hand, with the networking of computers and the spread of databases, highly confidential personal data can be browsed by individual computers. Therefore, it has been pointed out that there is a danger that highly confidential data can be seen by a third party when the user leaves the computer without logging off.

  In particular, in the medical field, not only individuals such as doctors and nurses who have made direct causes when patient data is leaked by medical personnel due to the US HIPAA Act or the Japanese Personal Information Protection Bill, Heavy penalties have also been imposed on organizations such as hospitals and clinics. Therefore, when an individual user forgets to log off, there is an increasing demand for a mechanism that activates auto log off and prevents recurrence.

  That is, the conventional auto logoff mechanism in which the autologoff time is fixed for a long time or can be freely changed by the user has a problem from the viewpoint of maintaining confidentiality.

  As an invention related to auto-logoff from the viewpoint of confidentiality, in Patent Document 1, it is determined whether or not a user is present using a non-contact type IC card, and a certain time elapses after the user leaves the seat. For example, an "automatic computer recognition system using an IC card" that automatically logs off has been proposed.

  In Patent Document 2, a first auto-logoff time for logging off when there is no application and a second auto-logoff time for ending the application for each application are provided, and the combination is used to ensure confidentiality. An “information processing security system” has been proposed.

JP 2002-157050 A JP 2002-222171 A

  However, in the case of the “computer automatic recognition system using an IC card” proposed in Patent Document 1, a special hardware device is required and if the IC card itself is left unattended, auto Since logoff does not work, there is a problem that cannot be said to be a sufficiently effective means from the viewpoint of confidentiality.

In addition, the “information processing security system” proposed in Patent Document 2 is mainly intended not to impair the overall operability, and is not intended to enhance the auto logoff function itself. It was.
In view of the above-described problems, the present invention realizes a logoff device that activates autologoff and prevents recurrence when a user forgets to logoff in a software application that handles highly confidential information. The purpose is to do.

The logoff device according to the present invention is a logoff device for logging off a logged-in user, and when a logoff operation is performed by the user, manual logoff means for logging off the user, and a time when the user is not performing the operation for a predetermined time. And when the user logs off by the auto logoff means, the predetermined time is shortened and the user logs off by the manual logoff means. In some cases, the apparatus includes an auto logoff time changing means for extending the predetermined time.
Another feature of the present invention is that it has an auto logoff upper / lower limit value holding means for holding an upper limit value and a lower limit value of a predetermined time during which autologoff is performed by the autologoff means. When the user logs off by the auto logoff means, the means shortens a predetermined time for the auto logoff to operate with the lower limit value held in the autologoff upper and lower limit value holding means as a lower limit. When the logoff is performed by the manual logoff means, the predetermined time during which the autologoff is operated is extended with the upper limit value held in the autologoff upper / lower limit value holding means as an upper limit.
According to another aspect of the present invention, when the predetermined time for the auto logoff operation is shortened or extended, the changed predetermined time is notified to the user when the user logs on next time. The first notification means is provided.
Another feature of the present invention is that it comprises a second notifying means for notifying the system administrator of the user name when the predetermined time for the auto logoff operation reaches a lower limit value. It is a feature.
Another feature of the present invention is that manual log-off means for logging off a logged-in user by a predetermined operation of the user, and a user who has logged in after a lapse of a predetermined time after the user's operation is lost. Automatic logoff means to automatically logoff;
Storage means for storing the predetermined time for each user, and when the user logs off by the manual logoff means, the predetermined time of the user stored in the storage means is extended, and when the user logs off by the automatic logoff means, And a time changing means for shortening the predetermined time of the user stored in the storage means.

The logoff method of the present invention is a logoff method for logging off a logged-in user. When a logoff operation is performed by the user, a manual logoff process for logging off the user, and a time during which the user is not performing the operation for a predetermined time. If the user logs off by the automatic logoff process, and the user logs off by the autologoff process, the predetermined time is shortened and the user logs off by the manual logoff process. In some cases, the automatic log-off time changing process for extending the predetermined time is included.
Another feature of the present invention is that it has an auto logoff upper / lower limit value holding process for holding an upper limit value and a lower limit value of a predetermined time in which auto logoff by the autologoff process is performed in a memory. When the user logs off by the auto logoff process, the time change process shortens a predetermined time for the auto logoff to operate with the lower limit value held in the memory as a lower limit, and the user performs the manual logoff process. When the log-off is performed, the predetermined time for the auto log-off operation is extended with the upper limit value held in the memory as the upper limit.
Another feature of the present invention is that when the predetermined time for the auto logoff operation is shortened or extended, the changed predetermined time is notified to the user when the user logs on next time. The first notification processing is performed.
Another feature of the present invention is that it has a second notification process for notifying the system administrator of the user name when the predetermined time for the auto logoff operation reaches a lower limit value. It is a feature.
In addition, another feature of the present invention is that manual log-off for logging off a logged-in user by a predetermined operation of the user, and automatic logging of a logged-in user after a predetermined time elapses after the user does not perform the operation. In the logoff method comprising automatic logoff that automatically logs off, the predetermined time is stored in the storage means for each user, and when the user logs off by the manual logoff means, the predetermined time of the user stored in the storage means And extend
When the user logs off by the automatic logoff means, the predetermined time of the user stored in the storage means is shortened.

  The computer program according to the present invention is a computer program for causing a computer to execute a logoff method for logging off a logged-in user. When a logoff operation is performed by the user, a manual logoff process for logging off the user and an operation performed by the user are performed. When the non-going time exceeds a predetermined time, and when the user logs off by the auto log-off process, the user automatically logs off the user, and the user shortens the predetermined time and the user In the case of logoff by manual logoff processing, the computer is caused to execute auto logoff time changing processing for extending the predetermined time.

  The recording medium of the present invention is characterized by recording the computer program described above.

According to the present invention, in the case of a user who is often auto-logged off, the auto log-off time is shortened, and in the case of a user who logs off properly, the auto log-off time is extended. In this case, the chance of leaking confidential information to a third party can be reduced by forgetting to log off.
According to another feature of the present invention, the auto logoff time is shortened with a preset lower limit value as a lower limit and extended with a preset upper limit value as an upper limit. Can be prevented from becoming extremely short or extremely long.
In addition, according to another feature of the present invention, when the auto logoff time is changed, the user can be prompted not to auto log off by notifying the user at the next logon.
Furthermore, when a user whose auto log-off time reaches the lower limit appears, the system administrator can be notified so that the entire organization that handles software applications that handle confidential information can comply with spontaneous log-off. An effect is obtained.

FIG. 7 is a diagram for explaining the background of the present invention, and is a block diagram illustrating a configuration example of the logoff apparatus according to the embodiment.
In FIG. 7, reference numeral 701 denotes a software application that requires user authentication with a password at the time of logon, and reference numeral 102 denotes an input unit such as a keyboard or a mouse for performing an operation input to the software application 701, an operation for logging on, logging off, and the like. Reference numeral 103 denotes a display unit such as a display that displays a GUI for software application, logon, and logoff.

  A password holding unit 104 holds a password for performing user authentication for each registered user. 105 refers to the password holding unit 104 at the time of logon, and a user ID such as a user name input from the input unit 102. This is a user authentication unit that permits logon when the password is correct and rejects logon when the password is not correct. Reference numeral 706 denotes a spontaneous logoff unit that terminates the software application when the user inputs a logoff instruction from the input unit 102.

  Reference numeral 107 denotes a leaving time measuring unit that measures a leaving time during which no instruction is input from the input unit 102. Reference numeral 708 denotes an auto log off time holding unit that holds an auto log off time during which auto log off is activated. Reference numeral 709 denotes an auto logoff unit that forcibly logs off the user when the neglected time measured by the neglected time measuring unit 107 reaches the autologoff time held in the autologoff time holding unit 708.

  Reference numeral 711 denotes an auto log off time changing unit that changes the auto log off time when the user inputs an instruction to change the auto log off time held in the auto log off time holding unit.

  The logoff device according to the above-described conventional embodiment aims to save power and computer resources, and thus the autologoff time is fixed or can be freely changed by the user. Therefore, no matter how many times the user is inadvertently logged off, there is no change, or if the user lengthens the autologoff time arbitrarily, the autologoff can be disabled. There was nothing.

(First embodiment)
FIG. 1 is a block diagram showing a functional configuration of a logoff device according to a first embodiment of the logoff device of the present invention.
In FIG. 1, reference numeral 101 denotes a software application that requires user authentication using a password at the time of logon, and can search and display particularly confidential information such as patient medical information. Reference numeral 102 denotes a software application 101. An input unit such as a keyboard and a mouse for performing an operation input such as an instruction operation, logon and logoff, and a display unit 103 such as a display for displaying a software application, a logon and logoff GUI.

  A password holding unit 104 holds a password for performing user authentication for each registered user. 105 refers to the password holding unit 104 at the time of logon, and a user ID such as a user name input from the input unit 102. This is a user authentication unit that permits logon when the password is correct and rejects logon when the password is not correct.

  A voluntary logoff unit 106 terminates the software application when the user inputs a logoff instruction from the input unit 102 and notifies the autologoff time changing unit (to be described later) that the user has voluntarily logged off. is there.

  Reference numeral 107 denotes a leaving time measuring unit that measures a leaving time during which no instruction is input from the input unit 102. Reference numeral 108 denotes an auto log off time holding unit that holds an auto log off time during which auto log off is activated for each user. . It is assumed that the auto log off time of each user held in the auto log off time holding unit 108 can be changed only from an auto log off changing unit described later. In order to make the change possible only from the auto logoff changing unit, various methods such as holding in an object or performing encryption can be considered, but any method may be used.

  109 indicates that the user is forcibly logged off when the left time measured by the left time measuring unit 107 reaches the auto log off time held in the auto log off time holding unit 108, and the auto log off is described later. This is an auto logoff unit that notifies the auto logoff time changing unit.

  110 is an auto logoff upper and lower limit holding unit that holds the upper and lower limits of the autologoff time of each user held in the autologoff time holding unit 108, and 111 is a case where the user spontaneously logs off, The upper limit value held in the auto-logoff upper / lower limit holding unit 110 is extended as an upper limit, and when the user is auto-logged off, the lower limit value held in the auto-logoff upper / lower limit holding unit 110 is shortened as the lower limit, and the changed auto The auto log off time changing unit holds the log off time in the auto log off time holding unit.

  The upper and lower limits of the autologoff time held in the autologoff upper and lower limit holding unit 110, and the algorithm for extending and shortening the autologoff time in the autologoff time changing unit 111 are in accordance with the confidential information of the target software application. Any of these may be used. For example, the following is performed.

  The upper limit of the auto logoff time is 15 minutes, the lower limit is 5 minutes, and the intermediate value is 10 minutes when a new user is registered. If the user voluntarily logs off, the time is extended by 30 seconds up to 15 minutes, and if the user is automatically logged off, the time is reduced by 1 minute up to 5 minutes.

Next, the operation of the logoff device in the present embodiment will be specifically described with reference to the flowchart shown in FIG.
In FIG. 4, the auto logoff process starts when a logon request is input from the input unit 102.

  In the first step S 401, the user authentication unit 105 refers to the password holding unit 104 and performs user authentication processing for comparing a user ID such as a user name input from the input unit 102 with a password. Next, in step S402, if the user authentication is successful, the process proceeds to step S403. If the user authentication is unsuccessful, the logon is rejected and the process is terminated.

  The next step S403 is waiting for input. If no input is made from the input unit 102 while waiting for input, the process proceeds to step S404, and if input is performed, the process proceeds to step S406.

  In step S404, the neglected time is measured by the neglected time measuring unit 107, and in the subsequent step S405, the autologoff unit 109 and the user stored in the neglected time measured by the neglected time measuring unit 107 and the user stored in the autologoff time holding unit. The auto logoff time (referred to as ALOT in FIG. 4 and hereinafter) is compared. If the neglected time is less than the ALOT, the process returns to the input waiting state in step S403, and if it is longer than the ALOT, the process proceeds to step S408. .

  In step S406, if the instruction input from the input unit 102 is logoff, the process proceeds to step S408, and if not, the process proceeds to step S407. In step S407, the input from the input unit 102 is input to the software application 101, and the process returns to step S403.

  In step S408, in the auto logoff time changing unit 111, when the user spontaneously logs off, the upper limit value held in the auto logoff upper and lower limit holding unit 110 is extended as an upper limit, and when the user is autologged off, The lower limit value held in the auto-logoff upper / lower limit holding unit 110 is shortened as the lower limit, the ALOT change process for holding the changed ALOT in the auto-logoff time holding unit 108 is performed, and the process ends.

  As described above, in the present embodiment, in the case of a user who is often auto-logged off, the auto log-off time is shortened with the preset lower limit as a lower limit, and in the case of a user who logs off properly, Since the log-off time is extended up to a preset upper limit, the chance of leaking confidential information to a third party due to forgetting to log off can be reduced in the case of a user who is often auto-logged off. An effect is obtained.

(Second Embodiment)
FIG. 2 is a block diagram illustrating a functional configuration of the logoff device according to the second embodiment of this invention.
In FIG. 2, 101 to 107 and 109 to 110 are the same as those in the first embodiment, and thus detailed description thereof is omitted.
An auto log off time holding unit 201 holds an auto log off time for which auto log off is activated for each user and a flag indicating whether or not the auto log off time has been changed by the previous session.

  When the user voluntarily logs off, the upper limit value held in the auto logoff upper / lower limit holding unit 110 is extended as an upper limit, and when the user is auto-logged off, held in the auto logoff upper / lower limit holding unit 110 The auto-logoff time changing unit shortens the set lower limit value as the lower limit, holds the changed autologoff time in the autologoff time holding unit 108, and turns on a flag indicating whether or not the autologoff time has been changed. .

  Reference numeral 203 refers to the auto-logoff holding unit 201 at the time of logon, and when the flag indicating whether or not the autologoff time has been changed by the previous session is ON, the changed autologoff time is displayed. This is a user notification unit that displays the information in 103 and notifies the user, and turns off a flag indicating whether or not the auto logoff time has been changed.

Next, the operation of the logoff device in the present embodiment will be specifically described with reference to the flowchart shown in FIG.
In FIG. 5, steps S501 and S503 to S507 are equivalent to steps S401 and S403 to 407 in FIG. 4 described in the first embodiment, respectively, and detailed description thereof is omitted.

In step S503, which moves from step S502, if user authentication is successful, the process moves to step S509. If it fails, the logon is rejected and the process ends.
In step S509, the user notification unit 203 refers to the auto logoff time holding unit 201. As a result of this reference, if the flag indicating whether or not the auto logoff time has been changed by the previous session is ON, the process proceeds to step S510, and if not, the process proceeds to step S503.

  In step S510, the auto log off time changed in the previous session is displayed on the display unit 103 to notify the user, and an ALOT display process for turning off a flag indicating whether or not the auto log off time has been changed is performed. The process moves to step S503.

  In step S508, when the user logs off spontaneously in the auto logoff time changing unit 202, the upper limit value held in the autologoff upper / lower limit holding unit 110 is extended as an upper limit, and the user is autologged off. In this case, the lower limit value held in the auto logoff upper / lower limit holding unit 110 is shortened as the lower limit, the changed ALOT is held in the autologoff time holding unit 108, and a flag indicating whether or not the autologoff time has been changed is set. The ALOT change process to be turned on is performed, and the process is terminated.

  As described above, in the second embodiment, in addition to the effect of the first embodiment, when the auto logoff time is changed, the user is notified by notifying the user at the next logon. The effect of prompting not to be logged off is obtained.

(Third embodiment)
FIG. 3 is a block diagram showing a functional configuration of the logoff apparatus according to the third embodiment of the present invention.
In FIG. 3, since 101-107, 109-110, and 201-203 are the same as those in the second embodiment, description thereof is omitted.

  Reference numeral 301 denotes an administrator address holding unit that holds a contact address such as a mail address of a system administrator. Further, 302 refers to the administrator address holding unit 301 when the autolog off time changed in the auto log off time changing unit 202 reaches the lower limit value, and designates the user whose auto log off time has reached the lower limit as an administrator. This is an administrator notification unit that notifies the user by e-mail.

Next, the operation of the logoff device in the present embodiment will be specifically described with reference to the flowchart shown in FIG.
In FIG. 6, steps S601 to S607 and steps S609 to S610 are equivalent to steps S501 to S507 and steps S509 to S510 in FIG. 5 of the second embodiment, and detailed description thereof is omitted.

  In step S608, an ALOT change process equivalent to step S508 in FIG. 5 is performed, and the process proceeds to step S611. In step S611, if the changed ALOT is the lower limit value in the administrator notification unit 302, the process proceeds to S612, and if not, the process ends. In step S612, the administrator address holding unit 301 is referred to, and the administrator notification process for notifying the administrator of the user whose ALOT has reached the lower limit by mail is ended.

  As described above, in the third embodiment, in addition to the effects of the first and second embodiments described above, when a user whose auto logoff time reaches the lower limit value appears, By notifying the administrator, there is an effect of encouraging the entire organization that handles software applications that handle confidential information to comply with spontaneous logoff.

(Another embodiment of the present invention)
A software program for realizing the functions of the above-described embodiment for a computer in an apparatus or system connected to the various devices so that the various devices are operated to realize the functions of the above-described embodiments. What was implemented by supplying the code and operating the various devices according to a program stored in a computer (CPU or MPU) of the system or apparatus is also included in the scope of the present invention.

  Further, in this case, the program code of the software itself realizes the functions of the above-described embodiment, and the program code itself and means for supplying the program code to the computer, for example, the program code The stored recording medium constitutes the present invention. As a recording medium for recording the program code, for example, a flexible disk, a hard disk, an optical disk, a magneto-optical disk, a CD-ROM, a magnetic tape, a nonvolatile memory card, a ROM, or the like can be used.

  Further, by executing the program code supplied by the computer, not only the functions of the above-described embodiments are realized, but also the OS (operating system) or other application software in which the program code is running on the computer. The program code is also included in the embodiment of the present invention even when the functions of the above-described embodiment are realized in cooperation with the above.

  Further, after the supplied program code is stored in the memory provided in the function expansion board of the computer or the function expansion unit connected to the computer, the CPU provided in the function expansion board or function expansion unit based on the instruction of the program code The present invention also includes a case where the functions of the above-described embodiment are realized by performing part or all of the actual processing.

It is a block diagram showing the functional structure of the logoff apparatus in the 1st Embodiment of this invention. It is a block diagram showing the function structure of the logoff apparatus in the 2nd Embodiment of this invention. It is a block diagram showing the function structure of the logoff apparatus in the 3rd Embodiment of this invention. It is a flowchart which shows operation | movement of the logoff apparatus in the 1st Embodiment of this invention. It is a flowchart which shows operation | movement of the logoff apparatus in the 2nd Embodiment of this invention. It is a flowchart which shows operation | movement of the logoff apparatus in the 3rd Embodiment of this invention. It is a block diagram showing the background art of this invention and showing the structural example of the general logoff apparatus.

Explanation of symbols

DESCRIPTION OF SYMBOLS 101 Software application 102 Input part 103 Display part 104 Password holding part 105 User authentication part 106 Spontaneous log off part 107 Unattended time measuring part 108, 201 Auto log off time holding part 109 Auto log off part 110 Auto log off upper / lower limit holding parts 111, 202 Auto log off Time change unit 203 User notification unit 301 Administrator address holding unit 302 Administrator notification unit

Claims (12)

In a logoff device that logs off the logged-in user,
Manual logoff means for logging off the user when a logoff operation is performed by the user;
Auto logoff means for automatically logging off the user when the user is not performing an operation for a predetermined time;
When the user logs off by the auto logoff means, the predetermined time is shortened, and when the user logs off by the manual logoff means, an auto logoff time changing means for extending the predetermined time is provided. A logoff device characterized by that. Auto logoff upper and lower limit value holding means for holding an upper limit value and a lower limit value of a predetermined time during which autologoff by the autologoff means operates,
When the user logs off by the auto logoff means, the auto logoff time changing means shortens a predetermined time for the autologoff to operate with the lower limit value held in the autologoff upper and lower limit value holding means as a lower limit. In addition, when the user logs off by the manual logoff means, the predetermined time during which the autologoff is activated is extended with the upper limit value held in the autologoff upper / lower limit value holding means as an upper limit. Item 2. A logoff device according to Item 1.   When the predetermined time during which the auto logoff is operated is shortened or extended, a first notification means is provided for notifying the user of the changed predetermined time when the corresponding user logs on next time. The logoff apparatus according to claim 1 or 2.   4. The logoff device according to claim 2, further comprising: second notification means for notifying a system administrator of a user name when a predetermined time during which the auto logoff operates reaches a lower limit value. 5. . In the logoff method to log off the logged-in user,
A manual logoff process for logging off the user when the user performs a logoff operation;
An auto logoff process for automatically logging off the user when the user is not performing an operation for a predetermined time;
When the user logs off by the auto logoff process, the predetermined time is shortened, and when the user logs off by the manual logoff process, an auto logoff time changing process for extending the predetermined time is included. A logoff method characterized by that. There is an auto logoff upper and lower limit value holding process for holding the upper limit value and lower limit value of a predetermined time in which auto logoff by the autologoff process operates, in a memory,
When the user logs off by the auto logoff process, the auto logoff time changing process shortens a predetermined time for the auto logoff to operate with the lower limit value stored in the memory as a lower limit, and the user 6. The logoff method according to claim 5, wherein when the logoff is performed by manual logoff processing, the predetermined time during which the autologoff is operated is extended with the upper limit value held in the memory as an upper limit.   When the predetermined time during which the auto logoff is operated is shortened or extended, a first notification process for notifying the user of the changed predetermined time when the corresponding user logs on next time is provided. The logoff method according to claim 5 or 6.   8. The logoff method according to claim 6, further comprising a second notification process for notifying a system administrator of a user name when a predetermined time during which the auto logoff is activated reaches a lower limit value. . In a computer program for causing a computer to execute a logoff method for logging off a logged-in user,
A manual logoff process for logging off the user when the user performs a logoff operation;
An auto logoff process for automatically logging off the user after a time when the user is not performing an operation exceeds a predetermined time;
When the user logs off by the auto logoff process, the predetermined time is shortened, and when the user logs off by the manual logoff process, an auto logoff time changing process for extending the predetermined time is performed on the computer. A computer program that is executed by a computer.   10. A computer-readable recording medium on which the computer program according to claim 9 is recorded. Manual logoff means for logging off a logged-in user by a predetermined operation of the user;
An automatic logoff means for automatically logging off a logged-in user after a predetermined time has elapsed since the user's operation has ceased,
Storage means for storing the predetermined time for each user;
When the user logs off by the manual logoff means, the predetermined time of the user stored in the storage means is extended, and when the user logs off by the automatic logoff means, the predetermined time of the user stored in the storage means is increased. A logoff device comprising: a time changing means for shortening. In a logoff method comprising manual logoff for logging off a logged-in user by a predetermined operation of the user and automatic logoff for automatically logging off a logged-in user after a lapse of a predetermined time after the user's operation is lost ,
Storing the predetermined time in the storage means for each user;
When the user logs off by the manual logoff means, the predetermined time of the user stored in the storage means is extended,
When the user logs off by the automatic logoff means, the predetermined time of the user stored in the storage means is shortened.

Images