JP2005149443A - System and method for screen lock/unlock of personal computer - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a system and a method for screen lock/unlock in which third persons cannot easily perform illegal action in a personal computer provided with a screen lock function. <P>SOLUTION: The screen lock/unlock system for a personal computer has an IC card, an IC card reader/writer and the personal computer. The personal computer has a random number generation means, a comparison data generation means for generating comparison data based on the random number, a comparison data registration means for writing the comparison data into a storage means of the IC card, a means for storing the generated comparison data, a screen lock means for locking the screen when the IC card is removed from the IC card reader/writer, a means for reading the comparison data of the IC card when the IC card is reinserted into the IC card reader/writer after being locked, a comparison means for comparing the read comparison data with data that are prestored in the personal computer, and a screen unlock means for unlocking if the comparison is successful. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

  The present invention relates to a screen lock / release system and method for a personal computer having an IC card reader / writer and having a screen lock function in order to improve the security of the personal computer.

In recent years, with the development of computer systems, the use of personal computers (hereinafter referred to as personal computers) for business processing in companies and the like has become common.
These PCs are often connected to a server via a network so that they can communicate with the server, and companies can limit the information that can be collected by using PCs according to the roles of employees. Restrictions are placed on the authority for settlement and approval processing.

  For example, in a company, accounting information and financial information can be processed and processed only by the accounting department and financial department using a personal computer, and personnel information can be used only by the human resources department. By making it possible to browse the information, even if employees work for the same company, leakage of confidential information by restricting information management, especially when handling highly confidential information I'm trying to prevent it.

However, there are cases where the user of the personal computer leaves the seat for a short period of time if necessary while performing the processing work using the personal computer.
Then, there is a risk that a fraudulent act is performed when the user leaves the seat for a short time and the personal computer is illegally operated by a third party without authority.
In order to prevent unauthorized use of a personal computer by somebody even during such temporary leaving, the screen screen is displayed when there is no signal from the keyboard or mouse within a set time. In some cases, a personal computer is provided with a function (hereinafter referred to as “screen lock”) that prevents the display of the display from changing.

In addition, a technique for releasing a screen-locked personal computer using an IC card is known when releasing such a screen lock. (For example, see Patent Document 1)
This known technology, for example, by collating collation data stored in an IC card with collation data registered in advance in a personal computer, and canceling the screen lock when collation coincides. This is a technology that allows only those who have a computer to unlock the screen lock of a personal computer.

However, when the screen lock is released using the above-mentioned IC card, the same verification data is always used and the verification data is not changed. However, there is a problem that the IC card storing the data for verification is illegally manufactured, and the screen lock is easily released illegally so that secret information may be stolen. is there.
JP 2003-167461 A

  The present invention enables a personal computer having an IC card reader / writer and having a screen lock function to perform collation processing using an IC card using different collation data for each screen lock and each release. Thus, a screen lock / release system and method that can prevent unauthorized acts by a third party are provided.

  The screen lock / release system for a personal computer according to the present invention is a screen lock / release system for a personal computer having an IC card reader / writer and having a screen lock function, and stores verification data used when the screen lock is released. IC card reader / writer having an IC card having storage means, data writing means for writing verification data into the storage means of the IC card, and data reading means for reading verification data stored in the storage means of the IC card A random number generation means for generating a random number when an IC card is set in the IC card reader / writer, a verification data generation means for generating verification data based on the random number generated by the random number generation means, and the verification The verification data generated by the data generation means for the IC card When the IC card is removed from the IC card reader / writer, the collation data registering means to be written in the IC card storage means from the writer, the means for storing the collation data generated by the collation data generating means, Screen lock means having a function to lock the screen, and when the IC card is set again in the IC card reader / writer after the screen is locked, it is stored in the IC card storage means via the IC card reader / writer. When the collation result by the collation means coincides with the collation means that reads the collation data, the collation data read by the IC card reader / writer, and the collation data already stored in the personal computer A screen lock release means for releasing the screen lock. And down, that it consists characterized.

  The personal computer screen lock / release method of the present invention is a screen lock / release method for a personal computer having an IC card reader / writer and having a screen lock function, and when the IC card is set in the IC card reader / writer. A step of generating verification data based on the random number generated by the random number generation means, a step of registering the verification data in the storage means of the personal computer, and the verification data from the IC card reader / writer to the IC A step of writing in a storage means of the card, a step of screen-locking the personal computer when the IC card is removed from the IC card reader / writer, and a setting of the IC card again in the IC card reader / writer, Collation data stored in the storage means of the IC card Reading, comprising the steps of collating the collation data stored in said computer, when the result of collation is matched, it characterized a step of performing releasing of screen lock, in that it consists of.

  In the present invention, each time an IC card is set in the IC card reader / writer, different verification data is generated and registered in the storage means of the IC card and personal computer as verification data used when releasing the screen lock. Since the collation data stolen in advance by a third party performing fraud cannot be used, there is an effect that fraud by the third party can be prevented.

Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.
FIG. 1 is an external view for explaining the outline of a screen lock / release system for a personal computer according to an embodiment of the present invention, and FIG. 2 is a block diagram of the system configuration of the screen lock / release system for the personal computer according to the embodiment of the present invention. FIG. 3 is a block diagram of an IC card used in the present invention, and FIG. 4 is a flowchart showing a processing procedure of a screen lock / release system for a personal computer according to an embodiment of the present invention.

As shown in FIG. 1, a screen lock / release system for a personal computer according to an embodiment of the present invention includes an IC card reader / writer 1 and a personal computer 2 having a screen lock function, and verification used when releasing the screen lock. And an IC card 3 having storage means for storing data.
As shown in FIG. 1, the IC card reader / writer 1 may be configured to be connected to the personal computer 2 by a connection cord, or may be configured to incorporate the IC card reader / writer 1 inside the personal computer 2. .

  When using the personal computer 2, the user of the personal computer 2 inserts the IC card 3 possessed by the user into the IC card reader / writer 1 by inserting the IC card 3 into the IC card reader / writer 1. When the personal computer is used in the set state, and the user temporarily leaves the seat while the personal computer 2 is being used, the IC card 3 is removed from the card entrance 4 of the IC card reader / writer 1, and the personal computer 2 is returned to the seat again. When using the card, the IC card 3 is set in the IC card reader / writer 1 so that the personal computer 2 cannot be used at least when the IC card 3 is not set in the IC card reader / writer 1. Has been.

Next, a system structure of a screen lock / release system for a personal computer according to an embodiment of the present invention will be described with reference to FIG.
The IC card reader / writer 1 has data reading means 5 for reading data stored in the IC card 3 inserted and set from the card entrance 4 and data writing means 6 for writing and storing data in the IC card 3. have.
Further, the personal computer 2 includes display means 7, random number generation means 8, verification data generation means 9, verification data registration means 10, screen lock means 11, verification means 12, screen lock release means 13, input means 14, and storage. Means 15 and control means 16 are provided.

The storage means 15 of the personal computer 2 is loaded with a control program, and processing is performed based on this control program.
The random number generation means 8 has a function of generating a random number when a signal indicating that the IC card 3 is set in the IC card reader / writer 1 is transmitted to the personal computer 2 and the personal computer 2 receives the signal. Yes.
Then, the verification data generation means 9 generates verification data based on the random number generated by the random number generation means 8.
Accordingly, the verification data becomes data having different numerical values every time the IC card 3 is set in the IC card reader / writer 1, and data unpredictable to anyone is generated each time.

The verification data registration means 10 registers the verification data generated by the verification data generation means 9 in the storage means 15 of the personal computer 2 and transmits the verification data to the IC card reader / writer 1. It also has a function of writing and registering it in the EEPROM which is the storage means of the IC card 3.
As a result, the same verification data can be registered in the storage means 15 of the personal computer 2 and the EEPROM as the storage means of the IC card 3, so that the data verification using the IC card 3 becomes possible. It is.

The screen lock means 11 is a computer program that performs a screen lock function, and is composed of two modules: a main program that performs screen lock control processing, and a keyboard setting program that is called from the main program and performs keyboard setting and full screen display. Has been.
Therefore, when the screen lock is applied, even if the keyboard is operated, the display content of the screen screen as the display means cannot be changed, and the personal computer 2 cannot be illegally used by a third party.

Next, the collation unit 12 of the personal computer 2 performs a collation process on the collation data read from the IC card 3 via the IC card reader / writer 1 and the collation data registered in the storage unit 14 of the personal computer 2. have.
The screen lock release means 13 has a function of releasing the screen lock by the screen lock means 11, and the screen lock by the screen lock release means 13 when the result of the verification processing of the verification data by the verification means 12 matches. Is set to be canceled.

Further, as shown in FIG. 3, the IC card 3 is provided with an IC having a storage means including a ROM 17, an EEPROM 18, and a RAM 19 and a CPU 20 as a control means. The EEPROM 18 includes an IC card reader / writer 1. A storage area is provided for storing the verification data 21 transmitted from the personal computer 2 via the.
This collation data 21 is the collation data generated by the collation data generation means 9 based on the random number generated by the random number generation means 8 of the personal computer 2 every time the personal computer 2 is screen-locked. The verification data is not used.

Next, the personal computer screen lock / release method according to the embodiment of the present invention, together with the processing procedure of the personal computer screen lock / release system according to the embodiment of the present invention, will be described with reference to the flowchart of FIG.
First, the user of the personal computer sets the IC card 3 in the IC card reader / writer 1 when using the personal computer 2. (Step S1)
In response to the setting of the IC card 3 in the IC card reader / writer 1, the random number generation means 8 of the personal computer 2 generates a random number, and based on the generated random number, the verification data generation means 9 generates verification data. Generated. (Step S2)

The generated verification data is registered in the storage unit 15 of the personal computer 2. (Step S3)
Further, the generated verification data is registered in the EEPROM 21 of the IC card 3 via the IC card reader / writer 1. (Step S4)
In this state, when the user of the personal computer 2 leaves the place where the personal computer 2 is installed, the IC card 3 is removed from the IC card reader / writer 1. (Step S5)
When a signal indicating that the IC card 3 has been removed from the IC card reader / writer 1 is transmitted to the personal computer 2, the screen is locked by the screen lock means 11 of the personal computer 2. (Step S6)

When the user uses the personal computer 2 again, the user inserts the IC card 3 from the card entrance 4 of the IC card reader / writer 1 and sets it. (Step S7)
Then, the verification data registered in the EEPROM 21 of the IC card 3 is read by the IC card reader / writer 1 and sent to the personal computer 2. (Step S8)
Next, in the personal computer 2, the verification unit 12 performs verification processing on the verification data received from the IC card reader / writer 1 and the verification data registered in the storage unit 15. (Step S9)

As a result of the collation processing by the collation means 12, if the collation coincides, the screen lock release means 13 releases the screen lock. (Step S10)
If the result of the collation processing by the collating means 12 is that the collation does not match, the screen lock releasing means 13 does not release the screen lock, and the process ends with the screen locked.

It is an external view explaining the outline | summary of the screen lock / release system of the personal computer which concerns on embodiment of this invention. 1 is a block diagram of a system configuration of a screen lock / release system for a personal computer according to an embodiment of the present invention. It is a block diagram of an IC card used in the present invention. It is a flowchart which shows the process sequence of the screen lock / release system of the personal computer which concerns on embodiment of this invention.

Explanation of symbols

1 IC card reader / writer
2 PC
3 IC card
4 Card entry / exit
5 Data reading means
6 Data writing means
7 Display means
8 Random number generator
9 Data generation means for verification
10 Data registration means for verification
11 Screen lock means
12 Verification means
13 Screen lock release means
14 Input means
15 Memory means
16 Control means
17 ROM
18 EEPROM
19 RAM
20 CPU
21 Verification data

Claims (2)

A screen lock / release system in a personal computer equipped with an IC card reader / writer and having a screen lock function,
An IC card having storage means for storing verification data used when releasing the screen lock;
An IC card reader / writer having a data writing means for writing verification data in the storage means of the IC card, and a data reading means for reading the verification data stored in the storage means of the IC card;
A random number generation means for generating a random number when an IC card is set in the IC card reader / writer, a verification data generation means for generating verification data based on the random number generated by the random number generation means, and the verification data generation means From the IC card reader / writer, the verification data registration means for writing the generated verification data into the IC card storage means from the IC card reader / writer, the means for storing the verification data generated by the verification data generation means, and the IC card reader / writer Screen lock means having a function of locking the screen when the IC card is removed, and when the IC card is set again in the IC card reader / writer after the screen is locked, the IC card is passed through the IC card reader / writer. Means for reading the collation data stored in the storage means, and the IC card Collation means for collating the collation data read by the reader / writer with the collation data already stored in the personal computer, and a screen lock release means for releasing the screen lock when the collation result by the collation means matches. A computer with
A screen lock / release system for personal computers. A screen lock / release method in a personal computer equipped with an IC card reader / writer and having a screen lock function,
Generating collation data based on a random number generated by a random number generation means when an IC card is set in the IC card reader / writer;
Registering the verification data in the storage means of the personal computer;
Writing the verification data from the IC card reader / writer into the storage means of the IC card;
Screen locking the personal computer when an IC card is removed from the IC card reader / writer;
When the IC card is set again in the IC card reader / writer, the verification data stored in the storage means of the IC card is read, and the verification data stored in the personal computer is verified;
Canceling the screen lock when the result of the matching is matched;
A PC screen lock / release method characterized by comprising:

Images