JP2006259882A - Information management method, program, and recording medium - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an information management method, capable of preventing the site access information group of URL, ID and password from being easily duplicated, and preventing the site access information group from leaking. <P>SOLUTION: This information management method comprises a first step for acquiring the URL of the authentication screen of the desired site; a second step for acquiring ID and a password inputted on the authentication screen; and a third step for managing the site access information group of URL, ID and password acquired in the first step and the second step as one information unit, and for recording the site access information group in a duplication disabled information recording medium. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to a URL (Uniform Resource Locators), user ID, and password information management method, a program, and a recording medium of a website that requires user authentication.

  Conventional websites (hereinafter referred to as “sites”) have provided the same information to all viewers, but recently, in order to provide customized information for each user, Issuing a user identifier (hereinafter referred to as ID) and a corresponding password, displaying an authentication screen for entering the ID and password when using the site, and specifying the individual by entering the ID and password on this authentication screen There are many sites that take this method (hereinafter this method is called login).

  In particular, recently, sites such as internet banking and shopping sites that deal with money and goods have been widely used, and IDs and passwords are close to those of conventional cash cards and credit cards. Thus, the importance of IDs and passwords increases year by year, and it is assumed that they are not known to others and cannot be easily analyzed.

  Users of these sites inevitably need to manage dedicated IDs and passwords for each site to be used, and there are cases where a common ID and password are used in a plurality of sites. However, this method has a problem in that when one ID and password are leaked, a great deal of damage is caused.

  Moreover, even if an ID and a password are input and coincidentally coincidentally on the site side, it cannot be determined whether or not they are correct users. Therefore, the character string used for the ID and password is preferably a combination of characters that is difficult to guess and irregular as much as possible. Therefore, it is recommended that the IDs and passwords of a plurality of sites are configured individually and with a combination of irregular characters. However, it is difficult for the user to memorize such a combination. For example, an ID or password that cannot be memorized is described on a memo paper or a sticky note, and cannot be posted around the computer or memorized. A method such as describing an ID and a password in a file in the computer has been used.

  However, in the former case, it is easy to leak because it is likely to be peeped by others, and in the latter case, if you save it with a general text file etc., you can easily see the contents and other There was a problem of being easily copied to other media.

  In recent years, PC infrastructure has spread rapidly, and there is an environment in which sites can be accessed at various locations without having to carry a computer body. In such an environment, a common service can be received by carrying a URL, ID, and password. For this reason, a text file in which a URL, ID, and password (hereinafter referred to as a site access information group) are recorded on a portable information recording medium such as a floppy (registered trademark) disk may be recorded and carried.

  In such a case as well, there is a risk of leakage because the medium is easily duplicated. Under such circumstances, a method for safely managing the site access information group has been desired.

In order to solve such a problem, “Internet access device and system using information storage card and method thereof” described in Patent Document 1 has been proposed.
The proposed apparatus, system, and method include a first information storage type card (hereinafter referred to as a first card) that stores a telephone number of an Internet access point, a card user's ID, and a user's password, and a homepage. An interface unit that detachably mounts a second information storage type card (hereinafter referred to as a first card) storing URL information for designating the storage location of the first and second cards; Based on the information read from the first card, a communication interface unit that automatically makes a call to an Internet access point and connects to a WWW (World Wide Web) server, and based on the information read from the second card, the WWW An information processing unit that acquires and processes WWW information by accessing the server, and WWW information as a user A media interface section presenting, and a manipulation interface unit for accepting an operation of a user for the provided information. With this system, a series of processes from network connection to acquisition of Internet information can be automatically executed, and the user can easily access the Internet.

Further, “Internet access device and system using information storage card and method thereof” described in Patent Document 2 has been proposed.
In the apparatus, system, and method according to this proposal, among the proposals described in Patent Document 1, a single card interface unit is provided, and the first card and the second card are exchanged. The same effect as the proposal described in 1 is obtained.

Also, an “information storage medium” described in Patent Document 3 has been proposed.
In the “information storage medium” based on this proposal, user identification information such as an account, ID authentication number and password (password), and communication setting information such as an access point for connecting to a server are stored in the ROM of the information storage medium. Stored in advance. Based on the connection information stored in the ROM, connection to the Internet is automatically made. In addition, a flash memory is mounted on the information storage medium, and information such as received mail received via the Internet is automatically stored. Further, an e-mail handler or the like is stored, and even when a plurality of information terminal devices are used, e-mail can be used without installation.

Further, “a network information access device and an information storage device for the device” described in Patent Document 4 have been proposed.
The "network information access device and information storage device for the device" according to this proposal is an information access device equipped with an IC card reader / writer to which an IC card can be detachably set. When an IC card storing personal authentication information such as a password is inserted, a URL is read from the IC card, a browser is activated, and transmitted to a server having the URL. The server transmits a personal authentication information input home page to the apparatus. The apparatus reads the personal authentication information from the IC card and transmits it to the server. When the server receives the personal authentication information, it judges the legitimacy, and if it is valid, it sends the desired home page to the device. This prevents leakage to the three parties.

Patent Document 5 proposes "Information processing device, interface device, information management method, information management program, recording medium storing this program, and IC card system".
The proposed information processing technology comprises a portable recording medium storing personal information, for example, an IC card, an information processing apparatus having a storage unit for storing personal information, and an IC card reader / writer. When the card reader recognizes that the IC card has been removed, the personal information in the IC card stored in the storage unit in the information processing device is erased. To prevent leakage.

Further, “Electronic recording medium and music distribution method using the same” in Patent Document 6 has been proposed.
According to the “electronic recording medium and music distribution method using the electronic recording medium”, the electronic recording medium is an electronic recording medium that can be read by the electronic terminal, and is accessed via the communication line by the electronic terminal. Thus, an area in which data indicating a URL from which song data can be downloaded is recorded, an area in which data of a sample song for a song indicated by a URL that can be read and reproduced by an electronic terminal, and data indicating the URL are used. It has an area for recording music data downloaded by accessing the electronic terminal, and an area for recording a code for authenticating access by the electronic terminal using the data indicating the URL. Also shown is a method for distributing songs using the electronic recording medium.

Further, “Information recording apparatus, information recording method, information recording medium, information reproducing apparatus, and information reproducing method” of Patent Document 7 has been proposed.
In this proposal, recording data on a CD medium records predetermined data in a vacant size that is the difference between the size of the file and the recordable size of the sector in the sector of the CD medium on which the substance of the file is recorded. Predetermined data is recorded in an empty area of the sector reserved for recording this file. As a result, the illegal copy determination data is recorded without using a separate sector for recording the file.
Japanese Patent No. 3544292 JP 2000-20439 A JP 2000-69192 A JP 2000-322383 A JP 2004-62856 A JP 2002-297155 A JP 2004-259364 A

  However, according to the techniques disclosed in Patent Document 1 and Patent Document 2, there is a problem that the system uses an information storage type card and that access information must be stored in advance in the information storage type card. It was.

  Further, in the technique disclosed in Patent Document 3, it is assumed that the user identification information is an ID and a password as referred to in the present invention. However, in this case, the correspondence with the URL is unclear, and the problem of the present invention is The solution of 1 is not reached. The present invention is also different from the present invention in that communication setting information must be recorded.

  In addition, the technique disclosed in Patent Document 4 has a drawback that a comprehensive system including a PC is required, and a large-scale system construction is required.

  Furthermore, the technique disclosed in Patent Document 5 requires a storage unit in the information processing apparatus and controls the storage unit.

  Furthermore, the technique disclosed in Patent Document 6 is limited only to a music distribution method in an electronic terminal that handles music data.

  Further, the technique disclosed in Patent Document 7 is limited to a technique for protecting digital information recorded on a recording medium such as a CD.

  In view of the conventional drawbacks, an object of the present invention is to prevent a site access information group such as a URL, ID, and password from being easily duplicated, and further to prevent leakage of the site access information group The purpose is to provide.

  The invention described in claim 1 includes a first step of acquiring a URL of an authentication screen of a desired site, a second step of acquiring an ID and a password input on the authentication screen, and the first step. And the URL, ID, and password site access information group acquired in the second step are managed as one information unit, and the site access information group is recorded on a non-copyable information recording medium. And a step.

  According to a second aspect of the present invention, in the first aspect of the invention, whether or not the information recording medium is duplicated before the third step of recording the site access information group on the information recording medium. And a step of recording a site access information group on the information recording medium only when it is determined that the information recording medium is not a duplicate.

  The invention according to claim 3 is the invention according to claim 1 or 2, wherein the information recording medium is duplicated before reproducing the site access information group recorded on the information recording medium. The site access information group recorded on the information recording medium is reproduced only when it is determined that the information recording medium is not a duplicate.

  The invention according to claim 4 is the invention according to any one of claims 1 to 3, wherein the site access information group recorded on the information recording medium is encrypted before being recorded on the information recording medium. It is characterized by that.

  The invention according to claim 5 is characterized in that, in the invention according to any one of claims 1 to 4, the accompanying information in the site access information group is set for one site access information group. .

  The invention according to claim 6 opens the site of the URL of the site access information group when an arbitrary site access information group is selected in the invention according to any one of claims 1 to 5, and the ID The password is set automatically.

  The invention according to claim 7 is the invention according to any one of claims 1 to 6, wherein the site access information group recorded on the information recording medium is recorded by compressing the site access information group. It is characterized by that.

  The invention according to claim 8 is a first process of acquiring a URL of an authentication screen of a desired site, a second process of acquiring an ID and a password input on the authentication screen, and the first process And the URL, ID, and password site access information group acquired in the second process are managed as one information unit, and the site access information group is recorded on a non-duplicatable information recording medium. This is a program for executing processing.

  The invention according to claim 9 is a process for determining whether or not the information recording medium is copied before the third process of recording the site access information group on the information recording medium; This is a program for executing a process of recording a site access information group on the information recording medium only when it is determined that the information recording medium is not a duplicate.

  The invention according to claim 10 includes a process of determining whether or not the information recording medium is a duplicated before reproducing the site access information group recorded on the information recording medium, Only when it is determined that the information recording medium has not been copied, the program is for executing a process of reproducing the site access information group recorded on the information recording medium.

  The invention according to claim 11 is a program for executing a process of encrypting the site access information group to be recorded on the information recording medium before being recorded on the information recording medium.

  According to a twelfth aspect of the present invention, there is provided a program for causing a single site access information group to execute processing for setting accompanying information in the site access information group.

  The invention according to claim 13 is a program for executing a process of automatically setting an ID and a password by opening a site of the URL of the site access information group when an arbitrary site access information group is selected. .

  The invention described in claim 14 is a program for executing a process of compressing and recording the site access information group recorded on the information recording medium.

  A fifteenth aspect of the invention is a recording medium on which the program according to any one of the eighth to fourteenth aspects is recorded.

  According to the first aspect of the present invention, the ID and password for logging in to the site are managed in conjunction with the URL, and these pieces of information are recorded on the information recording medium that cannot be copied. Can be managed safely.

  According to the second aspect of the present invention, there is a possibility that the site access information group is recorded even when the information recording medium to be recorded is illegally copied. Therefore, the safety of the site access information group is increased.

  According to the third aspect of the present invention, the information recording medium is illegally copied and used in order to determine whether or not the medium is genuine before reproducing the site access information group. Can be prevented, and the safety of the site access information group is increased.

  According to the fourth aspect of the present invention, since the site access information group is encrypted and recorded, the recorded data is not read and the safety is further improved.

  Further, according to the invention described in claim 5, since it becomes possible to set accompanying information that allows the user to easily identify these information groups for the site access information group, the URL, ID, It is not necessary to determine whether the information is to be accessed from any of the passwords, and convenience is improved.

  According to the sixth aspect of the present invention, the information of the selected site access information group is automatically input and enters the login execution waiting state. Therefore, after selecting an arbitrary site access information group, the URL, ID This eliminates the need to enter a password and improves convenience.

  According to the seventh aspect of the present invention, since the site access information group is compressed and recorded, the area for recording the site access information group is not increased. It is possible to record on an information recording medium.

  According to the invention described in claim 15, since the application program described in claims 8-14 is already recorded in the information recording medium in which the site access information group is recorded, it is troublesome to introduce the application program for each PC. Can be omitted. In addition, since it exists on the same medium as the site access information group, it is possible to save the labor of management.

Embodiments of the present invention will be described below with reference to the drawings.
First, an embodiment of an information management method according to the first aspect of the present invention will be described.
In this management method, for example, when accessing a site as shown in FIG. 1, the URL is entered as https://enterxxx.com/iw/xxx/mail on the screen shown in FIG. Get ID and password. These site access information groups (URL, ID, password) are recorded in each sector of the hybrid disk 300, which is an information recording medium that cannot be copied, for example.
FIG. 3 shows an example of a hybrid disk that cannot be copied. This hybrid disk is composed of a ROM area 31 which is a reproduction-only area and a recording area RAM section 32.
FIG. 4 shows a recording example of each sector of the hybrid disk 300. In this example, the information recording start sector is set to 100, and the URL, ID, and password are recorded in order for each sector.

  FIG. 5 shows an operation flow of this embodiment. When access to a desired site is started, first, a URL (https://enterxxx.com/iw/xxx/mail) which is an authentication screen of the site is acquired (step S501).

Next, the input ID and password are acquired (step S502).
Next, the site access information group acquired in step S501 and step S502 is recorded in each sector of the hybrid disk 300 (step S503).

Next, an embodiment of an information management method according to the second aspect of the present invention will be described.
In this management method, it is determined in advance whether or not the information recording medium has been copied. Here, since the hybrid disk 300 is used as an information recording medium that cannot be copied, it is only necessary to determine whether or not the hybrid disk 300 has been copied.

FIG. 6 shows an example of an operation flow in the embodiment of claim 2.
First, when access to a desired site is started, a site access information group such as a URL, ID, and password is acquired (step S601).

Next, it is determined whether or not the recording medium is a genuine product (step S602).
If it is determined in step 602 that the recording medium is genuine, the site access information group acquired in step S601 is recorded in each sector of the hybrid disk 300 (step S603). If it is determined in step 602 that the recording medium is not a regular product, that is, a duplicate product, the site access information group acquired in step S601 is terminated without being recorded in each sector of the hybrid disk 300 (step S604).

Next, an embodiment of an information management method according to the invention of claim 3 will be described.
In this management method, it is determined in advance whether or not the information recording medium is duplicated before reproducing the information recording medium. Here, as in the embodiment of the second aspect, since the hybrid disc 300 is used as an information recording medium that cannot be copied, it is only necessary to determine whether or not the hybrid disc 300 has been copied.

FIG. 7 shows an example of an operation flow in the embodiment of claim 3.
First, it is determined whether or not the recording medium to be reproduced is a genuine product (step S701).
If it is determined in step 701 that the recording medium is genuine, a site access information group such as a URL, ID, and password is acquired (step S702).

  If it is determined in step 701 that the recording medium is not a regular product, that is, a duplicate product, the process is terminated without acquiring the site access information group (step S703).

  This management method can be executed together with the management method of claim 2. In other words, it is possible to determine whether or not the recording medium to be reproduced is a genuine product, and to determine whether or not the recording medium after acquiring the site access information group is a genuine product, so that a double check can be performed. It is possible to cope with the case where the recording is performed on another recording medium.

Next, an embodiment of an information management method according to the invention described in claim 4 will be described.
In this management method, any or all of the URL, ID, and password are encrypted and recorded in advance. Any encryption method can be used here. Here, as an example, it is assumed that the URL is plaintext (not encrypted), Caesar encryption is used for the ID and password, the ID is replaced with the next three letters in alphabetical order, and the password is replaced with the previous five letters in alphabetical order.

  For example, when the ID is Test, it becomes Whvw after encryption, and when the password is zxy, it becomes uts after encryption. The information after the conversion is recorded on the medium in the format of claim 1 shown in FIG. 4, for example. In addition, since it is not easily browsed by being encrypted, for example, these information groups are stored in a text file, etc., in csv format (comma separated, a common method for saving tabular data), etc. And the file may be encrypted and recorded.

FIG. 8 shows an example of an operation flow in the embodiment of claim 4.
First, when access to a desired site is started, a site access information group such as a URL, ID, and password is acquired (step S801).

Next, the URL, ID, and password, which are the site access information group acquired in step S801, are encrypted by the predetermined method (step S802).
Next, it is determined whether or not the recording medium is a regular product (step S803).
If it is determined in step 803 that the recording medium is genuine, the site access information group data acquired in step S801 and encrypted in step S802 is recorded in each sector of the hybrid disk 300 (step S804). If it is determined in step 803 that the recording medium is not a regular product, that is, a duplicate product, the site access information group data encrypted in step S802 is terminated without being recorded in each sector of the hybrid disk 300 (step S805). .

Next, an embodiment of an information management method according to the invention described in claim 5 will be described.
In this management method, accompanying information for identifying a site access information group is set.
As the accompanying information, in order to identify the information group described in claim 1 as an example, the site access information group is created by describing “AAA invention registration form and patent related business site AI55” or the like. It is possible to easily identify what it is.

FIG. 9 shows an example in which the attached information is recorded in the format of FIG. 4 of claim 1.
In the case of the URL according to claim 1, since the character string XXX or mail is included in the URL, what the address indicates can be comparatively easily estimated. Not just the site.

FIG. 10 shows an example of an operation flow in the embodiment of claim 5.
First, when access to a desired site is started, a site access information group such as a URL, ID, and password is acquired (step S1001).

  Next, the accompanying information for identifying the site access information group such as URL, ID, and password acquired in step S1001 is set by a predetermined method (step S1002).

  Next, the URL, ID, and password, which are the site access information group acquired in step S1001 and set as accompanying information in step 1002, are encrypted by the above-described predetermined method (step S1003).

Next, it is determined whether or not the recording medium is a regular product (step S1004).
If it is determined in step 1004 that the recording medium is a genuine product, the site access information group data acquired in step S1001, the accompanying information is set in step S1002, and encrypted in step 1003 is stored in each sector of the hybrid disk 300. On the other hand, recording is performed (step S1005). If it is determined in step 1004 that the recording medium is not a regular product, that is, a duplicate product, the site access information group data encrypted in step S1003 is not recorded in each sector of the hybrid disk 300, and the process ends (step S1006). .

Next, an embodiment of an information management method according to the invention of claim 6 will be described.
In this management method, automatic processing is performed all at once without manually inputting a URL, ID, and password.
For example, in the case of the configuration shown in FIG. 5, when an auction is selected from the accompanying information, the URL, ID, and password that are the site access information group are displayed. In this case, when the associated information button described in FIG. 5 is pressed (clicked), the URL, ID, and password are automatically entered, that is, the screen shown in FIGS. By pressing an OK button (not shown), the selected site can be accessed.

Next, an embodiment of an information management method according to the invention described in claim 7 will be described.
In this management method, a site access information group such as a URL, ID, and password is compressed and recorded.
For example, in the method described in claim 1, each information is recorded for each sector as shown in FIG. 4, but it is also a means of compression to record these information in succession. It can be said that. In this case, what is necessary is just to put a separator (separator) between each information (URL, ID, password). Alternatively, if the file is output to a file as described in claim 4, the file can be compressed and recorded. The compression method at this time may be an original one or a well-known format such as zip or lzh. In this case, decompression is automatically performed when the information is reproduced.

  Note that claims 8 to 14 are application programs for realizing the information management method according to claims 1 to 7 described above, which are stored in a storage unit in the information processing apparatus, and the control unit. It is also possible to execute the program by storing it in a portable recording medium that is mounted on the information processing apparatus.

  Further, the information recording medium described in claims 15 to 21 is recorded in advance by the application program of claims 8 to 14 in an information recording medium in which a site access information group is recorded. This saves the trouble of introducing an application program for each PC, and saves the trouble of management because it exists in the same medium as the site access information group.

It is a figure which shows the display state when accessing a site. It is a figure which shows the state of the screen which acquires ID and a password. It is a schematic block diagram of a hybrid disk. It is explanatory drawing of the state by which the site access information group was recorded on the sector of the information recording medium. It is a flowchart which shows the operation example of 1st Embodiment of the personal authentication information management method of this invention. It is a flowchart which shows the operation example of 2nd Embodiment of the personal authentication information management method of this invention. It is a flowchart which shows the operation example of 3rd Embodiment of the personal authentication information management method of this invention. It is a flowchart which shows the operation example of 4th Embodiment of the personal authentication information management method of this invention. It is explanatory drawing of the other state by which the site access information group was recorded on the sector. It is a flowchart which shows the operation example of 1st Embodiment of the personal authentication information management method of this invention. It is a figure which shows the example of a display of URL, ID, and a password in embodiment.

Explanation of symbols

31 ROM section 32 RAM section 300 Hybrid disk 400 sectors

Claims (15)

A first step of acquiring a URL of an authentication screen of a desired site;
A second step of acquiring the ID and password entered on the authentication screen;
The site access information group of the URL, the ID, and the password acquired in the first step and the second step is managed as one information unit, and the site access information group is made an information recording medium that cannot be copied. And a third step of recording. An information management method comprising: Before the third step of recording the site access information group on the information recording medium, determining whether or not the information recording medium has been copied;
2. The information management method according to claim 1, further comprising a step of recording a site access information group on the information recording medium only when it is determined that the information recording medium is not a duplicate. Before reproducing the site access information group recorded on the information recording medium, determining whether or not the information recording medium is duplicated,
3. The information management method according to claim 1, wherein the site access information group recorded on the information recording medium is reproduced only when it is determined that the information recording medium is not a duplicated one. .   4. The information management method according to claim 1, wherein the site access information group to be recorded on the information recording medium is encrypted before being recorded on the information recording medium. 5.   The information management method according to any one of claims 1 to 4, wherein incidental information in the site access information group is set for one site access information group.   6. When an arbitrary site access information group is selected, the site of the URL of the site access information group is opened, and an ID and a password are automatically set. Information management method.   7. The information management method according to claim 1, wherein the site access information group recorded on the information recording medium is recorded by compressing the site access information group. A first process for obtaining a URL of an authentication screen of a desired site;
A second process of acquiring the ID and password entered on the authentication screen;
The site access information group of the URL, the ID, and the password acquired in the first process and the second process is managed as one information unit, and the site access information group is stored in a non-duplicatable information recording medium. A program for executing a third process to be recorded. A process of determining whether or not the information recording medium has been copied before the third process of recording the site access information group on an information recording medium;
A program for executing a process of recording a site access information group on the information recording medium only when it is determined that the information recording medium is not a duplicate. Before reproducing the site access information group recorded on the information recording medium, and determining whether or not the information recording medium is a copy,
A program for executing a process of reproducing the site access information group recorded on the information recording medium only when it is determined that the information recording medium is not a duplicate.   A program for executing a process of encrypting the site access information group to be recorded on the information recording medium before being recorded on the information recording medium.   A program for causing one site access information group to execute processing for setting accompanying information in the site access information group.   A program for opening a site with a URL of the site access information group and automatically setting an ID and a password when an arbitrary site access information group is selected.   The site access information group recorded on the information recording medium is a program for executing a process of compressing and recording the site access information group.   A recording medium on which the program according to claim 8 is recorded.

Images