JP2007226658A - Information processing terminal device, information processing method, and program for information processing - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an information processing terminal device, an information processing method, and a program for information processing, which can store backup data of password information preliminarily set for password authentication into a safe place. <P>SOLUTION: When software 91 stored in an external device 9 is installed to an information processing terminal device 1, a password authentication means 3 performs authentication whether password information 92 accompanying the software 91 coincides with a password input from an input part 7 or not, and an installing means 4 incorporates the software into the device 1 together with the password information 92 only for successful authentication. Password information identical to the password information 92 is recorded in a FAT external storage area 2D by a password information recording means 5. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to an information processing terminal device having a security function with password authentication, an information processing method thereof, and an information processing program.

  Conventionally, in order to protect information stored in a storage device from unauthorized leakage or tampering, a method is known in which a password is set in advance and reading and writing of information to the storage device is prohibited unless the same password as this password is input. ing.

  However, in the above method, preset password data is stored in the storage device, so if the stored password data is broken for some reason, the information stored in the storage device can be read and written at all. Disappear. As an improvement to this, there has already been known a disk device that is a storage device in which a plurality of password information areas are arranged in the entire storage area, and preset password information is written in each of the plurality of password information areas. (See Patent Document 1).

Japanese Patent Application Laid-Open No. 09-179692

  However, one of the causes of destruction of information stored in the storage device is a malfunction when using software, and a file area other than the file area that the software should use is erroneously rewritten. Even if password information is written to multiple areas as in the above disk device, it is common that these multiple areas are areas where information is frequently read and written, and all password information is rewritten by mistake. It will be in an easy situation. Therefore, the above disk device has a disadvantage that it sufficiently holds the possibility that all stored password information will be broken.

  Therefore, the present invention provides an information processing terminal device, an information processing method, and an information processing program for improving the disadvantages of the above prior art and storing password information set in advance for password authentication in a safer data storage area. The purpose is to do.

  In order to achieve the above object, the information processing terminal device of the present invention compares and matches the information storage unit storing the software and the password information associated therewith, the password input by the user's operation and the password information. Password authentication means that permits the use of software stored in the information storage unit only when the password information is the same, and the same password information as the password information is stored in the normal management internal storage area and the non-normal management storage area in the information storage unit. Each of them is stored separately (claims 1 and 2).

  According to such an information processing terminal device, a plurality of password information is stored in the information storage unit, and at least one of them is a storage area that is not normally used, that is, data is not read / written so much. It is stored in a normal non-management storage area that is a storage area. Thereby, even when the password information stored in the normal management storage area that is normally used is broken, password authentication can be performed using the password information stored in the non-management storage area. In addition, in non-normally managed storage areas where data is not read and written, data rewriting due to malfunctions is unlikely to occur and data is less likely to be destroyed, reducing the possibility of all password information being destroyed and more stable password authentication. It can be performed.

  Here, a storage area constituting the file system may be considered as a normal management internal storage area that is normally used. A typical file system includes a FAT (File Allocation Tables) file system used in an OS (Operating System) such as MS-DOS.

  Furthermore, in the information processing terminal device described above, the information storage unit described above has a password position information storage area for storing password position information indicating the storage position of the password information, and the password authentication unit extracts the password position information. And a function for reading out password information based on the password position information, and an improper value processing execution means for rewriting the password position information into an illegal value is provided in the information storage unit. The password authenticating means may have a normal value / incorrect value rewriting function for rewriting the password position information to a normal value only while the password position information is extracted.

  In this way, the location information that indicates where the password information is stored is usually stored with a different value from the original, and even if a third party tries to refer to the password information, it can find it. Can not. Thereby, the confidentiality of password information can be improved.

  In addition, the information processing terminal device of the present invention includes an information storage unit for storing various types of information including software, password information associated with the software included in the external device, and a password input by a user operation. Normal authentication storage area in the information storage unit for password authentication means for permitting the incorporation of the software only when collated and matched, software provided in the external device according to the incorporation permission, and password information associated therewith And a password information recording means for writing the same password information as the password information in the non-normally managed storage area in the information storage section (claims 3 to 6).

  According to such an information processing terminal device, when the software is additionally incorporated (installed) in the information processing terminal device, the software incorporation means incorporates the software together with the password information attached thereto, and the password information recording means provides the password. Information is also written to a storage area outside normal management, which is an area where data is not easily broken. This can reduce the possibility that such password information cannot be used.

  Further, in the above information processing terminal device, the password authentication means described above writes the password input by the user's operation into the password information written in the normal management internal storage area and the non-normal management storage area. It may have a deletion permission function that allows software deletion when it matches at least one of the password information, and software deletion means for deleting the software from the information storage unit in response to the deletion permission (Claim 4).

  In this way, when password authentication is performed to delete the installed software, even if the password information stored in advance is broken, it is stored in a storage area that is not normally managed, which is a storage area where data is not easily broken. Password information can be used. Thereby, software can be deleted normally.

  In the information processing terminal device described above, the information storage unit described above has a password position information storage area for storing password position information indicating a storage position of password information written in the normal non-management storage area, and password authentication. The means has a function of extracting password position information and a function of reading password information in a storage area not normally managed based on the password position information, and an unauthorized value processing execution means for rewriting the password position information to an unauthorized value. In addition to the information storage unit, the unauthorized value processing execution means may have a normal value / illegal value rewriting function for rewriting the password position information to a normal value only while the password authentication means extracts the password position information. (Claim 5).

  In this way, the information indicating where the password information stored in the normal unmanaged storage area is stored is usually different from the original value and stored in the non-managed storage area. I cannot see the password information. Thereby, the confidentiality of password information can be improved.

  Furthermore, in the above information processing terminal device, the above-described information storage unit has an in-management password location information storage area for storing in-management password location information indicating a storage location of password information normally written in the in-management storage location. And the password authentication means has a function of extracting the password location information in the management and a function of reading the password information in the normal management storage area based on the password location information in the management. A function for rewriting the in-management password position information to an invalid value and a function for rewriting the in-management password position information to rewrite the in-management password position information only while the password authentication means extracts the in-management password position information may be provided ( Claim 6).

  In this case, information indicating where the password information is stored in the normal management storage area is stored with a value different from the original value, and the password information cannot be referred to. Thereby, the confidentiality of password information can be improved.

  Next, the information processing method of the present invention is an information processing method provided with a software storage step for storing software and password information associated therewith in a normal management internal area of an information storage unit provided in the information processing terminal device. Yes, when password information is stored in the software storage process, the same password information is stored in the non-normally managed storage area of the information storage unit, and the password is input by a software user key operation, etc. And a password authentication step for permitting the use of software when the input password matches one of the password information stored in the normal management storage area and the non-normal management storage area of the information storage unit. It is provided (claims 7 to 8).

  According to such an information processing method, even when one of the password information used for password authentication is broken, the password authentication can be performed using the password information stored in the non-managed storage area. In addition, in non-normally managed storage areas where data is not read and written, data rewriting due to malfunctions is unlikely to occur and data is less likely to be damaged, reducing the possibility that all password information will be destroyed and more stable password authentication. It can be performed.

  Further, in the above information processing method, a password position information storage step for storing password position information indicating a storage position of password information in the information storage unit in the information storage unit after the software storage step described above is provided, and the password in the password authentication step When verifying the password, the password position information is extracted and the password information is read based on the extracted password position information, and the password position information is rewritten to an invalid value that is an unspecified value other than the normal value. There may be provided a normalization / re-fraudification step of rewriting the password position information to a normal value before the password authentication step and rewriting the password location information to an incorrect value after the password authentication step. .

  In this way, information indicating where the password information is normally stored is stored with a value different from the original value, and a third party cannot refer to the password information. Thereby, the confidentiality of password information can be improved.

  The information processing method of the present invention is an information processing method in an information processing terminal device including an information storage unit for storing various types of information including software, and a password is obtained by a key operation by a user of the information processing terminal device. A built-in password input process for inputting the password, and a built-in password authentication process for permitting the incorporation of the software only when the entered password matches the password information attached to the software included in the external device. In accordance with this incorporation permission, there is provided a software incorporation step for storing software included in the external device and password information associated therewith in the normal management internal storage area of the information storage unit, and the password in this software incorporation step When storing information, the same password information as the password information is stored in the information storage unit. Characterized by being configured to store the normal unmanaged memory area (claims 9 to 12).

  According to such an information processing method, when additional software is incorporated, the software and password information associated with the software are stored, and the password information is also stored in a normal non-management storage area that is an area where data is not easily broken. To do. As a result, the possibility that password information cannot be used can be reduced.

  Further, the information processing method includes a deletion password input step of inputting a password by a key operation or the like by a user of the information processing terminal device, and password information in which the input password is normally stored in a storage area in the management. Delete password authentication process that permits software deletion when it matches at least one of the password information stored in the non-managed storage area, and stores software information according to the deletion permission in the deletion password authentication process And a software deletion step of deleting from the section (claim 10).

  In this way, even if the password information used for password authentication when deleting the software is broken, password authentication is performed using the password information stored in the unmanaged storage area, which is an area where data is not easily broken. Can do. Thereby, software can be deleted normally.

  Further, the information processing method includes a password position information storage step of storing password position information indicating a storage position of password information stored in the storage area outside the normal management in the information storage unit after the software incorporation step described above. Provided, when verifying the password in the above-described deletion password authentication step, the password location information is extracted and the password information in the storage area outside the normal management is read based on the extracted password location information, and the password location information storage There is an illegal value conversion process that rewrites the password position information to an incorrect value after the process, and the password position information is rewritten to a normal value before the deletion password authentication process and the password position information is rewritten to an incorrect value after the deletion password authentication process. An illegal value conversion step may be provided. 1).

  In this case, the information indicating where the password information is normally stored in the non-managed storage area is different from the original value, so refer to the password information stored in the non-managed storage area. Can not do it. Thereby, the confidentiality of password information can be improved.

  Still further, the information processing method described above includes an in-management password storing in-information password location information indicating a storage location of password information normally stored in the in-management storage area after the software incorporation step described above. A location information storage step is provided, and when the password is verified in the above-described deletion password authentication step, the in-management password location information is extracted, and the password information in the normal in-management storage area is read based on the extracted in-management password location information In-management password location information is rewritten to an illegal value after the internal password location information storage step, and the internal password location information is rewritten to a normal value before the deletion password authentication step. Incorrect password location information in the management after the authentication process It may be a management within normal values / re unauthorized binarization process provided rewritten to (claim 12).

  In this way, the information indicating where the password information in the normal management storage area is stored is usually different from the original value, and the password information cannot be referred to. Thereby, the confidentiality of password information can be improved.

  Next, the information processing program of the present invention includes a software storage process for storing software and password information associated therewith in a normal management internal storage area of an information storage unit included in the information processing terminal device. In the storage process, the password information identical to the password information is specified so as to be stored in a storage area outside the normal management of the information storage unit, and the password is input by a key operation or the like by a software user. Password input processing and password authentication that permits the use of software when the entered password matches at least one of the password information stored in the normal management storage area and the non-normal management storage area of the information storage unit And processing is executed by a computer (claims 13 to 1). ).

  Further, the information processing program causes the computer to execute password position information storage processing for storing password position information indicating a storage position of password information stored in the storage device in the storage device, and the password authentication processing described above. The password position information is extracted at the time of password verification, and the contents are specified so that the password information is read based on the extracted password position information, and the password position information is an invalid value that is an unspecified value other than the normal value. A computer that performs an illegal value conversion process that rewrites the password position information and a normal value / re-incorrect value process that rewrites the password position information to a normal value before executing the password authentication process and rewrites the password position information to an incorrect value after the password authentication process is executed. (Claim 14).

  Further, the information processing program of the present invention is applied to a computer that controls an information processing terminal device having an information storage unit for storing various information including software, by a key operation or the like by a user of the information processing terminal device. A built-in password input process for entering a password, and a built-in password authentication process that permits the incorporation of the software only when the entered password matches the password information attached to the software of the external device, In accordance with the permission by the built-in password authentication process, the software built in the external device and the password information associated therewith are stored in the normal management internal storage area of the storage device, and the software built-in process If the password information is the same as the password information, It was characterized to identify the contents as stored in Rigai storage area (claims 15 to 18).

  Further, the information processing program includes a deletion password input process for inputting a password by a key operation or the like by a user of the information processing terminal device, and password information in which the input password is normally stored in a storage area in the management. Delete password authentication processing that permits software deletion when it matches at least one of the password information stored in the non-managed storage area, and software is deleted from the storage device according to the permission by the deletion password authentication processing The software deletion processing to be performed may be executed by the above-described computer (claim 16).

  In addition, the above information processing program executes password position information storage processing for storing the password position information indicating the storage position of the password information stored in the non-normal management storage area described above in the information storage unit in the computer described above. In the above-described deletion password authentication process, the password position information is extracted at the time of password verification, the content is specified so that the password information is read based on the extracted password position information, and the password position information is rewritten to an invalid value. The invalid value processing and the normal value / re-invalid value processing for rewriting the password position information to a normal value before executing the deletion password authentication process and rewriting the password position information to an incorrect value after executing the deletion password authentication process are described above. The computer may be executed (claim 17). .

  Still further, the above information processing program performs an in-management password location information storage process for storing in-management password location information indicating the storage location of the password information stored in the above-described normal management storage region in the information storage unit. The above-described deletion password authentication processing is executed by the above-described computer, and the password position information is extracted at the time of password verification, and the content is specified so that the password information is read based on the extracted password position information. In-management invalid value processing that rewrites password position information to an invalid value, and re-writes the password position information in the management to a normal value before execution of the deletion password authentication process, and invalidates the password position information in the management after execution of the deletion password authentication process. Normal value / re-illegal value processing in management to rewrite to value The optionally cause the computer to execute the above-mentioned (claim 18).

  According to such an information processing program, a plurality of password information is stored in a storage device, and at least one of them is stored in a storage area that is not normally used, that is, a storage area in which data is not often read and written. Since it memorize | stores, the effect similar to said information processing terminal device and the information processing method can be acquired.

  Since the present invention is configured and functions as described above, this reduces the possibility that all of the password information stored for use in password authentication will be alleviated, enabling more reliable password authentication. . Furthermore, by rewriting the information indicating the storage location of the password information in the storage area to an incorrect value, it becomes impossible to specify where the password information is in the storage area, thereby preventing unauthorized reading of the password information. Can do.

  Hereinafter, an embodiment of the present invention will be described with reference to the drawings. FIG. 1 is a functional block diagram showing an outline of the configuration of the information processing terminal device 1 of the present embodiment.

  In FIG. 1, an information processing terminal device 1 includes an information storage unit 2 composed of a storage medium such as a hard disk, password authentication means 3 for executing password authentication for software installation and password authentication for uninstallation, and password authentication means. Installation means 4 that functions as software incorporation means for installing software according to the authentication result 3 and password information recording means for writing the same password information as the password information associated with the software to be installed in the information storage unit 1 as backup data And 5.

  Furthermore, the information processing terminal device 1 includes an uninstaller 6 that functions as a software deletion unit that deletes software from the information storage unit 1 in accordance with the authentication result of the password authentication unit 3, a keyboard, a mouse, and the like. The input unit 7 for inputting command information and the like by key operation, and the position information indicating where the password information accompanying the installed software is stored in the storage area in the information storage unit 1 is unspecified other than the normal value. And unauthorized value processing execution means 8 for rewriting the value as an unauthorized value.

  In this embodiment, the storage area of the information storage unit 2 is composed of a physical disk management area 2A, a FAT area 2B, a FAT internal storage area 2C, and an external FAT storage area 2D by a FAT (File Allocation Tables) file system. . Of these, the FAT area 2B and the FAT internal storage area 2C are areas constituting the FAT file system, and the physical disk management area 2A and the external FAT storage area 2D are areas not constituting the FAT file system. is there.

  Here, the file system is a management method for managing information stored in a storage medium such as a hard disk. When a file system is used, a group of data is managed as a file, and the file is managed based on information indicating the file and the position on the storage medium in association with each other.

  In the FAT file system, which is a typical file system, a file is realized by assigning one or more clusters according to the data size, with the minimum recording unit on the disk as a cluster. At this time, the physical position on the disk of the assigned cluster is not always continuous, so it indicates where and how the clusters that make up the file are connected on the disk. The file is managed by storing FAT information indicating whether or not the predetermined cluster is currently in use.

  Since the FAT file system is used in the present embodiment, FAT information 22 in which the files in the FAT storage area 2C are associated with the clusters is stored in the FAT area 2B of FIG. The FAT information 22 manages how the information stored in the FAT storage area 2C exists on the disk. When reading the information stored in the FAT storage area 2C, The FAT information 22 is referred to and necessary information is found according to the FAT information 22. Thus, in the present embodiment, normal information processing is executed under the FAT file system.

  On the other hand, since the physical disk management area 2A and the FAT external storage area 2D are storage areas not managed by the file system, when referring to the information stored in the storage area, the physical location on the disk is set. The position where the information is recorded is designated by the indicated cylinder number, track number, and sector number.

  Further, in the physical disk management area 2A, disk management information 21 indicating where the information is stored in the storage area by a physical position on the disk is stored. Since the disk management information 21 is stored at a fixed position in the storage area, when reading the information stored in the non-FAT storage area 2D, the storage position of the disk management information 21 is the physical position on the disk. After specifying and referring to the disk management information 21, the storage position of information to be read is specified by a physical position on the disk.

  As described above, the FAT internal storage area 2C is a normally managed storage area, that is, an area where data is frequently read and written, and the FAT external storage area 2D is a normally unmanaged storage area, that is, data. This is an area where there is little reading and writing. Therefore, the FAT internal storage area 2C is a normal management internal storage area in the present invention, and the FAT external storage area 2D is a normal non-management storage area in the present invention.

  In this embodiment, the physical disk management area 2A is provided as the password position information storage area, and the FAT area 2B is provided as the in-management password position information storage area. That is, the disk management information 21 is password position information in the present invention, and the FAT information 22 is in-management password position information in the present invention.

  The password authentication means 3 shown in FIG. 1 includes password information 92 attached to software 91 stored in an external device 9 such as a storage medium such as a CD-ROM or MO, a server on the Internet, and the like. It has a function of sending a command permitting installation (incorporation) of the software 91 to the installation means 4 when the password input from the input unit 7 is matched by operation.

  Furthermore, the password authenticating means 3 uninstalls the password information 24 attached to the software 23 already stored in the information storage section 2 when the password inputted from the input section 7 is matched and matched. 6, a command to permit uninstallation (deletion) of the software 23 is sent, and if the verification does not match, the password input from the input unit 7 for the password information 25 stored in the external storage area 2D Are matched, the uninstaller 6 has a function of sending a command for permitting the uninstallation (deletion) of the software 23.

  Here, in order to read the password information 25 stored in the non-FAT storage area 2D, it is necessary to specify the storage position by a physical position on the disk. In this embodiment, the password authentication means 3 A command (command) for reading the password information 25 is sent to a BIOS (BasicInput / OutputSystem) stored in a main storage unit such as a ROM (Read Only Memory) which is not shown, and this BIOS stores the disk management information 21 on the disk. The position is designated by a cylinder number, a track number, and a sector number, the disk management information 21 is referred to, and the storage position of the password information 25 is designated and read by a physical position on the disk.

  The installation unit 4 has a function of writing the software 91 and the password information 92 in the FAT storage area 2C of the information storage unit 2 in response to an instruction permitting the installation from the password authentication unit 3.

  When the password information 24 is written in the case where the password information 24 stored in the FAT storage area 2C cannot be used due to rewriting due to damage or malfunction, the password information recording means 5 The same password information 25 is recorded in the FAT external storage area 2D of the information storage unit 2.

  The uninstall unit 6 has a function of deleting the software 23 from the information storage unit 2 in response to a command permitting uninstallation from the password authentication unit 3. At this time, the uninstall unit 6 also deletes the password information 24 and the password information 25 from the information storage unit 2.

  The illegal value processing execution means 8 has a function of rewriting only the portion indicating the position of the password information 24 in the FAT information 22 stored in the FAT area 2B to an illegal value that is different from the original value, and physical disk management. And a function of rewriting the disk management information 21 stored in the area 2A to an invalid value. As described above, if the disk management information 21 and the FAT information 22 are set to illegal values, the password information 24 and the password information 25 cannot be referred to, so that illegal reading / writing of the password information can be prevented.

  However, if the disk management information 21 and the FAT information 22 are set to illegal values as they are, the password authentication means 3 for executing password authentication cannot read out the password information 24 or the password information 25. Has a function of temporarily rewriting the FAT information 22 or the disk management information 21 to a normal value when the password authentication means 3 executes password authentication. Thereby, the FAT information 22 or the disk management information 21 is rewritten to a normal value at the time of password authentication, and is rewritten to an invalid value again after the password authentication is completed.

  Here, in order to rewrite the disk management information 21 in the physical disk management area 2A not managed by the file system to an invalid value, it is necessary to specify the storage position of the disk management information 21 by a physical position on the disk. Yes, in this embodiment, the illegal value processing execution means 8 sends a command (instruction) for rewriting the disk management information 21 to an illegal value to the BIOS stored in the main storage unit (not shown), and this BIOS The storage position of the management information 21 on the disk is designated by a cylinder number, a track number, and a sector number, and the disk management information 21 is read and rewritten to an illegal value.

  Similarly, when the password authentication means 3 reads the password information 25 in order to execute password authentication, the unauthorized value processing execution means 8 sends a command for setting the disk management information 21 to a normal value to the BIOS, and the disk management information 21 is stored. After returning to the normal value, the password information 25 is read, and immediately after the password authentication of the password authentication means 3 is completed, a command for rewriting the disk management information 21 to an invalid value is sent again to the BIOS, and the disk management information 21 is rewritten to an invalid value. ing.

  Next, the operation in the information processing terminal device 1 of the present embodiment will be described. Here, the information processing method according to the present invention will also be described.

  FIG. 2 is a flowchart showing an operation of installing software in the information processing apparatus 1 of the present embodiment.

  First, a password is input from the input unit 7 by a user's key operation (FIG. 2: Step S101, built-in password input process). When the software 91 and the password information 92 are input from the external device 9 to the installation unit 4, the password information 92 is referred to by the password authentication unit 3 (FIG. 2: step S 102), and whether or not the password information 92 is broken. Is determined (FIG. 2: Step S103). If it is not broken, the password information 92 and the password input from the input unit 7 are collated (FIG. 2: step S104). On the other hand, if it is broken, it is determined that the password information 92 cannot be referred to, and the installation operation ends (FIG. 2: step S111).

  It is determined by the password authentication means 3 whether or not the password information 92 matches the password input from the input unit 7 (FIG. 2: Step S105, built-in password authentication process). If they match, the installation unit 4 writes the software 91 as the software 23 in the FAT storage area 2C (FIG. 2: step S106), and the password information 92 is written as the password information 24 in the FAT storage area 2C (FIG. 2: Step S107, software storage process, software incorporation process). Further, the password information recording means 5 writes the password information 92 as the password information 25 in the external FAT storage area 2D of the information storage unit 2 (FIG. 2: step S108, software storage process, software incorporation process). If the password information 92 and the password do not match, password authentication fails and the installation operation ends (FIG. 2: step S111).

  When the password information 24 is written in the FAT storage area 2C, the FAT information 22 in the FAT area 2B is updated to indicate the position of the password information 24. When the password information 25 is written in the FAT external storage area 2D, the disk management information 21 in the physical disk management area 2A is updated to indicate the position of the password information 25 (FIG. 2: Step S109, password position information). Storage process, password location information storage process in management).

  Then, the illegal value processing means 8 rewrites only the portion indicating the position of the password information 24 in the FAT information 22 to an illegal value that is different from the original value. Further, by instructing the BIOS to rewrite the disk management information 21 to an illegal value, the disk management information 21 is rewritten to an illegal value (FIG. 2: step S110, illegal value conversion process, in-management illegal value conversion process).

  According to such an operation, when the software 91 and the accompanying password information 92 are written in the FAT storage area 2C, the same password information as the password information 92 is stored in the FAT external storage area, which is an area in which data is not easily damaged. It is written as backup data in the area 2D. Further, the FAT information 22 and the disk management information 21 are rewritten to incorrect values. Here, the above-described built-in password input process, built-in password authentication process, and software built-in process may be programmed and executed by a computer.

  FIG. 3 is a flowchart showing an operation for uninstalling software in the information processing apparatus 1 according to the present embodiment.

  First, a password is input from the input unit 7 by a user's key operation (FIG. 3: step S201, password input process, deletion password input process). Next, the FAT information 22 is rewritten to the normal value by the illegal value processing execution means 8 (FIG. 3: step S202, normal value / re-incorrect value conversion step). The password authentication means 3 reads the password information 24 based on the correct value of the FAT information 22 (FIG. 3: step S203), and determines whether or not the password information 24 is broken (FIG. 3: step S204). If it is not broken, the password information is compared with the password input from the input unit 7 (FIG. 3: step S208, password authentication process, deleted password authentication process).

  On the other hand, if the password information 24 is broken, the illegal value processing execution means 8 instructs the BIOS to set the disk management information 21 to a normal value, and rewrites the disk management information 21 to a normal value (FIG. 3: step). S205, normal value in management / re-incorrect value conversion step). The password information 25 is read based on the correct value of the disk management information 21 (FIG. 3: step S206), and the password authentication means 3 determines whether the password information 25 is broken (FIG. 3: step S207). If the password information 25 is not broken, the password information 25 and the password input from the input unit 7 are collated (FIG. 3: step S208, password authentication process, deletion password authentication process). If the password information 25 is broken, it is determined that the password information 25 cannot be referred to, and the uninstall operation ends (FIG. 3: step S212).

  Immediately after the password verification is completed, the unauthorized value processing execution means 8 instructs the BIOS to rewrite only the portion indicating the position of the password information 24 in the FAT information 22 to an unauthorized value and to rewrite the disk management information 21 to an unauthorized value. Then, the disk management information 21 is rewritten with an invalid value (FIG. 3: Step S209, normal value / re-incorrect value conversion process, normal value in management / re-incorrect value conversion process).

  Then, it is determined by the password authentication means 3 whether or not the password information 24 or the password information 25 matches the password input from the input unit 7 (FIG. 3: step S210). The software 23 and password information 24 stored in the FAT internal storage area 2C of the information storage unit 2 are deleted, and the password information 25 stored in the external FAT storage area 2D is also deleted (FIG. 3: step S211, Software deletion process). If they do not match, password authentication fails and the uninstall operation ends (FIG. 3: step S212).

  According to such an operation, even if the password information 24 is broken when the password authentication for determining whether or not the software 23 is permitted to be deleted is performed, the FAT external storage area 2D which is an area where the data is not easily broken. Password authentication is performed using the password information 25 stored in. Here, the deletion password input step, the deletion password authentication step, and the software deletion step described above may be programmed and executed by a computer.

  Also, the above-described password location information storage step, illegal value conversion step, normal value / re-incorrect value conversion step is programmed, and the above-mentioned in-management password location information storage step, in-management illegal value conversion step, in-management normal value / The re-fraud value conversion step may be programmed and each may be executed by a computer.

  Furthermore, by configuring the software storage process, password input process, and password authentication process described above to be programmed and executed by a computer, the password information 25 can be filed as backup data of the password information 24 in the same manner as described above. It can be stored in a storage area outside the system.

  As described above, according to the present embodiment, the password information 25 used for password authentication is stored as backup data of the password information 24 in a storage area outside the file system, which is an area where data is not easily broken. The possibility that all password information is destroyed is reduced, and password authentication can be performed more reliably. Further, by rewriting the FAT information 22 and the disk management information 21 indicating the storage locations of the password information 24 and the password information 25 to incorrect values, the confidentiality of the password information 24 and the password information 25 is increased, and the password information Unauthorized reading can be prevented.

It is a functional block diagram which shows the outline of a structure of this embodiment. It is a flowchart figure which shows the operation | movement which installs the software in embodiment shown in FIG. It is a flowchart figure which shows the operation | movement which uninstalls the software in embodiment shown in FIG.

Explanation of symbols

1 Information processing terminal device 2 Information storage unit 2A Physical disk management area (password location information storage area)
2B FAT area (in-management password location information storage area)
2C FAT recording area (normal management storage area)
2D FAT external storage area (normally unmanaged storage area)
DESCRIPTION OF SYMBOLS 3 Password authentication means 4 Installation means as software incorporation means 5 Password information recording means 6 Uninstallation means as software deletion means 7 Input part 8 Illegal value processing execution means 9 External device

Claims (18)

Use of software stored in the information storage unit when the information storage unit storing software and password information associated therewith, and the password input by the user's operation and the password information are matched and matched And password authentication means for allowing
The information processing terminal device, wherein the same password information as the password information is individually stored in a normal management internal storage area and a non-normal management storage area in the information storage unit. In the information processing terminal device according to claim 1,
The information storage unit has a password position information storage area for storing password position information indicating a storage position of the password information, and the password authenticating unit extracts the password position information and based on the password position information. And reading the password information
An illegal value processing execution means for rewriting the password position information to an illegal value is provided in the information storage unit, and the illegal value processing execution means is used only when the password authentication means extracts the password position information. An information processing terminal device having a normal value / incorrect value rewriting function for rewriting position information to a normal value. The information storage unit for storing various information including software and the password information attached to the software provided in the external device and the password input by the user's operation are collated and the software is incorporated only when they match. A password authenticating means to permit, and a software embedding means for writing the software and the accompanying password information in the normal storage area in the information storage unit according to the embedding permission,
An information processing terminal device comprising password information recording means for writing the same password information as the password information in a storage area outside normal management in the information storage unit. In the information processing terminal device according to claim 3,
The password authentication means includes at least one of password information in which a password input by a user operation is written in the normal management internal storage area and password information written in the non-normal management storage area; A deletion permission function that allows the software to be deleted if they match,
An information processing terminal device comprising software deletion means for deleting the software from the information storage unit in response to the deletion permission. In the information processing terminal device according to claim 4,
The information storage unit has a password position information storage area for storing password position information indicating a storage position of password information written in the non-normal management storage area, and the password authentication means extracts the password position information. And a function to read password information in the storage area outside the normal management based on the password position information,
An illegal value processing execution means for rewriting the password position information to an illegal value is provided in the information storage unit, and the illegal value processing execution means is used only when the password authentication means extracts the password position information. An information processing terminal device having a normal value / incorrect value rewriting function for rewriting position information to a normal value. In the information processing terminal device according to claim 5,
The information storage unit has an in-management password position information storage area for storing in-management password position information indicating a storage position of password information written in the normal management in-storage area, and the password authentication means includes the management A function of extracting the internal password location information and a function of reading the password information of the normal management internal storage area based on the internal password location information,
A function for rewriting the in-management password location information to an illegal value and a management for rewriting the in-management password location information to a normal value only while the password authentication unit extracts the in-management password location information. An information processing terminal device having a normal value / incorrect value rewriting function. In an information processing method provided with a software storage step of storing software and password information associated therewith in a normal management internal storage area of an information storage unit provided in the information processing terminal device,
When storing the password information in the software storage step, configured to store the same password information as the password information in a storage area outside the normal management of the information storage unit,
A password input step of inputting a predetermined password by a key operation or the like by a user of the software;
A password authentication step for permitting use of the software when the input password matches any of password information stored in the normal management internal storage area and the non-normal management storage area of the information storage unit; An information processing method characterized by that. The information processing method according to claim 7,
After the software storage step, a password location information storage step is provided for storing password location information indicating the storage location of the password information stored in the information storage portion in the information storage portion, and when verifying the password in the password authentication step Is configured to extract the password position information and read the password information based on the extracted password position information,
Providing an unauthorized value conversion step of rewriting the password position information to an unauthorized value that is an unspecified value other than a normal value;
An information processing method comprising: a normal value / re-incorrect value conversion step of rewriting the password position information to a normal value before the password authentication step and rewriting the password position information to an incorrect value after the password authentication step . In an information processing method in an information processing terminal device including an information storage unit for storing various types of information including software,
A built-in password input step for inputting a predetermined password by a key operation or the like by a user of the information processing terminal device;
A built-in password authentication process that permits the incorporation of the software only when the entered password matches the password information attached to the software of the external device and matches,
In accordance with this incorporation permission, a software incorporation step of storing software included in the external device and password information associated therewith in a normal management internal storage area of the information storage unit,
An information processing method configured to store the same password information as the password information in a storage area outside normal management of the information storage unit when storing the password information in the software incorporation step. The information processing method according to claim 9,
A deletion password input step of inputting a predetermined password by a key operation or the like by a user of the information processing terminal device;
Permit deletion of the software if the entered password matches at least one of the password information stored in the normal management storage area and the password information stored in the non-normal management storage area Delete password authentication process,
An information processing method comprising: a software deletion step of deleting the software from the information storage unit in response to deletion permission in the deletion password authentication step. The information processing method according to claim 10,
After the software incorporation step, a password location information storage step for storing password location information indicating a storage location of password information stored in the non-normally managed storage area in the information storage unit is provided, in the deletion password authentication step Upon password verification, the password location information is extracted and configured to read password information in the non-normally managed storage area based on the extracted password location information,
Providing a fraud value converting step of rewriting the password position information to an incorrect value after the password position information storing step;
Information processing characterized by providing a normal value / re-incorrect value conversion step of rewriting the password position information to a normal value before the deletion password authentication step and rewriting the password position information to an incorrect value after the deletion password authentication step Method. The information processing method according to claim 11,
After the software incorporation step, there is provided an in-management password location information storage step for storing in-management password location information indicating the storage location of password information stored in the normal management in-storage region in the information storage unit, and the deletion When verifying the password in the password authentication process, the password location information in the management is extracted and the password information in the normal management storage area is read based on the extracted password location information in the management,
An in-management illegal value converting step of rewriting the in-management password location information to an invalid value after the in-management password location information storing step;
The management internal password position information is rewritten to a normal value before the deletion password authentication step, and the management normal value / re-incorrect value conversion step for rewriting the internal password position information to an incorrect value after the deletion password authentication step is provided. An information processing method characterized by the above. In an information processing program including software storage processing for storing software and password information associated therewith in a normal management internal storage area of an information storage unit provided in the information processing terminal device,
In the software storage process, the password information that is the same as the password information is specified so as to be stored in a storage area outside the normal management of the information storage unit, and
Password input processing for inputting a predetermined password by a key operation or the like by a user of the software, and a password in which the input password is stored in the normal management internal storage area and the non-normal management storage area of the information storage unit An information processing program for causing a computer to execute password authentication processing for permitting use of the software when it matches any of the information. In the information processing program according to claim 13,
Causing the computer to execute password position information storage processing for storing password position information indicating a storage position of password information stored in the information storage unit in the information storage unit, and the password authentication processing is performed when the password is verified. Extract the password position information and specify the content to read the password information based on the extracted password position information,
An unauthorized value processing for rewriting the password position information to an unauthorized value that is an unspecified value other than a normal value;
Rewriting the password position information to a normal value before execution of the password authentication process, and causing the computer to execute normal value / re-incorrect value processing for rewriting the password position information to an incorrect value after execution of the password authentication process. An information processing program characterized by In a computer that controls an information processing terminal device including an information storage unit for storing various types of information including software,
The built-in password input process for inputting a password by a key operation or the like by a user of the information processing terminal device and the input password and the password information attached to the software included in the external device are collated and matched. Built-in password authentication processing for permitting the incorporation of software, software included in the external device according to the permission by the built-in password authentication processing, and password information associated therewith are stored in the normal management of the information storage unit In the software incorporation process, the same password information as the password information is stored in the non-normally managed storage area of the information storage unit. An information processing program characterized by identification. In the information processing program according to claim 15,
Deletion password input processing for inputting a password by a key operation or the like by a user of the information processing terminal device, and the input password stored in the normal management storage area and the non-normal management storage area Delete password authentication processing that permits deletion of the software when it matches at least one of the password information that has been set, and software that deletes the software from the information storage unit in response to permission by the delete password authentication processing An information processing program for causing a computer to execute a deletion process. In the information processing program according to claim 16,
Causing the computer to execute password position information storage processing for storing password position information indicating a storage position of password information stored in the non-normally managed storage area in the information storage unit; The password position information is extracted at the time of collation and the content is specified so that the password information is read based on the extracted password position information.
An illegal value conversion process for rewriting the password position information with an illegal value, and the password position information is rewritten to a normal value before execution of the deletion password authentication process and the password position information is changed to an incorrect value after execution of the deletion password authentication process. An information processing program that causes the computer to execute normal value / re-incorrect value conversion processing to be rewritten. The information processing program according to claim 17,
The in-management password location information storing process for storing the in-management password location information indicating the storage location of the password information stored in the normal management in-storage area in the information storage unit is executed by the computer, and the deletion password authentication processing is performed. Specifies the content so that the password information in the normal management area is read out based on the extracted password position information in the management and the password position information in the management is extracted at the time of password verification,
In-management illegal value processing for rewriting the in-management password location information to an invalid value, and the management password location information is rewritten to a normal value before execution of the deletion password authentication processing, and the management is performed after the deletion password authentication processing is executed. An information processing program for causing the computer to execute a management normal value / re-incorrect value conversion process for rewriting internal password position information to an illegal value.

Images