JP2008071367A - Password storage device, password supply method, program storage medium, and password supply system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a password storage device capable of storing a password and capable of protecting surely security of the password. <P>SOLUTION: This password storage device is provided with a password storage means for storing the single or plurality of passwords, and a program storage means for storing a password supply program for reading the password corresponding to an application program executed in a prescribed information processor to be supplied to the application program, and the password supply program is executed by the information processor or the password storage device to input surely the stored password to the application program. The security of the stored password is surely protected by authenticating the propriety of a valid user for the password supply program, using a password number or a biological information of the user. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to a password storage device, a password supply method, a program storage medium, and a password supply system, and is suitably applied to, for example, a password storage device that stores a password of an application program.

  2. Description of the Related Art Conventionally, an authentication method using a password has been widely used as a method for confirming the legitimacy of a user when starting an application on a computer or logging in to a network.

  In recent years, an external network may be used to remotely access an internal network. In such a case, a login password for the internal network is used.

  However, short passwords may be deciphered by trial and error, and passwords using existing words such as names may be deciphered by analogy. In addition, when a meaningless character string is used as a password to prevent such decryption, there is a problem that it becomes difficult to store the password.

  In addition, when different passwords are set for a plurality of applications and network environments, it is difficult to store the plurality of passwords.

  The present invention has been made in view of the above points, and intends to propose a password storage device, a password supply device, a program storage medium, and a password supply system that can store a password and reliably protect the security of the password. To do.

  In order to solve such a problem, in the present invention, a password storage unit storing one or more passwords and a password corresponding to an application program executed by a predetermined information processing apparatus are read from the password storage unit and stored in the application program. By providing a program storage means storing a password supply program for supply in the password storage device and executing the password supply program on the information processing device or the password storage device, the password can be reliably input to the application program. .

  In the present invention, the security of the stored password can be reliably protected by authenticating whether or not the user is a valid user for the password supply program by using the personal identification number or the user's biometric information. .

  As described above, according to the present invention, the password storage unit storing one or more passwords and the password corresponding to the application program executed in the predetermined information processing apparatus are read from the password storage unit and supplied to the application program. By providing a program storage means in which a password supply program is stored, the password can be reliably input to the application program.

  According to the present invention, the security of the password stored in the password storage means is ensured by authenticating whether or not the user is a valid user for the password supply program using the personal identification number or the user's biometric information. Can be protected.

  Embodiments of the present invention will be described below with reference to the drawings.

(1) Configuration of Personal Computer In FIG. 1, reference numeral 1 denotes a personal computer as a whole, which includes a central processing unit (CPU) 12, a random access memory (RAM) 13, a hard disk 14, a graphics processing unit 15, a PC card slot 16, and A PCI (Peripheral Component Interconnect) -ISA (Industrial Standard Architecture) bridge 17 is connected to the PCI bus 30. The PCI-ISA bridge 17 is connected to a keyboard 20, a floppy disk drive 21, and an I / O (Input / Output) interface 22 via an ISA bus 31.

  The CPU 12 reads out the program file from the hard disk 14 in accordance with the operation of the keyboard 20 by the user, expands it in the RAM 13 and executes it. Then, the graphics processor 15 is controlled according to the program to generate a display screen and display it on a monitor (not shown).

  Further, when a PC card 40 storing a password supply program to be described later is inserted into the PC card slot 16, the personal computer 1 automatically reads and executes the password supply program from the flash memory 41 in the PC card 40.

(2) Registration of Keyword and Password When using the password supply program according to the present invention, the personal computer 1 is used in advance, and the flash memory 41 (FIG. 1) is used as the password storage means for the password of the application program and the keyword corresponding to the application. Register with.

  That is, FIG. 2 shows a password registration procedure, and the procedure starts at RT1. In step SP1, the user inserts the PC card 40 storing the password supply program into the PC card slot 16. The CPU 12 detects the insertion of the PC card 40 and proceeds to step SP2.

  In step SP2, the CPU 12 reads and executes the password supply program from the flash memory 41 as the program storage means.

  In step SP3, the user activates an application program to be registered for a password (an application program that attempts to input a password using a password supply program). In response to this, the CPU 12 reads the application program from the hard disk 14 and executes it.

  In step SP4, the CPU 12 operates according to the application program, and displays a user authentication dialog 50 for performing user authentication of the application program on the monitor. FIG. 3 shows a user authentication dialog 50, which is provided with a user name input area 50A and a password input area 50B.

  In step SP5, the user performs a predetermined key operation (for example, pressing the F1 key) in response to the display of the user authentication dialog 50, and calls a password registration dialog of the password supply program.

  When the user performs a key operation, in step SP6, the CPU 12 operates in accordance with the password supply program, and first displays a PIN (Personal Identification Number) input screen 51 (FIG. 4). The PIN is an authentication password for the password supply program, and is registered in the PC card 40 by the user in advance. The user inputs a PIN in the PIN input area 51A.

  In step SP7, the CPU 12 operates in accordance with the password supply program, performs user authentication using the input PIN, and determines whether this user is a valid user for the password supply program. If a negative result is obtained in step SP7, this indicates that this user is not a valid user for the password supply program, and the CPU 12 proceeds to step SP11 and ends the process. On the other hand, when a positive result is obtained in step SP7, this indicates that this user is a valid user, and the CPU 12 proceeds to step SP8.

  In step SP8, the CPU 12 operates in accordance with the password supply program and displays the password registration dialog 52.

  FIG. 5 shows a password registration dialog 52, which is provided with a keyword input area 52A for inputting a keyword set by the user for the application program and a password input area 52B for inputting the password of the application program.

  In step SP9, the user first inputs a keyword for the application program for which a password is to be registered into the keyword input area 52A. This keyword is arbitrarily determined by the user. The keyword is a word related to the application program (for example, “word processor” in the case of a Japanese word processor program), the product name of the application program, or is not related to the application program. A word may be used as a keyword. Subsequently, the user inputs a password for the application program in the password input area 52B. The password input here is copied to the password input area 50B (FIG. 3) of the application program by the password supply program and registered as the password of the application program. The CPU 12 proceeds to step SP10 upon completion of inputting the keyword and password.

  In step SP10, the CPU 12 operates according to the password supply program, and stores the keyword and password input by the user in the password list 53 in the flash memory 41. FIG. 6 shows a password list 53 in which a plurality of passwords 53A and a plurality of keywords 53B corresponding to the passwords 53A are stored. The CPU 12 ends the process at step SP11.

  Thus, the password corresponding to the application program and the keyword corresponding to the application program are stored in the password list 53 in advance.

(3) Password Input Using Password Supply Program Next, a password input procedure using the password supply program according to the present invention will be described.

  FIG. 7 shows the password input procedure, which starts at RT2. In step SP21, the user inserts the PC card 40 storing the password supply program into the PC card slot 16. The CPU 12 detects the insertion of the PC card 40 and proceeds to step SP22.

  In step SP22, the CPU 12 reads and executes the password supply program from the flash memory 41 as the program storage means.

  In step SP23, the user activates a desired application program. In response to this, the CPU 12 reads the application program from the hard disk 14 and executes it.

  In step SP24, the CPU 12 operates according to the application program, and displays a user authentication dialog 50 (FIG. 3) for performing user authentication of the application program on the monitor.

  In step SP25, in response to the display of the user authentication dialog 50, the user first inputs a user name into the user name input area 50A. Then, the user performs a predetermined key operation (for example, pressing the F2 key) to call the password list dialog 54 of the password supply program. When the key operation by the user is performed, the CPU 12 operates in accordance with the password supply program in step SP26, and first displays the PIN input screen 51 (FIG. 4). The user inputs the PIN into the PIN input area 51A of the PIN input screen 51.

  In step SP27, the CPU 12 operates in accordance with the password supply program, performs user authentication using the input PIN, and determines whether or not this user is a valid user for the password supply program. If a negative result is obtained in step SP27, this indicates that this user is not a valid user for the password supply program, and the CPU 12 proceeds to step SP31 and ends the process. On the other hand, if a positive result is obtained in step SP27, this indicates that this user is a valid user, and the CPU 12 proceeds to step SP28.

  In step SP28, the CPU 12 operates in accordance with the password supply program, reads the keyword 53B (FIG. 6) of the password list 53 from the flash memory 41 as the password storage means, and displays the password list dialog 54 based on this. FIG. 8 shows a display state of the password list dialog 54, and the password list dialog 54 is displayed overlapping the password input area 50 </ b> B of the user authentication dialog 50. The password list dialog 54 displays a list of keywords registered in the password list 53.

  In step SP29, the user selects a keyword corresponding to the application program to be started from the keywords displayed in a list. In response to this selection operation, the CPU 29 proceeds to step SP30.

  In step SP30, the CPU 12 operates in accordance with the password supply program, obtains a password corresponding to the keyword selected by the user from the password list 53 in the flash memory 41, and stores it in the password input area 50B of the user authentication dialog 50. Copy and enter. The application program performs user authentication based on the password input by the password supply program. The CPU 12 ends the process at step SP31.

(4) Operation and Effect In the above configuration, the user stores a password for each application program and a keyword corresponding to the application program in the password list 53 in the PC card 40 in advance.

  When performing user authentication of the application program using the password supply program, the user first inserts the PC card 40 into the personal computer 1. In response to the insertion of the PC card 40, the CPU 12 of the personal computer 1 activates a password supply program stored in the PC card 40.

  Subsequently, the user activates a desired application program. Then, a predetermined key operation is performed during user authentication of the application program, and a password supply program is called.

  The password supply program first executes user authentication for the password supply program. The user inputs a PIN and performs user authentication.

  When the user authentication of the password supply program is completed, the CPU 12 reads the keyword 53B of the password list 53 from the PC card 40 according to the password supply program, and displays the list in the password list dialog 54. The user selects a keyword corresponding to the activated application program from the password list dialog 54.

  The CPU 12 operates according to the password supply program, reads the password corresponding to the keyword selected by the user from the password list 53 in the PC card 40, and copies and inputs it to the password input area 50B of the user authentication dialog 50 of the application program. To do.

  The CPU 12 operates in accordance with the application program, and performs user authentication of the application program using the password input by the password supply program.

  According to the above configuration, the password supply program, the password for each application program, and the keyword corresponding to the application program are stored in the PC card 40, and the password supply program is executed during user authentication of the application program to execute the PC card. By reading the password stored in 40 and inputting it into the application program, the password can be reliably input.

  Also, by performing user authentication for the password supply program using the PIN, the password stored in the PC card 40 can be reliably protected.

  In the above-described embodiment, the password supply program and the password list are stored in the PC card 40. However, the present invention is not limited to this, and is stored in various storage media such as a floppy disk and an MO (Magneto-Optical) disk. You may make it memorize.

  In the above-described embodiment, the password of the application program is stored in the password list. However, the present invention is not limited to this, and is attached to an object such as a login password for a network environment or a document file. Various passwords such as passwords may be stored in the password list.

  In the above-described embodiment, the user selects the password corresponding to the application program from the password list. However, the present invention is not limited to this, and the password supply program automatically selects the corresponding password. Anyway.

  In the above-described embodiment, an arbitrary password is registered in the password list. However, the present invention is not limited to this, and a random number is generated by a password supply program and the random number is registered as a password. May be.

  Furthermore, in the above-described embodiment, PIN is used as the user authentication method for the password supply program. However, the present invention is not limited to this, and user authentication may be performed using other various authentication methods. For example, a password supply program and a password list are stored in a so-called stand-alone fingerprint collator that integrates a fingerprint detection unit and a fingerprint collation unit, and a registered fingerprint image registered in the fingerprint collator and a user's fingerprint are stored in advance. When the passwords match, the password input by the password supply program is executed, so that reliable user authentication can be performed. In addition, user authentication may be performed using various biological data such as an iris pattern (iris) of the eyeball.

  Further, in the above-described embodiment, the password supply program is executed on the personal computer 1, but the present invention is not limited to this, and the PC card 40 is provided with a program execution means, and the program execution means supplies the password. The program may be executed.

It is a block diagram which shows the structure of a personal computer. It is a flowchart which shows a password registration procedure. It is a basic diagram which shows a user authentication dialog. It is a basic diagram which shows a PIN input screen. It is a basic diagram which shows a password registration dialog. It is a basic diagram which shows a password list. It is a flowchart which shows a password input procedure. It is a basic diagram which shows a password list dialog.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 1 ... Personal computer, 12 ... CPU, 13 ... RAM, 14 ... Hard disk, 15 ... Graphics processing part, 16 ... PC card slot, 17 ... PCI / ISA bridge, 20 ... Keyboard, 21 ... Floppy disk drive, 22 ... I / O interface, 30 ... PCI bus, 31 ... ISA bus, 40 ... PC card.

Claims (9)

A password storage means for storing one or more passwords;
Program storage means for storing a password supply program for reading out the password corresponding to an application program executed by a predetermined information processing apparatus from the password storage means and supplying the password to the application program. Password storage device. The password storage device according to claim 1, further comprising program execution means for executing the password supply program. The password supply program according to claim 1, wherein the password supply program supplies the password supply program to the information processing apparatus according to a predetermined condition, and executes the password supply program on the information processing apparatus. Storage device. The password storage device according to claim 1, further comprising: a user authentication unit that determines whether the user is a valid user for the password supply program. The password storage device according to claim 4, wherein the user authentication unit performs the user authentication based on the biometric information of the user. The password storage device according to claim 4, wherein the user authentication means performs the user authentication based on a recitation number. A password reading step for reading out the password corresponding to the application program executed in a predetermined information processing device from a password list in which one or a plurality of passwords are stored;
A password supply method comprising: a password supply step of supplying the read password to the application program. A password list that stores one or more passwords;
A password supply program comprising: a password read step for reading the password corresponding to an application program executed by a predetermined information processing apparatus from the password list; and a password supply step for supplying the read password to the application program. Store and
A program storage medium for causing the information processing apparatus to execute the password supply program. An information processing apparatus that executes a predetermined application program;
Password storage means storing one or more passwords, and program storage means storing a password supply program for reading the password corresponding to the application program from the password storage means and supplying the password to the application program A password supply system comprising: a password storage device.

Images