JP2015082206A - Screen generation device, authentication system, and program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To facilitate generation of an authentication screen for authentication and an update screen in association.SOLUTION: An authentication management terminal 10 comprises: a screen information determination unit 11 which determines screen configuration information on the basis of information about processing using authentication; an authentication screen generation unit 12 which generates an authentication screen to be displayed for executing user authentication on the basis of the screen configuration information; a user management screen generation unit 13 which generates a user management screen to be displayed for managing user setting on the basis of the screen configuration information; a screen display control unit 14 which displays the authentication screen and the user management screen; an authentication execution unit 15 which transmits authentication related information input to the authentication screen to an authentication execution server; and a user management execution unit 16 which transmits authentication related information input to the user management screen to the authentication execution server.

Description

  The present invention relates to a screen generation device, an authentication system, and a program.

  As a prior art described in the publication, when authentication information is input from a plurality of interfaces, authentication is performed by a common authentication means regardless of which interface has received authentication information or which authentication method has been received. There are electronic devices that perform processing. (See Patent Document 1)

  Also, as a prior art described in other publications, a fingerprint authentication user management system in which whether a user logs in by ID / password authentication or fingerprint authentication is selected and two authentications can be used together for a predetermined user Exists. (See Patent Document 2)

  Further, as a prior art described in other publications, an authentication means for authenticating a user to an authentication management server connected via a network to a user terminal operated by the user can be incorporated, and the user authentication information The authentication management server can perform registration / change / deletion, and the authentication management server operates multiple authentication means in the same scenario without distinction for each authentication means. There are user management methods that provide (See Patent Document 3)

JP 2004-259266 A JP 2008-123097 A JP 2003-323411 A

  An object of the present invention is to facilitate generation of an authentication screen and an update screen, which are screens related to authentication, in association with each other.

The invention according to claim 1 is information that is associated with a reception unit that receives a start instruction of a process that uses authentication for an operator, and a process that uses the authentication, and is displayed to execute authentication Storage means for storing predetermined screen configuration information, which is common information related to an update screen displayed to update the screen and operator information used in authentication, and the start received by the reception means An acquisition unit that acquires the screen configuration information specified by the instruction from the storage unit, an authentication screen generation unit that generates the authentication screen based on the screen configuration information acquired by the acquisition unit, and the acquisition unit An update screen generation unit that generates the update screen based on the screen configuration information acquired by the screen generation device.
According to a second aspect of the present invention, there is provided a display for controlling the display unit to display the authentication screen generated by the authentication screen generation unit and to display the update screen generated by the update screen generation unit on the display unit. The screen generation apparatus according to claim 1, further comprising a control unit.
According to a third aspect of the present invention, authentication on the operator is performed based on an operator input on the authentication screen displayed by the display control means, and an operation on the update screen displayed by the display control means is performed. The screen generation apparatus according to claim 2, further comprising execution means for executing processing for updating operator information used in authentication based on an input of the operator.
The invention according to claim 4 determines whether or not the operator input on the update screen displayed by the display control means satisfies a condition determined according to the update screen, and 4. The screen generation device according to claim 2, further comprising a determination unit that transmits an error when it is determined that the specified condition is not satisfied.
According to a fifth aspect of the present invention, the screen configuration information is a data group composed of one or more rows having a plurality of common columns, and the data of each row is a combination of a character string and an area for receiving input of character information. The authentication screen generation means acquires a combination of a character string and an area for receiving input of character information from the data of each line of the screen configuration information, and arranges the acquired one or more combinations The authentication screen is generated, and the update screen generation unit acquires the combination from the data of each row of the screen configuration information, and generates the update screen by arranging the acquired one or a plurality of the combinations. The screen generation device according to claim 1, wherein the screen generation device is a screen generation device.
The invention according to claim 6 is information associated with a reception means for accepting an instruction to start a process using authentication for an operator and a process using the authentication, and is displayed for executing the authentication. Storage means for storing predetermined screen configuration information, which is common information related to an update screen displayed to update the screen and operator information used in authentication, and the start received by the reception means An acquisition unit that acquires the screen configuration information specified by the instruction from the storage unit, an authentication screen generation unit that generates the authentication screen based on the screen configuration information acquired by the acquisition unit, and the acquisition unit An update screen generation unit that generates the update screen based on the screen configuration information acquired by the method, and the authentication screen generation unit A display control unit for displaying a certificate screen on a display unit, and controlling the display unit to display the update screen generated by the update screen generation unit; and the authentication screen or the update displayed by the display control unit An input accepting unit that accepts an input by an operator on the screen, and an authentication for the operator based on the input accepted by the input accepting unit on the authentication screen, and accepted by the input accepting unit on the update screen And an execution unit that executes processing for updating operator information used in authentication based on the input.
The invention according to claim 7 is information associated with a function of accepting an instruction to start a process using authentication for an operator and a process using the authentication, which is displayed for executing authentication. From the storage unit that stores predetermined screen configuration information, which is common information related to the update screen displayed for updating the authentication screen and the operator information used in the authentication, according to the received start instruction. A function for acquiring the specified screen configuration information, a function for generating the authentication screen based on the acquired screen configuration information, and a function for generating the update screen based on the acquired screen configuration information. It is a program for realizing.

According to the first aspect of the present invention, it becomes easier to associate and generate an authentication screen and an update screen, which are screens related to authentication, as compared with the case where the present configuration is not provided.
According to invention of Claim 2, the produced | generated authentication screen and update screen can be displayed.
According to invention of Claim 3, the process regarding authentication can be performed based on an operator's input.
According to the invention described in claim 4, it is possible to notify the operator that there is an error in the input content.
According to the fifth aspect of the present invention, inconsistency of contents displayed on the authentication screen and the update screen can be suppressed as compared with the case where the present configuration is not provided.
According to the sixth aspect of the present invention, the authentication screen and the update screen, which are screens related to authentication, are generated in association with each other as compared with the case where the present configuration is not provided, and processing is performed based on the input to the generated screen. Makes it easier to perform.
According to the seventh aspect of the present invention, a function that makes it easier to associate and generate an authentication screen and an update screen, which are screens related to authentication, can be realized by a computer as compared with the case where the present configuration is not provided. .

It is a figure which shows an example of schematic structure of the authentication system which concerns on this Embodiment. It is the block diagram which showed the function structural example of the authentication management terminal which concerns on this Embodiment. It is the figure which showed an example of the hardware constitutions of the authentication management terminal which concerns on this Embodiment. It is the flowchart which showed an example of the process sequence by an authentication management terminal. It is a figure showing an example of screen composition information. (A) (b) is a figure showing an example of composition of a screen template. It is the flowchart which showed an example of the production | generation procedure of an authentication screen. It is the flowchart which showed an example of the production | generation procedure of a new user registration screen. It is the flowchart which showed an example of the production | generation procedure of a password change screen. (A) (b) is a figure for demonstrating an example of the production | generation procedure of an authentication screen. (A) and (b) are the figures for demonstrating an example of the production | generation procedure of a new user registration screen. (A) (b) is a figure for demonstrating an example of the production | generation procedure of a password change screen. It is the flowchart which showed an example of the determination procedure by a user management screen production | generation part. It is a figure which shows an example of the new user registration screen input by the user.

Embodiments of the present invention will be described below in detail with reference to the accompanying drawings.
<Configuration of the entire authentication system>
FIG. 1 is a diagram illustrating an example of a schematic configuration of an authentication system 1 according to the present embodiment. The authentication system 1 according to the present embodiment includes an authentication management terminal 10, an authentication execution server 20, and an input terminal 30. The authentication management terminal 10 and the authentication execution server 20 are connected via the network 50. The network 50 is connected to the network 40, and the input terminal 30 is connected to the network 40. In the following description, the authentication system 1 is configured to include one authentication execution server 20 and one input terminal 30, but is not limited to such a configuration. For example, a configuration may be adopted in which a plurality of input terminals 30 are connected to the network 40 and a plurality of authentication execution servers 20 are connected to the network 50.

  The authentication management terminal 10 includes an authentication screen displayed for executing authentication for a user and a user management screen displayed for managing user settings regarding a Web service or the like to be authenticated by the authentication execution server 20. Is generated. The authentication screen is a screen that accepts input of a user ID assigned to each user and a password set corresponding to the user ID, for example. The user management screen is, for example, a new user registration screen for registering a new user or a password change screen for changing a password, and is displayed for updating user information used for authentication. It is a screen.

  Here, the authentication management terminal 10 generates an authentication screen and a user management screen based on common information regarding the configuration of the authentication screen and the user management screen (hereinafter referred to as screen configuration information). The screen configuration information is created in advance by a user or the like, and is associated with a process that uses authentication, for example, a Web service or application for which authentication is performed. When an instruction input for starting a service to be authenticated or an instruction input for starting the application is performed at the input terminal 30, the authentication management terminal 10 receives the input content from the input terminal 30 and receives it. The screen configuration information is specified based on the input content. Thereafter, the authentication management terminal 10 generates an authentication screen and a user management screen based on the specified screen configuration information.

  Further, for example, if there are a plurality of authentication execution servers 20 and the types of authentication execution servers 20 and the software used for authentication are different, the processing such as authentication performed in the authentication execution server 20 may be different. Therefore, the screen configuration information may be associated with the model of the authentication execution server 20 and the type of software. That is, the authentication management terminal 10 acquires information related to processing using authentication such as a Web service to be started and a model of the authentication execution server 20 from the received input content, and a screen configuration based on the acquired information. Identify information. Hereinafter, information related to processing using authentication, which is used for specifying screen configuration information, will be referred to as specific information.

  Also, the authentication management terminal 10 displays the generated authentication screen and user management screen on a display unit (not shown) of the input terminal 30. When information related to authentication is input from the user on the authentication screen or the user management screen (hereinafter, the information input here is referred to as authentication related information), the authentication related information is received from the input terminal 30. The authentication management terminal 10 performs processing on the received authentication related information as necessary, and then transmits the authentication related information to the authentication execution server 20.

  The authentication execution server 20 executes processes such as user authentication, new user registration, and password change based on the authentication related information received from the authentication management terminal 10. For example, the authentication execution server 20 stores a password file in which the correspondence between the user ID and the password is described, and determines whether the user ID and password included in the authentication related information match those of the password file. The authentication is executed by Further, for example, the authentication execution server 20 executes processing for updating user information used for authentication, such as registration of a new user and password change, by adding or changing the password file.

  The input terminal 30 receives an instruction input for starting a Web service or the like to be authenticated from the user, and transmits input content including specific information to the authentication management terminal 10. Further, the input terminal 30 displays the authentication screen and the user management screen generated by the authentication management terminal 10 on the display unit. The input terminal 30 receives an input of authentication related information from the user, and transmits the authentication related information to the authentication management terminal 10 when, for example, an execution button (not shown) is pressed. In the present embodiment, the input terminal 30 is used as an example of the input receiving unit.

The network 40 is a communication means used for information communication among the authentication management terminal 10, the authentication execution server 20, and the input terminal 30, and is, for example, the Internet or a public line.
The network 50 is a communication means used for information communication between the authentication management terminal 10 and the authentication execution server 20, and is a LAN (Local Area Network), for example.

<Functional configuration of authentication management terminal>
Next, the functional configuration of the authentication management terminal 10 will be described. FIG. 2 is a block diagram illustrating a functional configuration example of the authentication management terminal 10 according to the present embodiment.
The authentication management terminal 10 includes a screen information specifying unit 11 that specifies screen configuration information based on the specific information, an authentication screen generating unit 12 that generates an authentication screen based on the screen configuration information, and a user based on the screen configuration information A user management screen generation unit 13 for generating a management screen; In addition, the authentication management terminal 10 includes a screen display control unit 14 that causes the input terminal 30 to display an authentication screen and a user management screen, and an authentication execution unit 15 that transmits authentication-related information input on the authentication screen to the authentication execution server 20. And a user management execution unit 16 that transmits the authentication related information input on the user management screen to the authentication execution server 20.

  The screen information identification unit 11 as an example of a reception unit, a storage unit, and an acquisition unit acquires specific information from the input content received from the input terminal 30 and specifies screen configuration information corresponding to the acquired specific information. Then, the screen information specifying unit 11 transmits the specified screen configuration information to the authentication screen generating unit 12 and the user management screen generating unit 13.

  The authentication screen generation unit 12 as an example of the authentication screen generation unit generates an authentication screen based on the screen configuration information transmitted from the screen information identification unit 11. Here, the authentication screen generation unit 12 generates an authentication screen by arranging elements included in the screen configuration information with respect to a predetermined screen template (hereinafter referred to as a screen template). Then, the authentication screen generation unit 12 transmits information on the generated authentication screen to the screen display control unit 14.

  The user management screen generation unit 13 as an example of the update screen generation unit and the determination unit generates a user management screen based on the screen configuration information transmitted from the screen information identification unit 11. Here, similarly to the authentication screen generation unit 12, the user management screen generation unit 13 arranges elements included in the screen configuration information with respect to the screen template and generates a user management screen. Then, the user management screen generation unit 13 transmits information on the generated user management screen to the screen display control unit 14.

  Further, the user management screen generation unit 13 determines whether or not the authentication-related information transmitted from the screen display control unit 14 satisfies a condition determined according to the user management screen. The user management screen generation unit 13 transmits the authentication related information to the user management execution unit 16 when determining that the authentication related information satisfies the predetermined condition. On the other hand, the user management screen generation unit 13 transmits an error to the screen display control unit 14 when determining that the authentication related information does not satisfy the predetermined condition.

The screen display control unit 14 as an example of a display control unit displays an authentication screen on the display unit of the input terminal 30 based on the information on the authentication screen transmitted from the authentication screen generation unit 12. Further, the screen display control unit 14 displays the user management screen on the display unit of the input terminal 30 based on the information on the user management screen transmitted from the user management screen generation unit 13.
The screen display control unit 14 receives authentication-related information input by the user on the authentication screen and the user management screen from the input terminal 30. Then, the screen display control unit 14 transmits the authentication related information input on the authentication screen to the authentication execution unit 15. Further, the screen display control unit 14 transmits the authentication related information input on the user management screen to the user management screen generation unit 13.

  The authentication execution unit 15 receives the authentication related information input on the authentication screen from the screen display control unit 14 and transmits the received authentication related information to the authentication execution server 20.

  The user management execution unit 16 receives the authentication related information input on the user management screen from the user management screen generation unit 13 and transmits the received authentication related information to the authentication execution server 20.

<Hardware configuration example>
Next, a hardware configuration in the authentication management terminal 10 will be described. FIG. 3 is a diagram illustrating an example of a hardware configuration of the authentication management terminal 10 according to the present embodiment.
As shown in the figure, the authentication management terminal 10 includes a CPU (Central Processing Unit) 61 that performs arithmetic processing, a main memory 62 that is a storage area, and a magnetic disk device (HDD: Hard Disk Drive) 63. Here, the CPU 61 executes various software such as an OS (Operating System). The main memory 62 is a storage area for storing various software and data used for executing the software. The magnetic disk device 63 includes input data for various software, output data from the various software, and an authentication management terminal shown in FIG. This is a storage area for storing a program for realizing each of the ten functions. Then, this program is loaded into the main memory 62, and processing based on this program is executed by the CPU 61, whereby each function of the authentication management terminal 10 is realized. Further, the authentication management terminal 10 includes a communication I / F 64 for performing communication with the outside, a display mechanism 65 including a video memory and a display, and an input device 66 such as a keyboard and a mouse.

  Specifically, in the authentication management terminal 10, according to an instruction given by the CPU 61, the screen information specifying unit 11, the authentication screen generating unit 12, the user management screen generating unit 13, the screen display control unit 14, and the authentication executing unit in this embodiment. 15. Each function of the user management execution unit 16 is realized.

  In the present embodiment, the screen information specifying unit 11 includes a plug-in that can be expanded without modifying the content of a program body such as a program that controls the processing of the authentication management terminal 10, for example. As realized. A plug-in exists for each screen configuration information, and the authentication screen and the user management screen can be changed or added by exchanging or adding the plug-in. The authentication execution unit 15 and the user management execution unit 16 are also realized as a configuration including a plug-in. Here, the functions of the screen information specifying unit 11, the authentication execution unit 15, and the user management execution unit 16 are realized by the same plug-in for each screen configuration information. That is, the plug-in corresponding to the specific information is specified by the screen information specifying unit 11, and the screen configuration information is provided to the authentication screen generating unit 12 and the user management screen generating unit 13 by the specified plug-in. Thereafter, the functions of the authentication execution unit 15 and the user management execution unit 16 are realized by the same plug-in.

<Description of processing procedure by authentication management terminal>
Next, processing by the authentication management terminal 10 will be described. FIG. 4 is a flowchart illustrating an example of a processing procedure performed by the authentication management terminal 10.
First, the screen information specifying unit 11 acquires specific information from the input terminal 30 (step 101). Next, the screen information identification unit 11 identifies the screen configuration information corresponding to the acquired identification information, and transmits the identified screen configuration information to the authentication screen generation unit 12 and the user management screen generation unit 13 (step 102). Then, the authentication screen generation unit 12 generates an authentication screen based on the transmitted screen configuration information, and the user management screen generation unit 13 generates a user management screen based on the transmitted screen configuration information (step 103). ).

  Next, the authentication screen generation unit 12 transmits the generated authentication screen information to the screen display control unit 14, and the user management screen generation unit 13 transmits the generated user management screen information to the screen display control unit 14. . Then, the screen display control unit 14 transmits the received authentication screen and user management screen information to the input terminal 30, and causes the input terminal 30 to display the authentication screen and the user management screen (step 104). Here, for example, when an authentication screen is first displayed and an operation such as registration of a new user or password change is selected by the user, the screen display control unit 14 transmits information on the user management screen to the input terminal 30. The user management screen is displayed. Further, for example, the screen display control unit 14 transmits information on the authentication screen and the user management screen at a time, and after the authentication screen is displayed, the user management screen is displayed on the input terminal 30 according to the user's operation. Any configuration may be used. Next, when authentication related information is input on the authentication screen or the user management screen, the screen display control unit 14 receives the input authentication related information from the input terminal 30 (step 105).

  Then, the screen display control unit 14 transmits the authentication related information input on the authentication screen to the authentication execution unit 15, and transmits the authentication related information input on the user management screen to the user management screen generation unit 13. Here, the user management screen generation unit 13 determines whether or not the authentication related information satisfies a condition determined according to the user management screen. If the predetermined condition is satisfied, the user management screen generation unit 13 determines the authentication related information as the user. It transmits to the management execution part 16. And the authentication execution part 15 and the user management execution part 16 transmit authentication related information to the authentication execution server 20 (step 106), and this processing flow is complete | finished. If the authentication-related information does not satisfy the predetermined condition, the user management screen generation unit 13 transmits an error to the screen display control unit 14. Thereafter, the screen display control unit 14 transmits an error to the input terminal 30 to display the error on the display unit of the input terminal 30.

<Description of screen configuration information>
Next, screen configuration information will be described. FIG. 5 is a diagram showing an example of the screen configuration information. In this embodiment, a general password authentication in which a user ID and a password are required for authentication will be described as an example. In this case, the screen configuration information is created by setting the contents for a plurality of predetermined items for the user ID and password.

  A plurality of predetermined items are changeable / unchangeable, type, label, minimum number of characters, maximum number of characters, usable characters, keyboard type, description, editing label 1, editing label 2, and editing label 3. The first line (line number: 1) of the screen configuration information shown in FIG. 5 is the contents set for the user ID, and the second line (line number: 2) is the contents set for the password. However, the predetermined items described here are examples, and the items for generating the screen configuration information are not limited to such configurations.

  “Changeability” indicates whether each data (user ID, password) is changeable information. “Yes” indicates that the information can be changed, and “No” indicates that the information cannot be changed. “Type” indicates the type of the text box generated according to each data. This text box is an element arranged in the screen template. “Text” represents a text box that displays the value input by the user as it is (hereinafter referred to as a normal text box), and “masked” hides the value by replacing the input value with another symbol or the like. This represents a text box to be displayed (hereinafter referred to as a hidden text box).

  “Label” is a character string (label) displayed on the screen. This label is an element arranged in the screen template, and is arranged beside the text box, for example, to explain the contents to be input in the text box. “Minimum number of characters” indicates the minimum character string length of the value entered in the text box. “Maximum number of characters” indicates the maximum character string length of the value entered in the text box. “Usable characters” indicates the types of characters that can be used in the text box.

  The “keyboard type” indicates a virtual keyboard displayed on the screen so that input can be performed even when the input terminal 30 does not have a hardware keyboard. “Numeral” represents a virtual keyboard composed of numbers 0 to 9, and “alphanumeric” represents a virtual keyboard composed of English and numbers. The virtual keyboard is displayed when the cursor indicating the character input position is in the text box at the time of input by the user. The “description” indicates a character string that is displayed to inform the user of the rule at the time of input. Similar to the virtual keyboard, this character string is displayed when the cursor is in the text box. The content of the character string informs, for example, the minimum number of characters and usable characters. Therefore, for example, a configuration may be adopted in which a character string of “description” is associated with a value in a column such as “minimum number of characters” or “available characters”.

“Editing label 1”, “Editing label 2”, and “Editing label 3” are character strings (labels at editing) displayed on the screen, similarly to “Label”. Each editing label is an element arranged in the screen template, and is arranged beside the text box, for example, to explain the contents to be input in the text box. Specific conditions for using each editing label will be described later.
As described above, the screen configuration information is a data group including one or more rows having a plurality of common columns, and the data in each row has a combination of a label (or a label during editing) and a text box. .

<Description of screen template>
Next, a screen template used by the authentication screen generation unit 12 to generate an authentication screen and a user management screen will be described. 6A and 6B are diagrams showing an example of the configuration of the screen template. The screen template is provided with an area in which a label is arranged (hereinafter referred to as a label area) and an area in which a text box is arranged (hereinafter referred to as a text box area). In the screen template shown in FIG. 6, four label areas and four text box areas are provided. However, the number of label areas and text box areas is not limited to such a configuration, and the number of areas can be changed.

  The element arranged in the label area is any one of the label, the editing label 1, the editing label 2, and the editing label 3 in the screen configuration information shown in FIG. The element arranged in the text box area is a normal text box or a hidden text box. A text box corresponding to the label is arranged in the text box area next to the label.

  Here, the screen template shown in FIG. 6A is used for the authentication screen and the new user registration screen. In the screen template shown in FIG. 6A, the labels are arranged in order from the top label area. On the other hand, the screen template shown in FIG. 6B is used for the password change screen. On the password change screen, the current password before the change and the new password after the change are input. However, if the area in which each text box is displayed is separated, the user can input easily. Therefore, the screen template shown in FIG. 6B is divided into a current information area and a new information area, and a label and a text box are arranged in one of the information areas depending on the contents. However, the screen template shown in FIG. 6A may be used for the password change screen.

<Description of authentication screen generation procedure>
Next, a procedure in which the authentication screen generation unit 12 generates an authentication screen based on the screen configuration information will be described. FIG. 7 is a flowchart illustrating an example of the procedure for generating the authentication screen.
First, the authentication screen generation unit 12 acquires the information on the top line among the information on the lines not acquired in the screen configuration information (Step 201). Then, the authentication screen generation unit 12 arranges the acquired character string of the label in the label area of the screen template (step 202).

  Next, the authentication screen generation unit 12 determines whether or not the acquired “type” is text (step 203). If the acquired “type” is text (Yes in Step 203), the authentication screen generation unit 12 arranges a normal text box in the text box area next to the label arranged in Step 202 (Step 204). Then, the authentication screen generation unit 12 performs setting so that the “keyboard type” virtual keyboard is displayed when the cursor is in the normal text box.

  On the other hand, when the acquired “type” is not text (No in step 203), the “type” is masked, and the authentication screen generation unit 12 displays the hidden text in the text box area next to the label placed in step 202. A box is arranged (step 205). Then, the authentication screen generation unit 12 performs the setting so that the “keyboard type” virtual keyboard is displayed when the cursor is in the hidden text box.

  Next, the authentication screen generation unit 12 determines whether or not information on all lines in the screen configuration information has been acquired (step 206). If the information of all lines has been acquired (Yes in Step 206), each element (label, text box) of the authentication screen is arranged in the screen template, and this processing flow ends. On the other hand, if there is information on a line that has not yet been acquired (No in Step 206), the process proceeds to Step 201. As described above, the authentication screen generation unit 12 acquires the combination of the label and the text box from the data of each line of the screen configuration information, and generates the authentication screen by arranging the acquired combination in the screen template.

<Description of procedure for generating new user registration screen>
Next, a procedure in which the user management screen generation unit 13 generates a new user registration screen based on the screen configuration information will be described. FIG. 8 is a flowchart showing an example of a procedure for generating a new user registration screen.
First, the user management screen generation unit 13 acquires the information on the top line among the information on the lines not acquired in the screen configuration information (step 301). Then, the user management screen generation unit 13 arranges the acquired label character string in the label area of the screen template (step 302).

  Next, the user management screen generation unit 13 determines whether or not the acquired “type” is text (step 303). When the acquired “type” is text (Yes in step 303), the user management screen generation unit 13 arranges a normal text box in the text box area next to the label arranged in step 302 (step 304). Then, the user management screen generation unit 13 performs the setting so that the “keyboard type” virtual keyboard and the “description” character string are displayed when the cursor is in the normal text box.

  On the other hand, if the acquired “type” is not text (No in step 303), the “type” is masked, and the user management screen generation unit 13 displays the label of the label in which the character string of the editing label 3 is arranged in step 302. Arrange in the lower label area (step 305). Next, the user management screen generation unit 13 arranges a hidden text box in each of the text box area next to the label arranged in step 302 and the side of the editing label 3 arranged in step 305 (step 306). . Then, the user management screen generation unit 13 performs setting so that a virtual keyboard of “keyboard type” and a character string of “description” are displayed when the cursor is in any of these hidden text boxes. .

  Next, the user management screen generation unit 13 determines whether or not information on all lines in the screen configuration information has been acquired (step 307). If the information of all rows has been acquired (Yes in step 307), each element of the new user registration screen is arranged in the screen template, and this processing flow ends. On the other hand, if there is information on a line that has not yet been acquired (No in step 307), the process proceeds to step 301. As described above, similarly to the authentication screen generation unit 12, the user management screen generation unit 13 acquires the combination of the label and the text box from the data of each line of the screen configuration information, and places the acquired combination in the screen template. By doing so, a new user registration screen is generated.

<Description of password change screen generation procedure>
Next, a procedure in which the user management screen generation unit 13 generates a password change screen based on the screen configuration information will be described. FIG. 9 is a flowchart illustrating an example of a procedure for generating a password change screen.
First, the user management screen generation unit 13 acquires the information on the top line among the information on the lines not acquired in the screen configuration information (step 401). Then, the user management screen generation unit 13 determines whether or not the acquired “change possibility” is possible (step 402). If “changeable” is not possible (No in step 402), “changeable” is negative, and the process proceeds to step 401 without executing the process for this line.

  On the other hand, if “changeable” is possible (Yes in step 402), the user management screen generating unit 13 determines whether or not the acquired “type” is text (step 403). When the acquired “type” is text (Yes in step 403), the user management screen generation unit 13 arranges the character string of the editing label 1 in the label area of the current information area of the screen template, and arranges the editing. A normal text box is placed in the text box area next to the hour label 1 (step 404). In addition, the user management screen generation unit 13 arranges the character string of the editing label 2 in the label area of the new information area, and arranges the normal text box in the text box area next to the arranged editing label 2 (step 405). ). Then, the user management screen generation unit 13 performs setting so that a virtual keyboard of “keyboard type” and a character string of “description” are displayed when the cursor is in any of these normal text boxes. .

  On the other hand, when the acquired “type” is not text (No in step 403), the “type” is masked, and the user management screen generation unit 13 sets the character string of the label 1 when editing in the label area of the current information area. And a hidden text box is placed in the text box area next to the placed editing label 1 (step 406). Further, the user management screen generation unit 13 arranges the character string of the editing label 2 in the label area of the new information area, and arranges the hidden text box in the text box area next to the arranged editing label 2 (step 407). ).

  Further, the user management screen generation unit 13 arranges the character string of the editing label 3 in the label area below the editing label 2 in the new information area, and places it in the text box area next to the arranged editing label 3. A hidden text box is placed (step 408). Then, the user management screen generation unit 13 performs setting so that the virtual keyboard of “keyboard type” and the character string of “description” are displayed when the cursor is in any of these three hidden text boxes. Do.

  Next, after the text box is arranged in step 405 or step 408, the user management screen generation unit 13 determines whether or not information on all lines in the screen configuration information has been acquired (step 409). If the information of all lines has been acquired (Yes in step 409), each element of the password change screen is arranged in the screen template, and this processing flow ends. On the other hand, if there is information on a line that has not yet been acquired (No in Step 409), the process proceeds to Step 401. As described above, the user management screen generation unit 13 acquires the combination of the label and the text box from the data of each line of the screen configuration information, and generates the password change screen by arranging the acquired combination in the screen template. To do.

<Example of authentication screen>
Next, a procedure for generating an authentication screen by the authentication screen generation unit 12 will be described with a specific example. FIGS. 10A and 10B are diagrams for explaining an example of the procedure for generating the authentication screen. Here, it is assumed that the authentication screen generation unit 12 generates an authentication screen using the screen configuration information shown in FIG. The steps shown below correspond to the steps in FIG.

  The authentication screen generation unit 12 acquires information on the first line of the screen configuration information, arranges a character string of “user ID” as a label in a label area, and arranges a normal text box in a text box area next to the character string. (Steps 201-204). FIG. 10A is a diagram illustrating a screen template at the time when the processing for the information on the first line by the authentication screen generation unit 12 is completed.

  Next, the authentication screen generation unit 12 obtains information on the second line of the screen configuration information, arranges a character string of “password” as a label in the label area, and places a hidden text box in the text box area next to it. Arrange (steps 201 to 205). FIG. 10B is a diagram illustrating a screen template at the time when the processing for the information on the second line by the authentication screen generation unit 12 is completed. And since the information of all the lines has been acquired (Yes in Step 206), the process for generating the authentication screen ends. That is, the screen template shown in FIG. 10B is displayed as an authentication screen generated using the screen configuration information shown in FIG.

  Here, although not shown, if the cursor is in the normal text box or the hidden text box when inputting to the generated authentication screen, a “keyboard type” virtual keyboard is displayed. In addition, the authentication screen is a screen that is displayed first when the service is started. For example, displaying an input rule may give a password analysis hint to an attacker to the service. Therefore, the contents of the “description” of the screen configuration information are not displayed on the authentication screen.

<Example of new user registration screen>
Next, a procedure for generating a new user registration screen by the user management screen generation unit 13 will be described with a specific example. FIGS. 11A and 11B are diagrams for explaining an example of a procedure for generating a new user registration screen. Here, it is assumed that the user management screen generation unit 13 generates a new user registration screen using the screen configuration information shown in FIG. The steps shown below correspond to the steps in FIG.

  The user management screen generation unit 13 obtains information on the first line of the screen configuration information, arranges a character string of “user ID” as a label in the label area, and arranges a normal text box in the text box area next to it. (Steps 301 to 304). FIG. 11A is a diagram illustrating a screen template at the time when the process for the information on the first line by the user management screen generation unit 13 is completed.

  Next, the user management screen generation unit 13 obtains information on the second line of the screen configuration information, arranges a character string of “password” as a label in the label area, and also displays “password password” as the editing label 3. The character string “confirm” is arranged in the label area (steps 301 to 305). Then, the user management screen generation unit 13 arranges a hidden text box in each of the text box area next to the character string “password” and the text box area next to the character string “password confirmation” (step S31). 306). FIG. 11B is a diagram illustrating a screen template at the time when the process for the information on the second line by the user management screen generation unit 13 is completed. And since the information of all the lines has been acquired (Yes in Step 307), the process for generating the new user registration screen is ended. That is, the screen template shown in FIG. 11B is displayed as a new user registration screen generated using the screen configuration information shown in FIG.

  Here, if the cursor is in the normal text box at the time of input to the generated new user registration screen, as shown in FIG. 11B, “1” is an “description” corresponding to “user ID”. Please enter at least 128 characters. "Is displayed. Although not shown, when the cursor is in two hidden text boxes, a character string of “description” corresponding to “password” is also displayed. Furthermore, although not shown, when the cursor is in a normal text box or a hidden text box, a “keyboard type” virtual keyboard is also displayed.

<Example of password change screen>
Next, a procedure for generating a password change screen by the user management screen generation unit 13 will be described with a specific example. 12A and 12B are diagrams for explaining an example of a procedure for generating a password change screen. Here, the user management screen generation unit 13 generates a password change screen using the screen configuration information shown in FIG. The steps shown below correspond to the steps in FIG.

  The user management screen generation unit 13 acquires information on the first line of the screen configuration information (step 401), and determines whether or not “changeable” is possible, but because it is not (No in step 402). ) The process on the first line ends. FIG. 12A is a diagram illustrating a screen template at the time when the process for the information on the first line by the user management screen generation unit 13 is completed. In the process of the first line, no element is arranged in the screen template.

  Next, information on the second line of the screen configuration information is acquired (step 401). Since “changeable” on the second line is possible (Yes in step 402) and “type” is masked (No in step 403), the user management screen generation unit 13 displays “current” The character string of “password” is arranged in the label area of the current information area, and the hidden text box is arranged in the text box area next to the character string (step 406).

  In addition, the user management screen generation unit 13 arranges the character string of “new password” as the editing label 2 in the label area of the new information area, and arranges the hidden text box in the text box area next to it (step 407). ). Further, the user management screen generation unit 13 arranges the character string “confirm password” as the editing label 3 in the label area of the new information area, and arranges the hidden text box in the text box area next to the character string (step 408). FIG. 12B is a diagram illustrating a screen template at the time when the process for the information on the second line by the user management screen generation unit 13 is completed. And since the information of all the lines has been acquired (Yes in Step 409), the process for generating the password change screen ends. That is, the screen template shown in FIG. 12B is displayed as a password change screen generated using the screen configuration information shown in FIG.

  Although not shown, if the cursor is in a normal text box or a hidden text box when entering the generated password change screen, a “keyboard type” virtual keyboard and a “description” character string are displayed. .

<Description of determination procedure for input contents on user management screen>
Next, the determination process performed by the user management screen generation unit 13 for the input contents of the user management screen such as the new user registration screen and the password change screen will be described. FIG. 13 is a flowchart illustrating an example of a determination procedure performed by the user management screen generation unit 13. Here, as an initial state, it is assumed that the user management screen generation unit 13 has received authentication related information from the screen display control unit 14.

  First, the user management screen generation unit 13 acquires the information on the top line among the information on the lines not acquired in the screen configuration information (step 501). Next, the user management screen generation unit 13 determines whether or not the acquired “type” is text (step 502). When the acquired “type” is text (Yes in step 502), the user management screen generation unit 13 acquires the value input in the normal text box arranged in the process for the acquired line from the authentication related information. (Step 503).

  Next, the user management screen generation unit 13 determines whether or not the number of characters in the acquired input value of the normal text box is within the range of the minimum number of characters and the maximum number of characters in the line information acquired in Step 501 (Step S1). 504). When the number of characters is out of the range (No in Step 504), the user management screen generation unit 13 transmits an error to the screen display control unit 14 (Step 505), and this processing flow ends. On the other hand, if the number of characters is within the range (Yes in step 504), the user management screen generation unit 13 then determines that the input value of the normal text box is a character other than the usable characters in the line information acquired in step 501. (Step 506). When characters other than usable characters are included (Yes in step 506), the process proceeds to step 505. On the other hand, when characters other than usable characters are not included (No in step 506), the input value of the normal text box satisfies the predetermined condition, and the process proceeds to step 512 described later.

  Further, when a negative determination (No) is made in step 502, the acquired “type” is masked, and the user management screen generation unit 13 sets the corresponding two hidden texts arranged in the process for the acquired line. The value input in the box is acquired from the authentication related information (step 507). For example, on the new user registration screen shown in FIG. 11, the user management screen generation unit 13 acquires values of a “password” hidden text box and a corresponding “password confirmation” hidden text box. Further, for example, in the password change screen shown in FIG. 12, the user management screen generation unit 13 acquires values of the “new password” hidden text box and the corresponding “password confirmation” hidden text box.

  Next, the user management screen generation unit 13 determines whether or not the input values of the two hidden text boxes match (step 508). When the input values do not match (No in Step 508), the user management screen generation unit 13 transmits an error to the screen display control unit 14 (Step 509), and this processing flow ends. On the other hand, if the input values match (Yes in step 508), the user management screen generation unit 13 then determines that the number of characters in the input value of the hidden text box is the minimum number of characters and the maximum number of characters in the line information acquired in step 501. It is determined whether it is within the range (step 510).

  If the number of characters is out of range (No in step 510), the process proceeds to step 509. On the other hand, when the number of characters is within the range (Yes in Step 510), the user management screen generation unit 13 then determines that the input value of the hidden text box is a character other than the usable characters in the line information acquired in Step 501. (Step 511). When characters other than usable characters are included (Yes in step 511), the process proceeds to step 509. On the other hand, when characters other than usable characters are not included (No in step 511), the input value of the hidden text box satisfies the predetermined condition, and the process proceeds to step 512 described later.

  Next, in step 512, the user management screen generation unit 13 determines whether or not information on all lines in the screen configuration information has been acquired. If there is information on a line that has not yet been acquired (No in step 512), the process proceeds to step 501. On the other hand, if the information of all lines has been acquired (Yes in step 512), the user management screen generation unit 13 transmits the values input in the normal text box and the hidden text box to the user management execution unit 16 ( Step 513), this processing flow ends. Here, the user management screen generation unit 13 may transmit one value input in the corresponding two hidden text boxes.

  Thereafter, the user management execution unit 16 transmits the received value, that is, the authentication-related information to the authentication execution server 20, so that the authentication execution server 20 performs processing such as registration of a new user and password change. . Further, when an error is transmitted to the screen display control unit 14 in step 505 and step 509, the screen display control unit 14 transmits the received error to the input terminal 30, and the error is displayed on the display unit of the input terminal 30. Is displayed.

<Example of judgment processing for input contents of user management screen>
Next, the determination process by the user management screen generation unit 13 will be described with a specific example. FIG. 14 is a diagram illustrating an example of a new user registration screen in which an input is performed by the user. The new user registration screen shown in FIG. 14 is input from the new user registration screen shown in FIG. Here, the determination process performed by the user management screen generation unit 13 for the input content of FIG. 14 will be described. The steps shown below correspond to the steps in FIG.

  The user management screen generation unit 13 acquires information on the first line of the screen configuration information, and acquires the value input in the normal text box of “user ID” (steps 501 to 503). The character “taro1” input to the normal text box is within the range of the minimum number of characters (1) and the maximum number of characters (128) (Yes in step 504), and does not include characters other than alphanumeric characters (in step 506). No), the user management screen generation unit 13 acquires information on the second line of the screen configuration information (step 501).

  Next, the user management screen generation unit 13 acquires the values of the “password” hidden text box and the corresponding “password confirmation” hidden text box (step 507). Here, the values entered in the two hidden text boxes match (Yes in step 508), are within the minimum number of characters (8) and the maximum number of characters (32) (Yes in step 510), and are alphanumeric. If no character other than, +, <,>, = is included (No in step 511), the process proceeds to step 512. Then, the user management screen generation unit 13 transmits the user ID “taro1” and the password value to the user management execution unit 16 (step 513).

  Also, for example, if the number of characters is out of range in step 504, an error message “Invalid number of characters in user ID” is transmitted to the input terminal 30 using the character string “user ID” as a label. Is done. Further, for example, when a character other than the usable characters is included in Step 506, an error message “A bad character is included in the user ID” is transmitted to the input terminal 30.

  In addition, for example, if the values entered in the two hidden text boxes in step 508 do not match, the message “Password input does not match” using the character string “password” as the label. Is transmitted to the input terminal 30. For example, if the number of characters is out of the range in step 510, an error message “Invalid number of characters in password” is transmitted to the input terminal 30. Further, for example, when a character other than usable characters is included in step 511, an error message “Invalid character is included in password” is transmitted to the input terminal 30.

  In the above description, the authentication management terminal 10 and the authentication execution server 20 are different devices. However, the authentication management terminal 10 may be configured to realize the function of the authentication execution server 20. In this case, the authentication execution unit 15 executes authentication for the user using, for example, a password file stored in the magnetic disk device 63. In addition, the user management execution unit 16 executes processing for updating user information used for authentication, such as registration of a new user, password change, and the like by adding or changing the password file, for example. Here, since the processing of the authentication execution unit 15 and the user management execution unit 16 differs depending on whether the authentication execution server 20 or the authentication management terminal 10 executes authentication, different plug-ins are used in the two authentication procedures. Therefore, the screen configuration information may be different, and the authentication procedure information may be handled as specific information. In the present embodiment, an authentication execution unit 15, a user management execution unit 16, and an authentication execution server 20 are used as an example of execution means.

  As described above, the authentication management terminal 10 generates each screen using the screen configuration information common to the authentication screen and the user management screen based on the specific information acquired from the input terminal 30. In addition, by exchanging or adding plug-ins, the functions of the screen information specifying unit 11, the authentication execution unit 15, and the user management execution unit 16 are not affected without affecting the program body that controls the processing of the authentication management terminal 10. Changes and additions are made. Therefore, for example, as compared with a configuration in which only the authentication screen can be generated or changed, it is easy to generate the authentication screen and the user management screen in association with each other. In addition, it is easy to change the authentication screen and the user management screen, such as increasing the number of passwords used for authentication and changing the character types that can be used for passwords.

  Furthermore, by using the screen configuration information common to the authentication screen and the user management screen, for example, the content displayed on the screen is compared with the configuration in which the screen is generated using different information on the authentication screen and the user management screen. Inconsistency is suppressed, and the burden on the user who performs screen generation processing is reduced. Further, for example, when the authentication execution server 20 generates an authentication screen or a user management screen, the screen may be different for each user because each user generates a screen, but the authentication management terminal 10 As long as the screen configuration information is the same, the same screen is generated.

  Further, in the present embodiment, the authentication management terminal 10 is configured to generate the authentication screen and the user management screen every time the specific information is acquired from the input terminal 30, but is not limited to such a configuration. For example, the authentication management terminal 10 stores the generated authentication screen and the user management screen, and stores the generated authentication information and the user management screen without generating them again if the acquired specific information has already been stored. You may make it the structure which displays a screen.

  In the present embodiment, the authentication execution server 20 is connected to the input terminal 30 via the network 40. However, for example, the authentication execution server 20 is connected to the input terminal 30 via the LAN or the like without passing through the network 40. It may be configured as described above. Similarly, in the present embodiment, the authentication management terminal 10 is connected to the input terminal 30 via the network 40. For example, the input terminal 30 is not connected via the network 40 but via the LAN or the like. It may be configured to be connected to. Further, the authentication management terminal 10 and the authentication execution server 20 are connected via the network 50, but may be configured to be connected via the network 40.

For example, in the configuration shown in FIG. 1, a service provider that provides a service owns the authentication management terminal 10 and the authentication execution server 20, and a user who uses the service uses the input terminal 30 to perform a service. A form of using is conceivable. In such a case, personal information such as the user ID and password of the user is managed by the service provider.
On the other hand, for example, if the authentication execution server 20 and the input terminal 30 are connected by a network such as a LAN and the authentication management terminal 10 is further connected via the network 40, the user using the service is authenticated. A mode in which the execution server 20 and the input terminal 30 are owned and the service provider owns the authentication management terminal 10 is conceivable. In such a case, the user himself manages personal information such as a user ID and a password.

  Furthermore, in the present embodiment, the authentication management terminal 10 generates an authentication screen, a new user registration screen, and a password change screen, but these screens are not limited to the above-described configuration. For example, it may be configured to accept input of two passwords on the authentication screen, or may be configured to accept input of a mail address on the new user registration screen.

  In this embodiment, the authentication management terminal 10 generates three types of screens, that is, an authentication screen, a new user registration screen, and a password change screen. However, the present invention is not limited to such a configuration. For example, the authentication management terminal 10 may be configured to generate a user deletion screen for deleting registered user settings as the user management screen.

<Description of the program>
The processing performed by the authentication management terminal 10 in the present embodiment described above is prepared as a program such as application software, for example.

  Therefore, the process performed by the authentication management terminal 10 is information associated with the function of accepting the start instruction of the process using authentication for the operator and the process using authentication to the computer. Start instruction received from a storage unit that stores predetermined screen configuration information that is common information related to an authentication screen to be displayed and an update screen to be displayed in order to update operator information used in authentication In order to realize the function of acquiring the screen configuration information specified by the function, the function of generating the authentication screen based on the acquired screen configuration information, and the function of generating the update screen based on the acquired screen configuration information It can also be understood as a program.

  The program for realizing the embodiment of the present invention can be provided not only by a communication means but also by storing it in a recording medium such as a CD-ROM.

DESCRIPTION OF SYMBOLS 1 ... Authentication system, 10 ... Authentication management terminal, 11 ... Screen information specific | specification part, 12 ... Authentication screen generation part, 13 ... User management screen generation part, 14 ... Screen display control part, 15 ... Authentication execution part, 16 ... User management Execution unit, 20 ... authentication execution server, 30 ... input terminal

Claims (7)

Accepting means for accepting an instruction to start processing using authentication for the operator;
Information associated with the process using the authentication, and common information regarding an authentication screen displayed for executing authentication and an update screen displayed for updating operator information used for authentication Storage means for storing predetermined screen configuration information,
An acquisition unit that acquires the screen configuration information specified by the start instruction received by the reception unit from the storage unit;
Authentication screen generation means for generating the authentication screen based on the screen configuration information acquired by the acquisition means;
A screen generation apparatus comprising: an update screen generation unit configured to generate the update screen based on the screen configuration information acquired by the acquisition unit. The apparatus further comprises display control means for controlling the display unit to display the authentication screen generated by the authentication screen generation unit and display the update screen generated by the update screen generation unit on the display unit. The screen generation device according to claim 1, wherein: Based on the operator's input on the authentication screen displayed by the display control means, authentication for the operator is performed, on the basis of the operator input on the update screen displayed by the display control means, The screen generating apparatus according to claim 2, further comprising execution means for executing processing for updating operator information used in authentication. In response to an operator input on the update screen displayed by the display control means, it is determined whether or not a condition determined in accordance with the update screen is satisfied, and the determined condition is not satisfied The screen generation apparatus according to claim 2, further comprising a determination unit that transmits an error when the determination is made. The screen configuration information is a data group composed of one or a plurality of rows having a plurality of common columns, and each row of data has a combination of a character string and a region for receiving input of character information,
The authentication screen generation means acquires a combination of a character string and an area for receiving input of character information from the data of each line of the screen configuration information, and arranges the acquired one or a plurality of the combinations to display the authentication screen. Generate
The update screen generation unit acquires the combination from the data of each row of the screen configuration information, and generates the update screen by arranging the acquired one or a plurality of the combinations. 5. The screen generation apparatus according to any one of 4. Accepting means for accepting an instruction to start processing using authentication for the operator;
Information associated with the process using the authentication, and common information regarding an authentication screen displayed for executing authentication and an update screen displayed for updating operator information used for authentication Storage means for storing predetermined screen configuration information,
An acquisition unit that acquires the screen configuration information specified by the start instruction received by the reception unit from the storage unit;
Authentication screen generation means for generating the authentication screen based on the screen configuration information acquired by the acquisition means;
Update screen generation means for generating the update screen based on the screen configuration information acquired by the acquisition means;
Display control means for controlling the display unit to display the authentication screen generated by the authentication screen generation unit, and to display the update screen generated by the update screen generation unit on the display unit;
In the authentication screen or the update screen displayed by the display control unit, an input receiving unit that receives an input by an operator;
An operator used for authentication based on the input accepted by the input accepting means on the authentication screen, based on the input accepted by the input accepting means on the update screen. An authentication system comprising execution means for executing processing for updating the information. On the computer,
A function of accepting an instruction to start processing using authentication for the operator;
Information associated with the process using the authentication, and common information regarding an authentication screen displayed for executing authentication and an update screen displayed for updating operator information used for authentication A function of acquiring the screen configuration information specified by the received start instruction from a storage unit that stores predetermined screen configuration information.
A function of generating the authentication screen based on the acquired screen configuration information;
A program for realizing the function of generating the update screen based on the acquired screen configuration information.

Images