JP2015153033A - Password story generation device and program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide information for facilitating understand of password information having high safety in security.SOLUTION: A password story generation device comprises: a story template storage part for storing story template information in which a predetermined noun in the story information is substituted to category kind information; a word storage part for storing a word which is associated with an alphabetical letter for every category kind of the noun; a password story generation part for associating the category kind information in the story template information and the letter in the password information based on the story template information and password information, acquiring the word associated with the corresponding to the category kind information, by referring to plural words stored in the word storage part, and generating password story information in which the category kind information is substituted to the acquired word; and an information output part for outputting the password story information.

Description

  The present invention relates to a password story generation device and a password story generation program.

  In the service on the network, the server device identifies the user by performing user authentication using the user ID and password input by the user. In general, in order to increase security safety, it is important to increase the number of characters in a password to some extent and to make a character string that cannot be easily conceived by a third party. However, complicating a password places a burden on a legitimate user to remember the complicated character string.

  2. Description of the Related Art Conventionally, a technique for permitting login to a service even when the user forgets the password in user authentication on the service is known (see, for example, Patent Document 1). In the technique described in Patent Document 1, a plurality of keywords that are clearly stored by the user are registered in advance, and the system presents about three keywords together with dummy keywords to allow the user to select and answer correctly. Only log in to the site.

Japanese Patent Laid-Open No. 2004-234055

However, there is a possibility that a character string having a relatively short character length and known to a third party is set as a keyword. Even if such keywords are used in combination, they are less secure in terms of security than keywords randomly generated by the system.
The present invention has been made in view of the above circumstances, and an object of the present invention is to provide a password story generation device and a password story generation program that provide information for making it easy to remember password information with high security safety. And

  [1] In order to solve the above-described problem, a password story generation device according to an aspect of the present invention stores story template information in which a predetermined noun in story information is replaced with category type information representing the category type of the noun. A story template storage unit, a word storage unit that stores words associated with alphabetic characters for each category type of noun, a password acquisition unit that captures password information composed of alphabetic characters and numbers, and the story template Based on the story template information stored in the storage unit and the password information captured by the password acquisition unit, the category type information in the story template information is associated with the characters in the password information, and the category type A word associated with a character corresponding to information is acquired by referring to the plurality of words stored in the word storage unit, and password story information is generated by replacing the category type information with the acquired word A password story generation unit; and an information output unit that outputs the password story information generated by the password story generation unit.

  [2] In the password story generation device according to [1] above, the story template storage unit stores title information representing a title of the story information in association with the story template information, and the information output unit stores the password The title information corresponding to the story information is read from the story template storage unit, and the password information, the password story information, and the title information are output in association with each other.

  [3] In order to solve the above-described problem, a password story generation program according to one aspect of the present invention is a story template in which a computer replaces a predetermined noun in the story information with category type information indicating the category type of the noun. Story template storage means for storing information, word storage means for storing words associated with alphabetic characters for each category category of nouns, password acquisition means for taking in password information composed of alphabetic characters and numbers, the story template Based on the story template information stored in the storage means and the password information taken in by the password acquisition means, the category type information in the story template information and the characters in the password information, Correspondence, a word associated with a character corresponding to the category type information is obtained by referring to the plurality of words stored in the word storage means, and the category type information is replaced with the obtained word It functions as password story generation means for generating password story information, and information output means for outputting the password story information generated by the password story generation means.

  ADVANTAGE OF THE INVENTION According to this invention, the information for making easy to memorize password information with high security safety | security can be provided.

It is a block diagram which shows the example of a function structure of the password issuing apparatus to which the password story production | generation apparatus which is embodiment of this invention is applied. It is a figure which shows the specific example of story information and the story template information produced | generated based on this story information. It is a figure which shows the specific example of the category identification corresponding | compatible information corresponding to story information and story template information. It is a figure which shows the example of a data structure of the template information memorize | stored in a story template memory | storage part. It is a figure which shows the example of a data structure of the word information memorize | stored in a word memory | storage part. It is a figure for demonstrating the process in which a password story production | generation part produces | generates password story information from story template information and password information. It is an example of the flowchart which shows the process sequence of a password issuing apparatus. It is a figure which shows the example which the terminal which received the password information, password story information, and title information which the information output part output displayed these information on the display apparatus connected to the own terminal. It is a figure which shows the example of the login screen in the case of logging in to a certain service using the password information which the password issuing apparatus issued.

Hereinafter, embodiments for carrying out the present invention will be described in detail with reference to the drawings.
FIG. 1 is a block diagram showing an example of a functional configuration of a password issuing device to which a password story generating device according to an embodiment of the present invention is applied. As illustrated in FIG. 1, the password issuing device 1 includes a password generation unit 10 and a password story generation device 20.

  When the password generation unit 10 receives password issuance request information transmitted from a user terminal (not shown), for example, the password generation unit 10 generates password information including a character string combining alphabetic characters and numbers. The password issuance request information is information for requesting issuance of password information necessary for the terminal to log in to a certain service on the network. For example, the password generation unit 10 generates password information of a predetermined number of characters by combining 26 alphabetic characters and 10 numbers in the ASCII code (ASCII code) based on random numbers. The greater the number of characters (including numbers) in the password information, the higher the security safety. In the present embodiment, the number of characters in the password information will be described as 8 characters, for example. The password generation unit 10 supplies the generated password information to the password story generation device 20.

  The password generation unit 10 may generate password information based on the content of the password issue request information. Further, the password generation unit 10 may use the content of the password issuance request information itself as password information. Further, the password generation unit 10 may use information transmitted by the terminal along with the password issue request information as password information.

  The password story generation device 20 takes in password information supplied by the password generation unit 10 and generates password story information for the password information. The password story information is information including a word and a number corresponding to each character of the password information. The password story information is information that is referred to when the user remembers the password information, and has, for example, contents based on a well-known story. Known stories are, for example, stories, fairy tales, folk tales, rakugo and the like. A specific example of the password story information will be described later. The password story generation device 20 transmits the password information and the password story information to the terminal that is the transmission source of the password issue request information.

  As shown in FIG. 1, the password story generation device 20 includes a story template storage unit 21, a word storage unit 22, a password acquisition unit 23, a password story generation unit 24, and an information output unit 25.

  The story template storage unit 21 stores one or a plurality of template information. The template information includes, for example, title information, story template information, and category identification correspondence information in association with each other. The title information is information that represents the title of the story information that represents a certain story. The story template information is information in which a predetermined noun in the story information is replaced with category type information representing the category type of the noun. The category identification correspondence information is information in which the replaced noun is associated with the category identification information of this noun.

The word storage unit 22 stores word information including a plurality of words associated with alphabetic characters (for example, lowercase letters) for each category type of noun.
The password acquisition unit 23 takes in the password information supplied from the password generation unit 10 and supplies the password information to the password story generation unit 24.

  The password story generation unit 24 takes in the password information supplied by the password acquisition unit 23 and reads the template information from the story template storage unit 21. When a plurality of pieces of template information are stored in the story template storage unit 21, the password story generation unit 24 receives, for example, selection by the user and reads one template information from the story template storage unit 21.

Based on the story template information and the password information, the password story generation unit 24 associates the category type information in the story template information with the characters in the password information, and sets the words associated with the characters corresponding to the category type information, Password story information is generated by referring to a plurality of words in the word information stored in the word storage unit 22, and the category type information is replaced with the acquired words. The process for generating password story information by the password story generating unit 24 will be described later.
The password story generation unit 24 supplies password information and password story information to the information output unit 25.

The information output unit 25 takes in the password information and the password story information supplied by the password story generation unit 24, associates the password information and the password story information, and transmits them to the terminal that is the transmission source of the password issue request information. .
The information output unit 25 may transmit only password story information to the terminal. Further, the information output unit 25 may read the title information corresponding to the password story information from the story template storage unit 21 and associate the password information, the password story information, and the title information with each other, and transmit them to the terminal.

  FIG. 2 is a diagram illustrating a specific example of the story information and the story template information generated based on the story information. In the example of the figure, the story information has a part of the content of the Japanese fairy tale “Momotaro”. The story template information corresponding to the story information is information in which nouns (subjects, places, things, numbers) in the story information are replaced with category type information indicating the category type of the noun. Specifically, in the story template information shown in the figure, “Momotaro” (subject) in the story information is category identification information [S1], “mountain” (location) is [P1], and “dog” (subject) is [S2]. ], “1” (number) is [N1], “Onigashima” (location) is [P2], “Oni” (thing) is [T1], “Kidango” (thing) is [T2], “1” “(Number)” is replaced with [N2], “forest” (place) is replaced with [P3], “monkey” (subject) is replaced with [S3], and “1” (number) is replaced with [N3].

  The story template information may be generated from the story information by an information processing device such as a computer according to a user operation, or automatically generated by the information processing device executing syntax analysis processing. Also good.

  FIG. 3 is a diagram illustrating a specific example of the category identification correspondence information corresponding to the story information and the story template information. The category identification correspondence information in FIG. 6 is information in which the category identification information in the story template information in FIG. 2 is associated with predetermined nouns (subject, place, thing, number) in the story information in FIG.

  FIG. 4 is a diagram illustrating an example of a data configuration of template information stored in the story template storage unit 21. As shown in the figure, the template information includes title information, story template information, and category identification correspondence information in association with each other.

  FIG. 5 is a diagram illustrating an example of a data configuration of word information stored in the word storage unit 22. The word information shown in the figure is composed of words that are initial letters when expressed in Roman letters or English for each noun category type (subject, place, and thing).

Next, password story information generation processing executed by the password story generation unit 24 will be described.
FIG. 6 is a diagram for explaining a process in which the password story generation unit 24 generates password story information from the story template information and the password information. The password story generating unit 24 reads the story template information illustrated in the figure from the story template storage unit 21, and takes in the password information “gdkhs3bu” illustrated in the figure from the password acquisition unit 23.

  Next, the password story generation unit 24 searches and extracts the category identification information from the beginning of the story template information without duplication, and generates a slot string that is a one-dimensional array of the category identification information. According to the example of FIG. 6, the password story generation unit 24, based on the story template information, the slot sequence [S1] [P1] [S2] [N1] [P2] [T1] [T2] [N2] [P3 ] [S3] [N3] are generated. However, the slot sequence is divided in units of constituent elements (category identification information).

  Next, the password story generating unit 24 generates a password slot correspondence table by associating the password information with the slot string for each character (including numbers) of the password information. However, if the character in the password information is a number while the slot category in the slot row is other than a number, or if the character in the password information is other than a number and the slot category in the slot row is a number, FIG. As shown in FIG. 6, the slots whose character categories do not match are excluded (skip), and the characters in the password information are associated with the slots in the slot row.

  Specifically, in the example of FIG. 6, since the categories of the character “h” in the password information and the category identification information [N1] in the slot column do not match, the password story generation unit 24 skips the category identification information [N1]. The next category identification information [P2] is associated with the letter “h”. In addition, since the category does not match between the number “3” in the password information and the category identification information [T2] in the slot string, the password story generation unit 24 skips the category identification information [T2] and generates the next category identification information [N2 ] And the number “3” are associated with each other.

  Next, based on the password slot correspondence table, the word information stored in the word storage unit 22, and the category identification correspondence information stored in the story template storage unit 21, the password story generation unit 24 creates a password word correspondence table. Is generated.

  Specifically, the password story generation unit 24 extracts a word from the word storage unit 22 according to a pair of alphabetic characters and category identification information in the password slot correspondence table, associates the word with the alphabetic character, and creates a password word Store in the correspondence table. Further, the password story generating unit 24 stores the same number as the number in the password word correspondence table in association with the number according to the pair of the number and category identification information in the password slot correspondence table. In addition, the password story generation unit 24 associates, for example, “null” (null) with the password according to items (for example, [N1], [N3]) having only numeric category identification information in the password slot correspondence table. Store in the word correspondence table. Further, the password story generation unit 24 generates a noun from the category identification information correspondence information (in the example of FIG. 3, “T” in accordance with an item having only category identification information other than numerals in the password slot correspondence table (for example, [T2]). Kibidango ") is extracted, and this noun is associated and stored in the password word correspondence table.

  Next, the password story generation unit 24 generates password story information by replacing the category identification information in the story template information with words (including numbers) in the password word correspondence table. However, for the category identification information corresponding to “null” in the password word correspondence table, the category identification information and the classifier attached to the category identification information are deleted.

  Specifically, the password story generation unit 24 applies the password word correspondence table shown in FIG. 6, for example, when “[S1]” of the story template information goes frequently, the password story generation unit 24 comes on a large [P1]. "..." is converted to "[Gorilla], when you go all the way, it's on a big [dam] ...".

  In the password story information of FIG. 6, a double strikethrough is added to “[N1] strike” of “[Crab] came over [N1]”. This double strikethrough Is provided for convenience of explanation, and in actuality, “[N1] pitch” (double strikethrough) is deleted. The same applies to “[N3] pitch” (double strikethrough) in FIG.

  According to Fig. 6, the fairy tale “Momotaro goes to the mountain, meets the dog, tells Onigashima to go to the demon's conquest, raises one dango, and makes the dog a follower.” Based on “Momotaro” and the randomly generated password information “gdkhs3bu”, the password story generation device 20 tells the gorilla to go to the dam and meet the crab, and to go to Hawaii to conquer sharks. Create a password story with the content "...".

Next, the operation of the password issuing device 1 in the embodiment of the present invention will be described.
FIG. 7 is an example of a flowchart showing a processing procedure of the password issuing device 1.
In step S1, the password generation unit 10 receives password issuance request information transmitted from the user's terminal.
Next, in step S <b> 2, the password generation unit 10 generates password information including a character string combining, for example, alphabetic characters and numbers, and supplies the password information to the password story generation device 20. Then, the password acquisition unit 23 of the password story generation device 20 takes in the password information supplied by the password generation unit 10 and supplies this password information to the password story generation unit 24.

Next, in step S <b> 3, the password story generation unit 24 takes in the password information supplied from the password acquisition unit 23 and reads the template information stored in the story template storage unit 21.
Next, in step S4, the password story generation unit 24 searches the category identification information from the beginning of the story template information and extracts it without duplication, and generates a slot string that is an array of these category identification information. Next, the password story generating unit 24 generates a password slot correspondence table by associating the password information with the slot string for each character (including numbers) of the password information.

Next, in step S5, the password story generating unit 24, based on the password slot correspondence table, the word information stored in the word storage unit 22, and the category identification correspondence information stored in the story template storage unit 21, Generate password word correspondence table.
Next, in step S6, the password story generation unit 24 generates password story information by replacing the category identification information in the story template information with words (including numbers) in the password word correspondence table. However, for the category identification information corresponding to “null” in the password word correspondence table, the category identification information and the classifier attached to the category identification information are deleted. Next, the password story generation unit 24 supplies the password information and the password story information to the information output unit 25.

Next, in step S7, the information output unit 25 takes in the password information and password story information supplied by the password story generation unit 24, associates the password information with the password story information, and transmits password issue request information. Send to the original terminal.
Note that the information output unit 25 may transmit only the password story information to the terminal, or reads the title information corresponding to the password story information from the story template storage unit 21 to obtain the password information, the password story information, and the title information. You may link and transmit to a terminal.

FIG. 8 is a diagram illustrating an example in which a terminal that has received the password information, password story information, and title information output from the information output unit 25 displays these information on a display device connected to the terminal itself. As shown in the figure, the terminal uses the password information issued by the password issuing device 1, password story information as auxiliary information for remembering the password information, and the title of the story information that is the basis of the password story information. Is displayed on the display device. However, in the example of the password story information shown in the figure, the characters of the password information are associated with the category identification information (for example, “[g gorilla]”, [d dam], etc.).
Thereby, the user of the terminal can store a random string of alphabetic characters and numbers issued by the password issuing device 1 in a manner similar to the password story represented by the password story information. Also, by presenting the title of the story information that is the basis of the password story information, the user can easily recall the password story.

  For example, the story information that is the basis of the password story information shown in the example of FIG. 8 is a part of “Momotaro”, a well-known fairy tale. By presenting the title information representing the title “Momotaro” to the user, it is possible to recall the characters of the password information from a portion different from the original content of “Momotaro”. Specifically, the first letter when the related words “gorilla”, “dam”, “crab”, “Hawaii”, “shark”, “3”, “Bill”, and “rabbit” are roman or English. Password information "gdkhs3bu" can be obtained by connecting (if the related word is a number, the number).

  FIG. 9 is a diagram illustrating an example of a login screen when logging in to a certain service using the password information issued by the password issuing device 1. In the example of the login screen in the figure, when accepting the input of the user ID and password, the auxiliary information in which the related word is replaced with “[]”, for example, from the password story information is presented as information for assisting the input of the password information. doing. By viewing this auxiliary information, the user can obtain the password information based on the related words of the “[]” portion that the user remembers.

  As described above in detail, the password story generation device 20 according to the present embodiment stores the story template information that stores the story template information in which the predetermined noun in the story information is replaced with the category type information indicating the category type of the noun. The unit 21 is provided. The password story generating device 20 includes a word storage unit 22 that stores words associated with alphabetic characters for each category type of noun. In addition, the password story generation device 20 includes a password acquisition unit 23 that captures password information composed of alphabetic characters and numbers. Further, the password story generating device 20 generates the category type information in the story template information and the characters in the password information based on the story template information stored in the story template storage unit 21 and the password information taken in by the password acquisition unit 23. Password story information obtained by referring to a plurality of words stored in the word storage unit 22 and replacing the category type information with the acquired words by referring to a plurality of words stored in the word storage unit 22 A password story generating unit for generating Moreover, the information output part 25 which outputs the password story information which the password story production | generation part 24 produced | generated is provided.

  With this configuration, the password story generation device 20 outputs password story information that is auxiliary information for allowing the user to remember the password information. As a result, the user can learn password information generated by the password generation unit 10 with high security safety using the password story information as a clue.

  In addition, you may make it implement | achieve a part of function of the password story production | generation apparatus 20 which is embodiment mentioned above with a computer. In this case, a password story generating program for realizing the function is recorded on a computer-readable recording medium, the password story generating program recorded on the recording medium is read into the computer system, and the computer system executes the program. Thus, the function may be realized. The computer system includes an operating system (OS) and hardware of peripheral devices. The computer-readable recording medium is a portable recording medium such as a flexible disk, a magneto-optical disk, an optical disk, or a memory card, and a storage device such as a magnetic hard disk or a solid state drive provided in the computer system. Furthermore, a computer-readable recording medium dynamically holds a program for a short time, such as a computer network such as the Internet, and a communication line when transmitting a program via a telephone line or a cellular phone network. In addition, a server that holds a program for a certain period of time, such as a volatile memory inside a computer system serving as a server device or a client in that case, may be included. Further, the above password story generation program may be for realizing a part of the above-described functions, and further for realizing the above-described functions by a combination with a program already recorded in the computer system. There may be.

  As mentioned above, although embodiment of this invention was explained in full detail with reference to drawings, the specific structure is not restricted to that embodiment, The design of the range which does not deviate from the summary of this invention, etc. are included.

  DESCRIPTION OF SYMBOLS 1 ... Password issuing apparatus, 10 ... Password generation part, 20 ... Password story generation apparatus, 21 ... Story template storage part, 22 ... Word storage part, 23 ... Password acquisition part, 24 ... Password story generation part, 25 ... Information output part

Claims (3)

A story template storage unit for storing story template information in which a predetermined noun in the story information is replaced with category type information representing a category type of the noun;
A word storage unit that stores words associated with alphabetic characters for each category type of noun;
A password acquisition unit that captures password information composed of alphabetic characters and numbers;
Based on the story template information stored in the story template storage unit and the password information captured by the password acquisition unit, the category type information in the story template information is associated with the characters in the password information, and A password associated with the character corresponding to the category type information is obtained by referring to the plurality of words stored in the word storage unit, and the password story information is obtained by replacing the category type information with the acquired word. A password story generation unit to generate,
An information output unit that outputs the password story information generated by the password story generation unit;
A password story generation device comprising: The story template storage unit stores title information representing a title of the story information in association with the story template information,
The information output unit reads the title information corresponding to the password story information from the story template storage unit, and outputs the password information, the password story information, and the title information in association with each other.
The password story production | generation apparatus of Claim 1. Computer
Story template storage means for storing story template information in which a predetermined noun in the story information is replaced with category type information representing the category type of the noun,
Word storage means for storing words associated with alphabetic characters for each category type of noun,
A password acquisition means for capturing password information composed of alphabetic characters and numbers,
Based on the story template information stored in the story template storage means and the password information captured by the password acquisition means, the category type information in the story template information is associated with the characters in the password information, and A password associated with the character corresponding to the category type information is obtained by referring to the plurality of words stored in the word storage means, and the password story information obtained by replacing the category type information with the acquired word Password story generation means to generate,
Information output means for outputting the password story information generated by the password story generation means;
Password story generation program to function as

Images