JP2017058746A - Information processing apparatus, control method thereof, and program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To improve the convenience in opening a file with password, while ensuring security of the file in an information processing apparatus.SOLUTION: A CPU 106 of an information processing apparatus 100 executes a password management application, to acquire user name of a log-in user, file name of a file with password, and a password input by the user for opening the file, and stores the file name, the password, and the user name in a password management table, in association with each other. When the user opens the file with password again, the CPU 106 searches the password management table for a password associated with the file name and the user name. When the password is detected, the file is automatically opened with the password stored in the password management table, without requiring the user to input the password.SELECTED DRAWING: Figure 2

Description

  The present invention relates to an information processing apparatus, a control method thereof, and a program, and more particularly, to a technique for improving convenience when opening a file in which a password is set.

  In order to ensure security when attaching a file to an e-mail and sending it, a password is set in the attached file and sent (see Patent Document 1). Here, there is a ZIP file format as a file format often used when attaching a file to an e-mail. The ZIP file format is widely used from the viewpoint of ensuring security because not only the file size can be reduced by compressing the file but also a password can be set.

  An e-mail recipient (user) to which a file with a password set (hereinafter referred to as “file with password”) is attached, for example, by entering the password according to the agreement with the e-mail sender, You can open the attached file. For example, the password of the password-added file from the sender of the e-mail is notified separately, so that the user can input the notified password and open the password-added file.

Japanese Patent Application Laid-Open No. 2015-122097

  However, when a user tries to open a file with a password at a later date, the user often forgets the password and cannot enter the file, and often the file cannot be opened. In order to prevent such a situation from occurring, for example, the user may cancel the password setting and save the file. However, in this case, since a third party can open the file, security cannot be ensured.

  It is an object of the present invention to provide an information processing apparatus that improves the convenience when opening a file while ensuring the security of a file with a password.

  An information processing apparatus according to the present invention includes a login unit that executes a login authentication process of a user, a reading unit that reads a file in which a password is set, an input unit that inputs a password for opening the file, and the input unit Control means for controlling to open the file using the password input to the file, file identification information of the file, password input to the input means, and user identification of the user who is logged in to the information processing apparatus Management means for associating and storing information, and when the file is read, the password stored in the management means is searched based on the file identification information of the file and the user identification information of the logged-in user Having a search means, and when the password is searched by the search means, The control means controls to automatically open the file using the password stored in the management means searched by the search means without inputting the password to the input means. To do.

  Another information processing apparatus according to the present invention includes: a login unit that executes a login authentication process of a user; a reading unit that reads a file in which a password is set; an input unit that inputs a password for opening the file; Control means for controlling to open the file using a password input to the input means, a password input to the input means, and user identification information of a user who is logged in to the information processing apparatus are stored in the file. Management means to be added; and determination means for determining whether or not user identification information of the logged-in user is added to the file when the file is read. Is determined to have been added to the file, the control means provides the input means with respect to the input means. Without Seward input, and controls to open automatically the file by using a password that is added to the file.

  According to the information processing apparatus of the present invention, it is possible to improve the convenience when opening a file while ensuring the security of a file with a password.

It is a block diagram which shows schematic structure of the information processing apparatus which concerns on embodiment of this invention. It is a flowchart of the information processing for password management using the password management application which concerns on 1st Embodiment which operate | moves on the information processing apparatus of FIG. It is a figure which shows the structure of the password management table used with the password management application which concerns on 1st Embodiment. It is a figure which shows an example of the password input screen displayed on a display, when the password management application which concerns on 1st Embodiment is performed. It is a figure which shows the data structural example of the file with a password which operate | moves on the information processing apparatus of FIG. 1, and can perform password management with the password management application which concerns on 2nd Embodiment.

  Embodiments of the present invention will be described below with reference to the accompanying drawings. FIG. 1 is a block diagram showing a schematic configuration of an information processing apparatus 100 according to an embodiment of the present invention. A typical example of the information processing apparatus 100 is a personal computer. The information processing apparatus 100 includes a display 101, a VRAM 102, a BMU 103, a keyboard 104, a PD 105, a CPU 106, a ROM 107, a RAM 108, an HDD 109, an optical disk drive 110, a network I / F 111, and a bus 112.

  The display 101 is a display unit that displays various types of information including a user interface for an OS and an application (software) operating on the information processing apparatus 100, and is, for example, a liquid crystal display. The VRAM 102 stores data for displaying various information on the display 101. The data stored in the VRAM 102 is transferred to the display 101 according to a predetermined rule, whereby various information is displayed on the display 101 as icons, menus, objects, and the like.

  A BMU (bit move unit) 103 controls data transfer between memories (for example, between the VRAM 102 and the RAM 108) and data transfer between the memory and an I / O device (for example, the RAM 108 and the network I / F 111). To do. The keyboard 104 is one of input means having various keys for inputting characters, numbers, and the like. A PD (pointing device) 105 is an input unit used for designating icons, menus, and other contents displayed on the display 101, and is, for example, a mouse or a touch panel.

  The ROM 107 is a storage unit that stores a control program such as a BIOS necessary for starting up the information processing apparatus 100 and data. The RAM 108 is a storage unit having a work area for the CPU 106, a primary storage area for temporarily storing various data, a load area for various programs, and the like. The HDD 109 is a storage unit that stores an OS program, various control programs, programs of various applications (software) that can be executed on the OS program, various data, and the like. The optical disk drive 110 reads a program stored on an optical disk such as a DVD-RAM.

  The CPU 106 performs overall control of various hardware constituting the information processing apparatus 100 by executing a control program such as BIOS stored in the ROM 107. In addition, the CPU 106 executes various processes according to the program by expanding the OS program or application program stored in the HDD 109 or the like on the RAM 108.

  The network I / F 111 communicates with an external information processing apparatus, a printer, and the like (not shown) via a network such as a LAN or the Internet. FIG. 1 shows an example in which a data server 120 is connected as an external information processing apparatus. The provision of the control program to the CPU 106 can also be performed from another information processing apparatus or the like via the network via the network I / F 111. The bus 112 includes an address bus, a data bus, and a control bus, and enables data communication between the blocks constituting the information processing apparatus 100. Although not shown, the information processing apparatus 100 includes a port for connecting an external device conforming to a predetermined standard such as the USB standard, an interface that enables data communication between the mounted external device and the CPU 106, and the like. Have.

  It is assumed that the information processing apparatus 100 can be used not only by one user but also by a plurality of users. Further, the information processing apparatus 100 executes user login authentication processing using account information previously assigned to each user, and if successful, the information processing apparatus 100 can be used by the user. . When the user logs in to the information processing apparatus 100, the CPU 106 reads user identification information that can uniquely identify the user from account information, for example, a user name or a user ID, and stores the user identification information in the RAM 108. The information processing method executed by the information processing apparatus 100 will be specifically described below.

<First Embodiment>
FIG. 2 is a flowchart of information processing for password management using the password management application (hereinafter referred to as “password management application”) according to the first embodiment operating on the information processing apparatus 100. Each process shown in FIG. 2 is realized by the CPU 106 developing the password management application program in the RAM, performing predetermined arithmetic processing according to the program, and controlling each block constituting the information processing apparatus 100. Is done.

  In the present embodiment, it is assumed that the password management application is stored in the HDD 109. However, the present invention is not limited to this, and the password management application may be stored in storage means other than the HDD 109 (for example, an optical disk or a USB standard external device), or information from an external device via the network I / F 111. It may be provided to the processing apparatus 100.

  In the present embodiment, it is assumed that an icon for activating a password management application is displayed on the display 101 in a state where the information processing apparatus 100 is activated. Then, when the user operates the PD 105 and drags and drops the icon of the file with password (file with the password set) onto the icon of the password management application, the CPU 106 starts up the password management application. However, the activation of the password management application is not limited to this, and can be performed by other known methods. For example, a password management application can be selected and launched from the OS menu screen displayed on the display 101 by operating the PD 105 or the like. In addition, a password management application can be launched using a method of further selecting software to be launched in a state where a file with a password is selected on the PD 105.

  In this embodiment, the password-added file to be processed by the password management application is a file whose extension is represented by zip and whose file format is the ZIP file format, as will be described later with reference to FIG. And However, the password-added file to be processed by the password management application is not limited to this.

  When the data of the password-added file is read into the password management application, the process of the flowchart of FIG. 2 is started. The password-added file only needs to be stored in a location that can be read by the CPU 106, and is stored in the HDD 109 or the data server 120, for example. When the information processing apparatus 100 receives a file with a password, or when a file with a password is selected from a plurality of files stored in the HDD 109 of the information processing apparatus 100, the file with a password is read into the password management application.

  In step S201, the CPU 106 searches the password management table (hereinafter referred to as “management table”) using the file name of the file with password and the value “1” of the all cancellation flag as a search key, and whether or not matching data is held. Determine. Information on the management table is stored in the HDD 109, for example. Here, the file name is file identification information for uniquely identifying the file.

  FIG. 3 is a diagram showing the configuration of the management table. The management table has a file name column 301, a user name column 302, a password column 303, and an all cancellation flag column 304. The password management application stores the file name, user name, password, and cancellation flag stored in each column. Are associated and managed.

  In the file name column 301, the file name of a password-added file that is a password management target is stored. In the present embodiment, the file name stored in the file name column 301 includes the storage location (directory). In step S201, whether or not the file name of the password-added file to be opened is held in the management table is determined including this storage location. Therefore, after the file name is stored in the management table, if the storage location of the password-protected file is changed by the user's operation, the file name of the password-protected file after the storage location change is It is determined that it is not held in However, the present invention is not limited to this, and the file name column 301 may store only the file name without storing the storage location of the file with the password.

  In the user name column 302, the user name of the user who first processed the password-added file with the password management application is acquired and stored from the account information of the user who has logged in to the information processing apparatus 100 at that time. The password field 303 holds a password input on the password input screen of the password management application. The password input screen will be described later with reference to FIG.

  In the all release flag column 304, the all release flag is stored with a value of “0” or “1”. When the all cancellation flag is “1”, the password management application cancels the password of the corresponding password-added file for all users who can use the information processing apparatus 100. On the other hand, when the all cancellation flag is “0”, the password management application cancels the password of the corresponding password-added file with respect to the user having the corresponding user name, but all the information processing apparatuses 100 can be used. It is not released for the user.

  Returning to the description of FIG. If the management table holds data having the same file name and the entire release flag “1” (YES in S201), the CPU 106 advances the process to step S204. As described above, the password management application cancels the password of the password-added file for all users who can use the information processing apparatus 100 for the password-added file whose all release flag is “1”. In the management table, the data in the first row corresponds to this.

  Therefore, in step S204 when the process proceeds from step S201 to step S204, the CPU 106 reads the password of the data having the same file name and the all release flag “1” from the management table. Thereafter, the CPU 106 advances the processing to step S208, and controls to automatically open the corresponding password-added file (opening) using the password read in step S204 in step S208. In this way, the user can open the file with the password to be opened in step S201 without browsing for the password and browse the contents.

  If the management table does not hold data having the same file name and the entire release flag “1” (NO in S201), the CPU 106 advances the process to step S202. In step S <b> 202, the CPU 106 acquires the user name of the user who is currently logged in to the information processing apparatus 100. Note that the user name is stored in the RAM 108 based on the account information when the user logs into the information processing apparatus 100 as described above, and thus the CPU 106 can read the user name from the RAM 108.

  In subsequent step S203, CPU 106 searches the password management table using the combination of the file name of the password-added file to be opened and the user name acquired in step S202 as a search key, and determines whether or not matching data is held. To do. If CPU 106 holds matching data (YES in S203), the process proceeds to step S204. If CPU 106 does not hold matching data (NO in S203), the process proceeds to step S205.

  The case where the determination in step S203 is “YES” is a case where data in which the file name matches the user name and the all cancellation flag is “0” is held in the management table. In FIG. 3, if the user name is Tom, the data on the second line corresponds to the data on the third line if the user name is Bob, and the data on the fourth line if the user name is John. To do. In either case, a password is stored in the management table.

  Therefore, in step S204 when the process proceeds from step S203 to step S204, the CPU 106 reads a password of data having the same file name and user name from the management table. Thereafter, the CPU 106 advances the processing to step S208, and controls to automatically open the corresponding password-added file (opening) using the password read in step S204 in step S208. In this way, the user can open the password-added file whose password is canceled only for himself / herself without entering the password.

  The case where the determination in step S203 is “NO” is a case where data of a file with a password to be opened is not stored in the management table. For example, when a password-added file is first opened from a password management application, or when it is selected not to cancel a password on a password input screen described later.

  In step S205, the CPU 106 displays a password input screen on the display 101. FIG. 4 is a diagram illustrating an example of a password input screen. In response to the user's instruction, selection or input of each column of the password input screen is performed. A password input field 401 displayed on the password input screen is a field for inputting a password set in a file with a password. When the password input screen is displayed, if the OK button 407 is pressed without entering the password in the password input field 401, an error occurs. In this case, the CPU 106 performs error processing for displaying an error message such as “Please enter password” on the display 101, for example. An error also occurs when the OK button 407 is pressed with an incorrect password entered in the password entry field 401. In this case, the CPU 106 performs error processing for displaying an error message on the display 101 such as “The password is incorrect. Please re-enter the password”.

  An OK button 407 is input means for proceeding to the next step. The cancel button 408 is an input means for closing the password input screen. When the cancel button 408 is pressed, no data is stored in the management table, and the processing by the password management application is ended.

  The radio buttons 402 to 405 are input means for designating a password release method, and the user can select any one of them. The radio button 402 is an input unit for setting to cancel the password setting for all users of the information processing apparatus 100. When the radio button 402 is selected and the OK button 407 is pressed, “1” is set in the all cancellation flag field 304 of the management table.

  A radio button 403 is an input unit for setting password cancellation only for a user who is currently logged in to the information processing apparatus 100. When the radio button 403 is selected and the OK button 407 is pressed, “0” is set in the all cancellation flag field 304 of the management table. When the radio button 404 is selected and the OK button 407 is pressed, no data is stored in the management table.

  The radio button 405 is a button for a user who is currently logged in to the information processing apparatus 100 to set password cancellation for himself and other users specified by the user. The user can input the user name of another user specified by the user in the user name input field 406. When the radio button 404 is selected and the OK button 407 is pressed, “0” is set in the all cancellation flag field 304 of the management table.

  Specifically, the data in the first row of the management table in FIG. 3 is data stored when Tom, the login user, inputs a password, selects the radio button 402, and presses the OK button 407. It is. The data on the second line is data saved when the login user Tom inputs the password, selects the radio button 403, and presses the OK button 407. In the data on the third and fourth lines, Bob who is a login user inputs a password, selects a radio button 405, inputs “John” in the user name input field 406, and clicks an OK button 407. Data saved when the button is pressed.

  When the password input screen is displayed on the display 101 in step S205, in step S206, the CPU 106 receives input from the user on the password input screen. At this time, the user who is currently logged in to the information processing apparatus 100 memorizes the password set in the file with the password to be opened in step S201, or manages the password under a sufficient security level. It is assumed that it is possible to input

  In subsequent step S207, CPU 106 updates the stored content of the management table in accordance with the input content in step S206. When radio buttons 402, 403, and 405 are selected on the password input screen, a set of new data (file name, user name, password, all release flag) is added to the management table. On the other hand, when the radio button 404 is selected, the management table is not updated.

  In step S206, the password is input regardless of the selection of the radio buttons 402 to 405. Therefore, in steps S208 through S206 and S207, the CPU 106 controls to open the corresponding password-added file (opening) using the password input in step S206. In this way, the user can view the contents of the password-added file to be opened in step S201. This process is ended by step S208.

  As described above, the user of the information processing apparatus 100 can set the conditions for releasing the password of the password-added file by restricting the user. Thereby, the user can save the trouble of inputting the password when opening the file with the password again while ensuring the desired security. In addition, a password-added file whose data is stored in the management table can be opened with security secured even if the password is forgotten.

Second Embodiment
In the first embodiment, the password management of the password-added file is performed using the management table in the password management application. On the other hand, in the second embodiment, the password of the file with password is managed by adding various information to the end of the file with password. In the following description, the end of the file will be described as an example. However, the present invention is not limited to this. Embodiments can be realized.

  FIG. 5 is a diagram illustrating a data configuration example of a file with a password that can be managed by the password management application according to the second embodiment that operates on the information processing apparatus 100. The password management application according to the second embodiment displays the password input screen shown in FIG. 4 on the display 101 when a file with a password is processed by the password management application for the first time, and the input content is managed as a file with a password. Add as However, when the radio button 404 on the password input screen is selected, the management data is not added to the password-added file.

  The data file 500 is an original data area of a file with a password. The first data column 501 distinguishes the original data area of the password-added file from the data area (password management area) used by the password management application, and stores a header indicating the signature indicating the start position of the password management area It is. The second data column 502 and later described below is a password management area.

  The second data field 502 stores the password set in the password-added file input in the password input field 401 on the password input screen. In the third data column 503, as in the management table, the all cancellation flag is stored as “0” or “1”. When the radio button 402 on the password input screen is selected, “1” is stored, and when the radio button 403 or the radio button 405 is selected, “0” is stored.

  The fourth data column 504 stores the number of users. When the radio button 402 on the password input screen is selected, there is no limit to the number of users. For convenience, for example, “0” is stored, but the value “1” of the all cancellation flag is prioritized. Will not be considered. When the radio button 403 is selected, “1” is stored. When the radio button 405 is selected, a value obtained by adding itself to the number of persons input in the user name input field 406 is input.

  The fifth data column 505 stores a user name (same as the user name stored in the user name column 302 of the management table). The fifth data column 505 is provided in a number corresponding to the number of users. Although not shown, the length of the nth user name is immediately before the nth (n: natural number) fifth data column 505 so that the user name is not erroneously read out for data management. Data indicating (number of bytes) is added. Similarly, data indicating the length of the password stored in the second data column 502 is added immediately before the second data column 502, and the fourth data column 504 is added immediately before the fourth data column 504. It is desirable to add data indicating the length of the number of users stored in.

  The processing flow by the password management application according to the second embodiment is similar to the processing flow shown by the flowchart of FIG. 2 by the password management application according to the first embodiment. However, due to the use of management data added to the password-added file, some processing contents are changed. Specifically, in the password management application according to the second embodiment, the process of step S201 in the password management application according to the first embodiment is “whether the all cancellation flag is“ 1 ”? To be changed. Further, the process of step S203 in the password management application according to the first embodiment is as follows. In the password management application according to the second embodiment, “is the user name acquired in S202 included in the user name of the management data? To be changed. The processing contents of the other steps are not changed, and the same results and effects as those of the first embodiment can be obtained by performing the processing according to the flow thus changed. Furthermore, the second embodiment is particularly useful when a file with a password is stored in an external device such as the data server 120. In this case, even if the user changes the terminal that accesses the external device, the file with the password stored in the external device can be opened if the password management application is installed in the terminal.

<Other embodiments>
Although the present invention has been described in detail based on preferred embodiments thereof, the present invention is not limited to these specific embodiments, and various forms within the scope of the present invention are also included in the present invention. included. For example, in the above embodiment, the file with a password is a file in the ZIP file format. However, the present invention is not limited to this, and the present invention can be applied even to a file of another format to which a password can be added. For example, a file compression format other than the ZIP file format can be mentioned.

  The present invention supplies a program that realizes one or more functions of the above-described embodiments to a system or apparatus via a network or a storage medium, and one or more processors in a computer of the system or apparatus read and execute the program This process can be realized. It can also be realized by a circuit (for example, ASIC) that realizes one or more functions.

DESCRIPTION OF SYMBOLS 100 Information processing apparatus 101 Display 104 Keyboard 106 CPU
120 Data Server 301 File Name Field 302 User Name Field 303 Password Field 304 All Cancel Flag Field

Claims (13)

An information processing apparatus,
Login means for executing login authentication processing of the user;
Reading means to read a file with a password,
An input means for inputting a password for opening the file;
Control means for controlling to open the file using a password input to the input means;
Management means for storing the file identification information of the file, the password input to the input means, and the user identification information of the user who is logged in to the information processing apparatus in association with each other;
When the file is read, based on the file identification information of the file and the user identification information of the logged-in user, search means for searching the password stored in the management means,
When the password is searched by the search means, the control means automatically uses the password stored in the management means searched by the search means without inputting the password to the input means. An information processing apparatus that controls to open the file automatically. A receiving means for receiving input of user identification information of another user designated by the logged-in user;
2. The information processing according to claim 1, wherein the management unit further stores the file identification information of the file and the password input to the input unit in association with the user identification information of the other user. apparatus.   When all users who can log in to the information processing apparatus are specified as the other users, the management unit indicates all users who can log in to the information processing apparatus as user identification information of the other users. The information processing apparatus according to claim 2, wherein a flag is stored. In response to a user's instruction, there is means for setting that the password input to the input means is not stored in the management means,
The management unit does not store the password in association with the file identification information of the file and the user identification information when it is set not to store the input password in the management unit. The information processing apparatus according to any one of claims 1 to 3. An information processing apparatus,
Login means for executing login authentication processing of the user;
Reading means to read a file with a password,
An input means for inputting a password for opening the file;
Control means for controlling to open the file using a password input to the input means;
A management unit for adding a password input to the input unit and user identification information of a user who is logged in to the information processing apparatus to the file;
When the file is read, there is a determination unit that determines whether user identification information of the logged-in user is added to the file,
When the determination unit determines that the user identification information is added to the file, the control unit uses the password added to the file without inputting the password to the input unit. An information processing apparatus that controls to automatically open the file. A receiving means for receiving input of user identification information of another user designated by the logged-in user;
The information processing apparatus according to claim 5, wherein the management unit further adds user identification information of the other user to the file.   When all users who can log in to the information processing apparatus are specified as the other users, the management unit sets all the users who can log in to the information processing apparatus as user identification information of the other users. The information processing apparatus according to claim 6, wherein a flag to indicate is added to the file. In response to an instruction from the user, means for setting not to add the password input to the input means to the file,
The said management means does not add the said password to the said file, when it is set not to add the said input password to the said file, The any one of Claim 5 thru | or 7 characterized by the above-mentioned. Information processing device. Determining means for determining whether or not the password input to the input means is correct;
The information processing apparatus according to claim 1, wherein the control unit performs error processing when an incorrect password is input to the input unit. A method for controlling an information processing apparatus,
Executing a user login authentication process;
Reading a file with a password set;
Entering a password to open the file;
Controlling to open the file using the entered password;
Associating user identification information of a user who is logged in to the information processing apparatus, file identification information of the file, and the input password, and storing them in a storage unit included in the information processing apparatus;
When the file is read, based on the file identification information of the file and the user identification information of the logged-in user, searching the password stored in the storage means;
Controlling to automatically open the file using the password stored in the searched storage means without inputting the password when the password is searched. Characteristic control method. A method for controlling an information processing apparatus,
Executing a user login authentication process;
Reading a file in which the password is set;
Entering a password to open the file;
Controlling to open the file using the entered password;
Adding the input password and user identification information of a user who is logged in to the information processing apparatus to the file;
When the file is read, determining whether user identification information of the logged-in user is added to the file;
Automatically opening the file using the password added to the file without entering the password when it is determined that the user identification information is added to the file. A control method characterized by the above. Computer
Login means for executing login authentication processing of the user;
Reading means to read a file with a password,
An input means for inputting a password for opening the file;
Control means for controlling to open the file using a password input to the input means;
Management means for associating and storing file identification information of the file, a password input to the input means, and user identification information of a user who is logged in to the computer;
When the file is read, based on the file identification information of the file and the user identification information of the logged-in user, function as search means for searching the password stored in the management means,
When the password is searched by the search means, the control means automatically uses the password stored in the management means searched by the search means without inputting the password to the input means. A program for controlling to open the file automatically. Computer
Login means for executing login authentication processing of the user;
Reading means to read a file with a password,
An input means for inputting a password for opening the file;
Control means for controlling to open the file using a password input to the input means;
Management means for adding a password input to the input means and user identification information of a user who is logged in to the computer to the file;
When the file is read, it functions as a determination unit that determines whether or not user identification information of the logged-in user is added to the file,
When the determination unit determines that the user identification information is added to the file, the control unit uses the password added to the file without inputting the password to the input unit. A program for controlling to automatically open the file.

Images