JP2022162189A - Information processing device and program - Google Patents

Abstract

To reduce a process load on an image analysis.SOLUTION: An information processing device 10 inputs, when identification information 2 on a subjected screen 1 is registered in a registered screen list 11a that registers a correspondence between the identification information on a login screen and login information, the login information corresponding to the identification information 2 in the subjected screen 1. When the identification information 2 is not registered in both of the registered screen list 11a and an analysis exclusion list 11b that registers the identification information on the screen, the information processing device 10 determines whether the subjected screen 1 includes a password input region or not. When the subjected screen 1 includes the password input region, the information processing device 10 registers the correspondence between the identification information 2 and the input login information in the registered screen list 11a. When the subjected screen 1 does not include the password input region, the information processing device 10 registers the identification information 2 in the analysis exclusion list 11b.SELECTED DRAWING: Figure 1

Description

The present invention relates to an information processing device and program.

Single sign-on is a technology that facilitates login. The single sign-on software automatically inputs login information such as a user ID and password to a pre-registered login screen.

As a technology related to single sign-on, for example, a web server that prevents spoofing of web applications has been proposed.

Japanese Patent Application Laid-Open No. 2020-113006

Each displayed screen may be analyzed, and if the analyzed screen is a login screen, the screen may be automatically registered for single sign-on. However, if the screen to be determined whether or not to be registered is complicated, the processing load of screen analysis increases.

In one aspect, the object of the present invention is to reduce the processing load of screen analysis.

One proposal provides an information processing apparatus having a storage unit and a processing unit. The storage unit stores a registration screen list in which correspondence between identification information of login screens and login information is registered, and an analysis exclusion list in which identification information of screens is registered. When the identification information of the target screen is registered in the registered screen list, the processing unit inputs the login information corresponding to the identification information of the target screen to the target screen, and the identification information of the target screen is registered in the registered screen list and the login information. If it is not registered in any of the analysis exclusion list, determine whether the target screen includes a password input area or not, and if the target screen includes a password input area, the correspondence between the identification information of the target screen and the input login information If the relationship is registered in the registration screen list and the target screen does not include the password input area, the identification information of the target screen is registered in the analysis exclusion list.

According to one aspect, the processing load of screen analysis can be reduced.

1 illustrates an example of an information processing apparatus according to a first embodiment; FIG. It is a figure which shows an example of the information processing system which concerns on 2nd Embodiment. It is a figure which shows one structural example of the hardware of an information processing apparatus. It is a figure which shows an example of the automatic registration of a login screen. 2 is a block diagram showing an example of functions of an information processing device; FIG. It is a figure which shows an example of the information memorize|stored in a memory|storage part. 9 is a flow chart showing an example of a procedure of screen monitoring processing; 9 is a flowchart showing an example of a procedure of registration candidate determination processing; FIG. 11 is a sequence diagram showing an example of screen analysis processing;

Hereinafter, this embodiment will be described with reference to the drawings. It should be noted that each embodiment can be implemented by combining a plurality of embodiments within a consistent range.
[First embodiment]
First, a first embodiment will be described.

1 is a diagram illustrating an example of an information processing apparatus according to a first embodiment; FIG. The first embodiment registers a login screen on which login information is automatically entered.
The information processing device 10 is a computer operated by a user. The information processing device 10 has a storage unit 11 and a processing unit 12 . The storage unit 11 stores data used for processing executed by the information processing device 10 . The storage unit 11 is, for example, a memory or a storage device that the information processing device 10 has. The processing unit 12 can control the information processing device 10 and execute required processing. The processing unit 12 is, for example, a processor or an arithmetic circuit included in the information processing device 10 .

The storage unit 11 stores a registration screen list 11a and an analysis exclusion list 11b. Correspondence between the identification information of the login screen and the login information is registered in the registered screen list 11a. The screen identification information is information for identifying a screen (or window). For example, the screen identification information is a combination of the title of the screen and the URL (Uniform Resource Locator) of the web page displaying the screen. Also, for example, the screen identification information is a combination of the title of the screen and the name of the process that displays the screen.

The login information is information entered on the login screen for login. For example, the login information is a combination of ID and password. As an example, "identification information x" and "login information x" are associated and registered in the registration screen list 11a. Screen identification information is registered in the analysis exclusion list 11b. As an example, "identification information y" is registered in the analysis exclusion list 11b.

The processing unit 12 automatically inputs login information for login screens registered in the registered screen list 11a and automatically registers login screens not registered in the registered screen list 11a. First, the processing unit 12 extracts the identification information 2 that is the identification information of the target screen 1 . The target screen 1 is, for example, an active window. Also, the target screen 1 may be a plurality of open windows. The processing unit 12 determines whether or not the identification information 2 is registered in the registration screen list 11a (presence or absence of registration).

If the identification information 2 is registered in the registered screen list 11a, the processing unit 12 inputs the login information corresponding to the identification information 2 to the target screen 1 . As an example, when the identification information 2 is “identification information x”, the processing unit 12 inputs “login information x” to the target screen 1 .

If the identification information 2 is not registered in either the registered screen list 11a or the analysis exclusion list 11b, the processing unit 12 determines whether or not the target screen 1 includes a password input area (whether or not there is a password input area). . If the identification information 2 is not registered in the registration screen list 11a but is registered in the analysis exclusion list 11b, the processing unit 12 does not perform password input area presence/absence determination for the target screen 1. FIG. As an example, when the identification information 2 is "identification information y", the processing unit 12 does not perform password input area presence/absence determination.

In the password input area presence/absence determination, for example, the processing unit 12 extracts components such as text, input fields, buttons, hyperlinks, and images included in the target screen 1 . Then, when an input field for entering a password (input field of password attribute) is included in the component extracted from the target screen 1, the processing unit 12 determines that the target screen 1 includes a password input area. do.

If the target screen 1 includes a password input area, the processing unit 12 registers the correspondence relationship between the identification information 2 and the input login information in the registration screen list 11a. For example, when the processing unit 12 determines that the target screen 1 includes a password input area, the processing unit 12 accepts a selection as to whether or not to register the target screen 1 . When receiving a selection to register the target screen 1 , the processing unit 12 displays a registration information input screen for inputting the login information input by the user on the target screen 1 . The processing unit 12 associates the identification information 2 with the login information input on the registration information input screen and registers them in the registration screen list 11a. Note that the processing unit 12 may specify the login information input by the user to the target screen 1, associate the identification information 2 with the specified login information, and register them in the registration screen list 11a. If the target screen 1 does not include the password input area and the time taken to determine whether the target screen 1 includes the password input area is equal to or longer than a predetermined time, the processing unit 12 adds the identification information 2 to the analysis exclusion list. 11b.

According to the first embodiment, the storage unit 11 of the information processing apparatus 10 includes the registration screen list 11a in which the correspondence between the identification information of the login screen and the login information is registered, and the registration screen list 11a in which the identification information of the screen is registered. The analysis exclusion list 11b is stored. The processing unit 12 of the information processing apparatus 10 inputs login information corresponding to the identification information 2 to the target screen 1 when the identification information 2 of the target screen 1 is registered in the registered screen list 11a. If the identification information 2 is not registered in either the registered screen list 11a or the analysis exclusion list 11b, the processing unit 12 determines whether the target screen 1 includes a password input area. If the target screen 1 includes a password input area, the processing unit 12 registers the correspondence between the identification information 2 and the input login information in the registration screen list 11a. 2 is registered in the analysis exclusion list 11b.

In this way, the information processing apparatus 10 registers the identification information 2 of the target screen 1 including the password input area in the registered screen list 11a, thereby automatically inputting the login information to the target screen 1 from the next time onward. Here, it may take time to determine whether or not there is a password input area for the target screen 1 . Therefore, when the target screen 1 does not include a password input area, the information processing apparatus 10 registers the identification information 2 in the analysis exclusion list 11b so as not to execute password input area presence/absence determination for the target screen 1 from the next time onward. Thereby, the information processing apparatus 10 can reduce the processing load of screen analysis.

If the target screen 1 does not include the password input area and the time taken to determine whether the target screen 1 includes the password input area is equal to or longer than a predetermined time, the processing unit 12 adds the identification information 2 to the analysis exclusion list. 11b. Here, a screen that is not a login screen and a screen that has become a login screen through screen transition may be indicated by the same identification information. Therefore, if all the identification information 2 of the target screen 1 determined not to include the password input area is registered in the analysis exclusion list 11b, the accuracy of automatic registration from the next time onwards may be lowered. Therefore, the information processing apparatus 10 registers the identification information 2 in the analysis exclusion list 11b when the presence or absence of the password input area is determined for a predetermined period of time or more. Presence/absence check can be disabled.

Note that the storage unit 11 may store a first exclusion candidate list in which the correspondence between the identification information of the screen and the number of non-registration determinations is registered. If the target screen 1 does not include a password input area and the time taken to determine whether the target screen 1 includes a password input area is equal to or longer than a predetermined time, the processing unit 12 determines non-registration corresponding to the identification information 2. You can add 1 to the count. Then, when the number of non-registration determinations corresponding to identification information 2 is equal to or greater than the first threshold, processing unit 12 may register identification information 2 in analysis exclusion list 11b. As a result, the information processing apparatus 10 can register the identification information 2 of the target screen 1, which is unlikely to become the login screen after screen transition, in the analysis exclusion list 11b.

Further, the storage unit 11 may store a second exclusion candidate list in which a correspondence relationship between screen identification information and the number of non-registration selections is registered. The processing unit 12 may accept a selection as to whether or not to register the target screen 1 when the target screen 1 includes a password input area. Then, when receiving a selection to register the target screen 1, the processing unit 12 may register the correspondence relationship between the identification information 2 and the input login information in the registration screen list 11a. Further, when the processing unit 12 receives a selection not to register the target screen 1, the processing unit 12 adds 1 to the number of non-registration selections corresponding to the identification information 2, and the number of non-registration selections corresponding to the identification information 2 is equal to or greater than the second threshold. In this case, the identification information 2 may be registered in the analysis exclusion list 11b. As a result, the information processing apparatus 10 can prevent the target screen 1 for which registration by the user is not required from the next time onwards.

[Second embodiment]
Next, a second embodiment will be described. The second embodiment automatically registers a login screen in single sign-on.

FIG. 2 is a diagram illustrating an example of an information processing system according to the second embodiment. The information processing system of the second embodiment has a server 30 and an information processing device 100 . The server 30 is a server computer that provides services to logged-in users. The server 30 requests an ID and password from the computer that accessed the server 30 . The server 30 provides a service for login users to the computer that has sent the correct set of ID and password. Server 30 is connected to information processing apparatus 100 via network 20 . The network 20 is, for example, a wide area network such as the Internet.

The information processing apparatus 100 is a client computer operated by a user. When a pre-registered login screen is displayed, the information processing apparatus 100 automatically inputs an ID and a password to the displayed login screen. Further, when an unregistered login screen is displayed, the information processing apparatus 100 associates and registers the ID and password input by the user with the login screen on the displayed login screen.

For example, when accessing the server 30, the information processing apparatus 100 displays a login screen including an input field for entering an ID and an input field for entering a password. When the displayed login screen is registered, the information processing apparatus 100 automatically inputs the ID and password in the input fields included in the login screen. If the displayed login screen is not registered, the information processing apparatus 100 registers the ID and password input by the user on the displayed login screen in association with the login screen. As a result, when the information processing apparatus 100 accesses the server 30 from the next time onwards, the ID and password can be automatically entered in the login screen.

FIG. 3 is a diagram illustrating a configuration example of hardware of an information processing apparatus. The information processing apparatus 100 is entirely controlled by a CPU (Central Processing Unit) 101 . The CPU 101 is a processor that executes program instructions. Note that the CPU 101 may include multiple processor cores. Also, the CPU 101 may be a plurality of processors, an MPU (Micro Processing Unit), a DSP (Digital Signal Processor), or the like. Moreover, at least part of the functions realized by the CPU 101 executing a program may be realized by an electronic circuit such as an ASIC (Application Specific Integrated Circuit) or a PLD (Programmable Logic Device). A RAM (Random Access Memory) 102 and a plurality of peripheral devices are connected to the CPU 101 via a bus 109 .

A RAM 102 is a main storage device of the information processing apparatus 100 . The RAM 102 temporarily stores at least part of an OS (Operating System) program and application programs to be executed by the CPU 101 . Further, the RAM 102 stores various data used for processing by the CPU 101 . Note that the information processing apparatus 100 may include a type of memory other than the RAM, or may include a plurality of memories.

Peripheral devices connected to the bus 109 include a HDD (Hard Disk Drive) 103 , a GPU (Graphics Processing Unit) 104 , an input interface 105 , an optical drive device 106 , a device connection interface 107 and a network interface 108 .

The HDD 103 is an auxiliary storage device of the information processing device 100 . The HDD 103 magnetically writes data to and reads data from a built-in magnetic disk. The HDD 103 stores OS programs, application programs, and various data. The information processing apparatus 100 may include other types of auxiliary storage devices such as flash memory and SSD (Solid State Drive), or may include a plurality of auxiliary storage devices.

A monitor 21 is connected to the GPU 104 . The GPU 104 displays an image on the screen of the monitor 21 according to instructions from the CPU 101 . Examples of the monitor 21 include a display device using an organic EL (Electro Luminescence), a liquid crystal display device, and the like.

A keyboard 22 and a mouse 23 are connected to the input interface 105 . The input interface 105 transmits signals sent from the keyboard 22 and the mouse 23 to the CPU 101 . Note that the mouse 23 is an example of a pointing device, and other pointing devices can also be used. Other pointing devices include touch panels, tablets, touch pads, trackballs, and the like.

The optical drive device 106 uses laser light or the like to read data recorded on the optical disc 24 . The optical disc 24 is a portable recording medium on which data is recorded so as to be readable by light reflection. The optical disc 24 includes DVD (Digital Versatile Disc), DVD-RAM, CD-ROM (Compact Disc Read Only Memory), CD-R (Recordable)/RW (ReWritable), and the like.

The device connection interface 107 is a communication interface for connecting peripheral devices to the information processing apparatus 100 . For example, the device connection interface 107 can be connected to the memory device 25 and the memory reader/writer 26 . The memory device 25 is a recording medium equipped with a communication function with the device connection interface 107 . The memory reader/writer 26 is a device that writes data to the memory card 27 or reads data from the memory card 27 . The memory card 27 is a card-type recording medium.

Network interface 108 is connected to network 20 . Network interface 108 transmits and receives data to and from other computers or communication devices via network 20 .

The information processing apparatus 100 can implement the processing functions of the second embodiment with the hardware configuration described above. Note that the server 30 and the information processing apparatus 10 shown in the first embodiment can also be realized by hardware similar to the information processing apparatus 100 shown in FIG. Also, the CPU 101 is an example of the processing unit 12 shown in the first embodiment. Also, the RAM 102 or the HDD 103 is an example of the storage unit 11 shown in the first embodiment.

The information processing apparatus 100 implements the processing functions of the second embodiment by executing a program recorded in a computer-readable recording medium, for example. A program describing the contents of processing to be executed by the information processing apparatus 100 can be recorded in various recording media. For example, a program to be executed by the information processing apparatus 100 can be stored in the HDD 103 . CPU 101 loads at least part of the program in HDD 103 into RAM 102 and executes the program. Also, the program to be executed by the information processing apparatus 100 can be recorded in a portable recording medium such as the optical disc 24, the memory device 25, the memory card 27, or the like. A program stored in a portable recording medium can be executed after being installed in the HDD 103 under the control of the CPU 101, for example. Alternatively, the CPU 101 can read and execute the program directly from the portable recording medium.

Next, automatic registration of a login screen in single sign-on will be described.
FIG. 4 is a diagram showing an example of automatic registration of a login screen. The display screen 40 is displayed on the monitor 21 when the information processing apparatus 100 automatically registers the login screen. Display screen 40 includes window 41 and registration guidance notification 42 .

A window 41 is an unregistered login screen. For example, the information processing apparatus 100 determines whether the window 41 includes a password input area when the window 41 becomes the active window. When the information processing apparatus 100 determines that the window 41 includes the password input area, the information processing apparatus 100 determines that the window 41 is the login screen, and displays the registration guidance notification 42 .

The registration guidance notification 42 is a notification for accepting a selection as to whether or not to register the window 41 . The registration guidance notice 42 composes a message indicating that the window 41 can be registered by clicking the registration guidance notice 42, for example. When the information processing apparatus 100 receives the selection operation of the registration guidance notification 42, the information processing apparatus 100 registers the window 41 as a login screen for automatically inputting the ID and password.

Thus, the information processing apparatus 100 registers the login screen. Note that the information processing apparatus 100 extracts components such as text, input fields, buttons, hyperlinks, and images included in the window 41, and when the window 41 includes an input field for entering a password, the window 41 is It is determined that the screen is the login screen. Therefore, when the window 41 includes many parts, it takes time to determine whether or not the window 41 includes a password input area. Therefore, the information processing apparatus 100 excludes screens that do not include a password input area and that take time to determine whether or not they include a password input area from the targets of determination processing from the next time onward.

Next, functions of the information processing apparatus 100 will be described in detail.
FIG. 5 is a block diagram showing an example of functions of the information processing apparatus. The information processing apparatus 100 has a storage unit 110 , a monitoring unit 120 , a determination unit 130 , an API (Application Programming Interface) 140 and a screen display process 150 . Storage unit 110 is implemented using a storage area of RAM 102 or HDD 103 . Monitoring unit 120 and determination unit 130 are implemented by CPU 101 executing a program stored in RAM 102 .

Storage unit 110 stores registration screen list 111 , analysis exclusion list 112 , and exclusion candidate lists 113 and 114 . In the registered screen list 111, the correspondence relationship between the combination of the title of the login screen and the process name of the process executing the login screen, and the ID and password is registered. Also, in the registration screen list 111, the correspondence relationship between the combination of the title of the login screen and the URL of the web page displaying the login screen, and the ID and password is registered. Note that the combination of the title and process name or URL is an example of screen identification information described in the first embodiment. Also, the ID and password are an example of the login information shown in the first embodiment.

The analysis exclusion list 112 registers combinations of screen titles and process names or URLs to be excluded from screen analysis processing targets. The exclusion candidate list 113 registers a correspondence relationship between a combination of a screen title and a process name or URL and the number of times the screen is determined to be a non-registration candidate. Note that the exclusion candidate list 113 is an example of the first exclusion candidate list shown in the first embodiment. Also, the number of times of registration in exclusion candidate list 113 is an example of the number of times of non-registration determination shown in the first embodiment. The exclusion candidate list 114 registers a correspondence relationship between a combination of a screen title and a process name or URL and the number of times the user selects the screen as non-registration. Note that the exclusion candidate list 114 is an example of the second exclusion candidate list shown in the first embodiment. Also, the number of times of registration in exclusion candidate list 114 is an example of the number of times of non-registration selection shown in the first embodiment.

Monitoring unit 120 automatically inputs the ID and password for the active window and automatically registers the active window when a certain period of time has elapsed since the previous process or the active window has been changed. Note that the active window is an example of the target screen 1 shown in the first embodiment.

First, the monitoring unit 120 determines whether or not the combination of the title of the active window and the process name or URL is registered in the registered screen list 111 . Note that the combination of the title of the active window and the process name or URL is an example of the identification information 2 shown in the first embodiment. When the combination of the title of the active window and the process name or URL is registered in the registration screen list 111, the monitoring unit 120 refers to the registration screen list 111 and assigns the ID and password corresponding to the combination to the active window. input.

If the combination of the title of the active window and the process name or URL is not registered in the registration screen list 111, the monitoring unit 120 causes the determination unit 130 to execute registration candidate determination processing. When the determination unit 130 determines that the active window is a registration candidate in the registration candidate determination process, the monitoring unit 120 displays a registration guidance notice 42 and accepts a selection as to whether or not to register the active window.

Then, when the selection to register the active window is accepted, the monitoring unit 120 registers in the registered screen list 111 the correspondence relationship between the combination of the title of the active window and the process name or URL, and the ID and password. For example, the monitoring unit 120 displays a registration information input screen for allowing the user to input the content input to the active window, and accepts input of an ID and a password. The monitoring unit 120 registers in the registration screen list 111 the correspondence relationship between the combination of the title of the active window and the process name or URL and the ID and password input on the registration information input screen. Note that the ID and password entered on the registration information input screen are an example of the input login information shown in the first embodiment.

When the monitoring unit 120 receives a selection not to register the active window, the monitoring unit 120 adds 1 to the number corresponding to the combination of the title of the active window and the process name or URL in the exclusion candidate list 114 . When the number of times corresponding to the combination of the title of the active window and the process name or URL in the exclusion candidate list 114 is five or more, the monitoring unit 120 registers the combination in the analysis exclusion list 112 . Note that 5 times is an example of the second threshold shown in the first embodiment.

Determining unit 130 executes a process of determining whether or not the active window is a registration candidate (registration candidate determination process) in accordance with an instruction from monitoring unit 120 . First, the determination unit 130 determines whether or not the combination of the title of the active window and the process name or URL is registered in the analysis exclusion list 112 . If the combination of the title of the active window and the process name or URL is registered in the analysis exclusion list 112, the determination unit 130 determines the active window as a non-registration candidate. If the combination of the title of the active window and the process name or URL is not registered in the analysis exclusion list 112, the determination unit 130 executes screen analysis processing. In the screen analysis process, the determination unit 130 requests, via the API 140, the screen display process 150 that displays the active window for a password input area. When the password input area is detected in the screen analysis process, determination unit 130 determines that the active window is a registration candidate.

Determination unit 130 determines that the active window is a non-registration candidate when the password input area is not detected in the screen analysis process. Further, when the password input area is not detected in the screen analysis process, the determination unit 130 determines whether or not the time required for the screen analysis process is equal to or longer than a predetermined time (for example, 2 seconds). If the determination unit 130 determines that the screen analysis process took two seconds or longer, the determination unit 130 adds 1 to the number of times corresponding to the combination of the title of the active window and the process name or URL in the exclusion candidate list 113 . . If the number of times corresponding to the combination of the title of the active window and the process name or URL in exclusion candidate list 113 is three or more, determination unit 130 registers the combination in analysis exclusion list 112 . Note that 3 times is an example of the first threshold shown in the first embodiment.

The API 140 is an API for analyzing windows. The API 140 detects the password input area from the active window in response to the acquisition request from the determination unit 130 for the password input area included in the active window. Here, the API 140 requests parts and analyzes the parts returned from the screen display process 150 for the number of parts included in the active window. For example, API 140 identifies which type of returned component is text, input field, button, hyperlink, or image. Also, for example, when the returned part is an input field, the API 140 identifies whether it has a password attribute.

Then, when there is a component determined to be a password attribute input field (password input area), the API 140 returns the component determined to be a password input area to the determining unit 130 . Also, when there is no component determined to be a password input area, the API 140 notifies the determination unit 130 that there is no corresponding component.

The screen display process 150 is the process of displaying the active window. Screen display process 150 may be a browser for displaying web pages. The screen display process 150 returns the information about the parts included in the active window in response to the request for the information about the parts from the API 140 .

The lines connecting the elements shown in FIG. 5 indicate part of the communication paths, and communication paths other than the illustrated communication paths can be set. Next, information stored in the storage unit 110 will be described.

FIG. 6 is a diagram illustrating an example of information stored in a storage unit; Storage unit 110 stores registration screen list 111 , analysis exclusion list 112 , and exclusion candidate lists 113 and 114 .

The registered screen list 111 registers the correspondence between combinations of login screen titles, process names or URLs, and IDs and passwords. The registration screen list 111 has items of title, URL/process name, ID and password. The title of the login screen is set in the title item. The process name or URL of the login screen is set in the URL/process name item. For example, in the URL/process name item, a URL for displaying a login screen, which is a Web page, is set. Further, for example, the process name of a process that displays a login screen that is not a web page is set in the URL/process name item. An ID to be entered on the login screen is set in the ID item. A password to be entered in the login screen is set in the password item.

As an example, in the registration screen list 111, the title item is "AA", the URL/process name item is "http://BB.com", the ID item is "1234", and the password item is "abcdef". A record is registered. This record indicates that the monitoring unit 120 automatically inputs ID "1234" and password "abcdef" to the login screen, which is a Web page with title "AA" and URL "http://BB.com". .

The analysis exclusion list 112 registers combinations of screen titles and process names or URLs to be excluded from screen analysis processing targets. As an example, “Title=EEE, URL=http://FFF.com” is registered in the analysis exclusion list 112 . This indicates that the determination unit 130 does not perform screen analysis processing on the Web page with the title "EEE" and the URL "http://FFF.com".

The exclusion candidate list 113 registers a correspondence relationship between a combination of a screen title, a process name or a URL, and the number of times it is determined as a non-registration candidate. As an example, “Title=II, URL=http://JJJ.com, Count=1” is registered in the exclusion candidate list 113 . This indicates that the determination unit 130 determined that the Web page with the title "II" and the URL "http://JJJ.com" was "1" in screen analysis processing.

The exclusion candidate list 114 registers a correspondence relationship between a combination of a screen title, a process name or a URL, and the number of times the user selects non-registration. As an example, “Title=MM, URL=http://NN.com, Count=1” is registered in the exclusion candidate list 113 . This indicates that the number of times the user has selected non-registration is "1" in response to the registration guidance notification 42 prompting registration of the Web page with the title "MM" and the URL "http://NN.com". show.

The procedure of the processing executed by the information processing apparatus 100 will be described in detail below.
FIG. 7 is a flowchart illustrating an example of the procedure of screen monitoring processing. The processing shown in FIG. 7 will be described below in accordance with step numbers.

[Step S11] The monitoring unit 120 determines whether or not to end monitoring. When the monitoring unit 120 determines to end the monitoring, the monitoring unit 120 ends the process. If the monitoring unit 120 determines not to end the monitoring, the process proceeds to step S12.

[Step S12] The monitoring unit 120 determines whether a certain period of time has elapsed since step S13 was last executed, or whether the active window has been changed. If the monitoring unit 120 determines that the predetermined time has passed or the active window has been changed, the process proceeds to step S13. On the other hand, when the monitoring unit 120 determines that the predetermined time has not elapsed and the active window has not been changed, the process proceeds to step S11.

[Step S<b>13 ] The monitoring unit 120 determines whether or not the active window is registered in the registered screen list 111 . For example, the monitoring unit 120 identifies the title of the active window. Also, the monitoring unit 120 identifies the process name for displaying the active window or the URL for displaying the active window. Then, the monitoring unit 120 checks whether or not a record in which a specified title is set in the title field and a specified process name or URL is set in the URL/process name field is registered in the registration screen list 111 . judge. When monitoring unit 120 determines that the active window is registered in registered screen list 111, the process proceeds to step S14. If the monitoring unit 120 determines that the active window is not registered in the registration screen list 111, the process proceeds to step S15.

[Step S14] The monitoring unit 120 inputs the ID and password to the active window. For example, the monitoring unit 120 refers to the registration screen list 111, the title specified in step S13 is set in the title item, and the process name or URL specified in step S13 is set in the URL/process name item. Identify records. Then, the monitoring unit 120 inputs the ID set in the ID item of the identified record and the password set in the password item into the active window. Then, the process proceeds to step S11.

[Step S15] The determination unit 130 executes registration candidate determination processing. Details of the registration candidate determination process will be described later (see FIG. 8).
[Step S16] The monitoring unit 120 determines whether or not the active window was determined as a registration candidate in step S15. If the active window is determined to be a registration candidate, monitoring unit 120 advances the process to step S17. If the active window is determined to be a non-registration candidate, monitoring unit 120 advances the process to step S11.

[Step S<b>17 ] The monitoring unit 120 displays the registration guidance notice 42 .
[Step S18] The monitoring unit 120 determines whether or not a selection to register an active window has been received. For example, when the registration guidance notification 42 is clicked, the monitoring unit 120 determines that the selection to register the active window has been accepted. When monitoring unit 120 determines that the selection to register the active window has been received, the process proceeds to step S19. When monitoring unit 120 determines that a selection not to register an active window has been received, the process proceeds to step S20.

[Step S<b>19 ] The monitoring unit 120 registers the active window in the registration screen list 111 . For example, the monitoring unit 120 displays a registration information input screen for allowing the user to input the content input to the active window, and accepts input of an ID and a password. Then, the monitoring unit 120 creates a record in the registration screen list 111, sets the title specified in step S13 in the title field of the created record, and sets the process name specified in step S13 in the URL/process name field. Or set the URL. The monitoring unit 120 sets the ID entered by the user on the registration information input screen in the ID field of the generated record, and sets the password entered by the user on the registration information input screen in the password field. Then, the process proceeds to step S11.

[Step S20] The monitoring unit 120 determines whether or not the number of times non-registration is selected is five or more. For example, the monitoring unit 120 adds 1 to the number of times corresponding to the combination of the title and process name or URL identified in step S13 in the exclusion candidate list 114 . If the combination of the title and process name or URL specified in step S13 is not registered in the exclusion candidate list 114, the monitoring unit 120 registers the combination in the exclusion candidate list 114 as 1 as the number of times corresponding to the combination. If the number of times corresponding to the combination of the title and the process name or the URL identified in step S13 in the exclusion candidate list 114 is five or more, the monitoring unit 120 determines that the number of non-registration selections is five or more. judge. If the monitoring unit 120 determines that the non-registration is selected five times or more, the process proceeds to step S21. If the monitoring unit 120 determines that the non-registration is selected less than five times, the process proceeds to step S11.

[Step S<b>21 ] The monitoring unit 120 registers the active window in the analysis exclusion list 112 . For example, the monitoring unit 120 registers in the analysis exclusion list 112 the combination of the title and process name or URL identified in step S13. Also, the monitoring unit 120 deletes from the exclusion candidate list 114 the combination of the title and process name or URL specified in step S13. Then, the process proceeds to step S11.

In this way, when the active window is registered in the registration screen list 111, the monitoring unit 120 automatically inputs the ID and password to the active window. As a result, the monitoring unit 120 can reduce the user's trouble during login. In addition, when the active window is not registered in the registration screen list 111 and is determined to be a registration candidate, the monitoring unit 120 displays a registration guidance notification 42 . Then, when a selection to register an active window is made in response to the registration guidance notification 42 , the monitoring unit 120 registers the active window in the registration screen list 111 . As a result, the monitoring unit 120 can automatically input the ID and password to the registered screen from the next time onward.

In addition, the monitoring unit 120 registers in the analysis exclusion list 112 active windows that have been selected as non-registered five or more times. As a result, the monitoring unit 120 can exclude screens that the user has determined do not need to be registered from targets of screen analysis processing, which will be described later.

Next, the procedure of registration candidate determination processing will be described in detail.
FIG. 8 is a flowchart illustrating an example of a procedure of registration candidate determination processing. The processing shown in FIG. 8 will be described below along with the step numbers.

[Step S31] The determination unit 130 acquires screen information from the screen display process 150 displaying the active window. For example, the determination unit 130 acquires the title of the active window and the name of the process that displays the active window or the URL for displaying the active window from the screen display process 150 via the API 140 .

[Step S<b>32 ] The determination unit 130 determines whether screen information is registered in the analysis exclusion list 112 . For example, the determination unit 130 determines that the screen information is registered in the analysis exclusion list 112 when the combination of the title and process name or URL acquired in step S31 is registered in the analysis exclusion list 112 . If determining unit 130 determines that the screen information is registered in analysis exclusion list 112, the process proceeds to step S40. If determining unit 130 determines that the screen information is not registered in analysis exclusion list 112, the process proceeds to step S33.

[Step S33] The determination unit 130 executes screen analysis processing. Details of the screen analysis processing will be described later (see FIG. 9).
[Step S34] The determination unit 130 determines whether or not the active window includes a password input area. For example, when the password input area is detected in the screen analysis process of step S33, the determination unit 130 determines that the password input area is included in the active window. If determining unit 130 determines that the active window includes the password input area, the process proceeds to step S35. If determination unit 130 determines that the active window does not include a password input area, the process proceeds to step S36.

[Step S35] The determination unit 130 determines that the active window is a registration candidate. Then the process ends.
[Step S36] The determination unit 130 determines whether or not the time required for the screen analysis process is equal to or longer than a predetermined time (for example, 2 seconds). If determining unit 130 determines that the screen analysis process took 2 seconds or more, the process proceeds to step S37. Further, when determining unit 130 determines that the time required for the screen analysis process is less than 2 seconds, the process proceeds to step S40.

[Step S37] The determination unit 130 adds 1 to the number of times corresponding to the combination of the title and process name or URL acquired in step S31 in the exclusion candidate list 113 . If the combination of the title and the process name or the URL acquired in step S31 is not registered in the exclusion candidate list 113, the determination unit 130 registers the combination in the exclusion candidate list 113 as 1 as the number of times corresponding to the combination.

[Step S38] The determination unit 130 determines whether or not the number of times corresponding to the combination of the title and process name or URL acquired in step S31 in the exclusion candidate list 113 is three or more. When determining unit 130 determines that the number of times is 3 or more, it advances the process to step S39. If determining unit 130 determines that the number of times is less than 3, the process proceeds to step S40.

[Step S<b>39 ] The determination unit 130 registers the active window in the analysis exclusion list 112 . For example, the determination unit 130 registers in the analysis exclusion list 112 the combination of the title and process name or URL acquired in step S31. Further, the determination unit 130 deletes from the exclusion candidate list 113 the combination of the title and the process name or the URL acquired in step S31.

[Step S40] The determination unit 130 determines that the active window is a non-registration candidate.
In this manner, determination unit 130 executes screen analysis processing when the active window is not registered in analysis exclusion list 112 . If the active window includes a password input area, determination unit 130 determines it as a registration candidate, and if it does not include a password input area, determines it as a non-registration candidate. Here, if the active window does not include a password input area and the screen analysis processing time is equal to or longer than a predetermined time, determination unit 130 adds 1 to the number of times corresponding to the active window in exclusion candidate list 113 . Then, when the number of times is three or more, determination unit 130 registers the active window in analysis exclusion list 112 .

As a result, the determination unit 130 can exclude screens that have a high processing load and are highly likely not to be login screens from the next and subsequent screen analysis processing targets. Therefore, the determination unit 130 can reduce the processing load of screen analysis.

It should be noted that a screen that is not a login screen and a screen that has changed from that screen to become a login screen may be indicated by a combination of the same title and process name or URL. Therefore, if all active windows determined not to include a password input area are registered in the analysis exclusion list 112, the precision of automatic registration from the next time onwards may be lowered. Therefore, the determination unit 130 registers the active window in the analysis exclusion list 112 when the processing load is large and the possibility that the screen is not the login screen is high, thereby suppressing a decrease in accuracy of automatic registration.

Next, screen analysis processing will be described using a sequence diagram.
FIG. 9 is a sequence diagram showing an example of screen analysis processing. In the screen analysis process, the determination unit 130 requests, via the API 140, the screen display process 150 that displays the active window for a password input area.

First, the determination unit 130 requests the API 140 for an object (access object) for accessing the active window (step S51). The API 140 requests an access object from the screen display process 150 (step S52). The screen display process 150 returns the access object to the API 140 in response to the request from the API 140 (step S53). The API 140 returns the access object returned from the screen display process 150 to the determination unit 130 (step S54).

The determination unit 130 specifies the active window using the access object and requests the API 140 to acquire the password input area (step S55). Then, the following steps S56 to S58 are repeated by the number of parts included in the active window. It should be noted that the API 140 may terminate the repetition of the processing of steps S56 to S58 when the password attribute input field (password input area) is detected.

The API 140 requests one component included in the active window from the screen display process 150 (step S56). The screen display process 150 returns one piece of information on the component included in the active window (step S57). The API 140 then analyzes the parts returned from the screen display process 150 (step S58). For example, API 140 identifies which type of returned component is text, input field, button, hyperlink, or image. Also, for example, when the returned part is an input field, the API 140 identifies whether it has a password attribute. In addition, for example, the API 140 provides the name of the returned component, the coordinates in the active window, the component ID, information on whether it is read-only, information on whether it is focused, information on whether it is in a display state, and information on whether it is in a display state. You may specify the operation etc. which can be performed with respect to.

In steps S56 to S58, if there is a component determined to be a password input area, the API 140 returns the component determined to be a password input area to the determination unit 130 (step S59). In addition, when there is no component determined to be a password input area in steps S56 to S58, the API 140 notifies the determination unit 130 that there is no corresponding component (step S60).

In this manner, determination unit 130 can identify whether or not the active window includes a password input area. Such image analysis processing takes a long time because steps S56 to S58 are repeated by the number of parts included in the active window. Therefore, the determination unit 130 can reduce the processing load from the next time onward by registering the active window that does not include the password input area in the analysis exclusion list 112 as described above.

According to the second embodiment, the storage unit 110 of the information processing apparatus 100 includes a registration screen list 111 in which correspondence relationships between combinations of login screen titles, URLs or process names, and IDs and passwords are registered. , and an analysis exclusion list 112 in which screen IDs and passwords are registered. When the combination of the title of the active window and the URL or the process name is registered in the registration screen list 111, the monitoring unit 120 of the information processing apparatus 100 detects the ID corresponding to the combination of the title of the active window and the URL or the process name. and password for the active window. If the combination of the title of the active window and the URL or process name is not registered in either registration screen list 111 or analysis exclusion list 112, determination unit 130 of information processing apparatus 100 determines that the active window does not occupy the password input area. It is determined whether or not it is included. If the active window includes a password input area, the determining unit 130 stores the correspondence relationship between the combination of the title of the active window and the URL or process name and the ID and password input on the registration information input screen in the registration screen list 111. to register. If the active window does not include a password input area, determination unit 130 registers the combination of the title of the active window and the URL or process name in analysis exclusion list 112 .

In this way, the information processing apparatus 100 registers the active window including the password input area in the registration screen list 111, so that the ID and password can be automatically input from the next time onward. In addition, when the active window does not include the password input area, the information processing apparatus 100 can exclude the active window from the target of screen analysis processing from the next time onward by registering it in the analysis exclusion list 112 . Thereby, the information processing apparatus 100 can reduce the processing load of screen analysis.

If the active window does not include the password input area and the time taken to determine whether the active window includes the password input area is equal to or longer than a predetermined time, the determination unit 130 determines whether the active window title and URL or process name are registered in the analysis exclusion list 112 . As a result, when the processing load of the screen analysis process on the active window is large, the information processing apparatus 100 can exclude the active window from the target of the screen analysis process from the next time onward.

Further, the storage unit 110 stores an exclusion candidate list 113 in which correspondence relationships between combinations of titles, URLs or process names, and the number of times are registered. If the active window does not include the password input area and the time taken to determine whether the active window includes the password input area is equal to or longer than a predetermined time, determination unit 130 determines whether the title of the active window and the URL or process name are matched. Add 1 to the number of times corresponding to the combination. If the number of times corresponding to the combination of the active window title and URL or process name is three or more, determination unit 130 registers the combination of the active window title and URL or process name in analysis exclusion list 112. . As a result, the information processing apparatus 100 can register in the analysis exclusion list 112 an active window that is unlikely to transition to a login screen.

Further, the storage unit 110 stores an exclusion candidate list 114 in which correspondence relationships between combinations of titles, URLs or process names, and the number of times are registered. If the active window includes a password entry area, monitoring unit 120 accepts a selection as to whether or not to register the active window. When the selection to register the active window is accepted, the monitoring unit 120 stores the correspondence relationship between the combination of the title of the active window, the URL or the process name, and the ID and password input on the registration information input screen in the registration screen list 111 . to register. When receiving a selection not to register the active window, the monitoring unit 120 adds 1 to the number of times corresponding to the combination of the title of the active window and the URL or process name. If the number of times corresponding to the combination of the active window title and URL or process name is five or more, monitoring unit 120 registers the combination of the active window title and URL or process name in analysis exclusion list 112 . As a result, the information processing apparatus 100 can prevent the screen analysis process from being performed next time on the active window that is not required to be registered by the user.

Although the embodiment has been illustrated above, the configuration of each unit shown in the embodiment can be replaced with another one having the same function. Also, any other components or steps may be added. Furthermore, any two or more configurations (features) of the above-described embodiments may be combined.

REFERENCE SIGNS LIST 1 target screen 2 identification information 10 information processing device 11 storage unit 11a registration screen list 11b analysis exclusion list 12 processing unit

Claims (5)

a storage unit for storing a registration screen list in which correspondence between login screen identification information and login information is registered, and an analysis exclusion list in which screen identification information is registered;
When the identification information of the target screen is registered in the registered screen list, login information corresponding to the identification information of the target screen is input to the target screen, and the identification information of the target screen is registered in the registered screen list. and the analysis exclusion list, determine whether or not the target screen includes a password input area, and if the target screen includes a password input area, input identification information of the target screen a processing unit that registers a correspondence relationship with login information in the registration screen list, and registers identification information of the target screen in the analysis exclusion list when the target screen does not include a password input area;
Information processing device having The processing unit analyzes the identification information of the target screen when the target screen does not include the password input area and the time taken to determine whether the target screen includes the password input area is equal to or longer than a predetermined time. be on the exclusion list,
The information processing apparatus according to claim 1. The storage unit stores a first exclusion candidate list in which a correspondence relationship between screen identification information and the number of non-registration determinations is registered;
If the target screen does not include a password input area and the time taken to determine whether or not the target screen includes a password input area is equal to or longer than a predetermined time, the processing unit corresponds to the identification information of the target screen. adding 1 to the number of non-registration determinations, and registering the identification information of the target screen in the analysis exclusion list when the number of non-registration determinations corresponding to the identification information of the target screen is equal to or greater than a first threshold;
3. The information processing apparatus according to claim 2. The storage unit stores a second exclusion candidate list in which a correspondence relationship between screen identification information and the number of non-registration selections is registered,
The processing unit receives a selection as to whether or not to register the target screen when the target screen includes a password input area, and inputs identification information of the target screen when a selection to register the target screen is received. When the correspondence with the login information is registered in the registration screen list, and the selection not to register the target screen is accepted, 1 is added to the number of non-registration selections corresponding to the identification information of the target screen, and the number of non-registration selections corresponding to the identification information of the target screen is registering the identification information of the target screen in the analysis exclusion list when the number of non-registration selections corresponding to the identification information is equal to or greater than a second threshold;
4. The information processing apparatus according to any one of claims 1 to 3. to the computer,
When the identification information of the target screen is registered in the registration screen list in which the correspondence relationship between the identification information of the login screen and the login information is registered, the login information corresponding to the identification information of the target screen is sent to the target screen. Input,
determining whether or not the target screen includes a password input area when the identification information of the target screen is registered neither in the registered screen list nor in the analysis exclusion list in which the screen identification information is registered;
if the target screen includes a password input area, registering a correspondence relationship between identification information of the target screen and input login information in the registration screen list;
registering identification information of the target screen in the analysis exclusion list when the target screen does not include a password input area;
A program that causes an action to take place.

Images