JP4013413B2 - Information processing apparatus and storage medium - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to an information processing apparatus and a storage medium that execute a system startup process including user authentication using user-defined login information.
[0002]
[Prior art]
Currently, computer systems such as personal computers and servers are used in all situations. Therefore, it is very important to make the computer system safe and reliable, and to prepare for tampering or theft of data stored in the computer system. Thus, as a security measure for the computer system, a method in which a user inputs a user name, a password, and the like when the computer system is started and the computer system side collates them is mainly employed.
[0003]
In general, in security management at the time of starting the computer system described above, input of a user name, a password, and the like is performed using a standard login dialog screen 10a of the computer system as shown in FIG. Is also performed by the standard system startup processing function of the computer system.
[0004]
As shown in FIG. 6, the standard login dialog screen 10a of the computer system includes a user input column 10b for inputting a user name, a password input column 10c for inputting a password, a user name and a password, An OK button 10d for starting user authentication processing and a cancel button 10e for canceling without performing user authentication processing are provided.
[0005]
When starting up the computer system, the user performs a login process such as inputting a user name and a password in the user input field 10b and password input field 10c of the standard login dialog screen 10a. The standard system startup processing function in the computer system determines whether or not these user names and passwords match those set in advance, and only when they match, can log in to the computer system And
[0006]
On the other hand, computer systems have been used for various purposes. For example, in a portable personal computer or the like that is frequently used for personal use, the user can easily customize the device so that the user can easily use the device. And since the above-mentioned login process is executed every time the device is started, the frequency of execution is high, and the user wishes to change the login dialog screen to one unique to the user and make it easier to use. was there.
[0007]
[Problems to be solved by the invention]
However, in a computer system, it is difficult for a user to create a login dialog screen when starting up the computer system independently because of the nature of security management. In addition, even if a user's own login dialog screen can be created and login processing to the system can be performed using user-defined login information, user authentication performed based on the user-defined login information becomes insufficient. On the other hand, it may be difficult to ensure the security of the computer system.
[0008]
That is, when a character string that is difficult for the user to forget such as the user's own name or date of birth is set in the password, the password may be easily stolen by others. Conversely, even when a complicated password is set, changing the combination of character strings and repeatedly performing login operations may cause the password to be stolen or forgotten by the user. It may be easily stolen by memos. When performing login processing to the system using user-defined login information, there is a possibility that security management of user-defined login information is not sufficiently ensured.
[0009]
Therefore, an object of the present invention is to provide an information processing apparatus and a storage medium capable of ensuring a sufficient security function when executing a system activation process including user authentication using user-defined login information. Is to provide.
[0010]
[Means for Solving the Problems]
The invention described in claim 1
Defined by user and includes user authentication User First storage means for storing a function routine (for example, the user function library 3UL shown in FIG. 1);
A second storage means for storing the processing value calculation function (for example, the standard function library 3SL shown in FIG. 1);
Read the user function routine stored in the first storage means, and execute user authentication in the user function routine, Passed as an argument to the processing value calculation function Acquired the authentication result value (for example, processing flag “Flg”) Authentication result value And a processing value calculation function stored in the second storage means with a predetermined value (for example, the startup processing value “sRt”) that cannot be set by the user as an argument And a first return value for confirming the validity of the user authentication is calculated by the called processing value calculation function. First computing means (for example, CPU 2 shown in FIG. 1; password input user function processing shown in FIG. 5);
The processing value calculation function stored in the second storage means using the same value as the argument used in the first calculation means as an argument And a second return value for confirming the validity of the user authentication is calculated by the called processing value calculation function. Second computing means (for example, CPU 2 shown in FIG. 1; processing value calculation function processing shown in FIG. 4);
In the first calculation means The first return value computed by (For example, the return value “uRt”) and the second calculation means The second return value computed by (E.g., return values “srOk”, “srCan”) and a comparison means (CPU 2 shown in FIG. 1; comparison between “Ru” and “Rs” shown in FIG. 4);
Depending on the comparison result by this comparison means System startup processing, cancellation, security processing An activation processing means to execute (for example, CPU 2 shown in FIG. 1; system activation processing and security processing shown in FIG. 4);
It is characterized by having.
[0013]
The invention according to claim 2
The system further includes random number generation means (for example, CPU 2 shown in FIG. 1; step S110 shown in FIG. 4) for generating a random number each time the system is activated.
A random number generated by the random number generation means is used as the predetermined value which is an argument of the processing value calculation function calculated by the first and second calculation means.
[0016]
The invention described in claim 3
The user authentication in the user function routine is performed using login information (for example, a password) input from the user.
[0019]
The invention according to claim 4
When the result of user authentication in the user function routine is valid, the calculation result by the first calculation means includes The first return value And system startup In the login process necessary User name (For example, the user name “uUser”)
The comparison means is connected to the first calculation means. The first return value computed by And second computing means The second return value computed by And compare
The activation processing means is transferred to the first calculation means by the comparison means. The first return value computed by And the second computing means The second return value computed by If the system is determined to match, the system is started User name required for login process using , It is characterized by executing system startup processing.
[0022]
DETAILED DESCRIPTION OF THE INVENTION
Hereinafter, an embodiment of an information processing apparatus according to the present invention will be described with reference to FIGS.
[0023]
This information processing apparatus 1 uses a login function routine (password input user) defined by a user and including user authentication in order to ensure sufficient security even when performing system startup processing using user-defined login information. A user function library 3UL storing a function) and a standard function library 3SL storing a processing value calculation function. When the system is started, the password input user function is called from the user function library 3UL, and login information input by the user in the password input user function (login code input to a login dialog such as a password). The user authentication result value (processing flag “Flg”) is acquired, the acquired user authentication result value and the startup processing value that cannot be set by the user (sRt; for example, system startup A processing value calculation function is calculated using a generated random number or the like as an argument, and the calculation result is acquired as a return value (uRt). The system side also calculates the processing value calculation function using the same values (startup processing value “sRt”, processing flag “Flg”) as arguments, and acquires the calculation result as a return value (srOk or srCan). By comparing the two calculation results acquired as the return values, it is determined whether or not the two calculation results are coincident with each other, and a startup process (system startup, cancellation, security process) corresponding to the determination result is performed.
[0024]
Although details will be described later, the login information defined by the user and input by the user when the system activation process is executed includes a login code such as a password. The password input user function is stored in a password DLL of a user function library 3UL described later. The processing value calculation function is stored in a startup processing value calculation function DLL of a standard function library 3SL described later.
[0025]
First, the configuration will be described.
FIG. 1 is a block diagram showing an internal configuration of the information processing apparatus 1 according to the present embodiment.
[0026]
In FIG. 1, the information processing apparatus 1 includes a CPU 2, a RAM 3, a ROM 4, a display unit 5, an operation unit 6, a memory card 7, and a communication unit 8, and each unit is connected by a bus 9.
[0027]
A CPU (Central Processing Unit) 2 is input from a program designated from various programs corresponding to the information processing apparatus 1 stored in a memory in a memory card 7 that is a storage medium, or from an operation unit 6. Various data corresponding to various instruction signals are stored in the RAM 3, various processes are executed in accordance with the application program stored in the RAM 3 according to the input instruction and input data, and the processing results are stored in the RAM 3. , Output to the display unit 5 for display. Then, the CPU 2 stores the processing result stored in the RAM 3 in a memory storage destination in the memory card 7 instructed to input from the operation unit 6.
[0028]
When the CPU 2 executes a system startup process to be described later, the CPU 2 is installed from the memory in the memory card 7 as a storage medium and stored in the RAM 3 (see FIG. 4). Is read out, and each process is executed according to the read program. This system activation process includes a user-defined password input user function process (see FIG. 5).
[0029]
The details of each process will be described later, but the outline will be described here. The CPU 2 is installed from the memory in the memory card 7 as a storage medium and starts up the system stored in the RAM 3 (see FIG. 4) when the system is started. When a function is created in a DLL (Dynamic Link Library) format, a user-defined password input user function process (see FIG. 5) is always executed.
[0030]
Here, the DLL (Dynamic Link Library) is a function of the OS. The routine is divided into several files with the extension “.DLL” and only the necessary DLL files are loaded into the memory. use. The correction can be performed only on the target DLL file, and even if it is another routine, the same DLL file can be used, which also saves memory.
[0031]
The CPU 2 calculates an activation process value that cannot be set by the user before calling a password input user function defined in advance by the user. In the present embodiment, a random number generated every time the system is activated is used as the activation process value.
[0032]
The password input user function is a function stored in the password DLL of the user function library 3UL, and is a function for performing user authentication. In the password input user function, a process value calculation function called from the activation process value calculation DLL with the result value of user authentication based on user-defined login information input from the user and the calculated activation process value as arguments. And the calculation result including the user authentication result is acquired as a return value.
[0033]
The process value calculation function is a function stored in the startup process value calculation DLL of the standard function library 3SL, and is a function for authenticating the password input user function. In the system startup process (see FIG. 4) and the password input user function process (see FIG. 5), the CPU 2 calculates a processing value calculation function using the same argument, and acquires the calculation result as a return value. .
[0034]
Then, the CPU 2 compares the return value of the processing value calculation function calculated in the password input user function with the return value of the processing value calculation function calculated on the system startup processing side, and these return values are If there is a match and the user name, which is information necessary for system startup, is acquired, it is determined that a normal login process has been performed, and if these return values do not match, a normal login process is performed. Is determined not to have been performed. Depending on the determination result, login processing, cancellation processing, security processing, or the like is performed in the system startup processing.
[0035]
A RAM (Random Access Memory) 3 includes application programs (for example, application program 1 (AP1), AP2, and AP3) corresponding to the information processing apparatus 1, a system specification file 3SF, an application specification file 3AF, and a standard function library 3SL. And a memory area for storing the user function library 3UL and the like. It also has a work memory area for storing input instructions, input data, and processing results.
[0036]
An application program (hereinafter referred to as “AP”) stored in the RAM 3 is a program that is installed via the memory card 7 and can be used by the information processing apparatus 1.
[0037]
The system spec file 3SF is a file having information necessary for defining and setting the system of the information processing apparatus 1.
[0038]
The application spec file 3AF is a file set in correspondence with an application in the information processing apparatus 1.
[0039]
The standard function library 3SL is a library that stores various functions that the information processing apparatus 1 has as a system standard. In order to authenticate the processing function for performing a standard activation process and the password input user function. This is a library storing the processing value calculation function and the like.
[0040]
The user function library 3UL is a library in which various functions defined by the user are stored, and a password input user function and the like are stored in the password DLL in the user function library 3UL.
[0041]
A ROM (Read Only Memory) 4 stores an operating system (OS) program or the like corresponding to the information processing apparatus 1.
[0042]
The display unit 5 includes a CRT (Cathode Ray Tube) and an LCD (Liquid Crystal Display), and displays display data input from the CPU 2.
[0043]
The operation unit 6 includes input devices such as a keyboard provided with cursor keys and numeric input keys, and a pointing device such as a mouse, and outputs a key press signal and a mouse position signal pressed on the keyboard to the CPU 2.
[0044]
The memory card 7 has a memory in which programs, data, and the like are stored in advance, and this memory is constituted by a magnetic, optical memory, or semiconductor memory. The memory of the memory card 7 stores various application programs corresponding to the information processing apparatus 1, data processed by various processing programs, and the stored application programs and data are installed in the RAM 3. Is done.
[0045]
Further, the program, data, etc. stored in the memory card 7 may be received from other devices via the communication unit 8 to be described later and stored, and other programs connected via the communication unit 8 may be used. The memory card 7 may be provided on the apparatus side, and a program, data, or the like stored in the memory card 7 may be used via the communication unit 8.
[0046]
The communication unit 8 is constituted by a modem (MODEM / DEModulator), a terminal adapter (TA: Terminal Adapter), a router, or the like. Performs control for communication.
[0047]
Here, an example of data exchange between each information processing apparatus 1 and the main computer 11 will be described with reference to FIG. A mobile terminal 1A, a mobile terminal 1B, and a mobile terminal 1C illustrated in FIG. 2 are mobile terminal type information processing apparatuses to which the present invention is applied.
[0048]
The mobile terminal 1A stores data in the memory card 7A, the mobile terminal 1B stores data in the memory card 7B, and the mobile terminal 1C stores data in the memory card 7C. The data is stored in the memory cards 7A, 7B, and 7C. Each content is read by the card reader / writer 12. Then, each read content is transferred to the main computer 11 connected to the card reader / writer 12. The card reader / writer 12 writes the application file 11AF and the data file 11DF of the main computer 11 to the memory cards 7A, 7B, and 7C. Then, in the mobile terminal 1A, the mobile terminal 1B, and the mobile terminal 1C, the applications and data stored in the memory cards 7A, 7B, and 7C are read and installed in the RAMs 3 respectively.
[0049]
Next, with reference to FIG. 3, a login dialog screen for inputting user-defined login information will be described as an example.
[0050]
FIG. 3 shows an example of a login dialog screen 5 a for performing system startup processing using user-defined login information. The login dialog screen 5 a is displayed on the display unit 5. As shown in FIG. 3, the login dialog screen 5a of the information processing apparatus 1 includes a password input field 5b for inputting a password, an OK button 5c for starting user authentication processing after the password is input, and user authentication processing. A cancel button 5d for canceling without being provided is provided.
[0051]
In the login dialog screen 5a shown in FIG. 3, only a password is input as information for authenticating the individual user. In order to ensure sufficient security by inputting only the password, the CPU 2 executes the following system activation process (see FIG. 4) and user-defined password input user function process (see FIG. 5).
[0052]
Next, the operation will be described.
First, with reference to FIG. 4, the operation of the system activation process in the information processing apparatus 1 will be described. FIG. 4 is a flowchart showing the operation of the system startup process executed by the CPU 2.
[0053]
In FIG. 4, when the information processing apparatus 1 is activated, the CPU 2 is stored in the memory in the memory card 7 as a storage medium, and is installed in the RAM 3 from the memory and reads the system activation processing program to activate the system. Start the processing program. First, the CPU 2 determines whether or not there is a password DLL (Dynamic Link Library) in which a user-defined password input user function is stored in the user function library (step S101). If there is no password DLL (step S101) In step S101; NO), standard system activation processing in steps S102 to S108 is executed.
[0054]
On the other hand, when there is a password DLL in which the password input user function defined by the user is stored (step S101; YES), the password input user function stored in the password DLL is called (see FIG. 5), The user-defined system activation process in steps S110 to S119 is executed. The password input user function defined in advance by the user will be described in detail later.
[0055]
First, the case where there is no password DLL in which the password input user function is stored (step S101; NO) will be described. If there is no password input user function defined by the user, standard system activation processing (steps S102 to S108) of the information processing apparatus 1 is executed.
[0056]
In the standard system activation process, a standard log-in dialog screen (DLG) for inputting a password or the like is displayed (step S102). Then, after the counter “C” is initialized to “0” (step S103), it is determined whether or not the password entered by the user matches the registered password of the user (step S104). This counter “C” counts how many times the user has made incorrect password input or incorrect password input, and the counter value “C” is equal to a certain value “m”. When the password is erroneously input or the password is illegally input more than a certain number of times, the security processing (step S119) of the information processing apparatus 1 is executed.
[0057]
If it is determined that the password entered by the user matches the registered password of the individual user (step S104; YES), the process proceeds to step S107, the user name is set, and login processing is executed (step S107). 1 is activated (step S108). If it is determined that the password entered by the user does not match the registered password of the individual user (step S104; NO), “1” is added to the counter “C” (step S105), and the counter “C” is added. It is determined whether or not the count value matches a certain value “m” (step S106). If the counter “C” does not match “m” (step S106; NO), the process proceeds to step S102, and the process is started again from the input of the password on the standard login dialog screen. If the counter “C” matches “m” (step S106; YES), the process proceeds to step S119 (arrow (1)), and security processing of the information processing apparatus 1 is performed (step S119). 1 ends the system activation process.
[0058]
Next, a case where there is a password DLL in which a password input user function is stored (step S101; YES) will be described. If there is a password input user function defined by the user, this password input user function is called to execute user-defined system activation processing (steps S110 to S119).
[0059]
Before calling the password input user function stored in the password DLL, the information processing apparatus 1 acquires the activation process value “sRt” passed as an argument to the password input user function and the process value calculation function (step S110). This activation process value “sRt” is a disturbance that occurs every time the system of the information processing apparatus 1 is activated.
It is a number that cannot be set by the user.
[0060]
When the activation processing value “sRt” is acquired, the CPU 2 calls a password input user function defined by the user stored in the password DLL (step S111). At this time, the activation processing value “sRt” calculated earlier is passed as an argument of the password input user function. The format of the password input user function used in this embodiment is shown in equation (1).
[0061]
Int Msv_Pw_Input (HWND hWnd, int sRt) (1)
[0062]
In this equation (1), the argument is the application handle “hWnd”, the processing value calculation function “sRt”, and the return value is a value calculated by equation (1).
[0063]
The password input user function is an example, and is not limited to this, and any function created in the DLL format may be used.
[0064]
With the password input user function (1) called here, the system activation process in the information processing apparatus 1 is executed using a login dialog screen or the like defined in advance by the user.
[0065]
FIG. 5 is a flowchart for explaining processing operations in the user-defined password input user function (1) executed by the CPU 2.
[0066]
In FIG. 5, when the password input user function (1) is called in step S111 in FIG. 4, the CPU 2 is stored in the memory in the memory card 7 as a storage medium, and installed in the RAM 3 from the memory. Read the password input user function processing program. Then, a user-defined password input user function processing program is started.
[0067]
The process in the user-defined password input user function (1) displays a log-in dialog screen 5a (DLG) (see FIG. 3) for inputting login information such as a password previously defined by the user (see FIG. 3). S120). Then, login information set in advance by the user such as a password is input to the displayed login dialog screen 5a (step S121), and whether or not to execute the user authentication process is determined by an “Ok” button or “ It is determined by operating the “cancel” button (step S122). When executing the user authentication process, the processes of steps S123 to S128 are executed. When canceling the user authentication process, the process of step S129 is executed.
[0068]
When the “Ok” button is selected in step S122 (step S122; OK), the counter “C” is initialized to “0” (step S123). The counter “C” counts the number of times that the user authentication process (step S124) has not been executed correctly continuously, as in step S103 of FIG. 4, and executes the system security process (FIG. 4, step S119). It is a value that is a criterion for determining whether or not to do so.
[0069]
Next, user authentication processing is performed (step S124). If it is determined that the user authentication processing has been performed correctly (step S124; YES), the processing flag “Flg = 0” is acquired as the user authentication result value, and the startup processing is performed. The process value calculation function in the activation process value calculation function DLL is called with the value “sRt” and the process flag “Flg = 0” as arguments (step S125). In the present embodiment, the form of the processing value calculation function is shown in Expression (2).
[0070]
Int Msv_User_Deal (int sRt, int Flg) (2)
[0071]
In this equation (2), the argument is the activation process value “sRt” and the process flag “Flg”, and the return value is acquired as “uRt”.
[0072]
Note that this processing value calculation function is an example, and is not limited to this, and may be a function created in the DLL format.
[0073]
The processing value calculation function is calculated using the startup processing value “sRt” and the processing flag “Flg = 0” as arguments, and a return value “uRt” is obtained. Furthermore, since it is determined in step S124 that the user authentication process has been performed correctly, the user name “uUser”, which is information necessary for the login process, is acquired (step S126). Thereafter, when the return value “uRt” and the user name “uUser” are acquired, the process returns to step S111 in FIG. 4 to return to the user-defined system activation process.
[0074]
When user authentication processing is performed (step S124) and it is determined that the user authentication processing has not been performed correctly (step S124; NO), "1" is added to the counter "C" described above (step S127), and the addition is performed. It is determined whether the count value of the counter “C” matches a certain value “n” (step S128). If the count value does not match “n” (step S128; NO), the process proceeds to step S121, and the process is started again from the input of a login code such as a password. If the count value matches “n” (step S128; YES), the process proceeds to step S119 in FIG. 4 (arrow (1)), and the security processing of the information processing apparatus 1 is performed (step S119). The system activation process in the device 1 is terminated.
[0075]
When the “cancel” button is selected in step S122 (step S122; cancel), the processing flag “Flg = 1” is acquired as the user authentication result value, and the activation processing value “sRt” and the processing flag “Flg = 1”. And the process value calculation function (2) in the startup process value calculation DLL is called (step S129). As a result, “uRt” is acquired as a return value, and the process returns to step S111 in FIG. 4 to return to the user-defined system activation process.
[0076]
When the process of the user-defined password input user function (1) described above with reference to FIG. 5 ends, the process returns to the user-defined system activation process, and the return value “uRt” and the user name “uUser” are stored in the register “ Ru ”and register“ Rn ”are secured (step S112). If the return values “Ru” and “Rn” in the password input user function (1) are acquired, whether or not the user authentication processing is correctly performed and the correct user name is acquired in the password input user function (1) processing shown in FIG. Whether or not the user authentication process is canceled and the cancel process is performed (steps S116 to S118) is calculated for the activation process value in order to authenticate the password input user function (1). The processing value calculation function (2) is called from the DLL to determine the calculation result.
[0077]
The processing flag “Flg” passed as an argument to the processing value calculation function (2) described above is a return value that serves as a reference for determining whether or not the user authentication processing has been performed correctly in the password input user function (1) processing. Is set to the processing flag “Flg = 0” or the processing flag “Flg = 1”. When the processing flag “Flg” is set to “Flg = 0” in the processing value calculation function (2), a criterion for determining whether or not the user authentication processing is correctly performed in the password input user function (1) processing. The return value “srOk” can be acquired. On the other hand, when the processing flag “Flg” is set to “Flg = 1” in the processing value calculation function (2), it is determined whether or not the user authentication processing is canceled in the password input user function (1) processing. The reference return value “srCan” can be acquired.
[0078]
First, it is determined whether or not the user authentication process is correctly performed in the password input user function (1) process described above. In step S113, in the password input user function (1) process, in order to determine whether or not the user authentication process is correctly performed, the process flag “Flg = 0” is set, and the process flag “Flg = 0” and The processing value calculation function (2) is calculated using the startup processing value “sRt” as an argument, and the return value “srOk” is acquired as the calculation result. Then, the return value “srOk” is secured in the register “Rs” (step S114). If the return value “srOk” is acquired in step S114, it is determined whether or not it matches the return value “uRt” secured in the register “Ru” acquired in step S112 (step S115).
[0079]
When the return values secured in the register “Ru” and the register “Rs” match, that is, the return value “uRt” obtained from the password input user function (1) in step S112 and the processing value in step S114. When the return value “srOk” acquired from the calculation function (2) matches (step S115; YES), the password input user function (1) confirms the validity of the user authentication process, and the process proceeds to step S107. Transition. Then, the user name “uUser” acquired in the password input user function (1) process is read from the register “Rn”, set in the information processing apparatus 1, and logged into the information processing apparatus 1 (step S107). The system is activated (step S108). Conversely, if the return values secured in the register “Ru” and the register “Rs” do not match (step S115; NO), the process proceeds to step S116.
[0080]
If it is determined in the password input user function (1) process that the user authentication process is not performed correctly, it is then determined whether or not the user authentication process is canceled in the password input user function (1) process. To do. In step S116, in order to determine whether or not the user authentication process is canceled in the password input user function (1) process, unlike the process in step S113, “Flg = 1” is set. The processing value calculation function (2) is calculated using the flag “Flg = 1” and the activation processing value “sRt” as arguments, and the return value “srCan” is obtained as the calculation result (step S117). The return value “srCan” is secured in the register “Rs”. When the return value “srCan” is obtained in step S117, it is determined whether or not it matches the return value “uRt” secured in the register “Ru” in step S112 (step S118).
[0081]
When the return values secured in the registers “Ru” and “Rs” match, that is, the return value “uRt” acquired from the password input user function (1) in step S112, and the processing value in step S117. If the return value “srCan” acquired from the calculation function (2) matches (step S118; YES), it is determined that the password input user function (1) processing has been canceled, and the system of the information processing apparatus 1 End the startup process. On the other hand, if the return values secured in the register “Ru” and the register “Rs” do not match (step S118; NO), it is determined that the user authentication has not been performed correctly and has not been canceled. Thus, the process proceeds to step S119.
[0082]
In step S119, the security processing of the information processing apparatus 1 is performed (step S119), and the system activation process in the information processing apparatus 1 is terminated. The security processing in step S119 is processing for disabling the information processing apparatus 1 or forcibly terminating it.
[0083]
As described above, the information processing apparatus 1 according to the embodiment to which the present invention is applied stores the password input user function defined in advance by the user in the user function library 3UL and the processing value calculation function as the standard function library. It is stored in 3SL. When the system is started, user authentication using login information input by the user is executed in the password input user function, and a processing flag “Flg” is acquired as a result value of the user authentication. And the return value of the processing value calculation function is calculated using the activation processing value that is a random number as an argument. Further, on the system side, the return value of the processing value calculation function is calculated using the same argument as that used in the password input function. Then, by comparing the two return values, it is determined whether or not the user-defined system activation process is correctly executed.
[0084]
Therefore, in the password input user function, the processing value calculation function is calculated using the user authentication result and the startup processing value that is a random number as arguments, and in the system startup processing, the processing value calculation function is calculated using the same argument, By comparing these calculation results, the validity of the user authentication can be determined. Therefore, even when starting the system using login information entered by the user on the user-defined login dialog screen, it is possible to ensure security management of these user-defined login information and system security. It becomes.
[0085]
In addition, it is possible to prevent a user authentication result from being manipulated intentionally by generating a random number every time the system is started and using the generated random number as an argument for a calculation for user authentication. Therefore, it is possible to further strengthen the security of the system freely defined by the user.
[0086]
Then, by using the login information input by the user for the above-described user authentication, the user can execute processing at the time of login using a password that is easy to use. Therefore, unless the correct login information is input by the user, the user is not correctly authenticated, and the security of the system freely defined by the user can be ensured.
[0087]
Furthermore, since the information required for starting the system is acquired after the result of user authentication is valid and after the calculation of a predetermined function, it is possible to reduce the amount of information being stolen or tampered with by others. In addition, only when the information required for login is acquired from the result of user authentication and the calculation result of the processing value calculation function on the login function routine side and the system side match both conditions, Since it is activated, it is possible to further enhance the security at the time of system activation using the login function routine freely defined by the user.
[0088]
The present invention is not limited to the contents of the above embodiment, and can be appropriately changed without departing from the gist of the present invention. For example, the password input user function defined by the user and the process value calculation function in the startup process value calculation DLL are created in the C ++ language format, but the present invention is not limited to this, and a language that can be stored in the memory in the DLL format. It should be a function of the form.
[0089]
In this embodiment, a memory card is used as a storage medium. However, another storage medium such as a floppy disk or a DVD-ROM may be used.
[0090]
【The invention's effect】
According to the information processing apparatus of the invention described in claim 1 and the storage medium described in claim 5, it is freely defined by the user. User User authentication can be performed using a function routine, and the validity of the user authentication can be determined. As a result, even when the system is started using login information entered by the user on the user-defined login dialog screen, security management of the user-defined login information and system security can be reliably ensured. It becomes possible.
[0091]
According to the information processing apparatus of the second aspect of the invention, a random number is generated each time the system is started, and the generated random number is used as an argument for the operation for user authentication. Unlike the case where the argument is used, it is possible to prevent the calculation result from being predicted or the user authentication result from being manipulated intentionally. As a result, it is possible to further enhance the security of the system freely defined by the user.
[0092]
According to the information processing apparatus of the third aspect of the present invention, the login information input from the user is used for user authentication in the user function routine. Therefore, the user can log in using his / her password that is easy to use. On the other hand, unless correct login information is input by the user, the user is not properly authenticated, and the security of the system freely defined by the user can be ensured.
[0093]
According to the information processing apparatus of the fourth aspect of the invention, the information necessary for system startup is acquired after the result of user authentication is valid and after a predetermined function is calculated. It is possible to reduce tampering. In addition, information necessary for login is acquired from the result of user authentication, and User Since the system is started only when both of the conditions that the calculation result of the processing value calculation function on the function routine side and the system side match are satisfied, it is freely defined by the user User It is possible to further enhance the security at the time of starting the system using the function routine.
[Brief description of the drawings]
FIG. 1 is a block diagram showing an internal configuration of an information processing apparatus 1 according to an embodiment of the present invention.
2 is a diagram showing an example of data exchange between a plurality of information processing apparatuses 1 and a main computer 11. FIG.
FIG. 3 is a diagram showing an example of a login dialog screen 5a for executing system startup processing using user-defined login information in the information processing apparatus 1.
FIG. 4 is a flowchart for explaining the operation of system startup processing in the information processing apparatus 1;
FIG. 5 is a flowchart for explaining the operation of user-defined password input user function processing in the information processing apparatus 1;
FIG. 6 is a diagram showing an example of a standard login dialog screen 10a for performing standard system activation processing that is generally used in a computer system.
[Explanation of symbols]
1 Information processing equipment
1A mobile terminal type information processing device
1B mobile terminal type information processing device
1C Mobile terminal type information processing device
2 CPU
3 RAM
3SF system spec file
3AF application spec file
3SL standard function library
3UL user function library
4 ROM
5 display section
5a User-defined login dialog screen
5b Password input field
5c OK button
5d Cancel button
6 Controller part
7 Memory card
7A memory card
7B memory card
7C memory card
8 Communication Department
9 Bus
10a Standard login dialog screen
10b User input field
10c Password input field
10d OK button
10e Cancel button
11 Main computer
11AF application file
11DF data file
12 Card reader / writer
AP1 application program
AP2 application program
AP3 application program

Claims (5)

First storage means for storing a user function routine defined by the user and including user authentication;
Second storage means for storing a processing value calculation function;
The user function routine stored in the first storage means is read, user authentication is executed in the user function routine, an authentication result value passed as an argument to the processing value calculation function is acquired, and the acquired authentication Using the result value and a predetermined value that cannot be set by the user as arguments, the processing value calculation function stored in the second storage means is called, and the validity of the user authentication is confirmed by the called processing value calculation function. First computing means for computing a first return value for :
The processing value calculation function stored in the second storage unit is called using the same value as the argument used in the first calculation unit as an argument, and the validity of the user authentication is verified by the called processing value calculation function. Second computing means for computing a second return value for confirmation ;
Comparing means for comparing the first return values more operation on the first computing means, a second return values more operation on the second operation means, the,
In accordance with the comparison result by the comparison unit, a startup processing unit that executes system startup processing, cancellation, and security processing ;
An information processing apparatus comprising: A random number generating means for generating a random number each time the system is activated;
The random number generated by the random number generation means is used as the predetermined value that is an argument of the processing value calculation function calculated by the first and second calculation means. Information processing device.   The information processing apparatus according to claim 1, wherein user authentication in the user function routine is performed using login information input from a user. If the result of user authentication in the user function routine is valid, the calculation result by the first calculation means includes the first return value and a user name necessary for login processing at the time of system startup. Included,
The comparison means compares the first return value calculated by the first calculation means with the second return value calculated by the second calculation means,
The activation processing means, the comparison means, it is determined that the second return values more operations into the first return value and the second calculation means which is more operation on the first computing means coincides when the using a user name required to log process when the system is started, the information processing apparatus according to claim 1, wherein executing the system boot process. A storage medium storing a computer-executable program,
A computer-executable program code for storing a user function routine defined by a user and including user authentication in a first storage means;
A program code executable by a computer for storing the processing value calculation function in the second storage means;
The user function routine stored in the first storage means is read, user authentication is executed in the user function routine, an authentication result value passed as an argument to the processing value calculation function is acquired, and the acquired authentication Using the result value and a predetermined value that cannot be set by the user as arguments, the processing value calculation function stored in the second storage means is called, and the validity of the user authentication is confirmed by the called processing value calculation function. Computer-executable program code for computing a first return value for :
Using the same value as the argument used in the user function routine as an argument, the processing value calculation function stored in the second storage means is called, and the validity of the user authentication is confirmed by the called processing value calculation function. A computer-executable program code for calculating a second return value for :
A computer-executable program code for comparing the first return value and the second return value ;
A program code executable by a computer for comparing whether the first return value and the second return value match, and executing a system activation process, a cancellation process, and a security process according to the comparison result ; ,
A storage medium characterized by storing a program including:

Images