JP4768777B2 - Password management system, password management method, and password management program - Google Patents

Description

  The present invention relates to a password management system, a password management method, and a password management program that manage the issuance of passwords used to authenticate users.

  Today, password management is being strengthened to improve the security of computer systems. For example, if the input of a preset password fails a plurality of times, the password may not be used until the password is updated. In some cases, the password is periodically reissued and updated. When the password is updated in this way, the security administrator usually generates an initial password and provides it to the user.

  Here, when notifying the user of the automatically updated password information to a user other than the original user, a system for ensuring security has been studied (for example, Patent Document 1). See). In the system described in this document, a random character string is created as a password used in the user authentication process, and the created password character string information is divided into a plurality of parts. The divided partial password character string information is registered on the Web, and URL address information for referring to each password character string information is sent to the user's mail address.

  Also, a password management system for ensuring safety and security with a simple operation has been studied (for example, see Patent Document 2). In the password management system described in this document, a plurality of divided passwords are combined in a predetermined connection order as a password. A plurality of divided passwords and a connection order are managed in association with a plurality of users.

Furthermore, an initial password issuance processing system that can easily reproduce the original password even when the divided password obtained by dividing the password is delivered to the customer has been studied (for example, see Patent Document 3). In the initial password issuance processing system described in this document, a password generation unit generates an (M + N) digit initial password and divides it into an (M + 1) digit split password and an N digit split password. Specifically, the first half part (the part from the front of the generated initial password to the (M + 1) th part) and the latter part (the part from the generated initial password to the Nth part) are divided into customer terminals. Send.
Japanese Patent Laying-Open No. 2006-65708 (first page, FIG. 2) JP 2007-219630 A (first page, FIG. 3) JP 2007-334768 A (first page, FIG. 3)

  However, as described above, when the issued password is divided and provided to the user, all the divided divided passwords may be leaked. On the other hand, if the password issuance notification is done by strict contact methods such as postal mail and telephone, the burden on users and security managers will increase, and the password will be reissued manually. Because of this, it is impossible to respond quickly. In addition, a simple contact method such as e-mail is realized, but when notification is made by these methods, it is necessary to consider the leakage risk associated therewith.

  The present invention has been made to solve the above-mentioned problems, and a password management system, a password management method, and a password for issuing a password used for authenticating a user more safely and efficiently. To provide a management program.

In order to solve the above problem, the invention described in claim 1 includes a password information storage unit that records a password in association with a user identifier, and a notification destination information storage that records a plurality of notification destination information in association with the user identifier. To determine the number of digits to be divided according to the method and type of notification destination
A password management system comprising weighting information storage means for recording the weighting information and a control means connected to the user terminal, when the control means receives a password issuance request including a user identifier, the password And generating a plurality of notification destinations from among the notification destinations associated with the user identifier from the notification destination information storage unit, the password generation unit for recording in the password information storage unit in association with the user identifier, Dividing by dividing the password according to the number of digits of the notification destination by determining the number of digits to divide the password using the weighting information recorded in the weighting information storage means according to the type of the acquired notification destination Split transmission means for generating a password and sending each split password to each notification destination, combining the split passwords The reproduction order is summarized as further comprising a password management means for notifying the user terminal.

According to a second aspect of the invention, the password management system of claim 1, wherein the password management means, reproduction and password input field to accept the divided password for each destination, the divided password entered in the password input field The gist of the invention is to transmit login authentication screen data including split password combining means for combining in accordance with the order and authentication request means for transmitting the combined password to the user terminal.

According to a third aspect of the present invention, in the password management system according to the first or second aspect, the control unit generates a dummy password, and the notification destination information storage unit includes a user identifier included in the password issuance request. A dummy information transmission unit that identifies a dummy notification destination that is not selected as a transmission destination of the divided password and transmits the dummy password to the dummy notification destination. And

According to a fourth aspect of the present invention, in the password management system according to any one of the first to third aspects, when an authentication request including a user identifier and a password is received from a user terminal, the password information storage means is The gist of the present invention is that it further comprises an authenticating means for authenticating using.

According to a fifth aspect of the present invention, there is provided a password information storage unit that records a password in association with a user identifier, a notification destination information storage unit that records a plurality of notification destination information in association with a user identifier, and a type of notification destination A method for managing passwords using a password management system comprising weighting information storage means for recording weighting information for determining the number of digits to be divided and a control means connected to a user terminal, When the control means receives a password issuance request including a user identifier, it generates a password and records it in the password information storage means in association with the user identifier, from the notification destination information storage means to the user identifier associated notification destination obtaining a plurality of notification destinations among which, depending on the type of the acquired notification destination Using the weighting information recorded on the weighting information storage unit determines the number of digits to split the password, to generate a divided password obtained by dividing the password in accordance with the number of digits of the notification destination, the respective divided password each The gist of the present invention is to execute a divided transmission step for transmitting to the notification destination and a password management step for notifying the user terminal of the reproduction order for combining the divided passwords.

According to a sixth aspect of the present invention, there is provided a password information storage unit that records a password in association with a user identifier, a notification destination information storage unit that records a plurality of notification destination information in association with a user identifier, and a type of notification destination. A password management system using a password management system comprising weighting information storage means for recording weighting information for determining the number of digits to be divided and a control means connected to the user terminal, When the control means receives a password issuance request including a user identifier, it generates a password and records it in the password information storage means in association with the user identifier; from the notification destination information storage means to the user identifier associated notification destination obtaining a plurality of notification destination from the are, the type of the acquired notification destination Flip with the weighting information with the recorded weighting information in the storage means determines the number of digits to split the password, to generate a divided password obtained by dividing the password in accordance with the number of digits of the notification destination, each divided The gist is to function as split transmission means for transmitting a password to each notification destination and password management means for notifying the user terminal of a reproduction order for combining the split passwords.

(Function)
According to the invention described in claim 1, 5 or 6 , when the control means receives a password issuance request including the user identifier, it generates a password and records it in the password information storage means in association with the user identifier. Next, a plurality of notification destinations are acquired from the notification destinations associated with the user identifier from the notification destination information storage means, and a divided password is generated by dividing the password according to the number of acquired notification destinations. Send the password to each notification destination. Furthermore, the user terminal is notified of the reproduction order for combining the divided passwords. Accordingly, by transmitting the split password to a notification destination selected from a plurality of notification destinations, it is possible to suppress password leakage and ensure security.

According to the present invention, the division transmission unit determines the number of digits for dividing the password using the weighting information recorded in the weighting information storage unit according to the type of the notification destination acquired from the notification destination information storage unit. As a result, the number of digits of the divided password to be transmitted can be changed according to the attribute of the notification destination, so that the security can be further improved by using the number of digits considering the situation such as the safety of the notification destination.

According to the second aspect of the present invention, the password input field that accepts the split password for each transmission destination and the split password combining unit that combines the split passwords input in the password input field according to the reproduction order are combined. The login authentication screen data including the authentication request means for transmitting the password is transmitted to the user terminal. As a result, it is not necessary for the user himself / herself to combine the split passwords, so input errors can be suppressed.

According to the invention described in claim 3 , the control means generates the dummy password. Further, the notification destination information storage means identifies a dummy notification destination that is associated with the user identifier included in the password issuance request and that has not been selected as the split password transmission destination. Then, the dummy password is transmitted to the dummy notification destination. This makes it difficult to reproduce the original password from the divided passwords transmitted to a plurality of notification destinations, so that security can be further improved.

According to the fourth aspect of the present invention, when the control means receives an authentication request including a user identifier and a password from the user terminal, the control means authenticates using the password information storage means. As a result, personal authentication can be performed using a newly issued password.

  According to the present invention, it is possible to provide a password management system, a password management method, and a password management program for issuing a password used for authenticating a user more safely and efficiently.

  DESCRIPTION OF EMBODIMENTS Hereinafter, embodiments embodying the present invention will be described with reference to FIGS. In the present embodiment, a password management system, a password management method, and a password management program for reissuing a password used when a user logs in to an information processing server will be described. Here, as shown in FIG. 1, the client terminal 10, the password management server 20, and the information processing server 30 are connected to each other via a network. The password management server 20 executes a password issuance management process as a password management system.

  Here, the client terminal 10 is a computer terminal (user terminal) used by a user, and is used when each user accesses the information processing server 30. The client terminal 10 has a function of transmitting data via a network, a function of displaying received data, and the like. For this reason, the client terminal 10 includes an input unit such as a keyboard and a mouse, an output unit such as a display, a communication unit, and the like in addition to a CPU, RAM, and ROM (not shown).

  The password management server 20 is a computer system that transmits and receives data to and from the client terminal 10 and performs various data processing. The password management server 20 includes a control unit 21, a user management information storage unit 22 as a notification destination information storage unit, and a weighted management information storage unit 23 as a weighting information storage unit. The control unit 21 includes control means (CPU, RAM, ROM, and the like), and performs processes (request reception stage, password generation stage, split transmission stage, password management stage, etc.) described later. By executing the password management program for that purpose, the control unit 21 functions as a request reception unit 211, a password generation unit 212, a split transmission unit 213, and a password management unit 214 as shown in FIG.

The request receiving unit 211 executes processing for receiving a password reissue request from the client terminal 10.
The password generation unit 212 executes processing for generating a password to be provided to the user. The password generation unit 212 holds a character table in which characters (for example, alphanumeric characters and symbols) that can be used for a password are recorded.

The division transmission unit 213 executes processing for dividing the generated password and transmitting it to the user's notification destination.
The password management unit 214 executes a process for managing a password according to the transmission status to the user. The password management unit 214 holds data relating to a reference time for waiting for a communication error message. As the reference time, a time required for facsimile transmission or a time for outputting an e-mail transmission error message is used.

Further, the password management server 20 is connected to a facsimile terminal or a mobile phone terminal via a public telephone network or a mobile phone network.
As shown in FIG. 2A, the user management information storage unit 22 stores a user management record 220 for managing information related to the user's notification destination. This user management record 220 is recorded when a user who uses the information processing server 30 is registered. The user management record 220 includes data relating to a user identifier, a notification destination identifier, a notification destination type, and a status. In the present embodiment, it is assumed that a plurality of notification destinations are registered for each user.

In the user identifier data area, data relating to an identifier for specifying a user who uses the information processing server 30 is recorded.
In the notification destination identifier data area, data related to the notification destination for transmitting the divided password to this user is recorded. In the present embodiment, as the notification destination identifier, the user's mobile phone terminal mail address, the user's own computer terminal e-mail address, the user's supervisor's e-mail address, the user's facsimile terminal facsimile number, etc. Is set.

In the notification destination type data area, data relating to an identifier for specifying the type of the notification destination identifier is recorded. Flags for identifying the type of notification destination are recorded, such as “user's mobile phone terminal”, “e-mail address of own computer terminal”, “supervisor's e-mail address”, and “user's facsimile number” Is done.
In the status data area, data for specifying the usage state of the notification destination is recorded. For example, in the case of a notification destination identifier that cannot be transmitted, an “unavailable” flag is recorded.

  In the weight management information storage unit 23, as shown in FIG. 2B, a weight management record 230 is recorded. The weight management record 230 is recorded when the weight of the number of digits for transmitting the password is determined and registered according to the notification destination type. The weight management record 230 includes data on the notification destination type and the weight value.

In the notification destination type data area, a flag for specifying the notification destination type is recorded.
In the weight value data area, data relating to weighting for determining the number of digits for dividing the password is recorded.

  In addition, the information processing server 30 performs user identification processing and various information processing by transmitting and receiving data to and from the client terminal 10. Therefore, the information processing server 30 includes a personal authentication control unit 31 as a login authentication unit and a user authentication information storage unit 32 as a password information storage unit.

  The personal authentication control unit 31 functions as an authentication unit, and receives a login request including a user identifier and a password from the client terminal 10 via the network. And the personal authentication control part 31 performs the collation process about the received login request. When the user identifier and password can be verified, the personal authentication control unit 31 permits login and executes predetermined information processing with the client terminal 10. In addition, the personal authentication control unit 31 includes a memory that stores an allowable number of retries (an allowable number of failures). If the number of retries exceeds the allowable number of failures, the personal authentication control unit 31 rejects the login.

  As shown in FIG. 2 (c), the user authentication information storage unit 32 stores a user authentication record 320 for authenticating a user who uses the information processing server 30. This user authentication record 320 is recorded when a use application for the information processing server 30 is registered. This user authentication record 320 includes data relating to a user identifier, a password, a lock status, and the number of retries.

In the user identifier data area, data relating to an identifier for specifying a user who uses the information processing server 30 is recorded.
In the password data area, data relating to a password for authenticating the user is recorded.

In the lock status data area, an “unavailable” flag is recorded when login is rejected.
In the retry count data area, data related to the number of retries (retry count) when collation is not possible is recorded.

  Next, password management in this embodiment will be described with reference to FIGS. Here, description will be made in the order of login processing and password issuing processing.

(Login process)
First, the login process will be described with reference to FIG.
When the user uses the information processing server 30, the communication program of the client terminal 10 is activated and an access request is transmitted to the information processing server 30.
In this case, the information processing server 30 executes an access process (step S1-1). Specifically, the personal authentication control unit 31 of the information processing server 30 acquires an access request from the client terminal 10.

  Then, the information processing server 30 executes a login authentication screen transmission process (step S1-2). Specifically, the personal authentication control unit 31 of the information processing server 30 transmits login authentication screen data to the client terminal 10. The login authentication screen 500 shown in FIG. 5 is output to the display of the client terminal 10 that has received the login authentication screen data. The login authentication screen 500 is provided with a user identifier input field and a password input field.

  When the user identifier or password is input to the login authentication screen 500 and the login button is selected, the client terminal 10 transmits an authentication request to the information processing server 30. This authentication request includes data related to the user identifier and password input on the login authentication screen 500.

  When the authentication request is received from the client terminal 10, the information processing server 30 executes a password verification process (step S1-3). Specifically, the personal authentication control unit 31 of the information processing server 30 uses the user authentication information storage unit 32 to search for a user authentication record 320 in which the received user identifier is recorded.

  And the information processing server 30 performs the determination process about whether a password corresponds (step S1-4). Specifically, the personal authentication control unit 31 of the information processing server 30 determines whether the password recorded in the identified user authentication record 320 matches the received password.

  If the passwords match (in the case of “YES” in step S1-4), the information processing server 30 executes a login permission process (step S1-5). Specifically, the personal authentication control unit 31 of the information processing server 30 permits information processing using the client terminal 10.

  On the other hand, if the passwords do not match (in the case of “NO” in step S1-4), the information processing server 30 executes a determination process as to whether or not the number of retries exceeds the allowable number of failures (step S1-6). ). Specifically, the personal authentication control unit 31 of the information processing server 30 stores “1” added to the number of retries recorded in the user authentication record 320 of the user authentication information storage unit 32. Then, the personal authentication control unit 31 compares the number of retries with the allowable number of failures.

  If the number of retries does not exceed the allowable number of failures (“NO” in step S1-6), the information processing server 30 transmits login authentication screen data to the client terminal 10 again (step S1-2). In this case, the user inputs the user identifier and password again.

  On the other hand, when the number of retries exceeds the allowable number of failures (in the case of “YES” in step S1-6), the information processing server 30 executes a login rejection process (step S1-7). Specifically, the personal authentication control unit 31 of the information processing server 30 records an “unusable” flag in the lock status data area of the user authentication record 320 of the user authentication information storage unit 32.

  Then, login rejection display screen data including a message indicating that “authentication cannot be performed and login is rejected” is transmitted to the client terminal 10. The login refusal display screen data includes a URL for accessing the password management server 20 and a message prompting reissue of the password. This URL includes data for specifying the user identifier. In this case, the user accesses the password management server 20 using the client terminal 10.

(Password issuance process)
Next, the password issuing process will be described with reference to FIG.
Here, the control unit 21 of the password management server 20 executes a process for receiving a password issuance request from the client terminal 10 (step S2-1). Specifically, the request receiving unit 211 of the control unit 21 receives a password issuance request transmitted from the client terminal 10 using a URL included in the login rejection display screen. Then, the request receiving unit 211 acquires the user identifier included in the URL from this password issue request.

  Next, the control unit 21 of the password management server 20 executes a temporary password generation process (step S2-2). Specifically, the password generation means 212 of the control unit 21 randomly extracts a number of characters corresponding to the number of digits of the password from the character table, arranges these characters, and arranges them for a predetermined number of digits (10 in this embodiment). A temporary password). Then, the password generation unit 212 records the temporary password in the password data area of the user authentication record 320 in which the user identifier of the user is recorded in the user authentication information storage unit 32. Further, the password generation unit 212 deletes the “unusable” flag recorded in the lock status data area of the user authentication record 320, and resets the retry count recorded in the retry count data area.

  Next, the control unit 21 of the password management server 20 executes a process for acquiring a user's notification destination (step S2-3). Specifically, the division transmission unit 213 of the control unit 21 acquires the user management record 220 in which the user identifier of the user is recorded from the user management information storage unit 22.

  And the control part 21 of the password management server 20 performs the selection process of a some notification destination (step S2-4). Specifically, the division transmission unit 213 of the control unit 21 randomly selects a plurality of (predetermined number of divisions) as transmission destinations of the division password from the notification destinations recorded in the acquired user management record 220. Select a notification destination. In this embodiment, three notification destinations are specified as the number of divisions, and “notification destination 1 (self-seat terminal)”, “notification destination 2 (mobile phone)”, and “notification destination 3 (facsimile)” are selected. Assuming that

  Next, the control unit 21 of the password management server 20 executes weighting processing of the notification destination (step S2-5). Specifically, the division transmission unit 213 of the control unit 21 specifies the notification destination type of the selected notification destination. Then, the division transmission unit 213 acquires a weight value corresponding to each notification destination type from the weight management information storage unit 23.

Next, the control unit 21 of the password management server 20 executes a process for determining the number of division digits according to the weighted result (step S2-6). Specifically, the divided transmission means 2 of the control unit 21
No. 13 determines the number of divided digits of the divided password to be transmitted to each notification destination so that the number of digits of the notification destination having a large weight value is increased. In this embodiment, the division transmission unit 213 determines the number of division digits (5 digits, 3 digits, 2 digits) in the order of the notification destinations of the notification destination type with the large weight value, and “notification destination 1” is Assume that it is determined that 2 digits, “notification destination 2” is 5 digits, and “notification destination 3” is 3 digits.

  Next, the control unit 21 of the password management server 20 executes a temporary password dividing process based on the number of divided digits (step S2-7). Specifically, the division transmission unit 213 of the control unit 21 rearranges the notification destinations selected in step S2-4 at random. In the present embodiment, it is assumed that “notification destination 2 (mobile phone)”, “notification destination 3 (facsimile)”, and “notification destination 1 (self-seat terminal)”.

  Then, the division transmission unit 213 divides the temporary password according to the number of divided digits according to the number of digits assigned to each notification destination. In this embodiment, a divided password is generated by dividing a 10-digit temporary password into 5 digits, 3 digits, and 2 digits, and each of them is generated as “notification destination 2 (mobile phone)”, “notification destination 3 (facsimile)”, Assign to “notification destination 1 (self-seat terminal)”.

  Next, the control unit 21 of the password management server 20 executes a split password transmission process (step S2-8). Specifically, the division transmission unit 213 of the control unit 21 transmits each divided password to each notification destination identifier. Here, the split transmission means 213 generates an e-mail including a split password when transmitting to an e-mail address, and generates facsimile image data including the split password when transmitting to a facsimile number. Send to notification destination.

  Next, the control part 21 of the password management server 20 performs the determination process about whether there exists any communication error about each notification destination (step S2-9). Specifically, the password management unit 214 of the control unit 21 waits for a predetermined time and confirms whether a communication error message is returned from the notification destination.

  When a communication error message is not acquired even after waiting for a predetermined time (in the case of “YES” in step S2-9), the control unit 21 of the password management server 20 executes a temporary password reproduction method presentation process. (Step S2-10). Specifically, the password management unit 214 of the control unit 21 transmits password issuance screen data to the client terminal 10. The password management unit 214 includes, in the password issuance screen data, data relating to a method for reproducing a password (reproduction order in which passwords are divided and a notification destination to which each divided password is transmitted). A password issuance screen 510 shown in FIG. 6 is output to the display of the client terminal 10 that has received this password issuance screen data.

  In this case, the user combines the split passwords according to the password issuing screen 510 to reproduce the temporary password. Then, the information processing server 30 is accessed again using the combined temporary password. In this case, the information processing server 30 executes the above-described login process again.

  On the other hand, when a communication error message is acquired (in the case of “NO” in step S2-9), the control unit 21 of the password management server 20 executes a temporary password reset process (step S2-11). Specifically, the password management unit 214 of the control unit 21 records an “unusable” flag in the lock status data area of the user authentication record 320 of the user authentication information storage unit 32. Further, the password management unit 214 records an “unusable” flag in the status data area of the user management record 220 of the user management information storage unit 22. In this case, the user separately makes a password issue request.

As described above, according to the present embodiment, the following effects can be obtained.
In the above embodiment, the control unit 21 of the password management server 20 that has received the password issuance request from the client terminal 10 generates a temporary password (step S2-2) and selects a plurality of notification destinations (step S2-4). ). Then, the control unit 21 of the password management server 20 divides the temporary password by the number of divided digits (step S2-7), and transmits the divided password (step S2-8). In this case, since the split password is transmitted to a plurality of randomly selected notification destinations, it becomes difficult for others to obtain all the split passwords, and security can be improved.

  When the communication error message is not acquired (“YES” in step S2-9), the control unit 21 of the password management server 20 executes a temporary password reproduction method presentation process (step S2-10). Thereby, since the divided password is combined by the user, the personal authentication control unit 31 and the user authentication information storage unit 32 can perform the personal authentication in the same manner as in the past.

  In the above embodiment, the control unit 21 of the password management server 20 executes the notification destination weighting process (step S2-5). And the control part 21 divides | segments a temporary password by the division | segmentation digit number according to this weighting (step S2-7). Thereby, the number of digits can be set according to the attribute of the notification destination, and security can be improved.

  In the above embodiment, the control unit 21 of the password management server 20 performs a determination process as to whether or not there is a communication error for each notification destination (step S2-9). Here, when a communication error message is acquired (in the case of “NO” in step S2-9), the control unit 21 of the password management server 20 executes a temporary password reset process (step S2-11). As a result, when a troublesome notification destination is detected, the issuance of a password can be stopped to ensure security.

In addition, you may change the said embodiment into the following aspects.
In the above embodiment, the password is reissued when the number of retries exceeds the allowable number of failures, but the application of this password management method is not limited to this. For example, it can be used when the password is periodically updated.

  In the above embodiment, the password management server 20 that issues a password and the information processing server 30 that executes the personal authentication process are separated, but it is also possible to construct an integrated system. In this case, in the information processing server 30, the request receiving unit 211, the password generating unit 212, the divided transmission unit 213, the control unit 21 that executes the password management unit 214, the user management information storage unit 22, the weighted management information storage unit 23 is provided. As a result, the information processing server 30 can reissue the password.

  In the above embodiment, a predetermined number of notification destinations to which the divided password is transmitted are selected from the notification destinations recorded in the user management information storage unit 22 (step S2-4). Here, an essential notification destination (for example, an e-mail address of a supervisor) may be determined in advance as a notification destination for transmitting the split password. Thereby, it is possible to transmit the divided password while restricting the notification destination.

In the above embodiment, a predetermined number of notification destinations to which the divided password is transmitted are selected from the notification destinations recorded in the user management information storage unit 22 (step S2-4). Here, the control unit 21 transmits dummy information for transmitting a dummy password to the notification destination recorded in the user management record 220 and not selected as the split password transmission destination (dummy notification destination). Means may be provided. Specifically, the dummy information transmission unit of the control unit 21 generates a dummy password separately from the original password. Then, the dummy information transmission unit transmits the dummy password to the notification destination identifier that is not selected as the transmission destination of the divided password. This makes it difficult for others to reproduce the original password, and thus security can be further improved.

  In the above embodiment, a plurality (three in this embodiment) of notification destinations are specified from the notification destinations recorded in the acquired user management record 220. Here, the number of notification destinations to which the divided password is transmitted is not limited to three as long as the number is notified. Further, the number of notification destinations to which the split password is transmitted may be arbitrarily determined. For example, the division transmission unit 213 of the control unit 21 generates a random number and determines the number of notification destinations according to the random number. Further, the number of notification destinations may be determined according to the notification destination type. The number of divisions is reduced when a high-security notification destination (for example, a telephone number) is used, and the number of divisions is increased when a low-security notification destination (for example, an e-mail address) is used.

  Specifically, the weight management information storage unit 23 records the number of digits of the divided password to be transmitted for the notification destination type. And the division | segmentation transmission means 213 of the control part 21 determines the number of digits according to a notification destination classification, when a notification destination identifier is specified. In this case, when a notification destination identifier of a notification destination type with high security is selected, a large number of digits is divided from the temporary password according to the notification destination type. On the other hand, when a notification destination identifier of a notification destination type with low security is selected, a small number of digits are divided from the temporary password. The notification destination selection is repeated until all the digits constituting the temporary password are divided. In this case, since the number of divisions is not limited, security can be further improved.

  In the above embodiment, the user combines the split password and reproduces the temporary password. Instead, the client terminal 10 may execute a split password combination process. Specifically, the control unit 21 of the password management server 20 transmits login authentication screen data to the client terminal 10. The login authentication screen 520 shown in FIG. 7 is output to the display of the client terminal 10 that has received the login authentication screen data. The login authentication screen 520 has a password input field for each split password notification destination. The input fields are arranged in the order in which the temporary passwords are divided.

  A script program is embedded in the login authentication screen 520. When the login button is selected, the script program is activated. With this script program, the client terminal 10 functions as the divided password combining unit 521 and the authentication request unit 522. Specifically, the divided password combining unit 521 combines the passwords input in the password input fields in the reproduction order. Here, the divided passwords input in the password input fields are combined in the order of arrangement of the password input fields.

  Then, the authentication request unit 522 transmits the combined password to the information processing server 30. Thus, the user may set a password for each received notification destination. Therefore, it is not necessary for the user himself / herself to combine the split passwords, and input errors can be suppressed.

In the above embodiment, the control unit 21 of the password management server 20 executes a determination process as to whether or not there is a communication error for each notification destination (step S2-9). When the communication error message is not acquired (“YES” in step S2-9), the control unit 21 of the password management server 20 executes a temporary password reproduction method presentation process (step S2-10). Instead, the temporary password reproduction method may be presented without performing the determination process (step S2-9) as to whether there is a communication error. Thereby, the use of the temporary password can be permitted without causing the user to wait.

  In the above embodiment, when a password issue request is received from the client terminal 10 (step S2-1), a process for issuing a password is executed. Here, when issuing a password, it is also possible to perform simple authentication. Specifically, keywords (for example, favorite words, e-mail addresses, etc.) for performing simple authentication are recorded for the user identifier recorded in the user management information storage unit 22. When a password issue request is received, keyword input screen data is transmitted to the client terminal 10. Then, only when the input keyword matches the keyword recorded in the user management information storage unit 22, the processes after step S2-2 are executed. As a result, it is possible to prevent reissuing easily, or to prevent locking and reissuing by a malicious user.

  In the above embodiment, the user identifier is provided to the password management server 20 by using a URL including data for identifying the user identifier. Instead, in the above-described simple authentication, the user may be prompted to input a user identifier, and the password management server 20 may be provided with the user identifier.

The system schematic of embodiment of this invention. It is explanatory drawing of the data recorded on each data storage part, (a) is the data recorded on the user management information storage part, (b) is the data recorded on the weighted management information storage part, (c) is Explanatory drawing of the data recorded on the user authentication information storage part. Explanatory drawing of the process sequence of this embodiment. Explanatory drawing of the process sequence of this embodiment. Explanatory drawing of the display screen output to a client terminal. Explanatory drawing of the display screen output to a client terminal. Explanatory drawing of the operation | movement by the display screen output to a client terminal, and a client terminal.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 10 ... Client terminal, 20 ... Password management server, 21 ... Control part, 211 ... Request reception means, 212 ... Password generation means, 213 ... Divided transmission means, 214 ... Password management means, 30 ... Information processing server, 31 ... Personal authentication Control unit, 32... User authentication information storage unit.

Claims (6)

Password information storage means for recording a password in association with a user identifier;
Notification destination information storage means for recording a plurality of notification destination information in association with a user identifier;
Weighting information storage means for recording weighting information for determining the number of digits to be divided according to the type of notification destination;
A password management system comprising a control means connected to a user terminal,
The control means is
A password generation means for generating a password when recording a password issuance request including a user identifier and recording the password in association with the user identifier in the password information storage means;
Weighting information recorded in the weighting information storage unit according to the type of the notification destination obtained by acquiring a plurality of notification destinations from the notification destinations associated with the user identifier from the notification destination information storage unit A split transmission means for determining the number of digits to divide the password using, generating a split password by dividing the password according to the number of digits of the notification destination, and transmitting each of the split passwords to each notification destination;
A password management system comprising password management means for notifying the user terminal of a reproduction order for combining the divided passwords. The password management means includes
Includes a password input field that accepts a split password for each destination, a split password combining means that combines the split passwords entered in this password input field according to the order of reproduction, and an authentication requesting means that transmits the combined password The password management system according to claim 1, wherein login authentication screen data is transmitted to the user terminal. The control means is
Generate a dummy password,
In the notification destination information storage means, a notification destination associated with a user identifier included in the password issue request is specified, and a dummy notification destination that is not selected as a transmission destination of the split password is specified,
Password management system according to claim 1 or 2, characterized in that it comprises the further dummy information transmitting means for transmitting the dummy password to the dummy notification destination. When receiving an authentication request including the user identifier and the password from the user terminal, according to any one of claims 1-3, characterized in that further comprising an authentication means for authenticating using the password information storage means Password management system. Password information storage means for recording a password in association with a user identifier;
Notification destination information storage means for recording a plurality of notification destination information in association with a user identifier;
Weighting information storage means for recording weighting information for determining the number of digits to be divided according to the type of notification destination;
A method for managing passwords using a password management system comprising a control means connected to a user terminal,
The control means is
If a password issuance request including a user identifier is received, a password is generated, and a password is generated in association with the user identifier and recorded in the password information storage means.
Weighting information recorded in the weighting information storage unit according to the type of the notification destination obtained by acquiring a plurality of notification destinations from the notification destinations associated with the user identifier from the notification destination information storage unit A split transmission step of determining the number of digits to divide the password using, generating a split password by dividing the password according to the number of digits of the notification destination, and transmitting each of the divided passwords to each notification destination,
A password management method for executing a password management step of notifying the user terminal of a reproduction order for combining the divided passwords. Password information storage means for recording a password in association with a user identifier;
Notification destination information storage means for recording a plurality of notification destination information in association with a user identifier;
Weighting information storage means for recording weighting information for determining the number of digits to be divided according to the type of notification destination;
A password management system using a password management system provided with a control means connected to a user terminal,
The control means;
A password generation means for generating a password when recording a password issuance request including a user identifier and recording the password in association with the user identifier in the password information storage means;
Weighting information recorded in the weighting information storage unit according to the type of the notification destination obtained by acquiring a plurality of notification destinations from the notification destinations associated with the user identifier from the notification destination information storage unit A split transmission means for determining the number of digits to divide the password using, generating a split password by dividing the password according to the number of digits of the notification destination, and transmitting each of the split passwords to each notification destination;
A password management program that functions as password management means for notifying the user terminal of a reproduction order for combining the divided passwords.

Images