JP6747178B2 - Program and authentication device - Google Patents

Description

The present invention relates to a program and an authentication device.

With the emphasis on security, management of user IDs (identification information) and passwords has become important. There is a system that encourages users to change their passwords regularly so that they cannot guess the password, but complicated passwords are required. A system in which the same password cannot be set by comparison with the registered password several times in the past based on the password registration history and the like has become common.

There are several ways to handle if a user forgets their user ID and/or password.

For example, the control unit of the authentication server disclosed in Patent Document 1 transmits the data of the password reissue input screen to the terminal in response to the request from the terminal, and receives the input data for the password reissue input screen. Then, the control unit reads the user information corresponding to the user identification information included in the received input data from the user DB, and compares the received input data with the read user information. Then, when the collated data match, a password is generated, and the password is stored in the user DB as the password of the user information corresponding to the user identification information included in the input data. Further, the control unit generates an electronic mail including the generated password data, and transmits the electronic mail to the mail address included in the read user information. In this way, a new password is reissued to a user whose user ID or password cannot be remembered.

Further, when the system disclosed in Patent Document 2 receives a login request with an e-mail address of a mobile phone terminal as an ID, after performing matrix authentication using position information notified in advance to this user, one-time A password is generated and sent to the mobile phone terminal of the user, and access to the database that centrally manages the user IDs and passwords of various systems used by the user is permitted with this password.

JP, 2005-182354, A JP, 2006-195716, A

It may take time to change the password. For example, there is a system in which a security administrator manually manages the resetting of a password for a user. In such a system, it takes a certain amount of time for the security administrator to receive a password change request, confirm whether the request is from a valid requester, and set the changed password. Also, during the absence of the security administrator, such as on weekends, the password cannot be changed, during which the user cannot log in to the system unless the correct password is remembered.

It is an object of the present invention to allow a user to log in when the user forgets the password without waiting for the setting of the new password to be completed.

In the invention according to claim 1, the computer stores the latest password of each user and the password before the change, and the password input by the user is stored in the memory as the password before the change of the user. If it is a password , the permission means for permitting the login of the user with a condition, if the password input by the user is stored in the storage means as the password before the change of the user, the condition, A program for functioning as a restriction unit that restricts the use authority of the user as compared with the case where the latest password is input , wherein the restriction unit for the user who logs in by using the password before the change Among the data permitted to be used when logging in with the latest password, the permission to use is restricted to the data updated after the previous password was changed to the latest password. It is a program that is characterized by what it does not do .

According to a second aspect of the present invention, the computer stores the latest password of each user and the password before the change, and the password input by the user is stored in the memory as the password before the change of the user. If it is a password, the permission means that allows the user to log in conditionally, if the password entered by the user is the password before the change of the user, the entered password must be the password before the change. Is a program that functions as a presentation unit that presents the information indicating to the user, wherein the permission unit inputs an instruction as to whether to log in using the password before the change, in accordance with the presented information. The user is permitted to log in on the condition that the password is changed, and when the user receives an instruction to log in using the password before the change, the user's usage authority is updated to the latest version. Restricting the use authority by the permitting means for the user who logs in after restricting the password than when the password is input and restricts the user who logs in by using the password before the change is of the data of which use is permitted, for the previous password has been updated since it was changed to the latest password data is not to allow the use, are characteristic and to Help program that ..

In the invention according to claim 3 , a storage means for storing the latest password of each user and the password before the change, and the password inputted by the user is stored in the storage means as the password before the change of the user. If the condition is, the permitting means for permitting the user to log in conditionally, and the password entered by the user is stored in the storage means as the password before the change of the user, the condition is look including the, and limiting means for limiting than in the case of the use rights of users the latest password is entered, the use authority by the restriction means for the user to log in using the previous password restrictions, Among the data permitted to be used when logging in with the latest password, the data updated after the time when the password before the change is changed to the latest password is not permitted to be used. Is an authentication device.
According to a fourth aspect of the present invention, a storage means for storing the latest password of each user and the password before the change, and the password input by the user is stored in the storage means as the password before the change of the user. If it is, and if the password entered by the user is the password before the change, the input means is the password before the change. Presentation means for presenting information indicating to the user, wherein the permission means has entered an instruction as to whether or not to log in using the password before the change, according to the presented information. Is permitted to log in as the user, and when the user has instructed to log in using the password before the change, the latest password is input as the usage authority of the user. The use authority is restricted by the permitting means for the user who permits login after restricting the login and uses the password before the change, and the use is permitted when the login is performed with the latest password. Among the data, the authentication device is characterized in that the data that has been updated after the password before the change is changed to the latest password is not permitted to be used .

According to the invention of claim 1 or 3 , when the user forgets the password, the user can log in without waiting for the setting of the new password to be completed.

In addition , compared to the case where the same password as when logging in with the latest password is given when logging in with the password before change, the range affected when the password before change is leaked can be limited. ..

Also , limit the range affected when the old password is leaked, compared to the case where the same data as when logging in with the latest password is permitted when logging in with the old password. You can

According to the invention of claim 2 or 4, it is possible for the user to recognize that the entered password is the password before the change.

In addition , compared to the case where the same password as when logging in with the latest password is given when logging in with the password before change, the range affected when the password before change is leaked can be limited. ..

Also , limit the range affected when the old password is leaked, compared to the case where the same data as when logging in with the latest password is permitted when logging in with the old password. You can

It is a figure which shows the example of the system of embodiment. It is a figure which shows the example of the version update history of the document hold|maintained at document DB. It is a figure which shows the example of the management information of the password hold|maintained at the password management part. It is a figure which shows the example of the management information hold|maintained at the login user information holding part. It is a figure which shows the example of the process procedure which an authentication process part performs. It is a figure which shows typically an example of the display content of the confirmation screen which asks the user whether to log in with the password before change. It is a figure which shows the example of the process which extracts the document group (temporary use range) which the user who logged in with the password before change admits.

Immediately after changing the password for logging in to the system, the new password does not become memorized and it is easy to forget the new password. If you forget your new password, it will take some time to reset the password. During this time, if the user cannot log in to the system, inconvenience such as delay in work may occur. In this embodiment, for example, in such a situation, a mechanism that allows a user who has forgotten a new password to use the system until the password reset is completed.

FIG. 1 illustrates the configuration of a system to which the user authentication control method of this embodiment is applied. In this example, the mechanism of the present embodiment is applied to a document management system that manages electronic documents (hereinafter simply referred to as “documents”). This document management system receives a request from a terminal operated by a user via a network, for example, and provides a document in response to the request. The document management system includes a document DB 10, a usage authority DB 12, a password management unit 14, an authentication processing unit 16, a login user information holding unit 18, and a usage management unit 20.

The document DB (database) 10 is a database that holds a document group managed by the document management system. The document DB 10 holds document management information in addition to document entity data. FIG. 2 exemplifies the data content of the management information of a certain document. In this example, the document management information includes the document ID (identification information) of the document, the user ID of the creator of the document, and the update history of the version of the document. Each time the version of the document is updated, the date and time of the update and the version number after the update are recorded in the version update history.

The usage authority DB 12 holds information on the usage authority of each user registered in the document management system for this system. The information on the usage authority of the user that is held includes, for example, information (for example, an access control list) indicating the content of the authority that the user has for each document. Further, the information on the usage authority of the user may include information on a list of functions available to the user among various functions provided by the document management system.

The document DB 10 and the usage authority DB 12 described above may be the same as conventional ones.

The password management unit 14 stores and manages the password of each user. Here, in addition to the latest password, the password management unit 14 of the present embodiment holds a password immediately before changing to that password (referred to as a "pre-change password").

FIG. 3 shows an example of password management information held by the password management unit 14. In the password management information of this example, “password update date/time”, “password”, and “password before change” are registered in association with the user ID (identification information). “Password” is the current valid (ie, legitimate) password of the user with that user ID. The “password before change” is a password that was valid until just before the change to the “password”. The “password update date and time” is the date and time when the “pre-change password” is updated to the latest “password”.

The authentication processing unit 16 authenticates a user who attempts to log in to the document management system. The authentication performed here is password authentication, and whether or not the set of the user ID (identification information) and the password input by the user matches the set of the user ID and the regular password registered in the password management unit 14. It is determined whether or not they match and login is permitted. Further, the authentication processing unit 16 permits the login even when the user inputs the pre-change password. Even if the user forgets the legitimate password, it is common for them to remember the previous password (pre-change password). This is especially true immediately after changing the password. By allowing login with the password before change, the possibility that a user who has forgotten the new password can log in increases. However, in this case, if the user who has logged in with the password before change is granted the same authority as the regular password, the meaning of changing the password for the sake of improving security is diminished. Therefore, in this embodiment, when the pre-change password is input, the login is conditionally permitted. For example, the authority of the user who logged in with the pre-change password is more restricted than when the user logged in with the regular (latest) password.

The login user information holding unit 18 holds the management information of the user who has logged in to the document management system. FIG. 4 shows an example of the management information stored in the login user information storage unit 18. The illustrated management information includes information such as “user ID”, “login status”, “function available with temporary authority”, and “temporary usage range” for each currently logged-in user. The “login status” is the status of the logged-in user, and takes one of two statuses, “regular login” and “temporary login”. The state “regular login” indicates that the user has logged in with a regular password, and the state “temporary login” indicates that the user has logged in with the pre-change password. The “functions available with temporary authority” is a list of functions available to the user in the “temporary login” state among the functions provided by the document management system. The number of functions included in the “functions that can be used with temporary authority” list is less than the functions that are permitted to be used when the user logs in normally. The "temporary use range" is a list of documents that can be used by the user in the "temporary login" state. The number of documents included in the document list of the "temporary use range" is smaller than the number of documents permitted to be used when the user logs in normally. The information on the “functions available with temporary authority” and the “temporary usage range” indicates the restricted authority permitted to the user who has logged in with the password before change. When the user logs in with the pre-change password, the authentication processing unit 16 generates temporary authority information when the user logs in with the pre-change password from the regular authority of the user managed in the usage authority DB 12, and the user It is registered in the login user information holding unit 18 in association with the user ID of.

When the logged-in user requests the use of the document in the document DB 10 or the function provided by the document management system, the use management unit 20 controls whether or not the use is permitted. This control is performed based on the authority information of the user in the usage authority DB 12 for the user in the regular login state. On the other hand, regarding the user who is in the temporary login state with the password before change, a request from the user is made based on the information of “functions available with temporary authority” and “temporary use range” held in the login user information holding unit 18. It is determined whether or not to admit.

The information of each logged-in user in the logged-in user information holding unit 18 is deleted when the user logs out.

An example of the processing procedure executed by the authentication processing unit 16 will be described with reference to FIG. In this procedure, when a login request including a user ID and a password is received from the user (S10), the authentication processing unit 16 refers to the password management unit 14, and the password is a regular (latest) password corresponding to the user ID. Is determined (S12). If it is a legitimate password, the login of the user is permitted (S14), and the fact that the user is in the legitimate login state is registered in the login user information holding unit 18. Thereafter, the usage managing unit 20 performs the conventional usage control (access control) for this user according to the usage authority information of this user in the usage authority DB 12.

If the determination result in S12 is No, the authentication processing unit 16 determines whether the password input at the time of the login request is a valid pre-change password of the user (S16). In this determination, it is determined whether the password matches the pre-change password corresponding to the user ID registered in the password management unit 14 and whether the current time is within the expiration date of the pre-change password. To do. The expiration date of the pre-change password is the time when a predetermined validity period elapses from the date and time when the pre-change password is updated to the latest password (that is, “password update date and time”). The reason why the pre-change password has an expiration date is that the temporary password with the pre-change password is allowed only when the new password immediately after the password change is easily forgotten. An embodiment in which the password before change is not provided with an expiration date is also conceivable. Further, an upper limit may be set for the number of times the login using the pre-change password is permitted.

If the password accepted in S10 does not match the pre-change password of the user, or if it matches, the expiration date has passed, the determination result in S16 is No. In this case, the authentication processing unit 16 does not permit the login of the user, and executes error processing such as displaying a message indicating that the login cannot be performed on the user's terminal (S18).

On the other hand, when the password accepted in S10 matches the pre-change password of the user and the expiration date of the pre-change password has not expired, the determination result in S16 is Yes. In this case, the authentication processing unit 16 provides the user's terminal with a confirmation screen for confirming to the user whether to log in with the pre-change password (S20).

FIG. 6 schematically shows an example of the display contents of the confirmation screen provided to the user in S20. On the confirmation screen 100 of this example, a message indicating that the password input by the user is the one before the change is displayed. In addition, although it is possible to log in with the password before the change, a message explaining that the authority is more restricted than usual is also displayed. Then, an inquiry as to whether to log in with the password before change is displayed. The user recognizes the display content of the confirmation screen 100, and gives an instruction as to whether or not to log in with the password before the change using the “OK” button or the “cancel” button. For example, if the user who remembers the latest password mistakenly inputs the password before the change, he/she notices the error on this screen, cancels the login with the password before the change, and logs in with the latest password.

The authentication processing unit 16 waits for an instruction from the user on the confirmation screen 100 (S22), and ends the processing when receiving an instruction not to log in from the user. On the other hand, when the instruction to log in is received, the authentication processing unit 16 causes the content of the authority (“functions that can be used with temporary authority” and “temporary use”) that are more restricted than usual for temporary login with the password before change. (Range)), and the contents of the authority are registered in the login user information holding unit 18 in association with the ID of the user together with the status of the temporary login (S24). Then, the authentication processing unit 16 permits the login of the user (S26). After this login, the user is permitted to use the document management system within the scope of the temporary authority content registered in the login user information holding unit 18.

Next, an example of how to obtain the more restrictive authority content generated in S16 will be described.

For example, "the function that can be used with the temporary authority" may be uniformly set regardless of the user, such as "only the functions A and D of the functions of the document management system are permitted at the time of temporary login". For example, if the document management system has a workflow management function that uses documents, a user with a temporary login status who has logged in using the password before change has a function of performing an approval operation for a document for which he or she has approval authority. The use is permitted, but the use of the editing function is not permitted. As another example, the function permitted to the user who is temporarily logged in may be defined according to the attribute (for example, post) of the user.

In addition to limiting the types of functions available to the user at the time of temporary login, an upper limit may be set for the number of times the functions are used.

Further, FIG. 7 shows an example of processing for obtaining the “temporary use range”. In this processing, only the documents available to the user when the pre-change password was a legitimate password are set as the range of documents available to the user when the change password is used. Note that the last time when the pre-change password was a legitimate password is the “password update date and time” in FIG. 3 in which the pre-change password was updated to the latest password.

In the procedure illustrated in FIG. 7, first, the authentication processing unit 16 inquires of the usage authority DB 12 to extract all the documents to which the target user has the access right, and put the extracted documents in a list called a process target list (S30). ). At this time, the process target list includes all documents that can be used if the user logs in with a valid password. Next, one document which has not been judged yet is acquired from the process target list (S32), and the last (that is, latest) update date and time is acquired from the version update history (see FIG. 2) of that document (S34). Then, it is determined whether or not the last update date and time is before the latest password update date and time (see FIG. 3) corresponding to the user ID (S36). If the result of this determination is Yes, the authentication processing unit 16 adds the document to the temporary usage range list (S38). The documents included in the temporary usage range list are documents that can be used when the user logs in with the pre-change password. If the determination result of S36 is No, S38 is skipped. The documents updated by the processes of S36 and S38 after the "password update date/time", which is the last time when the pre-change password is valid, cannot be added to the temporary use range list. After S36 and S38, the authentication processing unit 16 records the document for which the determination of S36 has been made as determined.

Then, the authentication processing unit 16 determines whether or not an undetermined document remains in the processing target list (S40), and if there is, returns to S32 to acquire one undetermined document, and the same thereafter. Repeat the process. If the determination result in S40 is No, the authentication processing unit 16 registers the temporary use range list in the "temporary use range" field of the login user information holding unit 18 (S42). As a result, the usage management unit 20 permits the user to use only the documents in the temporary usage range list.

The process illustrated in FIG. 7 is an example in which only the latest version of each document is stored in the document DB 10 and the old version is not stored. That is, in this process, among the documents (latest version) existing in the document DB 10, those already existing when the pre-change password was a legitimate password (the latest version document updated after that time is It does not exist at the moment), but it is the range that can be used by the user who logged in temporarily. Therefore, even if the pre-change password is leaked and a third party logs in to the document management system with the pre-change password, the document updated after the update of the pre-change password cannot be viewed. Is limited.

The temporary use range calculated by the process of FIG. 7 is merely an example.

As another example, in addition to the temporary use range required by the process of FIG. 7, the latest version may be permitted to be used for the document created by the user. In this case, regarding the document of which the user is the creator, viewing may be permitted but editing may not be allowed in consideration of security.

As yet another example, when the document DB 10 also holds an old version of each document, the last time when the pre-change password of the document to which the user has the access right is valid for the user who has logged in with the pre-change password. The latest version at may be available. In this case, the usage mode may be limited to browsing, and editing may not be permitted.

The system of the embodiment has been described above, but this is merely an example.

For example, in the above embodiment, the method of allowing temporary login with the password before change is applied to the document management system, but the application destination of this method is not limited to the document management system. For example, it is possible to apply this method to groupware used for sharing information between members of an organization. In this case, it is possible to set a usage restriction such as limiting the range in which a user who is temporarily logged in is allowed to browse the schedule managed by the groupware. For example, a user who is temporarily logged in can view only the schedule of the day.

The embodiments of the present invention have been described above. The system illustrated above is realized by causing a computer to execute a program representing the above-described functions for each of these devices. Here, the computer is, for example, as a hardware, a microprocessor such as a CPU, a memory (primary storage) such as a random access memory (RAM) and a read only memory (ROM), a flash memory, an SSD (solid state drive), an HDD. A controller for controlling a fixed storage device such as (hard disk drive), various I/O (input/output) interfaces, a network interface for controlling connection with a network such as a local area network, etc. It has a connected circuit configuration. A program in which the processing content of each function is described is saved in a fixed storage device such as a flash memory via a network or the like, and installed in a computer. The program stored in the fixed storage device is read into the RAM and executed by a microprocessor such as a CPU, whereby the functional module group illustrated above is realized.

10 document DB, 12 usage authority DB, 14 password management unit, 16 authentication processing unit, 18 login user information holding unit, 20 usage management unit.

Claims (4)

Computer,
Storage means for storing the latest password of each user and the password before change,
When the password input by the user is stored in the storage means as the password before the change of the user, the permission means for permitting the login of the user conditionally,
When the password input by the user is stored in the storage means as the password before the change of the user, as the condition, the use authority of the user is restricted more than when the latest password is input. Limiting means,
A program for functioning as,
The restriction of the use authority by the restricting means for the user who logs in using the password before the change is that the password before the change is the latest among the data permitted to be used when the user logs in with the latest password. The program is characterized in that the use of the data updated after the password is changed is not permitted . Computer,
Storage means for storing the latest password of each user and the password before change,
When the password input by the user is stored in the storage means as the password before the change of the user, the permission means for permitting the login of the user conditionally,
A program that functions as a presenting means for presenting to the user information indicating that the entered password is the password before the change, when the password entered by the user is the password before the change by the user. ,
The permission unit permits the login of the user on condition that an instruction as to whether to log in using the password before the change is input according to the presented information. From the above, when receiving an instruction to log in using the password before the change, the login is permitted after restricting the use authority of the user from the case where the latest password is input,
Regarding the restriction of the usage authority by the permission unit for the user who logs in using the password before the change, the password before the change is the latest among the data permitted to be used when the login is performed with the latest password for has been updated to be a later point in time that have changed the password data is that it does not allow the use, features and to Help program that. Storage means for storing the latest password of each user and the password before the change,
When the password input by the user is stored in the storage means as the password before the change of the user, permission means for permitting the login of the user conditionally,
When the password input by the user is stored in the storage means as the password before the change of the user, as the condition, the use authority of the user is restricted more than when the latest password is input. Limiting means,
Only including,
The restriction of the use authority by the restricting means for the user who logs in using the password before the change is that the password before the change is the latest among the data permitted to be used when the user logs in with the latest password. The authentication device is characterized in that the use of data updated after the password is changed is not permitted . Storage means for storing the latest password of each user and the password before the change,
When the password input by the user is stored in the storage means as the password before the change of the user, permission means for permitting the login of the user conditionally,
When the password input by the user is the password before the change of the user, a presenting means for presenting to the user information indicating that the input password is the password before the change,
Including,
The permission unit permits the login of the user on condition that an instruction as to whether to log in using the password before the change is input according to the presented information. From the above, when receiving an instruction to log in using the password before the change, the login is permitted after restricting the use authority of the user from the case where the latest password is input,
Regarding the restriction of the usage authority by the permission unit for the user who logs in using the password before the change, the password before the change is the latest among the data permitted to be used when the login is performed with the latest password. The authentication device is characterized in that the use of data updated after the password is changed is not permitted .