JPH0362254A - Password check system - Google Patents

Abstract

PURPOSE:To prevent the illegal use of a password check program due to the illegal input of passwords by performing the comparison of the password input times in addition to the comparison of character strings when the passwords are checked. CONSTITUTION:The comparison is carried out between the input time of a password registered in a nonvolatile memory 2 and the input time of a password measured by a password input time measuring means 11. If the difference between both input times is larger than a prescribed time, the check result of the password input time is denied. Thus the comparison is carried out between the password input times in addition to the comparison carried out between the character strings when the passwords are checked. As a result, it is possible to prevent the illegal use of a password check program due to the illegal input of passwords.

Description

[Detailed Description of the Invention] [Field of Industrial Application] The present invention provides a program for identifying a user using a password (
Regarding the password check program (hereinafter referred to as the password check program),
In particular, the present invention relates to a password check method for preventing unauthorized use of a password check program due to unauthorized password input.

[Conventional technology]

Conventionally, in this type of password checking method, when a user is identified by a password, only a comparison is made between a character string input as a password and a character string registered as a password.

[Invention tries to solve! III) The conventional password checking method described above simply compares the character string entered as a password with the character string registered as a password, so a person who is not authorized to use a password checking program The drawback is that even if an arbitrary password is entered, the character string may fail and the password checking program may be used.

Another drawback is that if a person who is not authorized to use a password checking program intentionally tries to discover the password, the password can be discovered relatively easily.

In view of the above-mentioned points, an object of the present invention is to prevent unauthorized use of a password check program due to unauthorized input of passwords by comparing password input times in addition to comparing password character strings when checking passwords. The purpose of the present invention is to provide a password checking method that can prevent the above.

[Means to solve the problem]

The password check method of the present invention operates on an information processing device equipped with a keyboard, a timer, and a non-volatile memory, and requests the input of a password for identifying the user from the keyboard at the time of use, and registers the password. In a password check program that determines whether to continue or interrupt processing depending on the presence or absence of the password, the password input time measuring means uses the timer to measure the password input time from the keyboard, and the password information is stored in the nonvolatile memory. and a password information writing means for writing a password, and when the input of the password from the keyboard is completed, it is checked whether password information regarding the same password is registered in the non-volatile memory, and the same password information is stored in the non-volatile memory. writing the password input time measured by the password input time measuring means together with the password into the nonvolatile memory by the password information writing means when it is determined that password information regarding the password is not registered;
When it is determined that password information regarding the same password is registered in the nonvolatile memory, the input time of the password registered in the nonvolatile memory and the input of the password measured by the password input time measuring means If the difference is within a predetermined time, the password input time check result is accepted and the average input time, which takes into account the password input time measured by the password input time measurement means, is written into the password information. Compare the password input time written in the non-volatile memory by means and registered in the non-volatile memory with the password input time measured by the password input time measuring means, and if the difference is more than a predetermined time. has a password information check means for disabling the password input time check result.

[Effect]

In the password checking method of the present invention, the password input time measuring means uses a timer to measure the password input time from the keyboard, the password information writing means writes the password information to the non-volatile memory, and the password information checking means uses the timer to measure the password input time from the keyboard. When the input of the password is completed, it is checked whether password information related to the same password is registered in the non-volatile memory, and it is determined that the password information related to the same password is not registered in the non-volatile memory. When the password input time measured by the password input time measuring means was written along with the password to the nonvolatile memory by the password information writing means, it was determined that password information regarding the same password was registered in the nonvolatile memory. Sometimes, the password input time registered in non-volatile memory is compared with the password input time measured by the password input time measuring means, and if the difference is within a predetermined time, the password input time check result is accepted. The average input time including the password input time measured by the password input time measuring means is written to the non-volatile memory by the password information writing means, and the password input time registered in the non-volatile memory and the password input time are measured. The password input time is compared with the password input time measured by the means, and if the difference is greater than a predetermined time, the password input time check result is rejected.

〔Example〕

Next, the present invention will be explained in detail with reference to the drawings.

FIG. 1 is a block diagram showing the configuration of an information processing apparatus to which a password check method according to an embodiment of the present invention is applied. This information processing device includes an information processing device control section 1, a nonvolatile memory 2, a timer 3, a keyboard 4,
The main part is composed of the external storage medium 5.

The information processing device control unit 1 controls the entire information processing device.
The password check program IO is loaded from the external storage medium 5.

The password check program IO includes a password input time measuring means 11, a password information checking means 12, and a password information writing means 13.

The nonvolatile memory 2 is a memory that retains its contents even when the information processing device is powered off, and is configured to store password information 20.

When the timer 3 receives an instruction to start measurement from the information processing device control section 1, it measures the time from when an input is received from the keyboard 4 to when it receives an instruction to end measurement from the information processing device am section 1.

The keyboard 4 is a device through which a user inputs characters such as a password.

The external storage medium 5 is a password check program 10
Reading and writing are performed on the medium storing the information and the like according to instructions from the information processing device control unit 1.

Referring to FIG. 2, the password information 20 includes passwords 211 to 2ml (m is a positive integer), 2 times 212 to 2
m2 and input time 213 to 2m3.

Referring to FIG. 3, the processing of the password check method of this embodiment includes a password input request step 101, a password input time measurement start step 102, a user password input step 103, and a password input time measurement end step 104. , a password character string check step 105, a check OK determination step 106,
Password information inward - password presence/absence check step 107, presence/absence determination step 10B, password information writing step-1, 09, fixed number of times or more determination step 11G, input measurement time/input time comparison step 11
1, input time and number of calculations and writing step 1
12, a password check OK step 113, and a password check NG step 114.

Next, the operation of the password check method of this embodiment configured as described above will be explained.

First, the password check program 1 is loaded from the external storage medium 5 into the information processing device control unit 1 by the user.
When you start 0, the password check program lO
At the same time, the password input time measuring means 11 requests the user to input a password to confirm the user.
Step 10 requests the information processing device control unit l to measure the password input time from the keyboard 4.
1) The information processing device control unit 1 issues an instruction to the timer 3 to start measuring input time (step 102).

When the user manually inputs the first character of the password from the keyboard 4 (step 103), the timer 3 starts measuring the password input time, and the input characters are passed to the password check program 10 one by one.

When the predetermined number of characters is received or when the input end character is received, the password check program 10 uses the password input time measuring means 11 to check the information processing device I11m.
The information processing device control unit 1 requests the aa t to end the measurement of the password input time, and issues an instruction to the timer 3 to end the measurement of the input time (step 104).

Next, the password check program 10 checks whether the password character string input from the keyboard 4 is registered in, for example, a host combinator (not shown) (step 105), and if it is not registered (step 105), Step 106>, a message "unavailable" is displayed (step 114).

If the password character string input from the keyboard 4 is registered in the host combinator etc., the password check program 10 checks the password of the password information 20 registered in the non-volatile memory 2 by the password information checking means 12. Check whether the same password exists in 211~2ml (Step 1
G? ).

If the same password does not exist in the passwords 211 to 2ml, the password check program IO uses the password information writing means 13 to write the password 2nl (
n = m + 1), l'' is written in the number of times 2n2, and the password input time measured by the password input time measuring means 11 (hereinafter simply referred to as input measurement time) is written in the input time 2n3 (step 109), the message "available" is displayed and the process continues (step 113).

If the same password exists in passwords 211 to Zfnl (password 2kl (k is an integer between 1 and 5m)
are the same), the password check program 1G uses the password information checking means 12 to check whether the number of times 2 is greater than a certain number a (
This check is performed to learn the variation in input time at the beginning of password input) (step 110), lNi
If 1 and 2 are less than the fixed number a, the password check program 10 writes the password information writing means 1
3, add 2 to number 2 by “+1”, and input time 2 to 3 to average human power time [-(input time x number of times manual input measurement time)/(
number of times + 1)] is written (step 112), and "Available" is displayed (step 113).

If the number of times 2 is greater than a certain number a, the password check program 10 uses the password information checking means 12 to compare the input time 2 to 3 with the input measurement time (step 111), and the difference is the estimated time t for variation. If it is smaller, the password information writing means 13 adds “+1” to the number of times 2 and inputs the average input time (=(input time x number of times manual input measurement time)/(number of times +
1)] is written (step 112), and "Available" is displayed (step 113).

If the difference between the input time 2 and 3 and the input measurement time is greater than the expected variation time t, the password check program 10 uses the password information check means 12 to identify a person who is different from the person who normally uses the password (i.e., who is trying to use it illegally). It is assumed that the user (person) has entered the password, and the process is interrupted by displaying "Unavailable" (step 114).

〔Effect of the invention〕

As explained above, the present invention determines whether the person entering the password is an authorized user by comparing the character strings and the password entry time when entering the password. This has the effect of effectively preventing unauthorized use of the password check program due to unauthorized password input.

[Brief explanation of drawings]

Fig. 1 is a block diagram showing the bottom of a password check method according to an embodiment of the present invention, Fig. 2 is a diagram showing the contents of the password information in Fig. 1, and Fig. 3 is a password check of this embodiment. 2 is a flowchart showing the processing of the method. In the figure, 1... Information processing device control unit, 2... Non-volatile memory, 3... Timer, 4... Keyboard, 5... External storage medium, IO... Password check program, 11... - Password input time measuring means, 12... Password information checking means, 13... Password information writing means, 20... Password information, 211-2ffll password, 212-2 m2 number of times, 213-2 m3 input time.

Claims (1)

[Scope of Claims] An information processing device that operates on an information processing device that includes a keyboard, a timer, and a nonvolatile memory, and requests input of a password for identifying the user from the keyboard at the time of use, and determines whether or not a password is registered. In the password check program, the password check program determines whether to continue or interrupt processing according to the timer, a password input time measuring means for measuring the password input time from the keyboard using the timer, and writing password information to the nonvolatile memory. and a password information writing means, which checks whether password information related to the same password is registered in the non-volatile memory at the time when the input of the password from the keyboard is completed, and registers the same password in the non-volatile memory. When it is determined that the password information related to is not registered, the password input time measured by the password input time measuring means is written together with the password into the nonvolatile memory by the password information writing means; Compare the password input time registered in the nonvolatile memory with the password input time measured by the password input time measuring means when it is determined that password information regarding the same password is registered. If the difference is within a predetermined time, the password input time check result is accepted and the average input time measured by the password input time measuring means, including the password input time, is written in the nonvolatile memory by the password information writing means. write to,
Compare the password input time registered in the non-volatile memory with the password input time measured by the password input time measuring means, and if the difference is more than a predetermined time, the password input time check result is rejected. 1. A password checking method, comprising: a password information checking means.