JPH05150852A - Computer system - Google Patents

Abstract

PURPOSE:To attain a sure security countermeasure by synthesizing the information necessary for the operation of a computer system from a first information extracted by an information extractor means and a second information generated based on the time information acquired form a timer means. CONSTITUTION:When the access right is requested by a user, a computer takes the password function related to the user and stored in a function information storing part 1 out of a user register list through a function information take-out part 2. At the same time, the time information is taken out through a time information take-out part 4. An arithmetic part 5 decides a password character string based on the function information and the time information. In the same way, the user also decides a password character string. Then both password character strings are compared with each other at a comparator part 6. Thus the access right is given to the user when both character strings are coincident with each other. The same password is never available again because the password changes as the time passes even if both passwords are accidentally coincident with each other by a defective access.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a computer system, and more particularly, to a computer system suitable for use in the field of computer system security, for example, which is suitable for protection of information in the computer system. With the spread of computer systems in recent years,
If various kinds of information are processed by a computer and are connected by a communication network or the like, there is a possibility of causing personal privacy problems or major social problems.

There are internal factors and external factors as factors that threaten the safety of a computer. Particularly, external factors include physical destruction of a system and illegal access through a network. Specifically, with the widening of the system and the increase in the number of users who use the system,
A so-called hacker (Hacker) that cannot be accessed for confidentiality using a network etc.
It is threatened by the indiscriminate invasion of people called er) and the destruction of data by computer viruses.

Therefore, in such a computer system, it is required to restrict the use of the system by anyone other than those who are involved in the operation of the system and to protect the computer system.

[0004]

2. Description of the Related Art As a conventional computer system of this type, there is operation of the system by setting a password. In a computer system with this password setting, only a person who is involved in the operation of the system is provided with a predetermined password, and when operating the computer system, the operator first inputs the predetermined password. If the password is inappropriate, the computer system determines that the current operator is inappropriate as an operator and prohibits subsequent access.

As the password, alphanumeric characters and other special symbols are used, and it is general to set it as an arbitrary character string.

[0006]

However, in such a conventional computer system, since the password is set as an arbitrary character string, there are problems as described below. That is, since the character string is just a "constant",
The number of combinations is finite, no matter how many,
It has the potential to be deciphered. And, once it is decrypted, you will be able to access the decrypted one unless you change the password again.

In order to prevent this, it is customary for persons involved in the operation of the system to change the password within a certain period of time. However, frequent change of the password complicates the work, and There is also a risk of input errors by people involved in the operation of the system. Furthermore, the possibility that the password after the change will be decrypted is the same as the possibility that the password before the change is decrypted.

[Purpose] Therefore, an object of the present invention is to provide a computer system with more reliable security measures.

[0009]

In order to achieve the above object, a computer system according to the present invention stores information by storing predetermined first information by performing predetermined processing as shown in the principle diagram of FIG. Means 1 and information extraction means 2 for extracting the first information from the information stored in the information storage means 1.
And timer means 3 for generating time information at predetermined time intervals
An information generating means 4 for generating second information based on the time information obtained from the timer means 3, the information extracting means 2, and the first and second information obtained by the information generating means 4.
An information synthesizing means 5 for synthesizing predetermined information necessary for operating the system based on the information, and an information comparing means 6 for comparing the predetermined information synthesized by the information synthesizing means 5 and the information inputted from the outside are provided. As a result of the information comparison by the information comparing means 6, the system can be operated only when the information matches.

[0010]

In the present invention, the first extracted by the information extracting means
Since the predetermined information necessary for operating the system is combined with the second information generated based on the information and the time information obtained from the timer means, the predetermined information necessary for operating the system is made variable by the time information. To be done.

That is, since the predetermined information necessary for operating the system changes with time, it becomes more difficult to decipher than the constant value, and more reliable security measures are taken.

[0012]

DESCRIPTION OF THE PREFERRED EMBODIMENTS The present invention will be described below with reference to the drawings. FIG. 2 is a diagram showing an embodiment of a computer system according to the present invention, and is a block diagram showing a main configuration of the present embodiment. First, the configuration will be described.

In FIG. 2, the same numbers as those used in the principle diagram shown in FIG. 1 indicate the same parts. The computer system of the present embodiment is roughly classified into a function information storage unit 1 which is an information storage unit, a function information extraction unit 2 which is an information extraction unit, a clock unit 3 which is a timer unit, and a time information extraction unit which is an information generation unit. 4, an arithmetic unit 5 which is an information synthesizing unit, and a comparing unit 6 which is an information comparing unit.

Similarly, the user side also includes a function information storage unit 11, a function information extraction unit 12, a clock unit 13, a time information extraction unit 14, and a calculation unit 15. Function information storage unit 1
Is for storing the function information regarding the individual password recorded in the computer, and the function information extracting section 2 is for extracting the function information which is the first information stored in the function information storing section 1.

The clock unit 3 is a timer built in the computer, and the time information extraction unit 4 extracts the second time information from the clock unit 3. The calculation unit 5 calculates a correct password at the present time from the function information obtained from the function information extraction unit 2 and the time information extraction unit 4 and the time information. Function information storage unit 11
Is a record of the function information set by the user, and in this embodiment, the memory inside the computer is used.

The function information extraction unit 12 is a function information storage unit 1.
The function information is extracted from 1. The clock unit 13
This is a clock measuring machine seen from the user side, and a timer inside a computer is used in this embodiment. The time information extraction unit 14 extracts time information from the clock unit 13.

Similar to the calculation unit 5, the calculation unit 15 calculates the correct password at the present time from the function information obtained from the function information extraction unit 12 and the time information extraction unit 14 and the time information. The comparison unit 6 compares the password calculated by the calculation unit 5 with the password calculated by the calculation unit 15, and determines whether or not the password input by the user matches the password generated by the computer. is there.

In the figure, the user side is the side requesting the access right, and the computer side is the side accepting the access right. Next, the operation will be described. Prior to system operation, the password function on the user side is, for example, "ABC (% m) DEF (% d +% h)".
(% M is month,% d is day,% h is time)
It is described according to a predetermined grammar and stored in the function information storage unit 1.

In this state, when an access right is requested from the user side, first, on the computer side, the password function for the corresponding user stored in the function information storage unit 1, that is, "ABC (% m) DEF (% d + %
The function information "h)" is retrieved from the user register by the function information retrieval unit 2, while the time information retrieval unit 4 outputs "h)" from the clock unit 3 when the current time is 10:00 on August 15th. % M = 8,% d = 15,% h = 1
The time information "0" is extracted.

In the calculation unit 5, based on the function information and the time information, (% m) = 8, (% d +% h) = 15 + 10 =
25 is calculated, and the password character string “ABC8DEF2
5 "is determined. Similarly, the password character string is determined on the user side, and the passwords are compared by the comparison unit 6, and in the above case, the passwords match, so
Access is given to the user side.

Here, if the passwords do not match, it is judged that the access is made by anyone other than the person who is involved in the operation of the system, and the access right is not granted. As described above, in the present embodiment, the password is used as a variable by using the time that the password itself can be commonly recognized by the user side and the computer side. Therefore, not only simple character string analysis but also function Since deciphering is also required, easy deciphering can be prevented.

Further, even if the passwords happen to coincide with each other due to bad access, the passwords change with time, so the same password cannot be used again, and security is strengthened. The combination of the character string as a constant and the character position of the function as a variable is arbitrary, and the type, number, etc. of the function can be freely set.

Further, on the side of the user, in the present embodiment, the description has been made by taking the access using the computer as an example, but the present invention is not limited to this, and a password input by a general operator may be used.

[0024]

According to the present invention, the predetermined information necessary for the operation of the system can be combined from the first information extracted by the information extracting means and the second information generated based on the time information obtained from the timer means. The predetermined information necessary for the operation of can be made a variable according to the time information.

Therefore, since the predetermined information necessary for operating the system changes with time, it becomes more difficult to decipher than the constant value, and more reliable security measures can be realized.

[Brief description of drawings]

FIG. 1 is a principle diagram of a computer system of the present invention.

FIG. 2 is a block diagram showing a main configuration of the present embodiment.

[Description of Reference Signs] 1 function information storage unit (information storage unit) 2 function information extraction unit (information extraction unit) 3 clock unit (timer unit) 4 time information extraction unit (information generation unit) 5 calculation unit (information synthesis unit) 6 Comparing Section (Information Comparing Means) 11 Function Information Storage Section 12 Function Information Extracting Section 13 Clock Section 14 Time Information Extracting Section 15 Computing Section

Claims (1)

[Claims] 1. An information storage means for performing a predetermined process on predetermined first information and storing it, an information extraction means for extracting the first information from the information stored in the information storage means, and a predetermined information storage means. Timer means for generating time information at time intervals, information generating means for generating second information based on time information obtained from the timer means, information extracting means, and the first information obtained by the information generating means , An information synthesizing means for synthesizing predetermined information necessary for operating the system based on the second information, and an information comparing means for comparing the predetermined information synthesized by the information synthesizing means and the information inputted from the outside. A computer system comprising: a system capable of operating the system only when the information is compared as a result of the information comparison by the information comparing means.