JPH05274267A - Identification number check system - Google Patents

Abstract

PURPOSE:To reduce and detect whether an identification number is illegally used or not by previously registering a number (unenabled value) having possibility to be illegally used and checking this value in addition to an enabled value at the time of checking the identification number. CONSTITUTION:An input/output means 1 inputs an identification number desired to be checked. The identification number is checked while referring to an identification number enabled value/unenabled value table 4 by an identification number enabled value check means 2 and a cipher number unenabled value check means 3. At the time of obtaining equality between the unenabled value and the identification number, illegal operation is certainly deduced. Also, a table maintenance means 5 can automatically register a value becoming not the enabled value as the unenabled value by updating the identification number enabled value/unenabled value table 4 with maintenance information inputted by the input/output means 1.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a personal identification number checking system for a digital information processing apparatus.

[0002]

2. Description of the Related Art Conventionally, a personal identification number checking system has a system for checking whether or not a designated personal identification number to be checked is an allowable value in a means for checking a personal identification number.

[0003]

However, in such a conventional personal identification number tech system, only the permission value permitted as the personal identification number and whether or not the designated number is the permission value are checked. After changing the PIN, in order to specify the PIN before change or to clarify the PIN,
Even if you guess the PIN and specify the incorrect PIN, you can only detect that the PIN is wrong and misbehave, just as if you made a mistake in specifying the PIN. It had the drawback that it could not be detected.

The present invention solves the above-mentioned drawbacks, and in addition to checking whether the specified number to be checked is the same as the permissible code number, the specified code number may be misconducted. As a number, the purpose is to check whether it is registered as a non-permitted value in advance, and to speculatively detect whether fraudulent acts are being performed.

[0005]

According to the personal identification number check method of the present invention, a table for storing, for each user, a permitted value permitted as a personal identification number and a non-permitted value not permitted as a personal identification number, and a user from an input / output means are used. The personal identification number permission value checking means for checking whether or not the personal identification number input by the user is the permission value, and the personal identification number input by the user from the input / output means is the non-permission value. PIN number non-permitted value checking means for checking whether or not the table is referred to, and before the update, which is deleted at the time of updating according to an instruction from the input / output means when the permitted value of one user is updated. And an automatic update process for adding a permission value to the non-permission value.

[0006]

Embodiments of the present invention will be described with reference to the drawings.

FIG. 1 is a block diagram showing the configuration of an embodiment of the present invention. In FIG. 1, the input / output unit 1 checks the secret code permission value checking unit 2 for checking whether the secret code matches the permission value, and checks whether the secret code agrees with the non-permission value. The personal identification number non-permitted value checking means 3 and the table maintenance means 5 are connected to each other, and the personal identification number permissible value checking means 2 and the personal identification number non-permitted value checking means 3 store the permissible value and non-permitted value of the personal identification number. It is connected to the PIN number permission value / non-permission value table 4 which is a table to be checked, and it is checked whether or not it coincides with the personal identification number permission value and non-permission value. The table maintenance means 5 is connected to the personal identification number permission value / non-permission value table 4 and maintains the personal identification number permission value / non-permission value table 4.

FIG. 2 is a diagram showing a specific example of the secret code permission value / non-permission value table 4. With reference to FIG. 2, the secret code permission value / non-permission value table 4 includes a permission value record 21 storing a secret code number permitted for each user,
It is composed of a non-permission value record 22 storing a personal identification number which is not permitted for each user. Permission value record 21
The non-permitted value record 22 and the non-permitted value record 22 have the same structure. Each record includes a user code 23 for identifying a user, a flag 24 indicating whether the record is a permission value record or a non-permission value record (in FIG. 2, “α” indicates a permission value record and “β” indicates a non-permission value record. A record), the number of entries 25 indicating the number of permitted or non-permitted values in the record, and the entry 26 storing the permitted or non-permitted values.

Next, the operation of the personal identification number checking system of the embodiment shown in FIG. 1 will be described. In FIG. 1, the input / output unit 1 inputs the checked personal identification number to be checked. By checking the personal identification number to be checked by the personal identification number permission value checking means 2 and the personal identification number non-permission value checking means 3, it is determined whether the personal identification number corresponds to the permission value, the non-permission value, the permission value or the non-permission value. You can check if neither applies. Further, a maintenance instruction is input from the input / output means 1 to maintain the secret code permission value / non-permission value table 4, and the maintenance code 5 is maintained by the table maintenance means 5 by this maintenance instruction. To be done.

FIG. 3 illustrates in detail the operation of the personal identification number permission value checking means 2. First, in processing step 31, the user's permission value record is obtained from the personal identification number permission value / non-permission value table 4 based on the user code. From the head of the entry of this permission value record, in order to check whether or not there is an entry that matches the checked password, the subscript i is changed in the range from 1 to the number of entries in sequence (processing steps 32 and 33). , 35), if one element of the entry matches the checked personal identification number (processing step 34), a flag (normal end) indicating that the checked personal identification number matches the permission value is set as the determination result (process step 34). Processing step 36). When all the entries in the permission value record do not match the checked personal identification number, a flag indicating this (abnormal end) is set in the determination result (processing step 37).

FIG. 4 shows in detail the operation of the personal identification number non-permitted value checking means 3 of FIG. In processing step 41, it is judged whether or not the judgment result checked by the PIN number permission value checking means 2 is a normal end. If it is a normal end, the PIN number non-permission value check is ended, and if it is not a normal end, the check is continued. .. In processing step 42,
The non-permitted value record of the user who wants to check is obtained from the personal identification number permissible value / non-permitted value table 4. From the beginning of the entry of this non-permitted value record, in order to check whether there is an entry that matches the checked password, the subscript i
Is sequentially changed from 1 to the number of entries (processing steps 43, 44 and 46), and if one element of the entry matches the checked personal identification number (processing step 45),
A flag indicating that the checked personal identification number matches the non-permitted value (determination result abnormal end) is set in the determination result (processing step 47). If all the entries in the permission value record do not match the checked personal identification number, a flag indicating this (inconsistency of personal identification number) is set in the determination result (processing step 48).

FIG. 5 illustrates the operation of the table maintenance means 5 in detail. First, the maintenance classification and maintenance information are input by the input / output unit 1 (processing step 51). There are additions, updates, and deletions in the maintenance category, and this maintenance category is determined (processing steps 52, 53, 54). If the maintenance category is added, the table addition processing 55 is performed, and if the maintenance category is updated, the table is added. If the maintenance classification is deletion, the update processing 56 is executed, and the table deletion processing 57 is executed, and the processing ends.

FIG. 6 illustrates the table addition processing 55 in detail. As the maintenance information received in the processing step 51, the permission value record and the non-permission value record are registered in the personal identification number permission value / non-permission value table 4 based on the user code, the permission value, and the non-permission value. is there. First, in order to register the permission value record in the secret code permission value / non-permission value table 4, the user code, the flag (“α”), the permission value, and the number of permission values that constitute the permission value record are set to the permission value. Set to record (process steps 61, 62,
63), the permission value record is added to the secret code permission value / non-permission value table 4 (processing step 64).

Next, in order to register the non-permitted value record in the personal identification number permissible value / non-permitted value table 4, the user code, the flag (“β”), the non-permitted value, and the non-permitted value which constitute the non-permitted value record. The number of permission values is set in the non-permission value record (processing steps 65, 66, 67), the non-permission value record is added to the secret code number permissible value / non-permission value table 4 (processing step 68), and the addition processing ends. To do. For each user code, the permitted value record and the non-permitted value record are 1
When each record exists and the number of non-permitted values is 0, the number of entries in the non-permitted value record is set to zero, and no value is set in the entry.

FIG. 7 illustrates the table update process 56 in detail. From the maintenance information received in processing step 51, the permission value record corresponding to the user code,
The non-permitted value record is read from the personal identification number permissible value / non-permitted value table 4, change information is input from the input / output means 1, and the permissible value record corresponding to the user code and the non-permitted value are input from this change information. The record and the personal identification number permission value / non-permission value table 4 are updated.

First, the permission value record corresponding to the user code is read from the personal identification number permission value / non-permission value table 4 (processing step 71), and this permission value record is saved in the save area (processing step 72) and used. The non-permitted value record corresponding to the person code is read from the personal identification number permissible value / non-permitted value table 4 (processing step 73), and this is edited to display the present permissible value and non-permitted value on the input / output means 1 ( Processing step 74). The displayed value is input to the value to be changed from the input / output unit 1 (processing step 75), and the input value is set in the permission value record and the non-permission value record (processing step 76).

At the time of inputting with the input / output means 1, if there is a permission value to be deleted from the permission values after the change among the permission values before the change, the permission value to be deleted is automatically registered in the non-permission value. The presence / absence of automatic update indicating whether or not to perform is also specified. If the automatic update is designated in this designation, the permission value deleted from the permission value after the change among the permission values before the change is automatically registered in the non-permission value (processing step 7).
8). The permission value record and the non-permission value record updated in the processing steps 76 and 78 are written back to the personal identification number permission value / non-permission value table 4 (processing steps 79 and 71).
0), the update process ends.

FIG. 8 shows the table deletion processing 57 in detail. From the maintenance information received in processing step 51, the permission value record corresponding to the user code,
The non-permitted value record is read from the personal identification number permissible value / non-permitted value table 4, and the permissible value record and the non-permitted value record corresponding to the user code are deleted from the personal identification number permissible value / non-permitted value table 4 by the deletion instruction. It is to be deleted.

First, the permission value record and the non-permission value record corresponding to the user code are read from the personal identification number permission value / non-permission value table 4 (processing steps 81 and 82) and edited to edit the current permission value and the current permission value. Input / output means 1 for unauthorized values
(Processing step 83). Whether or not to delete the permitted value record and the non-permitted value record corresponding to the displayed user is input from the input / output unit 1 (processing step 84), and if there is a deletion instruction, it corresponds to the user code. The permission value record and the non-permission value record are deleted from the personal identification number permission value / non-permission value table 4 (processing steps 86 and 8).
7) and terminates the deletion process.

FIG. 9 is a detailed description of the automatic update process 78, in which, of the permission values before the change, the permission value deleted from the changed permission value is searched for and registered as the non-permission value. ..

In the process of FIG. 9, first, the number of permitted values saved in the process step 72 of FIG. 7 is set in the variable x (process step 91), and the input value of FIG. 7 is set in the record (process step). 76), the number of permission values set in the permission value table is set in the variable y (processing step 9).
2), 1 is set to the subscripts u and v (processing step 9)
3).

7 sequentially from the head element of the elements of the permission value (permission value before change) saved in the processing step 72 of FIG.
When the input value of is set in the record (processing step 7
The respective elements of the permission value (changed permission value) of 5) are sequentially compared (processing step 94). If the values are the same, the permission value is set as it is, and the process proceeds to the processing step 99. If the values are different, the subscript v is incremented by 1 (processing step 95) and the changed permission value is inspected to the end (processing step 96). If y <v, it is understood that the permission value before the change is deleted from the permission value after the change. Therefore, the permission value of the element u of the permission values before the change is added to the non-permission value (processing step 97). The number of unauthorized values is incremented by 1 (processing step 98).

Next, the subscript u is used to check whether the next element of the permission value before the change is deleted from the permission value after the change.
Is added by 1 (processing step 99), 1 is set to the subscript v (processing step 910), x is compared with u (processing step 911), and if x ≧ u, the process proceeds to processing step 94 and the processing is continued. , X <u, the automatic update process ends.

[0024]

As described above, according to the present invention, in addition to checking whether the designated personal identification number to be checked is equal to the permissible personal identification number, the designated personal identification number may be fraudulently acted in advance. It is possible to presume and detect that a fraudulent act is about to be performed by checking whether or not a certain number is registered in the form of an unauthorized value. When the personal identification number is changed, the personal identification number before the change can be automatically registered as a non-permitted value, so that an illegal use of the personal identification number can be effectively prevented in advance.

[Brief description of drawings]

FIG. 1 is a block diagram showing an embodiment of a personal identification number checking system of the present invention.

FIG. 2 is a secret code permission value / non-permission value table 4 in FIG.
FIG.

FIG. 3 is a flowchart of a personal identification number permission value checking means 2 in FIG.

FIG. 4 is a flowchart of a PIN number non-permitted value check means 3 in FIG.

5] Permitted value / non-permitted value table maintenance means 5 in FIG.
It is a flowchart of.

FIG. 6 is a flowchart of a table addition processing unit 55 in FIG.

FIG. 7 is a flowchart of a table update processing unit 56 in FIG.

8 is a flowchart of a table deletion processing unit 57 in FIG.

9 is a flowchart of an automatic update processing unit 78 in FIG.

[Explanation of symbols]

 1 Input / output means 2 PIN number permission value check means 3 PIN number non-permission value check means 4 PIN number permission value / non-permission value table 5 Table maintenance means

Claims (1)

[Claims] 1. A table storing a permission value permitted as a personal identification number and a non-permission value not permitted as a personal identification number for each user, and whether the personal identification number input by the user from the input / output means is the permission value. PIN number permission value checking means for checking whether or not the table is checked, and a PIN code for checking whether or not the password number entered by the user from the input / output means is the non-permitted value. Number non-permission value check means and automatic update processing for adding the pre-update permission value deleted at the time of update to the non-permission value according to an instruction from the input / output means when the permission value of one user is updated A personal identification number check method characterized by having and.