JPH06266671A - Password recognition system - Google Patents

Abstract

PURPOSE:To automatically change a password corresponding to an ID code by means of a date and time and to improve security. CONSTITUTION:A table showing password data corresponding to the ID code is provided in the memory (b) 12 of a host computer. Password data of the table changes the password at every month or every date and time. When the ID code is inputted from a terminal equipment 3, a central processing unit 14 decides a current password by time information from a timer device 13 and the table in the memory (B) 12, and security is checked by the password inputted from the terminal equipment 3 and the current password.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a password recognition method for recognizing a correspondence relationship between an input ID code and a password that is automatically changed.

[0002]

2. Description of the Related Art Conventionally, when receiving a service using a cash card, a network service in personal computer communication, etc., an ID code and a password are input, and a security check is provided according to the corresponding relationship to provide the service. The password used in this way is fixedly set corresponding to the ID code and cannot be changed arbitrarily, and when it is necessary to change it, it is done artificially.

[0003]

The above-mentioned prior art is to give a password to each user individually, and when changing the password for receiving a certain service, it must be done artificially. In addition, if the password is known to another person, the service may be received by another person, which is a security problem.

In order to solve this problem, an object of the present invention is to improve the security of services requiring a password by automatically changing the password after a certain period of time.

[0005]

SUMMARY OF THE INVENTION The present invention comprises an input device,
A password recognition method having a storage device for storing password information corresponding to an ID code, a timer device, and a control device for controlling these, wherein the control device comprises:
When the ID code is input from the input device, the current password is determined based on the time information obtained from the timer device and the password information stored in the storage device, and the password input from the input device is When it corresponds to the current password, it is recognized that the ID code input from the input device corresponds to the password.

[0006]

With the above configuration, the password is automatically changed depending on the time, so that the security of the service (ATM, CD, network service, etc.) requiring the password can be improved.

[0007]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS As an embodiment of the present invention, a login from a terminal device using the password system of the present invention in a computer network will be specifically described below. In the explanation, the input password is the input password, the password that should be input is the current password, and the password group in the data table,
The operation formula for obtaining the current password will be described as password data, and this operation formula will be referred to as a password operation formula.

FIG. 1 is a diagram showing an example of the configuration of this system, in which a plurality of terminal devices 3 are connected to a host computer 1 by a communication line 2. Host computer 1
Is a memory (A) that stores control programs, etc.
11, a memory (B) 12 that stores a password data table, a timer device 13, a communication device 15 that connects the terminal device 3, and a central processing unit 14 that controls all of these. , Each of these devices is a bus 1
Connected at 6.

FIG. 2 is a diagram showing the structure of the password data table, in which password data exists corresponding to the ID code. ID code, N001 to N004 is 1
Have monthly password data up to December.
Also, the ID code, N005 to S007 (for example, the head N
Is a general user, and S is a privileged user who is given various privileges like a super user. ) Has a password arithmetic expression as password data and generates a current password based on time. The time referred to here means year / month / day / hour / minute / second / day of the week / season and the like.

The creation and correction of password data, which is an embodiment of the present invention, will be described below with reference to FIG.

From the terminal device 3, the super user sends an ID
By inputting the code and the command for setting or changing the password, the central processing unit 14 of the host computer executes the control based on the flowchart shown in FIG. First, the ID code is input from the terminal device 3 (step 3
01). If this ID code does not exist (step 3)
02), and the ID code is input again (step 301). When "NEXT" is input when the ID code is input, the ID code next to the existing ID code is automatically designated as the new ID code. Next, you will be asked if you want to create a password using password calculation or an arbitrary password for each month, so select one (step 304). If the latter, the valid month of the password (for example,
If it is September, specify 9) and enter the password to be used in that month (step 305). At this time,
You can specify any character or number as the password within the valid number of characters of the password. If the password is invalid because it exceeds the maximum number of characters in the password (step 306), enter the password again (step 3).
05). If it is a valid password, the previously specified ID code is searched from the password data table, and the previous password is stored as the password data for the specified month (step 307). If it is a new ID code, the ID code is added to the table here and the password is stored in the same manner.

Next, the user is asked whether or not the passwords for other months are to be input, so that whether or not to repeat the password is specified (step 308). If you select "End" to end the password data input, the specified ID code 1
The password data from the month to December is displayed on the display of the terminal so that the password can be confirmed. (Step 309). At this time, if the password for all months from January to December is not specified, for example, January is specified, but
If you do not specify February and March, the password data for January is used for the months of February and March. That is, when the password data of the current month does not exist, the password data of the previous month becomes the password data and is recorded in the password data table (step 30).
9).

If it is determined in step 304 that the password calculation is used, the password calculation formula is input (step 310). The password calculation formula is composed of the functions shown in FIG. 5, arithmetic operators (+, −, ×, ÷, etc.) and characters enclosed in quotation marks (“), and these are separated by“ & ”. As an example, the following formula 1, formula 2, and formula 3 are given.

[0014]

[Formula 1] Fa = S $ (1,1) & D2 & D1 & S $ (2,1) &
M $ (1,2)

[0015]

[Formula 2] Fb = “PAS” & D $ (1,1) & T2 + 1 & M2 ×
Three

[0016]

Fc = M2 & T1 & T2 & D1 & D2 & M $ (2,2)
& Y1

For example, assuming that the present time is 12:07 on Monday, September 14, 1992, Fa is "A1".
4USE ”, Fb is defined as“ PASF321 ”, and Fc is defined as“ 02141EP2 ”. In Fb, addition and multiplication are performed, so that the current password has a variable length. In the case of division, it is preferable to round down the decimal point. This step 3
In 10, when inputting, only the arithmetic expression on the right side is input.

After inputting the password arithmetic expression in this way, the inputted arithmetic expression is checked (step 311),
If it is invalid, the user is prompted to enter it again. If valid, it is registered as password data of the corresponding ID code (step 312). Finally, the password data (here, the arithmetic expression) is confirmed again, and the ID code registration or password change mode ends.

Now, assuming that the password data table shown in FIG. 2 has already been created, the operation for logging in from the terminal device will be described with reference to FIG.

First, enter the ID code (step 4)
01). The password data table is searched from the input ID code (step 402) and it is checked whether or not the password calculation is used (step 403). At this time, if the input ID code does not exist, the login fails (step 409). When the password calculation is not used, the month is obtained from the timer device 13 in the system, and the password data corresponding to that month is set as the current password from the password data table (step 40).
4). In FIG. 2, it corresponds to ID codes N001 to N004. When the arithmetic expression is used, that is, when the password arithmetic expression exists as the password data, the timer device 13 and the current password of the current time are obtained based on this equation (step 405). In FIG. 2, it corresponds to ID codes N005 to S007.

Next, the input password is input from the terminal device (step 406). Compare the current password with the input password and if they match (step 4
07), the entered ID code corresponds to the input password, and the login is successful (step 4).
08). If they do not match, the input password is input again (step 406), but if they do not match even after three attempts (step 409), control is transferred to the login failure routine (step 410), and processing is performed. To finish.

As described above, when the password is automatically changed according to the date, time, etc., the correspondence between the ID code and the password can be complicated, and the security is improved.

[0023]

As described above, since the password is automatically changed within a certain period, the security of the service using the password can be improved.

Further, when the password calculation is used, considering that the calculation formula itself is the essence of the password, the password at a certain point is only temporary, so that the same effect as locking the password can be obtained. Becomes

[Brief description of drawings]

FIG. 1 is a system configuration diagram showing an embodiment of the present invention.

FIG. 2 is a diagram showing a structure of a password data table.

FIG. 3 is a flowchart showing a password data creation / correction routine.

FIG. 4 is a flowchart showing a login routine.

FIG. 5 is a diagram showing an example of a function used for password calculation.

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 1 ... Host computer 11 ... Memory (A) 12 ... Memory (B) 13 ... Timer device 14 ... Central processing unit 15 ... Communication device 16 ... Bus 2 ... Communication line 3 ... Terminal device

Claims (1)

[Claims] 1. A password recognition method comprising an input device, a storage device for storing password information corresponding to an ID code, a timer device, and a control device for controlling these, wherein the control device is the above-mentioned device. When the ID code is input from the input device, the current password is determined based on the time information obtained from the timer device and the password information stored in the storage device, and the password input from the input device is A password recognition method characterized in that, when it corresponds to a current password, it is recognized that the ID code input from the input device corresponds to the password.