JPH06314135A - Data processor - Google Patents

Abstract

PURPOSE:To increase the security by automatically altering a password restricting the execution of a specific transaction according to the update of the date. CONSTITUTION:When the password is inputted, a privileged password is generated on the basis of date data read out of a timer part and it is judged whether this privileged password matches the inputted password; when they match each other, a data processing transaction whose execution is approved for the privileged transaction is allowed to be selected, but when not, it is judged whether or not the inputted password is a previously set fixed general password. When so, the selection of a data processing transaction whose execution is approved for the general password is allowed.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a data processing device for forcing a password input at the time of system startup to restrict system operation and selectively execute various data processing tasks.

[0002]

2. Description of the Related Art For example, a POS (point-of-sale information management) system connects a plurality of POS terminals for registering product sales data to a store control device composed of a host computer or the like via a communication means, and stores the data. It is a system in which each POS terminal is centrally managed by a control device, and is widely put to practical use in mass retailers such as supermarkets and convenience stores, and restaurants such as family restaurants and fast food restaurants.

[0003] In this POS system, the store control device performs an opening operation for opening each POS terminal,
Closing operations for closing each POS terminal, each POS
Inspection work to output a report of the result of totaling the product sales data of registered products collected from the terminal in the storage unit, clearing work to clear the contents of the storage unit after outputting the result of totaling in this storage unit as a report, Various kinds of work such as setting work for setting product information such as unit price in the storage unit and downloading the contents of the storage unit to each POS terminal can be selectively executed.

However, by operating this store control device, confidential information such as sales of a store or a chain store as a whole can be obtained, and important setting information such as a unit price of a product registered at each POS terminal is unique. In general, the store control device is forced to enter a password when the system is started so that only those who know the password can operate it.

Further, among various kinds of work executed by the store control device, there are a work that can be executed by a general operator and a work that can be executed only by a store manager (manager) class operator. Therefore, a password is assigned to each operator, and the entered password imposes restrictions on the work that can be executed.

That is, in the conventional store control device of this type, an operator password that can be executed for each job is preset and stored in the internal storage device, and when the password is input, the internal storage device is searched by the input password. Then, only the work for which the corresponding password is set can be selected.

[0007]

However, in the conventional store control device in which the password of the operator that can be executed for each work is set in the internal storage device to restrict the system operation, each operator is Since the password assigned to is fixed data that is fixed for each individual, it can be easily used if the information is leaked.

[0008] For example, even in a specific job in which the password assigned to the operator in the shop manager class is set so that only the shop manager class can be executed, anyone can execute the specific job by knowing the password of the operator. Is.

As described above, in the conventional data processing apparatus of this type, even if the password is forced to be input at the time of system startup and the system operation is restricted, the security is ensured as long as the password cannot be prevented from being leaked. It was low.

Therefore, according to the present invention, the password that restricts the execution of a specific job can be automatically changed according to the update of the date. Therefore, even if the password is leaked, the password cannot be used the next day. The present invention aims to provide a data processing device that can improve security for a specific job.

[0011]

SUMMARY OF THE INVENTION The present invention is a data processing apparatus for forcing a password input at the time of system startup to restrict system operation and selectively execute various data processing tasks. And the privileged password creation means that creates a privileged password based on the date data imported from the clock when the password is entered, and the privileged password created by this creation means and the entered password match. The first password collating means for deciding whether or not to do so and the first password collating means confirming that the input password agrees with the privileged password. The input password is privileged by the privilege selection control means for permitting selection and the first password matching means. When confirming that does not match the word, the second password collating means for determining whether the general password or not a fixed input password is set in advance,
When the second password collating means confirms that the input password is the general password, the general password control means for permitting the selection of the data processing business whose execution is approved for the general password, and the second password collating means. When it is confirmed by the means that the input password is not the general password, the selection means for disabling the selection of the data processing work is provided.

[0012]

According to the present invention having such a structure, when a password is input, a privileged password is created based on the date data fetched from the clock section, and it is determined whether the privileged password matches the input password. To be done. Then, when they match, the selection of the data processing task whose execution is approved for the privileged password is permitted.

On the other hand, if they do not match, it is determined whether the input password is a fixed general password set in advance. Then, when the input password is a general password, the selection of the data processing business whose execution is approved for the general password is permitted. If the input password is also not a general password, the data processing operation cannot be selected.

Therefore, only an operator who knows how to create a privileged password can input the privileged password. This privileged password changes due to the update of the date, so even if it is leaked, it cannot be used the next day.Because it is not set as data in the internal storage device, it is not known from the contents of the internal storage device and security is improved. Are better.

[0015]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS An embodiment in which a data processing device of the present invention is applied to a store control device of a POS system will be described below with reference to the drawings.

FIG. 1 is an overall view of a POS system,
Multiple POS terminals (TM) for product sales data registration 1
And a file control device (FC) 2 for collecting sales data of products registered for sale at the POS terminal 1 via a communication line 3, and further the file control device 2
Store control device 4 consisting of
And a communication line 5 are connected to construct a POS system.

FIG. 4 is a block diagram showing a main configuration of the store control device 4. In the figure, a CPU (central processing unit) 10 constitutes a control unit main body, and a ROM (read / write unit).
Each unit is controlled based on the control program stored in the (only memory) 11. The ROM 11 stores fixed data such as the control program in advance.
The (random access memory) 12 forms various memory areas for temporarily storing variable data.

The clock unit 13 measures the current date and time. The communication interface 14 controls data communication performed through the communication line 5. The HDD control circuit 15 controls a hard disk driver (HDD) 16 that writes and reads data to and from the hard disk. F
The DD control circuit 17 controls a floppy disk driver (FDD) 18 that writes and reads data to and from the floppy disk.

A printer control circuit 19 drives and controls a printer 20, such as a thermal printer, to print data on recording paper. The display control circuit 21 drives and controls a display 22 such as a CRT display to display data on a display screen. The keyboard control circuit 23 takes in key input data from a keyboard 24 provided with ten keys, character keys, execution keys, function keys and the like.

Here, the CPU 10, the ROM 11 and the RA
The M12, the clock unit 13, the communication interface 14, and the control circuits 15, 17, 19, 21, 23 are connected to each other by a bus line 25.

The store control device 4 having the above-mentioned configuration is used to open each POS terminal 1 and open each POS terminal.
Closing work for closing each terminal 1, each POS terminal 1
Inspection work of outputting the result of totaling the product sales data of registered products collected in the total area in the RAM 12 from the printer 20 and outputting the report of the total result in this total area, and then clearing the contents of this total area It is possible to execute various kinds of work such as work and setting information such as unit price of each product in the setting area of the RAM 12 and downloading the contents of the setting area to each POS terminal 1.

In particular, the password management table 31 shown in FIG. 3 and the flag area 32 of the privilege flag F are formed in the RAM 12 to force the password input at the time of system startup and to restrict the system operation. As a result, various data processing tasks are selectively executed.

As shown in the figure, the password management table 31 sets and stores the name information of a business and a plurality of password data corresponding to the codes assigned to various businesses. The password data set in the password management table 31 is a fixed general password determined for each operator of the store control device 4, and is set in advance corresponding to the job code of the job that the operator can execute. It

The general password is composed of four-digit alphanumeric characters, and when it is set as password data, the bits of each digit are stored in reverse order to improve confidentiality. For example, if the general password is “1234”, the bit image is “00110001,0011001”.
0,00110011,00110100 ", the password data set in the table 31 is" 0010 ".
1100, 11001100, 0100100, 10
It is encrypted and set as "001100".

On the other hand, the flag area 32 is an area for storing a privilege flag F which is set to "1" when a privilege password described later is inputted.

Then, the CPU of the store control device 4
The program 10 is program-controlled to execute the system activation process shown in FIG. 4 when the power is turned on and the predetermined initialization process is completed.

That is, when this process is started, first, S
It waits for the password to be input at T (step) 1. Then, when the input of the password is detected by the key operation input of the keyboard 24, the privileged password is created by the arithmetic processing specifically shown in FIG. 5 in ST2.

That is, the current date / time data "MMDD" which is being clocked by the clock unit 13 is taken in, this date / time data "MMDD" is tripled to "ABCD", and the highest order of the data "ABCD" is taken. "0BCD" by replacing the digit with 0
Is used as the privilege password (privilege password creating means).

Next, in ST3, it is determined whether or not the privileged password and the input password match (first password collating means).

If they match, the privilege flag F is set (1) in the flag area 32 in ST4, and then the menu screen display process of ST5 is executed.

On the other hand, if the privileged password does not match the input password in ST3, the password management table 31 is searched in ST6 to check whether the password data corresponding to the input password is set in the table 31. Judge (second password verification means).

If it is set, the input password is a general password, so the menu screen display process of ST5 is executed.

In this menu screen display processing, as shown in FIG. 6, first, the flag area 32 is checked. When the privilege flag F is set in the area 32,
Since the input password is a privileged password and execution of all jobs is approved, all menu selection screens corresponding to the codes and job names of all jobs are displayed on the display unit 2.
2 to allow the selection of the data processing business whose execution is approved for the privileged password (privilege selection control means).

On the other hand, when the privilege flag F is reset (0), the input password is the general password, and only the execution of the job in which the password data corresponding to the input password is set in the password management table 31. Has been approved, a menu selection screen is displayed on the display 22 in which the code and job name of the corresponding job is displayed in correspondence, and the selection of the data processing job whose execution is approved for the general password is selected. Allow (general selection method).

Then, in ST7, the process waits until one of the job menus displayed on the screen is selected. And
When the business code is input by the numeric keypad input of the keyboard 24, the execution of the business corresponding to the business code is selected, so the program of the relevant business is started and data processing is performed. When the execution of this business program is completed, the process returns to the menu screen display process of ST5.

If the work selected in ST7 is the system end work with the code "6", the privilege flag F is reset and then this processing is ended.

As a result of searching the password management table 31 in ST6, the input password is the same as the table 31.
If it is not set to, the input password is neither a privileged password nor a general password, and therefore the input of the password is regarded as an error and this process is terminated, and the selection of the data processing task is disabled (selection disabled means).

In the present embodiment having the above-mentioned configuration, assuming that only a limited number of operators of the store manager class can execute, for example, setting work among various works executed by the store controller 4, To improve security, let only the store manager class operator know how to create a privileged password, and let other operators individually know the general password.

As shown in FIG. 3, the parameter data is not set in the area of the setting work of the parameter management table 31, and the parameters corresponding to the general parameters of the operator whose execution is approved are set in the other work areas. Data is preset.

By doing so, when the system is started up, the mere operator inputs the general password assigned to him by key operation. Then, the work approved for execution by this operator is selected, and the menu screen as shown in FIG. 7A is displayed on the display unit 22.

In the case of FIG. 7A, it is a menu screen of the operator who is approved to execute only the inspection work and the settlement work.
This operator can only execute either inspection work or settlement work according to the menu screen, and cannot execute closing, opening, or setting work.

On the other hand, an operator of the store manager class who knows how to create a privileged password calculates the current privileged password from today's date by mental arithmetic or the like, and inputs this privileged password by a key.

For example, assuming that today's date is December 10, first, "1210" is tripled to "3630", and then the most significant digit is replaced with "0" to obtain the privilege password "0".
360 "is calculated, and this privilege password" 0 "
Key in "360".

Then, the store control device 4 takes in the date data measured by the clock unit 13,
Since the privileged password “0360” is calculated and compared with the input password, it is determined that the privileged password has been input. Thereby, the flag area 32
The privilege flag F is set in the
As shown in (b), all menu screens in which all business operations are selected are displayed.

As a result, the operator of the store manager class who inputs the privileged password not only performs the inspection and settlement work,
It can also perform opening and closing operations and setting operations.

By the way, since the privilege password uses the date data of the clock unit 13 and the value obtained by arithmetic processing is used as the privilege password, the password changes every time the date is updated. For this reason, even if the password is leaked by stealing the input of the privileged password, the password used up to the previous day cannot be used the next day, which is excellent in security.

Further, the privileged password is obtained by calculation according to the input of the password, and it is judged whether or not the input password is the privileged password by collating the calculation result with the input password. It does not exist on the internal storage device. Therefore, for example, even if the contents of the RAM 12 are analyzed, the privileged password cannot be known, and this is also excellent in security.

Moreover, since it is only necessary to set the privilege flag F when the input of the privilege password is detected, R
It is only necessary to secure the flag area 32 in the AM 12, and it is not necessary to particularly limit the number of digits of the privileged password input. Therefore, by programming not only the date data of the clock unit 12 but also the time data and the day of the week data to calculate the privileged password, the arithmetic processing method can be changed for each day of the week and each hour. Security can be further enhanced.

In the above embodiment, all the jobs can be selected when the privileged password is input, but the present invention can be applied to the operation in which only the special jobs that can be started only by the privileged password can be selected. .

Further, although the present invention is applied to the store control device in the above-mentioned embodiment, the present invention is not limited to this, and a password input is forced at the time of system startup to restrict the system operation and various types. It is needless to say that the invention can be applied to all data processing devices that selectively execute data processing tasks.

[0051]

As described in detail above, according to the present invention, when a password is input, a privilege password is created based on the date data fetched from the clock section, and this privilege password and the input password are combined. Judge whether or not they match, and if they match, allow the selection of the data processing business whose execution is approved for the privileged password. If they do not match, the input password is a fixed general password that is set in advance. It is determined whether or not the passwords are matched, and if they match, the selection of the data processing business whose execution is approved for the general password is allowed. Therefore, the password that restricts the execution of specific business is updated with the date. The password can be changed automatically according to the password. Therefore, even if the password is leaked, the password cannot be used the next day, increasing the security for specific jobs. It can provide that the data processing device.

[Brief description of drawings]

FIG. 1 is an overall view of a POS system that is an embodiment of the present invention.

FIG. 2 is a block diagram of a main part of the store control device in the embodiment.

FIG. 3 is a diagram showing a main memory area formed in a RAM of the store control device.

FIG. 4 is a flowchart showing a process according to the present invention executed by a CPU of the store control device.

FIG. 5 is a flowchart specifically showing the privileged password calculation process of FIG.

6 is a flowchart specifically showing the menu screen display processing of FIG.

FIG. 7 is a plan view showing a display example of a menu screen.

[Explanation of symbols]

 4 ... Store control device 10 ... CPU 11 ... ROM 12 ... RAM 13 ... Clock part 22 ... Indicator 24 ... Keyboard 31 ... Password management table 32 ... Privilege flag area

Claims (1)

[Claims] 1. In a data processing device for forcing a password input at the time of system startup to restrict system operation and selectively execute various data processing tasks, a clock unit for clocking the current date and the password are It is determined whether or not the privileged password creating means for creating a privileged password based on the date data fetched from the clock unit when entered and the privileged password created by this creating means match the entered password. And a first password collating means for confirming that the input password matches the privileged password by the first password collating means,
When it is confirmed by the first password collating means that the input password does not match the privilege password, the input of the privilege Second password collating means for judging whether or not the password is a preset fixed general password, and if the input password is confirmed by the second password collating means, the general password is changed to the general password. On the other hand, if the general selection control means for permitting the selection of the data processing business whose execution is approved and the second password collating means confirm that the input password is not the general password, the selection of the data processing business is disabled. Data processing characterized by comprising: Location.