JPH07175755A - On-line system with illicit use preventive function - Google Patents

Abstract

PURPOSE:To construct an on-line system with no illicit use of it in a system consisting of plural terminal equipments divided into primary ones and secondary ones. CONSTITUTION:The system password inputted from a keyboard 101 is ciphered and stored in a system password storing file 102. This stored password is ciphered again and transmitted. A secondary terminal equipment 200 decodes the system password received from a primary terminal equipment 100 and checks whether the decoded password is coincident with a system password that is stored in a system password storing file 202. This checking result is sent to the equipment 100. If the decoded password is received for the first time, this password is stored in the file 202. Then it is decided whethere an on-line system should be actuated or not by receiving the checking result from the equipment 200.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an online system with a fraudulent use prevention function, and more particularly to a system with a fraudulent use prevention function in an online system using a communication line.

[0002]

2. Description of the Related Art In a conventional online system, a system password is transmitted from a terminal device, compared with the password information stored in the other terminal device, and if a corresponding password is detected, the use permission is sent back to thereby illegally use the system. I was taking precautions.

[0003]

In the conventional online system with the illegal use preventing function, the system password is transmitted as it is, so that the password analysis is easy and the possibility of illegal use is high.

[0004]

The online system of the present invention includes a primary side terminal system password storage file for storing a system password and a system password reading means for reading the system password from the primary side terminal system password storage file. And an encryption means for encrypting the system password, a system password transmitting means for transmitting the encrypted system password using a communication line, a system password check result receiving means for receiving the system password check result from the communication line, and a system When the password check result indicates that the process cannot be continued, the primary side terminal device having a process continuation stopping means for canceling the process is included.

Further, the online system of the present invention includes a system password receiving means for receiving a system password from a communication line, a decrypting means for decrypting the received system password, and a secondary side terminal system password storing file for storing the system password. And a storage flag for setting whether or not the system password is already stored in the secondary side terminal system password storage file, a storage flag reading means for reading the contents of the storage flag, and a value of the storage flag for the secondary side terminal system. A system password storage determining means for determining whether the system password is stored in the password storage file, and a system password storing the secondary terminal system password when the system password is not stored in the secondary terminal system password storage file. Storage means, storage flag setting means for setting that the system password is stored in the storage flag, and the system password is stored in the secondary side terminal system password storage file if the system password is already stored in the secondary side terminal system password storage file. System password reference means for referencing a password, system password match determination means for determining whether the previously decrypted system password and the system password referenced from the secondary terminal system password storage file match, and the system password A secondary side terminal device having a system password check result transmitting means for transmitting the result of the coincidence determining means using a communication line.

Furthermore, the online system with an unauthorized use prevention function of the present invention includes the primary side terminal device according to claim 1 and the secondary side terminal device according to claim 2.

According to the online system with the illegal use preventing function of the present invention, in the online system with the illegal use preventing function according to claim 3, from the keyboard of the primary side terminal device,
The system includes a system password input means for inputting a system password and a system password setting means for storing a password obtained by encrypting a keyboard-input system password by an encryption means in a primary side system password storage file.

[0008]

Embodiments of the present invention will now be described with reference to the drawings.

FIG. 1 is a functional block diagram showing an embodiment of the present invention.

Referring to FIG. 1, one embodiment of the present invention is an online system in which a primary side terminal device 100 and a secondary side terminal device 200 are connected via communication lines 103 and 201. Is the keyboard 101,
A password storage file 102 that stores the password of the primary side terminal system, a system password setting unit 110 that is connected to the communication line 103 and that has a system password input unit 111 and a system password setting unit 112, and data conversion that has an encryption unit 121. Part 12
0, a system password transmitting unit 130 having a system password transmitting unit and a system password reading unit 132, and a process continuation judging unit 140 having a system password check result receiving unit 141 and a process continuation stopping unit 142.

The secondary side terminal device 200 has a communication line 201.
And the secondary side terminal system password storage file 202
A system password receiving unit 210 having a system password receiving unit 211, and a decrypting unit 2.
21, a data recovery unit 220 having 21, a system password storage determination unit 231, a storage flag reading unit 232,
A system password management unit 230 having a storage flag setting unit 233, a system password storage unit 234, and a system password reference unit 235, and a system password determination unit 240 having a system password coincidence determination unit 241 and a system password check result transmission unit 242. , And a storage flag 250.

The primary side terminal device inputs the system password with the keyboard 101 and supplies it to the encryption means 121 through the system password input means 111. The encryption means 121 encrypts the input system password. The system password setting means 112 sets the system password to store the encrypted system password, and stores the primary side terminal system password storage file 102. System password reading means 1
32 is the primary side terminal system password storage file 10
Read the system password from 2. Encryption means 121
Further encrypts the read system password, and the system password transmitting means 131 transmits the encrypted system password via the communication line 103. The process continuation determination unit 140 receives the system password check result from the communication line 201 by the system password check result receiving unit 141, and continues the process if the system password check result is good, and continues the process when the system password check result cannot be continued. Stopping means 142
Is configured to cancel processing.

The secondary side terminal device receives the system password from the communication line 201 by the system password receiving means 211. The decryption means 221 decrypts the received system password. System password management unit 23
0 is the secondary side terminal system password storage file 202
A storage flag reading means 23 for reading the contents of the storage flag 250 for setting whether the system password has been stored in
2 and the value of the storage flag 250, the system password storage judgment means 231 for judging whether the system password is stored in the secondary side terminal system password storage file 202, and the system password in the secondary side terminal system password storage file 202. If not stored, the storage flag setting means 233 that sets that the system password is stored in the storage flag, the system password storage means 234 that stores the system password in the secondary side terminal system password storage file, and the secondary side When the system password is already stored in the terminal system password storage file 202, the system password reference means 235 is used to refer to the system password from the secondary side terminal system password storage file 202. The system password determination unit 240 determines whether the system password previously decrypted by the system password coincidence determination means 241 and the system password referenced from the secondary side terminal system password storage file match, and the result is the system password. The check result transmitting means 242 is configured to transmit via the communication line 201.

Next, the operation of the embodiment of the present invention will be described with reference to the flow charts of FIGS. 2, 3 and 4.

The system password setting unit 110 on the side of the primary side terminal device 100 has a system password input means 11
When the system password input from the keyboard 101 by the user 1 is received (step 101), the data conversion unit 1
Give it to 20. The data conversion unit 120 uses the encryption means 121.
Encrypt the system password with (step 10
2) Return the encrypted system password to the system password setting unit 110. System password setting part 1
10 is stored in the primary side terminal system password storage file 102 by the system password setting means 112 (step 103).

The system password transmission unit 130 uses the system password reading means 132 to read the system password from the primary side terminal system password storage file 102 (step 201). The read system password is encrypted by the encryption means 121 (step 202).

The system password transmitting means 131 transmits the encrypted system password via the communication line 103.
It transmits to the secondary side terminal device 200 (step 20).
3).

The system password receiving section 210 of the secondary side terminal device 200 receives the encrypted system password transmitted from the primary side terminal device 100 via the communication line 201 by the system password receiving means 211 (step 301). , And passes the system password to the data restoration unit 220. The data restoration unit 220 decrypts the system password encrypted by the decryption means 221 and transfers it to the system password determination unit 240 (step 302). The system password management unit 230 reads the storage flag 250 by the storage flag reading means 232 (step 303), and checks the contents of the storage flag 250 by the system password storage judgment means 231 whether the system password has been stored (step 30).
4).

If the system password is not stored,
The decrypted system password is stored in the secondary side terminal system password storage file 202 by the system password storage means 234 (step 209), and the storage flag setting means 233 sets in the storage flag 250 that the system password has been stored. (Step 31
0), and passes the system password check result OK to the system password determination unit 240 (step 311). Upon receipt of the system password check result OK, the system password determination unit 240 transmits the system password check result OK to the primary-side terminal device 100 via the communication line 201 by the system password check result transmission means 242 (step 312). When the system password is already stored in the secondary side terminal system password storage file 202, the system password reference means 235 refers to the system password from the secondary side terminal system password storage file 202 (step 305) and displays the system password reference result. It is passed to the system password determination unit 240.

When the system password judgment unit 240 receives the decrypted system password and the system password reference result, the system password coincidence judgment means 24
1 to check if both match (step 30
6) If they match, the system password check result is set to OK (step 307). If they do not match, the system password check result is set to NG (step 308). The data is transmitted to the primary side terminal device 100 via (step 312).

Processing continuation determination unit 1 of the primary side terminal device 100
40 is a system password check result receiving means 14
1 receives the system password check result via the communication line 103 (step 204), and identifies the received system password check result (step 20).
5) If the system password check result is NG,
The processing continuation stopping means 142 prevents the processing from continuing (step 206).

[0022]

As described above, according to the present invention, the system password is encrypted twice when it is transmitted from the primary side terminal device, and the secondary side terminal device validates only the first received system password. Therefore, it has an effect of making it difficult to be illegally used.

[Brief description of drawings]

FIG. 1 is a functional block diagram showing an embodiment of the present invention.

FIG. 2 is a flowchart showing an operation of the primary side terminal device in the embodiment of the present invention.

FIG. 3 is a flowchart showing an operation of the primary side terminal device in the embodiment of the present invention.

FIG. 4 is a flowchart showing an operation of the secondary side terminal device in the embodiment of the present invention.

[Explanation of symbols]

 100 Primary Terminal Device 101 Keyboard 102 Primary Terminal System Password Storage File 103 Communication Line 1 110 System Password Setting Unit 111 System Password Input Means 112 System Password Setting Means 120 Data Conversion Unit 121 Encryption Means 130 System Password Sending Unit 131 System Password Transmitting means 132 System password reading means 140 Processing continuation judging section 141 System password check result receiving means 142 Processing continuation stopping means 200 Secondary side terminal device 201 Communication line 2 202 Secondary side terminal system password storage file 210 System password receiving section 211 system Password receiving means 220 Data recovery section 221 Decryption means 230 System password management section 231 System pass Over de storage determination means 232 stores flag reading unit 233 storing flag setting unit 234 system password storage unit 235 system password reference means 240 system password judging unit 241 system password match determining means 242 system password checking result transmitting unit 250 stores flag

Claims (4)

[Claims] 1. A primary terminal system password storage file for storing a system password, a system password reading means for reading the system password from the primary terminal system password storage file, and an encryption means for encrypting the read system password. , The system password sending means for sending the encrypted system password using the communication line, the system password check result receiving means for receiving the system password check result from the communication line, and the system password check result are
An online system with a fraudulent use prevention function, characterized in that it includes a primary side terminal device having processing continuation stopping means for canceling processing when continuation is impossible. 2. A system password receiving means for receiving a system password from a communication line, a decrypting means for decrypting the received system password, a secondary side terminal system password storage file for storing the system password, and a secondary side terminal. Depending on the storage flag that sets whether the system password has been stored in the system password storage file, the storage flag reading means that reads the contents of the storage flag, and the value of the storage flag, the system password is stored in the secondary side terminal system password storage file. System password storage determining means for determining whether or not is stored, and a system password storage means for storing the secondary side terminal system password when the system password is not stored in the secondary side terminal system password storage file, and a storage flag. To the system A storage flag setting means for setting that the password has been stored, and a system password reference means for referring to the system password from the secondary terminal system password storage file when the system password is already stored in the secondary terminal system password storage file. And the system password match judging means for judging whether the system password previously decrypted and the system password referenced from the secondary side terminal system password storing file match, and the result of the system password match judging means for the communication line An online system with an unauthorized use prevention function, comprising a secondary side terminal device having a system password check result transmitting means for transmitting using the system. 3. An online system with an unauthorized use prevention function, comprising the primary side terminal device according to claim 1 and the secondary side terminal device according to claim 2. 4. The online system with the unauthorized use prevention function according to claim 3, wherein the system password input means for inputting the system password from the keyboard of the primary side terminal device and the system password for keyboard input are encrypted by the encryption means. An online system with an unauthorized use prevention function, comprising: a system password setting means for storing the generated password in a primary system password storage file.