JPH09146652A - Information processor - Google Patents

Abstract

PROBLEM TO BE SOLVED: To prevent the illegal use by another person caused by the leak of password by counting how many times the same password is continuously used and requesting the change input of password to a user when that password is continuously used more than a certain fixed number of times. SOLUTION: The password inputted from a keyboard 11 is compared with the character string of registered password of use recognizing object person previously stored in a hard disk device 18 by an input content correct/error judging device 15. When the password is coincident as a result of comparison, the permission of use is applied. At the same time, the character string of inputted password is sent to a continuous password using time recognizing processor 14 and it is recorded and counted how many times that password is inputted. When that password is continuously used more than a certain fixed number of times, the change input of password is requested to the user and a display device 17 indicates a warning that the permission of use can not be provided unless the change input is requested. Therefore, the illegal use by another person can be prevented.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an information processing apparatus generally called a personal computer or a workstation.

[0002]

2. Description of the Related Art In a conventional information processing device, for example, an electronic device generally called a personal computer or a workstation, a user starts using it in order to protect programs and data stored in a storage device in the device. At times, a method of requiring the input of a user ID and a password is used to determine whether or not the person is a usage authorization target person. in this case,
The system is such that the user ID and the character code list of the password input by the user are compared with those registered in advance, and if the character code list matches, the usage authorization is given. Therefore, if the character code enumeration is known to others, there is a danger that anyone can obtain permission to use it. For example, as disclosed in JP-A-2-137884,
There are various password protection techniques such as a method of changing the password itself depending on a time zone, a method of collating a key input time interval for inputting a password as in Japanese Patent Laid-Open No. 2-151891.

[0003]

In an information processing apparatus such as the one described above, for example, an electronic device generally called a personal computer or a workstation, it is necessary to determine whether or not the user is a person to be authorized for use at the start of use. In this method, the character code string of the password for the input user ID is compared with that which is registered in advance, and if the character code strings match, the usage authorization is given. Once registered, the character code string of this password is semipermanently valid unless the user himself / herself makes a change input. Therefore, there is a problem that the risk of password leakage increases as the same password is continuously used for a long period of time.

An object of the present invention is to count the number of times a registered password has been used continuously, and to request the user to change the password if the password has been used more than a certain number of times. By prohibiting the use of the password, the password is forcibly changed on a regular basis, and as a result, it is possible to prevent unauthorized use by others due to password leakage due to long-term use of the same password. It is to protect programs and data stored in the device and improve reliability.

[0005]

In order to achieve the above object, according to the present invention, when a user ID and a password are input at the start of use to start using the device, how many times the input password is input. Record and count.
When the count reaches a preset number of times, the user is requested to change and input the password, and unless the change is input, the permission for the subsequent use is not obtained. When the password is changed and input by the user, the new password is valid for the subsequent use, and when it is not input by the user, the subsequent use is prohibited. It should be noted that the user himself / herself can set the upper limit of the number of continuous uses of the same password in advance in response to the user's request for security.

In a conventional information processing apparatus, for example, an electronic device generally called a personal computer or a workstation, in order to determine whether or not the user is a person to be licensed for use at the start of use, the password for the entered user ID is entered. The method was to compare the character code strings with those registered in advance, and if the character code strings were the same, the usage authorization was given. In addition, since the character code string of this password is valid semipermanently once registered and unless the user himself / herself changes the password, as the same password continues to be used for a long period of time, password leakage will occur. It was a method that increased the risk.

According to the present invention, when a user ID and a password are input at the start of use to start using the device, the number of times the input password is input is recorded and counted. When the count reaches a preset number of times, the user is requested to change and input the password, and if the change is not input, the usage permission for the next and subsequent times cannot be obtained. When the password is changed and input by the user, the new password is valid for the subsequent use, and when it is not input by the user, the subsequent use is prohibited. as a result,
The period of continuous use of the same password will be automatically limited, the possibility of password leakage can be reduced, and the protection and reliability of programs and data stored in the storage device in the device can be reduced. It is possible to improve the sex.

[0008]

BEST MODE FOR CARRYING OUT THE INVENTION An embodiment of the present invention will be described below with reference to FIGS.

FIG. 1 is a block diagram of a control system of a password continuous use frequency recognition processing apparatus according to an embodiment of the present invention, and FIG. 2 is a flowchart of control of a password continuous use frequency recognition processing apparatus according to an embodiment of the present invention. 3 is a block diagram of the internal configuration of the information processing apparatus according to the embodiment of the present invention.

The information processing apparatus targeted by the present invention has an internal configuration as shown in FIG. In accordance with a processing command from the keyboard 11 or the mouse 12, the central processing unit 21 inputs / outputs data from / to the main memory 22, the floppy disk device 27, the hard disk device 18, etc., and displays the processing result on the display device 17. Therefore, the user of the device operates the keyboard 11 and the mouse 12 while visually recognizing the display device 17. In the conventional device, in order to protect the programs and data stored in the hard disk device 18, a method of requiring input of a user ID and a password at the start of use to determine whether or not the user is an authorized person Has been adopted. However, the character code string of this password is
Once registered, it is valid semipermanently unless the user himself / herself makes a change input. Therefore, as the same password is continuously used for a long time, the risk of password leakage increases.

On the other hand, in one embodiment of the present invention, FIG.
A password continuous use number recognition processing device shown in the control system block diagram as described above is adopted.

When the user starts using the device, the user inputs the user ID and password from the keyboard 11. Then, the input content correctness determination device 15 compares the password input by the user from the keyboard 11 with the character string of the registered password of the person to be authorized for use, which is stored in the hard disk device 18 in advance. Here, the character string of the password actually input is the hard disk device 1 in advance.
If it matches with the character string of the registered password of the person to be authorized for use stored in No. 8, it is a method for giving the permission for use. At this time, at the same time, the character string of the input password is sent to the password continuous use frequency recognition processing device 14, and the number of times the input password is input is recorded and counted. Then, it inquires how many times the password has been used up to now, and when the number of continuous uses reaches a preset number of times, it requests the user to change the password and does not change the input. Then, a warning is displayed on the display device 17 that the usage permission for the next time cannot be obtained. Here, when the user inputs a password change, the new password is validated for the subsequent use, and the new password is set to the hard disk drive 18
To be stored. If the user does not make a change input, the character string of the registered password of the authorized user stored in the hard disk drive 18 is erased to prohibit the subsequent use, and the old password is deleted again by the user. Even if is input, the input content correctness determination device 15 rejects the use. It should be noted that the user himself / herself can set an upper limit of the number of continuous uses of the same password in advance in the password continuous use number recognition processing device 14 in response to the user's request for security.

Next, the flow of this processing will be described with reference to the flow chart of the control of the password continuous use frequency recognition processing apparatus of one embodiment of the present invention in FIG.

At the stage of starting to use the electronic device, which is generally called a personal computer or a workstation, the user inputs a user ID and a password at the start of use to determine whether or not the user is a licensed person. It will be the start. When the user inputs a password from the keyboard when using the device, it compares it with the character string of the registered password of the authorized user, and if it matches, grants the license and at the same time adds 1 to the number of times the password is used. . Compare the number of times of use with 1 added with a preset number of times, and if it reaches, request the user to change the password, and if you do not enter the change, you will not be able to obtain permission to use the next time. Is displayed on the display device 17. Here, when the user inputs a change password, the new password is validated at the time of subsequent use, the password is changed to the new password, and the number of times the password is used is set to 1. If the user does not change the password, the character string of the password is deleted from the usage permission registration to prohibit future use, and even if the user inputs the old password again, the use is rejected. The method.

If such a system is adopted, the period during which the same password can be continuously used is naturally limited, and the possibility of password leakage due to continuous use of the same password is reduced. This makes it possible to protect programs and data stored in the storage device in the device and improve reliability.

[0016]

According to the present invention, an information processing apparatus generally called a personal computer or a workstation,
When you start using the device by entering the user ID and password at the start of use, record how many times the entered password is entered, and if the number of continuous uses exceeds a preset number. Requires the user to change and input the password, and unless the change is input, the usage permission for the next and subsequent times cannot be obtained. Then, when the password is changed and inputted by the user, the new password is validated at the time of the subsequent use, and when the change and input is not made by the user, the subsequent use is prohibited. As a result, the period of continuous use of the same password is naturally limited, and the possibility of password leakage due to long-term use of the same password can be reduced, preventing unauthorized use by others. Thus, it is possible to protect programs and data stored in the storage device in the device and improve reliability.

[Brief description of the drawings]

FIG. 1 is a block diagram of a control system of a password continuous use frequency recognition processing device according to an embodiment of the present invention.

FIG. 2 is a flowchart of control of a password continuous use frequency recognition processing device according to an embodiment of the present invention.

FIG. 3 is an internal configuration block diagram of an information processing apparatus according to an embodiment of the present invention.

[Explanation of symbols]

 11 ... Keyboard, 12 ... Mouse, 13 ... Keyboard input content recognition device, 14 ... Password continuous use frequency recognition processing device, 15 ... Input content correctness determination device, 16 ... Display control unit, 17 ... Display device, 18 ... Hard disk device.

Claims (4)

[Claims] 1. An information processing apparatus including a personal computer and a workstation, which includes a main body having a built-in control device, a display device including a CRT / flat display, and an input device including a keyboard and a mouse. An information processing device characterized in that, regarding a password input at the start of use, the number of times the same password is continuously used is counted, and when the password is continuously used a certain number of times or more, the user is requested to input a change of the password. 2. The information processing apparatus according to claim 1, wherein the user sets an upper limit of the number of continuous uses of the same password in advance. 3. The method according to claim 1, wherein when the user continues to use the same password for a certain number of times or more, the user is requested to change the password and the change is input, An information processing device that validates a new password when used. 4. The method according to claim 1, wherein when the user continuously uses the same password for a certain number of times or more, if the user is not required to enter the password even if the password is requested to be changed, Information processing device whose use is prohibited.