JPH09319486A - Terminal equipment - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide the main body part and keyboard of terminal equipment with a security managing function based on a password. SOLUTION: Terminal equipment 1 has a keyboard 2 and a main body part 9 and the keyboard 2 has a key switch 3, encode circuit 4 for converting a signal to a character code, interface transmission circuit 5 for transmitting output data to the main body part 9, password setting operation detection circuit 6 for performing password registration requesting operation detection, password input promotion and key non-operating time monitor, password storage part 7 for recording the password, and key input suppression opening transmission control circuit 8 for opening the suppression of transmission corresponding to the coincidence/non-coincidence of the password. The main body part 9 has an interface reception circuit 10, password update history storage part 11 for password update history, key input suppression opening reception control circuit 12 for opening the suppression of reception corresponding to the coincidence/non- coincidence of the password, and arithmetic/input and output/communication/ control part 13 for exchanging data with a network 14.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a terminal device having a password security management function, and more particularly to a terminal device for inspecting and managing a combination of a keyboard and a terminal device body and a password itself.

[0002]

2. Description of the Related Art In a conventional terminal device, in order to provide a security management function with a password, a control circuit inside the terminal device is used, and a subroutine for the password is activated by a password key or a special key operation, A method of prompting for password input on the display and key input, and when the power of the terminal device is turned on, the entered password is stored in the register of the password storage unit in the terminal device control unit, and the host computer checks whether the password matches. However, a method of logging off the terminal device or continuing operation restart is generally used.

According to Japanese Patent Application Laid-Open No. 64-88865,
A password management subroutine program started by a password input interrupt operation from the keyboard in a terminal device control unit including a keyboard of a terminal device having a password checking function is for making the entire terminal device usable or impossible. Used in. FIG. 3 shows a prompt 5 by filling a blank in the input screen 51 of the terminal device of the publication.
2 and FIG. 4 show examples of password input formats, and FIG. 5 is a flow chart showing the operation of the terminal device. FIG.
4 (a), 4 (b) and 4 (c) respectively show a blank embedded prompt in the password input screen.
4A shows a blank space embedded prompt 61 before inputting a password, FIG. 4B shows a blank space embedded prompt 62 in which only a password is input, and FIG. 4C shows a password before registration and a password after change. It is a figure which respectively shows the blank embedding prompt 63.

The terminal device of this publication assigns a password setting request to a specific key on the keyboard, uses the key for setting the password input mode, and when the key is pressed, means for jumping to the subroutine shown in the flowchart of FIG. 5 is provided. I have it. The operation will be described with reference to FIG. 5 showing the flow of the operation of the terminal device after pressing the key.
After jumping to the subroutine shown in the flow chart of FIG. 5, first, the screen information is saved in order to retain the situation in which the terminal device has been used until then (step 71). The screen is cleared, the blank password embedding prompt 61 shown in FIG. 4A is displayed, and the input of the password is waited for (step 72). When the password is input and the enter key is finally pressed (YES in step 73), the input data is saved (step 74), and the blank space embedded prompt 62 shown in FIG. 4B is displayed. In step 73, when a key other than the enter key is pressed,
Returning to step 72, the password input waiting of the blank embedded prompt 61 is displayed again, and the terminal device user is prompted to input data. It is determined whether or not the entered password matches the already registered password (step 75). If the result of the determination is that they do not match (mismatch in step 75), the process returns to step 72 and waits for the password input again. If they match (step 75)
4), the input screen display remains the blank embedded prompt 62 in FIG. 4B. When the terminal user wants to change the password, he / she inputs the password after the change after the "M" key of the password change request (there is step 76), and finally, when the enter is entered, the display screen is shown in FIG.
The blank space embedded prompt 63 shown in FIG. When the password is not changed (No in step 76), only enter is input and the process jumps to step 78.

On the other hand, if there is an input change (step 76), the password is changed, the changed password is newly registered (step 77), and the state of the terminal device before pressing the password key is restored. The returning operation is performed (step 78). The keyboard of the terminal device according to the publication has only a function of converting a pressed key into a character code, and the terminal device control unit jumps to a subroutine by a password registration request by pressing a powered key or a plurality of keys at the same time, and a password input screen is displayed. Since the key operation is kept waiting in the display state, the program being executed is interrupted while the waiting is continued, and the entire terminal device is put into the inoperative state. Therefore, the display output of the operating system operating status from the online network and the display output of the simultaneous emergency contact message to the terminal devices are disabled during the waiting time. When connecting to a local area network or the Internet, in order to receive mail, keep the terminal device control unit running so that it can be received at all times. Is inconvenient. Also,
Since the terminal device itself does not have a key non-operation time-out function, other people may use the terminal device without permission when forgetting to suppress the operation at the time of emergency leaving.

Further, since the spelling of the password is displayed on the screen when the password registration change screen is input, there is a fear that the password will be known to others and the password spelling after the change will not be reconfirmed by keying in again. Password spelling due to misunderstanding may be registered against the operator's will.

Further, the password management in the host computer by the online network is not consistent with the file management program under the host computer operating system and the value described in the password ledger file in the management server device in the local area network. If the access permission or denial is performed by the operating system and the file management program bug, the password information is leaked and the password information flows on the online network. It is difficult to prevent the leakage of passwords and the leakage of password information due to human security management deficiencies of internal personnel in the computer use department, and system operation is difficult. And the terminal operator is vulnerable to outside of security that can be monitored.

[0008]

The password registration monitoring function is provided in the keyboard and the main body of the terminal device, and the keyboard registers and holds the password and monitors the password input to perform the control and opening control of the input operation. Also, in order to prevent loopholes in the monitoring function due to the keyboard itself being transferred to another terminal device main body, a password history is held in the main body and the combination of the main body and the keyboard is monitored by the password from the keyboard. Then, the control of opening the inhibition of the input operation is performed. It also has a keyless time monitoring function. With the password registration monitoring function and time monitoring function described above, it is possible to prevent the entire terminal device from becoming inactive due to waiting for the password input, enabling the constant reception and display of operating system messages or e-mails, and Management is confirmed on the keyboard and terminal unit. Confirmation of password spelling by re-entry, prompting for password input by warning sound instead of display screen prompt, new password check by retaining password history, password registration operation or password transmission data. Prevent password information from leaking through communication or the host computer.

[0009]

SUMMARY OF THE INVENTION An object of the present invention is to equip a keyboard and a main body of a terminal device with password registration, management and monitoring functions to limit password security management to a local range. , To facilitate password management.

Therefore, in a terminal device having a keyboard for input operation and a main body for processing keyed data and transmitting / receiving the data to / from an online network, the keyboard includes a password storage unit for storing a password,
Speaker setting control for prompting password input or password mismatch notification, password setting operation detection circuit for monitoring input operation interval time and password input advance notice by simultaneous keying of multiple keys, encoding circuit for encoding key switch signal, and said encoding circuit Has an interface transmission circuit for outputting the output data of the above to the terminal device main body, and an input open flag indicating the state of inhibiting or opening the key input, and is stored in the password output from the encoding circuit and the password storage unit. When the passwords are compared and the passwords match, the input release flag is set to the "1" state to release the key input, and when the passwords do not match, the input release flag is set to the "0" state to inhibit the key input. An open transmission control circuit; Is an interface receiving circuit for receiving the output data of the interface transmitting circuit, a password update history storage section for storing a password history by identifying a password from the output data of the interface receiving circuit, and an output data of the interface receiving circuit. When the calculation / input / output / communication / control circuit for sending to the online network and the password of the password update history storage unit and the password of the interface reception circuit are compared and match, the calculation / input / output / communication Release the data transmission of the control unit,
And a key input inhibition open reception control circuit for inhibiting data transmission of the calculation / input / output / communication control unit to the online network when the two do not match.

[0011]

DESCRIPTION OF THE PREFERRED EMBODIMENTS The present invention will be described with reference to the drawings.

Referring to FIG. 1 showing the configuration of an embodiment of the present invention, a terminal device 1 includes a keyboard 2 for input operation.
And a main body 9 for processing input data. The keyboard 2 includes a key switch 3 pressed by an operator,
An encoding circuit 4 for converting the signal obtained from the key switch 3 into character code data, an interface transmitting circuit 5 for transmitting the output data obtained from the encoding circuit 4 to the main body section 9, and setting and updating a password. Therefore, four arbitrary key switches 3 are simultaneously pressed for 3 seconds or more to detect a password registration request operation, password input prompting the speaker 15 to sound a short sound or a long sound alarm for prompting password input, and no key operation time. A password setting operation detection circuit 6 for monitoring, a password storage section 7 for writing the output data of the encoding circuit 4 as a password by the signal detected by the password setting operation detection circuit 6, and changing the setting for password registration.
A key input for controlling the transmission of data from the interface transmission circuit 5 and controlling the opening of the data as well as the setting of an input release flag indicating the state of the inhibition and the opening due to the mismatch between the data read from the password storage unit 7 and the data from the encoding circuit 4. And a suppression release transmission control circuit 8.

The main body section 9 includes an interface receiving circuit 10 for receiving output data from the keyboard 2 and a password update history storage section 11 for storing a password update history.
And the password invasion caused by replacing the keyboard 2 with another keyboard is suppressed or opened by the interface receiving circuit 10 depending on whether the latest value in the password update history storage unit 11 matches the password value received from the keyboard 2. Key input inhibition open reception control circuit 12
It has an operation / input / output / communication / control unit 13 for performing normal key input information processing, reading the contents of the password update history storage unit 11, and transmitting / receiving data to / from the network 14.

Next, the operation of this embodiment will be described with reference to the block diagram of FIG. 1 and the flow chart of FIG. When the terminal device 1 is turned on (step 21), the input release flag of the key input inhibition release transmission control circuit 8 of the keyboard 2 is set to the "0" state, and the interface transmission circuit 5 inhibits data transmission. (Step 22).
When the input release flag is "0", the operator's key switch 3
It is in the key input waiting state waiting for pressing (step 2
3) Continue to wait for the start of key input by the operator (no in step 24). To enable the keyboard 2 to be used, the operator performs an operation of pressing four key switches 3 at the same time for 3 seconds or more as the first step of the operation for releasing the key input inhibition state (step 25). The password setting operation detection circuit 6 senses the operation and causes the speaker 15 to make one short sound for prompting the user to enter the password key (step 26). The operator presses the key switch 3 in the order of spelling the password to input (step 2).
7). At the time when the return key for completion of password input is input, the previously set password in the password storage unit 7 is compared with the input password in the password storage unit, and when they do not match (n in step 28).
o), a long sound is emitted to the speaker 15 twice (step 2
9) The operator is informed of the key input suppression, and the state immediately after the power is turned on is restored (step 21). When the passwords are compared with each other (yes in step 28), the speaker 15 is sounded twice in a short tone (step 30), the operator is notified of the release of the key input, and the key input release flag is set to the "1" state. The keyboard 2 is set (step 31) and the keyboard 2 is brought into a normal input use state (step 32).

In the normal input use state, detection of a password change operation (step 33), detection of input inhibition for temporarily disabling the keyboard (step 34), and leaving the keyboard without operation, The detection of time-out in the no-key input state (step 35) and the detection of power-off operation (step 36) are monitored. When a password change operation is detected (yes in step 33) and four key switches 3 of the keyboard 2 are simultaneously pressed for 3 seconds or more (step 38), the password setting operation detection circuit 6 recognizes the password setting operation detection, Speaker 1
A short tone is sounded twice from 5 to notify the operator that the keyboard 2 is in the input mode and prompt the user to enter the password (step 39). When the operator sequentially inputs the spelling of the password to be changed using the key switch 3 and presses the return key indicating completion of password input (step 4).
0), the password setting operation detection circuit 6 causes the speaker 15 to make three short tones (step 41), so that the operator completes the initial input of the key switch 3 for changing the password and the spelling of the password change. Prompt the user to enter the password spelling again to confirm that the spelling is the same as the operator's intention (step 41). The operator inputs the password again and presses the return key to confirm the spelling of the password (step 42). The password setting operation detection circuit 6 compares the spelling of the password input first and the spelling of the password input again, and when the spelling matches (y in step 43).
es), it is considered that the password has been correctly changed according to the intention of the operator, and the changed password is written in the password storage unit 6 (step 44). When the writing to the password storage unit 7 is completed, the password setting operation detection circuit 6 causes the speaker 15 to make three long sounds, to notify the operator that the password update is completed (step 45), and the normal key input is performed. It returns to the monitoring of the usage state (step 32). When the spelling of the password input at the first time is compared with the spelling of the password input again, and when they do not match (no in step 43), no operation is performed as is,
Return to the monitoring of the normal key input use state (step 32).
In monitoring the normal input use state (steps 32 to 36). The operator detects an input suppression operation that temporarily disables the use of the keyboard 2 (y in step 34).
es), if the four key switches 3 of the keyboard 2 are simultaneously pressed for 3 seconds or more (step 46), the password setting operation detection circuit 6 recognizes the start of the password setting operation, and the speaker 15 makes two short sounds. Then, the operator is informed that the keyboard has entered the input mode, and the spelling of the password is prompted by the key switch 3 (step 47). If only the return key of the key switch 3 is pressed (step 48), the password setting operation detection circuit 6 causes the speaker 15 to make one short sound and one long sound in succession to prevent the operator from inputting the keyboard. It is informed that it is in the operated state (step 49), and returns immediately after the power is turned on (step 21). The input release flag is set to the "0" state (step 22), the key input standby state is set (step 23), and the key-in start waiting is set (no in step 24). In the normal input use state monitoring (steps 32 to 36), when the operator leaves the key switch 3 without inputting it for a certain period of time, a no-input timeout is detected (yes in step 35), and the password is detected. The setting operation detection circuit 6 causes the speaker 15 to make one short sound and one long sound in succession (step 49) to notify the operator that the input of the keyboard 2 has been suppressed, and the power is turned on. Immediately thereafter (step 21), the input release flag is set to the "0" state (step 22), and the key input standby state is set (step 2).
3) The key-in start is awaited (step 24). In the normal input use state monitoring (steps 32 to 36), when the operator performs a power-off operation, power-off is detected (yes at step 36), and the power-off ends (step 37).

The main body 9 of the terminal device 1 has a password update history storage unit 11 for storing ten update records of passwords registered in the password storage unit 7 of the keyboard 2 for first-in first-out. When the password held in the password storage unit 7 and the latest password in the password update history storage unit 11 of the main body unit 9 match or do not match, the key input suppression open receiving circuit 1
2 is activated to deactivate or open the interface receiving circuit 10 to prevent password invasion caused by replacing the keyboard 2 with another keyboard having the same function. Also, the past password in the password update history storage unit 11 is calculated and
It can be accessed from the input / output / communication / control unit 13 and enables search management of usage history and unauthorized use.

[0017]

As described above, according to the present invention,
Since the password can be registered and held in the password storage section built into the keyboard itself and the key input operation based on the password check can be suppressed and released, the program execution can be continued without affecting the main unit of the terminal device. ,
This will improve the operating efficiency of the terminal device.

Further, according to the present invention, when the user leaves the seat urgently and forgets to restrain the operation by the password, the key-in operation timeout function disables the key input operation of the terminal device after the elapse of a certain time. Therefore, unauthorized use by others can be prevented.

Further, according to the present invention, since the spelling of the password is not displayed on the password registration change screen, it is possible to prevent others from knowing the password, and the password is re-keyed to spell the password by mistake. It is possible to prevent wrong registration of.

Further, according to the present invention, since the password management function is managed in a local range, a password protection function against a password invasion caused by an unauthorized person in the computer system operation management department or the support department of the computer manufacturer is provided. Since the password exists in the management program file, it can be accessed from multiple operating devices when the password is leaked, and it is easy to enhance the security function against the time of unauthorized use and the difficulty of identifying the unauthorized device. To be

Further, according to the present invention, in a computer system in which access is open to the general public at a large-scale computing center, the number of users having access rights is increased to several hundreds, and the entire size of the password management ledger file is increased.
The load on the computer's arithmetic unit and the input / output device at the time of password verification becomes a value that cannot be ignored, and this load can be reduced to improve the computer system utilization efficiency.

[Brief description of drawings]

FIG. 1 is a block diagram of an embodiment of the present invention.

FIG. 2 is a flowchart showing the operation of the embodiment of FIG.

FIG. 3 is an example of a password input screen of a conventional technique.

FIG. 4 is a diagram showing an example of a password input format according to the related art.

FIG. 5 is a flowchart showing the operation of the conventional technique.

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 1 Terminal device 2 Keyboard 3 Key switch 4 Encoding circuit 5 Interface transmission circuit 6 Password setting operation detection circuit 7 Password storage section 8 Key input suppression open transmission control circuit 9 Main body section 10 Interface reception circuit 11 Password update history storage section 12 Key input suppression open reception control circuit 13 Operation, input / output, communication control circuit 14 Online network 15 Speaker

Claims (2)

[Claims] 1. A terminal device having a keyboard for input operation and a main body for processing keyed data and transmitting / receiving to / from an online network, wherein the keyboard comprises a password storage unit for storing a password and a password input unit. Speaker setting control for notifying promotion or password inconsistency, password setting operation detection circuit for monitoring input operation interval time and password entry notice by simultaneous keying of multiple keys, encoding circuit for encoding key switch signal, output data of the encoding circuit Has an interface transmission circuit for outputting to the terminal device main body, and an input open flag indicating the state of key input inhibition or release, and outputs the password output from the encoding circuit and the password stored in the password storage unit. When the comparison results in a match, the input release flag is set to the "1" state to release the key input, and when they do not match, the input release flag is set to the "0" state to inhibit the key input. A circuit, the main body section includes an interface receiving circuit that receives output data of the interface transmitting circuit, and a password update history storage section that stores a password history by identifying a password from the output data of the interface receiving circuit. And an arithmetic / input / output / communication / control circuit for transmitting the output data of the interface receiving circuit to the online network, and comparing the password of the password update history storage unit with the password of the interface receiving circuit, and when they match, online Data of the calculation, input / output, communication, and control unit for the network To open the transmission, when the mismatch,
A key input suppression open reception control circuit for suppressing data transmission of the calculation / input / output / communication control unit to an online network, the terminal device comprising: 2. The password setting operation detection circuit causes the speaker to sound a short tone when the password is foretold or reminded and the password matches, and causes the speaker to sound a long tone when the password does not match or the password is changed. The terminal device according to claim 1, wherein when the time-out of a key input operation is suppressed, a short sound and a long sound are alternately emitted by the speaker.