JPH1013400A - User authenitication system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To prevent illegal use of a password. SOLUTION: A transmitter side uses a password concealment means 13 to conceal a password 12 for a message 11 based on a password conceal rule to decide the password and sends the resulting message as a message 14 after concealment of password. A receiver side uses a password decoding means 15 to extract the password included in the message 14 based on the password concealment rule 15 and separates the message into a message 17 and a password 18.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a user authentication system in an N / W system, and more particularly to a user authentication system based on a password concealment method using a public key for preventing unauthorized login by a third party.

[0002]

2. Description of the Related Art In a conventional N / W (network) system, a password is generally used at the time of login in order to prevent unauthorized use of the system by a third party. By directly referencing the data on the line by using such a method, a password can be easily obtained and abused, so that it cannot be said that this is a reliable user authentication method. To avoid this, for example, see the paper “A User Authentication Scheme Not Requiring Secre
cy in the Computer ”, August 1974, Communication cft
As described in he ACM Volume 17, Issue 8, 437-442, a method has been proposed to prevent password theft from transfer information by converting the password using a one-way function. .

[0003]

The method described in the above-mentioned paper has the disadvantage that the number of digits of the password that must be memorized by the user increases, and the operability of the password is poor.

[0004]

According to a first aspect of the present invention, in a user authentication system using a password in a network system, a sender distributes the password in a message based on a predetermined password concealment protocol and transmits the message.
The receiving side extracts the password from the message based on the concealment rule, thereby enabling highly accurate user authentication.

According to a second aspect of the present invention, in a user authentication system using a password in a network system,
The sender includes a password concealing unit that conceals the password in the message based on a password concealing rule that defines a rule for concealing the password, and a transmitting unit that transmits the message in which the password is concealed. It is characterized by comprising receiving means for receiving a message, and password restoring means for extracting the password contained in the received message based on the password hiding rule.

In a third aspect of the present invention, in the first and second aspects of the invention, the password concealing rule is such that an insertion position of a public key in the message, a type of the public key, and a type of the public key And a method of dividing the password into the message and a method of encrypting the password in accordance with the above method.

[0007]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS The present invention will be described below with reference to the drawings.

FIG. 1 is a block diagram showing an embodiment of a user authentication system according to the present invention.

In the figure, reference numerals 11 and 17 denote transmission messages other than passwords, 12 and 18 denote passwords, 13 denotes password concealment means, 14 denotes a message after password concealment, 15 denotes password concealment rules, and 16 denotes password recovery means. .

The password concealing means 13 selects an arbitrary public key from the password concealing rule 15 on the client side, encrypts the password 12 by an encryption method corresponding to the selected public key, and then selects the same. It has a function of dividing the encrypted password 12 by a division method against the public key and creating the password-concealed message 14.

The password restoring means 16 reads the post-concealment message 14 received on the server side from the position of the public key defined in the password concealment rules 15 and reads the message 1 by the division method corresponding to this public key.
It has a function of separating a message 17 equivalent to 1 and an encrypted password, performing the reverse of the encryption method corresponding to the public key, and obtaining a password 18 equivalent to the password 12.

FIG. 2 is a diagram showing a password hiding rule in the present embodiment. The password hiding rule 15 includes a method of obtaining a public key predetermined between the server and the client, some public keys, and a password division method and an encryption method corresponding to each public key.

The operation of the present invention will be described below with reference to the drawings.

FIG. 3 is a diagram showing an example of a message structure for explaining the password hiding operation of the present invention.

In the figure, 31 is a transmission message other than a password, 32 is a password, 33 is an encrypted password, 34 is a password hidden message, 35 is a public key, 36 is a password length, 37 is a divided password, 38 Indicates the password after division.

(1) The client requests the server to use the system. In this embodiment, it is assumed that "F" is selected as an arbitrary public key in the password hiding rule (FIG. 2).

(2) According to the encryption method (public key in FIG. 2) corresponding to the public key of (1), the password 32 "ABC
D ”, the encrypted password 33“ EFGH ”is obtained.

(3) The message 3 is defined as the public key position in the message defined in the password concealment rule (FIG. 2).
The public key 35 “F” is inserted into the first 3 bytes.

(4) The password length 36 “4” is inserted into the seventh byte of the message 31 by the division method (the public key in FIG. 2) corresponding to the selected public key.

(5) Password 3 after encryption obtained in (2)
3 “EFGH” is divided into the password 37 “E” by the division method (the public key in FIG. 2) corresponding to the selected public key.
F "and the password 38" GH "after division are obtained, and they are inserted into the 10th to 11th bytes and 17th to 18th bytes determined by the same division method to obtain the post-password hiding message 34.

(6) The post-password hiding message 34 obtained in (5) is transmitted from the client to the server through the N / W by transmitting means (not shown).

(7) The server uses the message received by the receiving means (not shown), that is, the message 34 after password concealment, based on the password concealment rules (FIG. 2).
The byte's public key 35 “F” is obtained.

(8) The password length 36 is obtained from the 7th byte by the dividing method for the public key 35 “F” in the password hiding rule (FIG. 2), whereby the 10th to 11th bytes and the 17th to 18th bytes are obtained. Password 33 after encryption
"EFGH" is obtained. Further, the password 32 “ABCD” is obtained by the encryption method for the public key “F”.

(9) It is possible to determine whether or not the user is the correct user based on the password 32 thus obtained.

As can be seen from the above description, according to the present invention, even if the line data is referred to by a third party,
Unless the method of dividing / encrypting the password corresponding to the public key, that is, the password hiding rule is understood, it becomes impossible to specify the password.

[0026]

According to the user authentication method based on the password hiding method using the public key of the present invention, even if a third party refers to the line data, the password is specified unless the password hiding rule is understood. Becomes impossible,
This has the effect of improving the security of the N / W system against unauthorized users, and also has the effect of improving the operability of the user because the length of the password to be used is not related.

[Brief description of the drawings]

FIG. 1 is a block diagram showing one embodiment of the present invention.

FIG. 2 is a diagram showing a password concealing rule in the embodiment.

FIG. 3 is an explanatory diagram of a message and a password for explaining the operation of the present invention.

[Explanation of symbols]

 REFERENCE SIGNS LIST 11 message 12 password 13 password concealing means 14 message after password concealment 15 password concealment rules 16 password recovery means 17 message 18 password 31 message 32 password 33 encrypted password 34 message after password concealment 35 public key 36 password length 37 divided password 38 Password after split

Claims (3)

[Claims] 1. In a user authentication system using a password in a network system, a sender distributes the password in a message based on a predetermined password concealment protocol and transmits the message, and a receiver uses the message based on the concealment protocol. A user authentication method characterized in that highly accurate user authentication becomes possible by extracting the password from the password. 2. In a user authentication method using a password in a network system, a sender conceals a password in a message based on a password concealing rule that defines rules for concealing the password; Transmitting means for transmitting the concealed message, the receiving side comprising receiving means for receiving the message, and password restoring means for extracting the password contained in the received message based on the password concealment rule A user authentication method characterized by the following. 3. The password concealment rule includes a position where a public key is inserted in the message, a type of the public key, a method of dividing the password according to the type of the public key, and a method of dividing the password. 3. The user authentication method according to claim 1, wherein a method of inserting the password into the message and a method of encrypting the password are determined.