JPS60252937A - Protecting device for screen input and output information - Google Patents

Abstract

PURPOSE:To reduce the password input success factor of a third party by providing a means to check both checking and retrying frequencies of the password prior to input/output to a scope and a means to erase scope when a prescribed period of time elapses after the input/output. CONSTITUTION:A password process 3 is started by a display request 2 given from a CRT1 to perform an input request 5, fetching 6 and a check 7 of a password 4. Thus it is decided whether the request 2 is outputted by a prescribed operator or not. When a normal password is decided, a starting time point is set 9 to a cycle timer 8 for scope erasion processing. Then the scope input/output processing 13 is carried out. If the password is not normal, the request 5 is given again for retry. The maximum retrying frequency is decided, and an alarm device 10 outputs an alarm when the retry exceeds said maximum frequency. Thus all processes are through. Then a scope under display is erased by the scope erasion processing 15 by the timer 8 and independently of the processing 13.

Description

[Detailed Description of the Invention] [Field of Application of the Invention] The present invention relates to a man-machine system that uses a keyboard and a CRT as input/output media to display information and change 1iF. This invention relates to protective waves for screen input/output information suitable for preventing information from being leaked to third parties other than authorized operators.

[Background of the invention]

Conventionally, passwords are checked and subsequent screen input/output operations are permitted only when the password is normal. However, if a third party changes the password combination and tries again and again, the system will eventually return to normal and input/output operations will be possible. Furthermore, there is a possibility that a third party can continue to operate by some means after the authorized operator has operated. There is no problem with this if the screen is always erased at the end of the operation, but there is a possibility that the user forgets to erase the screen, so it is not reliable and is insufficient in terms of protecting confidential information.

[Purpose of the invention]

The purpose of the present invention is to provide screen input/output information to prevent confidential information important for system operation from being easily displayed on the screen or rewritten by a third party. The purpose is to provide a protection method.

[Summary of the invention]

In the present invention, before screen input/output, not only the password itself is checked, but also the number of attempts in case of a password input error is checked, thereby limiting the number of password input attempts and reducing the success rate by a third party. In addition, in the event of an abnormality, issuing a warning can be useful for early detection of abnormal operators. Also, after screen input/output,
By automatically erasing the screen after a certain period of time has elapsed, a third party cannot continue even if the authorized operator does not erase the screen.

[Embodiments of the invention]

Embodiments of the present invention will be described below with reference to the drawings.

FIG. 1 shows an overall block diagram of processing in an embodiment of the present invention. In FIG. 1, password processing 3 is started in response to a display request 2 from CR and TI. This password processing 3 performs a password 40 input request 5, import 6, and check 7, and determines whether the display request 2 is made by an authorized operator or not. If the password 4 is normal, the periodic timer 8 performs screen erasing processing. The startup time is set 9 and the process moves to screen input/output processing 13. If password 4 is abnormal here, a retry is required and the process starts over from input request 5. This retry will be repeated until the password is correct (but if the number of retries exceeds a predetermined number of times, an alarm issuance 11 will be issued to the alarm device 10 and the entire process will be terminated.The screen input/output processing 13 will display After outputting the requested confidential information 14, the information is rewritten in response to a request from the operator.Next, by activation 16 from the screen erasing process 15F1 cycle timer 8, the information being displayed is erased independently of the screen input/output process 13. Erase the screen.Here, the time from display request 2 to screen erase activation 16 is a predetermined time necessary and sufficient for one screen's input/output.With this screen erase, input/output processing for one screen is completed. This is the end. Note that since the periodic timer for screen erasure and the cancellation 12 are performed for each display request 2, continuity will not be lost even when multiple screens are operated.

FIG. 2 shows a schematic flow of password check 7 in FIG. 1. The loaded password is checked in block A, and if it matches the registered password, the normal routine is passed. In block B, the password retry counter is updated (7), and in block C, the number of retries is checked, and if it is within the allowable range, the process proceeds to a negative routine. Then, in block D, good news is issued as a try-over process. Further, when the password is normal, a retry counter is initialized in block F, and a screen erasing time is set in a periodic timer in block G. Finally, each state is stored in blocks E and H, and the process ends.

〔Effect of the invention〕

According to the present invention, it is possible to reduce the success rate of a password input by a third party, it is possible to reliably determine whether or not it is a simple input error by a legitimate operator, and it is useful for early detection of an abnormal operator.

[Brief explanation of the drawing]

FIG. 1 is a system diagram of an embodiment of the present invention, and FIG. 2 is a flowchart of FIG. 1. 1...C1(, T, 3... Password processing, 8...
・Periodic timer, 10...Alarm device, 14...Confidential information, 15...Picture f71 times 25! J

Claims (1)

[Claims] 1. Keyboard and C)? In a computer system that displays or rewrites information using a T-display device as an input/output medium, input/output to the screen is prohibited in order to prevent confidential information that may affect system operation from leaking to third parties other than authorized operators. A protection device for screen input/output information, characterized by a password check and password retry count check processing means provided at the front, and automatic screen erasure processing means provided after input/output to the screen after a certain period of time has elapsed.