JPS6278644A - Password storage - Google Patents

Abstract

PURPOSE:To reduce the invasion of privacy by decoding the contents of a ciphered password memory part with the contents of a random number memory part used as a key in case a password is forgotten. CONSTITUTION:If an operator forgets a password, the operator extracts a random number memory part 10 out of its stored part and pushes a password restoring switch. Here a password decoding part 11 reads out the part 10 and performing a decoding action with the contents of the part 10 as a decoding key and the memory contents of a ciphered password memory part 9 used as data respectively. Thus a restored password is obtained and displayed at a restored password output part 12. Then the operator pushes a document decoding switch to supply the password through a password input part 1 and then pushes an end key. Thus the decoded document data is displayed at a document data output part 6.

Description

DETAILED DESCRIPTION OF THE INVENTION Field of Industrial Application The present invention includes: 1 a document filing device for storing confidential information;
Alternatively, the present invention relates to a device for storing passwords, such as an information processing device, which has means for confirming an individual's qualification to use information resources.

2. B. Conventional Techniques III.b. In recent years, the development of large-capacity storage devices has progressed, and document filing devices have come into widespread use. Statement 11 - Since confidential information is often stored in filing devices, measures are taken to ensure confidentiality by encrypting the document data to be stored. At this time, a password consisting of numbers and character strings set and memorized by the individual is often used as the encryption key.

Conventional devices of this type and [7] For example,
There is something proposed in Publication No. 73... Figure 2 shows the configuration of the part of this conventional document filing device where passwords are used, and 1 shows the configuration of the part where passwords are input manually. 2 is a text temporary data storage unit that stores document data that should be kept confidential; 3 is a document data encryption unit that encrypts this text No. 1 data with an input encryption key; 4 is a text data encryption unit that stores encrypted document data; The encrypted store data d [200 million copies to be stored, 6 is the encrypted data t and the input encryption key is used to decrypt the Fusada data by the document data decryption unit 5, and the document data decryption unit 5 decrypts the data. This is a document data output unit that outputs document data. This is realized, for example, as a CRT device that displays the contents of a document.

In the conventional document filing device configured as described above, the document data stored in the document data storage section 2 is sent to the password input section 1 by the document data encryption section 3.
The document is encrypted using the password KMO input by the operator as an encryption key, and is stored in the encrypted document data storage section 4. On the other hand, the encrypted document data stored in the encrypted document data storage section 4 is processed by the document data decryption section 6 using the password KM input by the operator from the password input section 1.
1 as the decryption key. The decoded document data is then displayed on the document data output section 6. If the password KMO input for encryption and the password KM1 input for decryption match here, the document data output section 6 is loaded with the document data originally stored in the data storage section 2. The contents are displayed as is. On the other hand, if KMO and KMl are different, the document data output section 6 displays a meaningless character string that is completely different from the original document data. Therefore, the contents of the confidential document are displayed only when the correct password is entered, thereby realizing safe storage of the confidential document.

Problems to be Solved by the Invention However, the storage of passwords in conventional devices of this type with the above configuration relies on the individual's memory.If the operator forgets the password KMOi, the correct decryption key KM1 Therefore, there is a risk that the operator will completely lose necessary document information and suffer great damage. 1. It is desirable that the password and I7 be easy for the operator to remember and have a personal character. Therefore, even if an operator writes down the password KMO on a piece of paper and stores it in a safe place in order to avoid the above-mentioned risks, if the paper is stolen, the personal privacy of the password will be lost. 5 pages were at risk of being infringed.

In view of the above, an object of the present invention is to provide a password storage device that stores passwords set and memorized by an operator in a safe manner and allows the operator to easily recover the password even if the operator forgets the password. It is something.

Means for Solving the Problems The present invention includes a random number generation section, a password encryption section that encrypts an input password using the random numbers generated by the random number generation section as a key, and stores the encrypted password. an encrypted password storage means, a portable random number storage means for storing random numbers generated by the random number generation section, and a key to decrypt the stored contents of the encrypted password storage means using the stored contents of the random number storage means as a key. This is a password storage device equipped with a password decryption unit.

Effect of the present invention With the above-described configuration, when the operator gives an instruction to save a password, the random number generator is driven to generate one random number, and then the pass 6 henoward encryption part is driven to accept the operator's input. The password is encrypted using the random number as a key, and the encrypted output is stored in the encrypted password storage section. Furthermore, the random number is stored in a random number storage means. The operator then removes the random number storage means from the apparatus and stores it in a physically separate and safe place.

If the operator forgets the password, the operator attaches the random number storage means to the device again and issues an instruction to restore the password. At this time, the password decryption unit is activated and the contents stored in the random number storage means are is used as a key to decrypt the stored contents of the encrypted password storage section.If the stored contents of the random number storage means and the encrypted password storage section are as they should be, the encrypted password is decoded only at the time when it is broken. The decryption unit outputs the password that the operator has forgotten.This allows the operator to obtain the correct password and learn the contents of the required document.

Embodiment FIG. 1 shows a configuration diagram when a password storage device is incorporated into a document filing device as an embodiment of the present invention.9 In FIG. 1, 1 is a password input section. , 2 is a document data storage unit, 3 is a document data encryption unit, 4 is an encrypted text data storage unit, 6 is a document data decryption unit, and 6 is a document data output unit. In the configuration diagram of the conventional document filing device, the parts 6 and 7 with the same numbers have the same functions, respectively. Numerals 6 and 7 are random number generators that generate one random number when activated. 8Vi is a password encrypting section that encrypts a password input from the password input section 1 using the random number output from the random number generating section as a key. Reference numeral 9 denotes an encrypted password storage section 11 for storing the password encrypted by the password encrypting section. 10 is a random number storage unit that stores the random number generated by the random number generation unit and used as the encryption key of the password encryption unit. This is shaped so that it can be removed (and reattached) from this device.11
is a password decryption unit that decrypts the stored content of the encrypted password storage unit using the stored content of the random number storage unit as a key. 12 is the restoration bus 1 food output section, password m-'
Output the post-password which is the output of the j section 11. 1
and 7 to 12 constitute the password storage device of the present invention. 3. The following describes the case where the password storage device of this embodiment configured as described above is applied to a document filing device. I will explain the entire operation. , [Password setting 'A'
i: and memory 11, the operator presses the password setting switch (
When you press the button (Figure 1), this device connects the bus ``Hard input section 1, random number generation section, and password encryption section 8 (/c to J
I will send out the i-number.

2. Enter operator tit password human power section 1 or Lahas 1 node and press the end key (not shown) finally.3. At this time, the password 11 is temporarily stored in an internal buffer (not shown), while the random number generator 7 generates one random number R41. Next: Send t1 to the password encryption unit 8.

4. Password dark section 8t, t, Password password temporarily stored in the internal buffer 1 of the password section 1 9<
-7 is encrypted using the random number R as the encryption key. The password encrypted with -7 is stored in the encrypted password storage unit 9. In this embodiment, the encrypted password storage unit 9
is realized as a file within the system file of the document filing device.

5. On the other hand, the random number generation section 7 stores the random number R in the random number storage section 10. In this embodiment, the random number storage section 10 is realized as a file on a floppy disk for storing random numbers of a document filing device.9,6 The procedure for setting and storing a password is completed. The operator then removes the random number storage unit 10 from the device and stores it in a physically separate and locked location.

[Document encryption]

7. When the operator presses the text encryption SW (f, not shown), this device sends an activation signal to the password input section 1 and the document data encryption section 3.

8. For the operator 1, enter the password in the password input field 1 or press the end key (not shown) at the end. At this time, the password is stored in the internal buffer. Remember L 6.

9. The document data encryption section 31i temporarily stores the bus hood temporarily stored in the internal buffer of the password input section 1 as the encryption key. In this embodiment, the document data is encrypted and stored in the data storage unit 4. The data storage unit 4 is the document filing device. This is accomplished by taking a certain file in the document floppy and decoding it. 3. [Decryption of one sentence store] 3, 11. The operator inputs the password from the password input section 1 and presses the end key (not shown) at the end. when password
The code is temporarily stored in the internal buffer (Fig./J).3
, 12. The document data encryption unit 5 stores the password in the internal buffer of the password input unit 1 (at -” 1j1 [memorized password 11
Using the paged key as a decryption key, the stored contents of the encrypted document data storage section 2 are decrypted. Then, the decrypted document data is output to the document data output section 6. [Password restoration] 13. The operator attaches the random number storage section 1o to the apparatus.

14. The operator presses the password recovery SW (not shown). At this time, the device sends an activation signal to the password decoding section 11.

15. The password decryption unit 11 reads the contents of the random number storage unit 1o, uses the contents as a decryption key, and performs decryption using the stored contents of the encrypted password storage unit 9 as data.

16. As a result, the original password from the password decryption section 11 is outputted from the decrypted password output section 12. This output form is displayed on the 087 screen in this embodiment.

17. The operator can recall the forgotten password by looking at the password displayed on the 087 screen.

A specific example of the operation of this embodiment described above will be described next.

a. Now assume that the operator wants to store the document data "Product x07 will be released on November 21st" stored in the document data storage section 2 in the encrypted data storage section 4 as a confidential document.

b. First, the operator sets a password as follows. That is, the operator first enters the password encryption part W.
Press , and from password input section 1 enter, for example, JMARIKO.
Enter the password J and then press the exit key. At this time, the random number generator 7 generates a random number, for example, 548724. The password encryption unit 8 uses this random number as an encryption key to encrypt the password and generate an encrypted password, for example, 1F.
4&T#! Generate J. Then, the password encryption section 8 stores this encrypted password in the encrypted password storage section 9. On the other hand, the random number generation section generates the random number in the random number storage section 1o.
to be memorized.

C. The operator removes the random number storage unit 1o from the device and stores it in a physically separate location.

13 page 61 The operator then encrypts the document as follows. That is, the operator first presses the document encryption SW. Then, from the password input section 1, enter the password “MAR”.
Enter IKOJ and then press the end key. At this time, the document data encryption section 3 encrypts the document data stored in the document data storage section 2 with the password, and creates the encrypted document data, for example, "K-embedded 8T back-behind-the-scenes-un-2-difference-blade-man-mark". " is generated and stored in the encrypted document data storage section 4.

θ Now, suppose that after a long time has passed since the above-described document encryption operation was performed, the operator needs to know the contents of the confidential document. However, it is assumed that the operator has forgotten the password that he or she has set. Therefore, the operator takes out the random number storage section 1o from the place where it was stored and reinstalls it into the apparatus. And password recovery S
Press W. At this time, the password decryption unit 11 uses the random number storage unit 1
Read out 0 and its contents [Storage 14 of encrypted password storage unit 9 using 548724j as decryption key] I Contents ``Decrypt using F4&T#!J as data.

Then, a restoration password [MARIKOJ is generated and displayed on the decryption password output section 12 (087 screen).

f. Since the operator knows the password, he decrypts the document S.
Press W. Then, the password input section 1 inputs the password "MARIKOj" and finally presses the end key. At this time, the document data decryption section 6 uses the password as the decryption key and decrypts the contents stored in the encrypted document data storage section 4. The decrypted document data "Product XO7 will be released on November 21st" is generated and displayed on the document data output section 6.

As described above, in this embodiment, the password l-MARIKOJ originally set by the operator can be entered as a text (1: even if the password is forgotten before decryption, the encrypted password is stored in the random number "548724J" stored in the random number storage section when setting the password). The original password can be restored from the encrypted password "F4&T#!" stored in the computer, and the necessary confidential document information can be obtained. In addition, even if the password were to be exposed by the random number storage unit or someone else, the content would be nothing more than a meaningless string of numbers, so there is no need to worry about personal information contained in the password itself being exposed. .

In this embodiment, the restoration password output section 12 is implemented as a CRT screen, and the operator confirms the restoration password and then inputs the password again. However, the present invention is not necessarily limited to this configuration. do not have. For example, the recovery password output unit 12 is realized by an OR gate, one input receives the output signal of the password input unit 1, the other input receives the output signal of the password decryption unit 11, and the output is By configuring it to be input to the document data reciprocating command section, it is possible for the operator to perform a password restoration operation without having to retrieve necessary document data at the same time.

1. In this embodiment, the password storage device of the present invention will be explained in 1-7k for the case where it is incorporated into a document archiving device, but the password storage device of the present invention can be similarly applied to other information processing equipment that uses passwords. It is possible to apply. As described in the detailed description of the invention, according to the present invention, when an operator sets up a bus node, information that can be used to recover a password, that is, a random number and a password encrypted by the random number are separately stored. The above two password recovery information can be stored in a physically isolated location, and the random number storage device has a removable shape. Reduce the risk of information that can be used to recover passwords being revealed at the same time (2)
It's 5, 1, hypothetically - out of public information - JJ is exposed
difference! Even if it is 1, the information is a meaningless random number or a character string, so there is no risk that the personal privacy contained in the password will be violated.13 Therefore, the practical effects of the present invention are great.

[Brief explanation of drawings]

Figure 1 shows a password 17 in one embodiment of the present invention.
・＼-7 A block diagram when the storage device is applied to a document filing device. FIG. 2 is a block diagram of a portion of a conventional document filing device related to password processing. 1... Password input section, 7... Random number generation section, 8... Password encryption section, 9... Encrypted password storage section, 10... Random number storage section, 11...
・Password decryption part.

Claims (1)

[Claims] a password input section for inputting a password, a random number generation section, a password encryption section for encrypting the input password using the random number generated by the random number generation section as a key, and an encrypted password storage means for storing the encrypted password. and a portable random number storage means for storing the random numbers generated by the random number generation section, and a password decryption section for decrypting the stored contents of the encrypted password storage section using the stored contents of the random number storage means as a key. password storage device.