JPS63107354A - Computer access security system via public telephone network - Google Patents

Abstract

PURPOSE:To improve the security by allowing a computer system to revise the pass word at each access to the computer system and setting the result to a storage device of the terminal equipment side. CONSTITUTION:In receiving a user 18 to identify a user from a data terminal equipment 3, the host computer sends a signal ACK #2 commanding the input of a pass wod #2 and in receiving the pass word #2 from the data terminal equipment 3, the host computer collates the pass word as to whether or not the pass word is coincident with the pass word #2 in the said subscriber data and when they are coincident, the host computer decides a new pass word #2 based on a random number and sets the result to the said subscriber data pass word #2 to revise the pass word #2 and sends the new pass word #2 to the data terminal equipment 3 thereby applying revision command of the pass word #2.

Description

DETAILED DESCRIPTION OF THE INVENTION (Field of Industrial Application) The present invention relates to a security method when accessing a computer via a public network in a data communication system.

(Prior Art) Conventionally, this certain computer access security method requires the user to enter a user ID and password in a logon sequence in order to determine whether or not the user is allowed to access the computer system. It was checked by the system. Furthermore, the user had registered a one-time password in the computer system and was using that password.

(Problem to be Solved by the Invention) However, in the above-mentioned conventional method, the user does not change the password once registered to 100% purple. However, there was a problem in that the security of the computer system could be easily breached.

An object of the present invention is to provide a computer access security system via a public network that can further enhance the security of the computer access system.

(Friendly Means for Solving the Problems) In order to achieve all of the above objects, the computer access security system via a public network according to the present invention provides a data communication system in which a computer system is accessed via a public network, in which a user terminal is connected to a computer via a public network. The sent password is stored, and this password is output and sent to the computer, and the computer retrieves the password it has memorized from the user terminal and compares it with the password sent from the user terminal. However, if there is a mismatch, the call is completely disconnected, and if there is a match, the fc meeting creates a new password at random for the user terminal, updates the password corresponding to the user terminal to the new password, and updates the password to the user terminal. A new password is sent to the user terminal, and the user terminal is configured to store the new password sent to the user terminal.

(Embodiment) Hereinafter, a preferred embodiment of the present invention will be specifically described with reference to the drawings.

FIG. 1 is a diagram illustrating the configuration of a data communication system via a public network, illustrating an embodiment of the system according to the present invention. Further, FIG. 2 is a flowchart showing a process for explaining the entire operation of this embodiment.

In FIG. 1, a host computer 1 and a data terminal 3 are connected to a public network 2. In FIG.

A floppy disk 4 is read directly from the data terminal 3.

Next, with reference to FIG. 2, the operation of the system of the present invention will be described with respect to the case where the data terminal 3 accesses the host computer 1 via the public network.

When the host computer receives the user D that identifies all users from the data terminal 3, it asks for the subscriber data of the terminal as the trial user IDI index key (10), checks whether the user is registered (11), and if , if it is registered, a signal AO instructing to input password #10
K-1t1' (il- Sends (12).Furthermore, when the password #1t is received from the data terminal 3, it is checked to see if it matches the value of password #1 in the subscriber data (13). If so, it sends out a signal AOK#2i instructing the input of password #2 (14). When the data terminal 3 receives AOK#:2, it extracts the password #2 value from the floppy disk 4 (20) and sends it to the host computer (14).

When the host computer 1 receives the password #2 from the data terminal 3, the host computer 1 inputs the password #2 in the subscriber data.
Check to see if they match 1 of 2 15), and if they match, determine the value of password #2 using a random number 16) and set it to password #2 in the subscriber data. As a result of (17), the value of password #2 is updated, and at the same time, the value of new password #2 (new password #2) is sent to the data terminal 3 (18), and an update instruction for password #2 is issued.

When the data terminal 3 receives the new password #2, it sets this value on the floppy disk 4 (21) and enters data communication with the host computer 1.

Next, if a discrepancy occurs in each of the above verifications,
Access to the computer system by immediately disconnecting the vomit? + [Stop.

Note that as an informal data terminal storage device, it is also possible to use not only the floppy disk 4 but also an IC memory or an IC card.

(Effects of the Invention) As explained above, the method of the present invention updates the password on the computer system side every time the computer system is accessed. The system is configured so that the next time the same terminal accesses the computer system, it will check the password updated from the previous access, so even if the password determined and entered by the user is leaked. This has the effect that access to the computer system can be prohibited even if the computer system is accessed, thereby increasing security.

[Brief explanation of the drawing]

The first figure is a configuration diagram of a data communication system via a public network to explain an embodiment of the computer access security system via a public network according to the present invention, and the second figure is a complete explanation of the operation of the embodiment of the present invention. FIG. 1...Host computer 2...Public network 3...Data terminal 4...Floppy disk Patent applicant NEC Corporation Representative Patent attorney Noro Inoro Izuku 1 Figure

Claims (1)

[Claims] In a data communication system that accesses a computer system via a public network, a user terminal stores a password sent from a computer, reads this password and sends it to the computer, and the computer The stored password is read out and compared with the password sent from the user terminal. If they do not match, the call is disconnected. If they match, a new password is randomly created for the user terminal and the password is sent to the user terminal. A computer access security system via a public network, characterized in that a password corresponding to a terminal is updated to a new password, the new password is sent to the user terminal, and the user terminal stores the sent new password.