JPS63143667A - Password protective device - Google Patents

Abstract

PURPOSE:To prevent a user password from being noticed by embedding a secret user password in an each different dummy specified by a device at every time to input the user password. CONSTITUTION:The device displays dummy data formed by means of a random number generating part 1 and a mask value generating part 6. When a user inputs his own password by embedding it in a data specification part, the device extracts the password out of the input value and collates it with an original password. Since the embedded position of dummy data is different from that of the original password at every time, the notice of the password from the back of the user at the time of its input is extremely difficult. Since a secret user password is inputted by embedding it in a random number specified by the device, the user password can be surely protected from a person having no legal right and interrupted from observing manual operation.

Description

DETAILED DESCRIPTION OF THE INVENTION Field of Industrial Application The EA of the present invention is a method for protecting a password from being seen by a person behind the user when inputting a password to check whether the user of the device has proper qualifications. It relates to protective devices.

Conventional technology In recent years, so-called computer crimes have been increasing, and newspapers have reported cases of unauthorized access to specific files and executable programs in bank automatic teller machines and computers with malicious intent such as embezzlement or destruction. . As a method to prevent this, a method is usually used in which a password is used to check whether the user has legitimate qualifications.

A password consists of as many character strings as a human can remember.
The string is secretly owned by the legitimately qualified user. For example, at a bank's automatic teller machine, a user inserts a cash card and then enters a four-digit password.

The center has registered in advance the card owner's pass 3, -
7. Check that the user has valid qualifications by comparing the entered password with the password.

Then, start trading.

Problems to be Solved by the Invention However, with the above configuration, if someone with malicious intent somehow obtains a password from a legitimately qualified user and uses this password, the device will not be able to access this person. The user determines that the user has legitimate qualifications and starts the transaction. Passwords are most likely to be discovered when they are entered. As mentioned above, the password exists in the user's memory, so it is not possible to set a long string of characters. In particular, the password for a bank's automatic teller machine is a four-digit number, so although physical measures have been taken to prevent the hand (input section and display section) from being visible when entering the password, a comparison is made based on the movement of the hand on the fixed numeric keypad. It's easy for someone behind you to see your password.

In view of this point, the present invention allows the user to check the original password from behind when inputting the password by inputting the password stored by the user together with a random character string specified by the device. The purpose is to provide a password protection device that is extremely difficult to protect.

Means for Solving the Problems The present invention provides a random number generation unit that generates random numbers, a first register that stores the random numbers generated by the random number generation unit, and a mask that indicates the position where a password is embedded in the random numbers. Using a value generation unit, a second register that stores a mask value, and the values of the first register and the second register,
A generator for generating display data indicating a random number inputted by the user in addition to the password and the position where the user's password is embedded, a central processing unit (CPU), a storage unit for registering the password in advance, inputting the password and displaying the data. between the terminal device that performs the display, the random number generation section, the mask value generation section, the first and second registers, the display data generation section, the central processing section and the storage section belonging to the center, and the terminal device. This is a password protection device characterized by comprising a communication device that transfers data.

Operation According to the present invention, the device displays dummy data generated using the random number generation section and the mask value generation section. When the user inputs his or her own password by embedding it in the designated part of the data, the device extracts the password from the input value and performs verification. Since the dummy data and the original password are embedded in different positions each time, it is extremely difficult to see the password from behind the user when inputting it.

Embodiment FIG. 1 shows a configuration diagram of a password protection device in an embodiment of the present invention. An example is given in which the password stored by the user (referred to as user password) is a four-digit number in 10 decimal system, and the password input into the terminal (referred to as input password) is a 10-digit number in decimal system.

1 is a random number generation unit that generates a 10-digit random number; 2 is a first register that stores the random number generated by the random number generation unit; 3
is 6. All values for which only 4 bits out of 10 bits are 0 (1
4) A table storing 210 words)
5 is a pointer section that generates a random number and accesses the table 3 at random using it, and 5 is a second register that stores the output from the table 3. 6 is a data generation unit that masks the 10-digit decimal random number stored in the first register 2 with the value stored in the second register 5 and generates display data; 7 is the central processing unit of the device (CPU),
8 is a storage unit in which passwords are registered and stored in advance; 1;
Reference numeral 1 denotes an input section (for example, a numeric keypad), 12 a display section, and 10 a terminal section which has a portion into which a personal identification card is inserted and controls the input section and the display section. In this embodiment, the parts 1 to 8 are connected to the center, and the communication device 9 connects them to the terminal devices 10 to 12.

The operation of the password protection device of this embodiment configured as described above will be explained below.

When a user starts up the device by inserting, for example, a personal identification card into the terminal unit 1.7, -;, a first screen is first displayed in the following steps.

<First screen display> Dl, a random number generator 1 generates a 10-digit decimal random number.

This value A is stored in the first register 2.

D2. A pointer section 4 generates random numbers and accesses the table 3 at random. The 10-bit value B accessed in table 3 is stored in second register 6.

D3. The data generation unit 6 generates a value A (each 1 decimal digit is At(
i-0 to 9)) and the value B (each bit is represented by Bi (i=
o to 9)), the character string C is created using the following steps.
(One digit of each character code is represented by C1 (i-0 to 9)) is generated.

if (Bi=1)Ci=dtoa(Ai)e l
s e Ci = ” *” (i-o~
9) However, dtoa is a function that converts a decimal value into a character code. Also, the part surrounded by `` indicates a character string.

D4. The character string C is passed through the communication device 9 and displayed on the display 12.
to be displayed. (First screen) FIG. 2 shows the procedure of D1 to D4 using a specific numerical example. In the figure, parts having the same functions as in FIG. 1 are given the same numbers.

For example, if the value stored in the first register 2 at Dl is A=5427958136, and the value stored in the second register 5 at D2 is B-11o11oo1o1, then the display data C generated at D3 is "54* 79
**1*6''. This display data is then displayed on the display 12 as a character string.

The user creates an input password by embedding the 4-digit user password he/she has memorized in the *" part of the character string shown on the display 12, and inputs it using the numeric keypad 11. (Fig. 2) The display shown in is shown.
When the user password is "1234", the input password is "5417923146") Password verification is performed in the following steps.

91, -><Verification> El, CPUU uses the value stored in the second register 5 to divide the input password into user password and other passwords (dummy). Among the bit strings stored in the second register 5, the digits of the input password corresponding to the bits that are ○ are collected to form a four-digit user password.

E2, the CPU compares the dummy value with the corresponding value stored in the first register 2;

If the two are different, the initial state is returned.

E3. At the CPU, the password of the owner of the personal identification card registered in advance in the storage section 8 is compared with the user password retrieved by El.

If the two are different, the initial state is returned. Only when they match will a transaction begin.

As described above, according to this embodiment, since the secret user password is input by embedding it in random numbers specified by the device, the user password is reliably protected from unauthorized persons who cannot see the user's hand. I can do it.

10 l knee> In addition, in the embodiment, the mask value (indicating the embedded position of the user password in the random number) realized by the table 3 that stores the mask value and the pointer section that randomly accesses the table 3 is combined. It goes without saying that it may be generated by a circuit or the like.

Effects of the Invention Conventionally, the user's hand movements are the same every time, even though physical measures have been taken to prevent those without proper qualifications from seeing the user's rear input and display units. Because the password string was short, it was easy to tell the password from hand movements. However, as explained above, according to the present invention, the secret user password is input by embedding it in a different dummy specified by the device each time, so the hand movements are different each time. Further, since it is not known where the user's password is embedded, it becomes extremely difficult to check the user's password. Furthermore, by improving only the center, it can be realized without making any changes to the passwords or personal identification cards currently in use, and the practical effect is great.

[Brief explanation of the drawing]

FIG. 1 is a block diagram of a password protection device according to an embodiment of the present invention, and FIG. 2 is an explanatory diagram of the operation of the same embodiment. 1... Random number generator, 2, 5... Register, 3... Mask value table, 4...
Pointer section, 6...Display data generation section, 7...
... central processing unit (CPU), 8 ... storage section, 9 ... communication device, 1o ... terminal section,
11... Input section (numeric keypad), 12...
・Display section.

Claims (1)

[Claims] a random number generation section that generates random numbers; a first register that stores the random numbers generated by the random number generation section; a mask value generation section that indicates the position where the password is embedded in the random numbers; and a first register that stores the mask value. a central processing unit; , a storage unit in which a password is registered in advance, a terminal device for inputting the password and displaying the display data, the random number generation unit, the mask value generation unit, the first and second registers, and the display. A password protection device comprising: a data generation unit; a communication device that transfers data between the central processing unit and the storage unit; and the terminal device.