JPS63208150A - Managing system for password - Google Patents

Abstract

PURPOSE:To improve security by providing a password converting means. CONSTITUTION:A password converting means 2 is provided with a cipher character table 24 in which a cipher character has been written in a form of a table in advance by a cipher character write means 5, and a shift key table 25 in which a shift key for showing the shift quantity for executing a shift of a password has been written in a form of a table in advance by a shift key write means 6. Also, the converting means 2 is provided with a cipher character position readout means 21 for reading out the original character position alphaas to which position on the cipher character table 24 a character of an inputted password exists, and a shift key readout means 22 for reading out the shift quantity of a N-th character of the inputted password, as a shift quantity value beta, from the shift key table 25. Moreover, the converting means 2 is provided with an enciphered password generating means 23 for calculating an enciphered character position gamma by using said alpha and beta, and outputting a character corresponding to gamma as an enciphered character.

Description

[Detailed Description of the Invention] [Industrial Application Field] The present invention relates to a password management method for using a system on an information processing device, file catalogs, files, and terminals, and particularly relates to a password management method using password encryption. Regarding.

[Conventional technology]

Conventionally, this type of password management method has been to store a password created by the user of the Combiator by combining words arbitrarily on the external storage device of the Combiator, and then the user can enter the password from each device from each device. Compare and verify the password with the password on the external storage device using the combiator,
The system is only allowed to be used if they match.

[Problem that the invention seeks to solve]

With the conventional passwords mentioned above, the password created by the user is directly managed in plain text, so there is a problem that the password can be easily decoded by someone else by outputting the contents of the external storage device to a list or display. there were. Therefore, this password management method has the disadvantage that important data can be easily read and destroyed, and the terminal can easily be used by unauthorized persons.

[Meager means to solve problems]

In order to solve all of the above-mentioned problems, the present invention provides a password input means for inputting a password, a cipher character table that stores cipher characters in advance, and a shift key table that stores shift keys for shifting passwords. an encrypted password generation means for generating a password by encrypting an input password using the cipher character table and the shift key table; an external storage device that encrypts and stores a password input by the means; and an encrypted password that is fully checked against the encrypted password and the encrypted password stored in the external storage device. There is.

〔Example〕

Next, one embodiment of the present invention will be explained with reference to the drawings.

FIG. 1 is a block diagram showing one embodiment of the present invention.

The password input means 1 has a function for inputting a user password from a terminal device, a password for a catalog or a file as JCL from a card league device, a floppy disk device, etc. into a computer. The cipher character writing means 5 has a function of loading cipher character data into the cipher character table 24. The shift key writing means 6 has a function of loading a shift key for each character corresponding to the - character of the password (plaintext) into the shift key table 25. The password conversion means 2 has a function of converting the password (plaintext) inputted by the password input means into a fully encrypted password. Password encryption 3 reads encrypted passwords for catalogs and files registered in advance on the external storage device 4 and encrypted user passwords for using the terminal device, and password conversion means 2 It has a function to check all the passwords converted by . The password conversion means 2 includes a cipher character table 24 in which cipher characters are written in advance in the form of a table by the cipher character writing means 5, and a shift amount for shifting the password in advance by the shift key writing means 6. A shift key table 25 in which the indicated shift keys are written in the form of a table, a cipher character position reading means 21 for reading out the position of the input password character on the cipher character table 24 and the original character position α sound; Shift key reading means 22 reads out the shift key 1 shift 1 minute from the shift fkk shift key table 25 of the Nth character of the password.
Then, calculate the formula (1) using the original character position α extracted from ♂Z and the shift key value 13 +, encrypted character position γ = original character position α + shift key value 7 ・Mountain... (1 ) The encrypted password generating means 23 outputs a character corresponding to the obtained encrypted character position γ as an encrypted character. Note that it is desirable to convert all characters in the password.

Figure 2 (5), CB+, (C1 is a diagram showing an example of a flowchart for explaining the present invention in detail. The figure 2 is a diagram showing an example of setting cipher characters and shift key values to each table. Yes, in step 101 the cipher character is set in the cipher character table 24 by the writing means 5 as shown in FIG. 25 by the writing means 6.The timing and contents of the settings in the table are determined at an appropriate time such as when the system is started up, especially when the contents of the external storage device 4 are determined and the password can be solved by being read by someone other than the user. It would be a good idea to spend money at a time that would be considered impossible due to time constraints, and to change the content each time.

FIG. 2 (Bl is a flowchart for encrypting a password and storing it in advance in an external storage device. In step 201, the password input means is used to input the password to the terminal device [other password, card league device, floppy disk device (
Enter the password and usage permission range from JLL, etc.). Next, at which position on the cipher character table 24 the character of the inputted password is located, the original character position α is determined by the cipher character position finding means 21 (step 202). Next, the Nth character shift amount β of the input password is read from the shift key table 25 (step 203). Next, using the read original character position α and shift key value β, the encrypted password generation means 23 generates an encrypted password (
Step 204).

Next, transfer the obtained friend encrypted password to the external storage device 4,
A system that allows use of that password.

It is stored in a password storage area within the permitted range of catalogs, file data, etc. (step 205). The storage format is a general password storage method.

FIG. 2 (C1 is a flowchart illustrating permission and prohibition of use when a user inputs a password given to him/her from a terminal device or the like in accordance with a request from the system when using the system.

Steps 301 to 304 are exactly the same as the generation of the encrypted password explained in FIG. It is compared with the encrypted password stored in the permission range pre-stored in the device 4 (step 305), and if they match, the system allows the use of the data ↓ after the necessary processing is completed (1). Step 3
06). If the passwords do not match, use is prohibited (step 307).

FIG. 3(B) is a diagram showing an example of loading each table of the present invention. An example of password conversion is shown below. For example, @PAS is the password input method.
SWORDNIPPON, ygomeN-gome" (meaning space) is input. The character position e on the cipher character table 24 is read by the cipher character position reading means 21. shift key table 25
Read the shift key value from. The password g″PAS8WORDNI is generated by the encrypted password generation means 23.
When Pf'ONΔΔV shim''' is converted and generated, the first character of the password is P, and 20 of the cipher character table 24 is generated.
When pll-search is performed from the positions of characters 1 to 37 indicated by 1, the original character position α is located at the 16th character ■.

The first character of the password, that is, the shift key value β indicated by 202 of the first character ■ in the shift key table 25, is 5, so the position to be converted '(i-+1) Substituting a numeric value into the expression yields the encrypted character position. γ becomes γ=16+5=21.

Encrypted character table shift key table 1234567 1819 2G Encrypted character position γ is 21, so encrypted character table 2
The 21st character ■ of 4 becomes U. That is, P is shifted by five characters and replaced with UlrC. The second character of the password is A, which is 1 indicated by 201 in the cipher character table 24.
When searching for A from positions up to 37 characters, the original character position α is located at the first character ■. The second character of the password, that is, the second character of the shift key table 25 ■2
Since the shift key value indicated by 02 is l, the cipher character position γ, which is the conversion position, becomes γ=1+1=2. Since the encrypted character position r is 2, the character ■ in the encrypted character table 24 becomes B. That is, A is shifted by one character and replaced with B. Therefore, for each character of the password in a similar way! If you do something.

@PASSWORDNIPPUNΔ~! zΔ” are P-)U, A-+B, S→1, 8→V, respectively.

W→Y, 0-+P, R-+T, D→G.

N-+RI-+N P-+V P-+WO→W
N-+Y Δ→J Δ→ni Δ→Work Δ→M Δ→N
It is converted as Δ→I, and PASSWORDNIPPON△ΔΔΔΔΔ” is “U
BIVYP-TGRNVWWYJKIMNI”.

〔Effect of the invention〕

As explained above, in the present invention, even if an encrypted password read out from an external storage device in which a password is stored is used as a user password, the system on the information processing device, the catalog of files, etc. will not be permitted to use it. File,
It is effective in all areas that require maintenance regarding terminals.

Also, unlike the conventional bit location silencing method, encryption can be performed at high speed. Furthermore, the character duplication problem (continuous same characters are encrypted and t characters are also consecutive characters) can be solved by using the code.

[Brief explanation of the drawing]

FIG. 1 is a configuration diagram showing an embodiment of the present invention, FIG.
(Bl, (C) is a flowchart explaining the present invention in detail, and FIGS. 3(5) and (B) are diagrams showing examples of loading each table. 1 is a password input means, 2 is a password conversion means, 3
4 encrypts the password, 4 is an external storage device. Agent: Patent Attorney Susumu Uchihara-' Leather 2 Closure (B) No. 2 12111 (C)

Claims (1)

[Claims] In a password management method for an information processing device,
a password input means for inputting a password; a password conversion means for converting the input password into an encrypted password; an external storage device storing the input password in advance in an encrypted manner; 1. A password management method, comprising: password verification means for verifying a password stored in the external storage device and an encrypted password stored in the external storage device.