WO1992009946A1

WO1992009946A1 - Security system

Info

Publication number: WO1992009946A1
Application number: PCT/JP1991/001631
Authority: WO
Inventors: Makoto Morikawa; Junji Tsuchiya; Minoru Nishino
Original assignee: Seiko Epson Corporation
Priority date: 1990-11-29
Filing date: 1991-11-25
Publication date: 1992-06-11

Abstract

A security system comprising a password management means for storing password data every user, a time monitoring means for providing time and day information, and a security control means which reads the password data corresponding to the information obtained from the time monitoring means from among ones of a given user, and compares the password data with ones inputted by the user, and further, determines whether the use by the user is allowed or not.

Description

Specification

Security system

Technical field

The present invention relates to a security system for an information processing device such as a personal computer (hereinafter, referred to as a “personal computer”).

Background art

As a security system of an information processing device, there is a security system that uses a password to check whether the user is qualified.

The operation of such a security system is as follows. First, when the user turns on the system power of the information processing device, a prompt appears on the display device requesting the input of the user ID and the password. If the user inputs the correct user ID and password in response to this request, the second-order data corresponding to the user ID is read. Then, the input password and the password data are compared, and if they match, a prompt for use permission appears on the display device, and the user can use the password. If the input password does not match this password, a message indicating that the password is incorrect is output to the display device. Then, a prompt for input of the user ID and the passcode appears on the display device, and the user starts the process again from the input of the user ID.

The security system of the information processing device described above has the following three problems.

First, the password is entered according to the length of the input string and the combination of characters. The effort and security against illegal intruders will change. If the character string is long enough or if the combination of characters is complicated, the security against illegal intruders will be improved, but the user will have to enter the password extra time. Here, if the character string is short or the combination of characters is extremely simple, there is a problem in that the risk of an illegal intruder increasing the ability to easily input a user's password is problematic. Second, the conventional information processing device could repeat the password entry any number of times on the platform where the wrong password was entered. In this case, there is a risk that a malicious third party who does not know the password may accidentally input the correct password by repeatedly inputting the appropriate password. Furthermore, not only can a specific person who knows the password use the information processing device, but also a person who does not know the password can be used under certain restrictions (within a range that does not allow access to confidential data). There may be a case where the use of the information processing device is permitted.

Third, conventional PCs were large and heavy, so if a thief or the like entered the office, they were rarely taken away. However, recent personal computers have become smaller and lighter and can be easily carried, increasing the risk of being taken away by intruders such as thieves. Also, even if the personal computer was too heavy to carry, there was a risk that the external hard disk device connected to the personal computer could be removed and removed. When a personal computer or external hard disk drive is taken away by an intruder in this way, confidential data on the hard disk drive or external hard disk drive built into the personal computer is read out, and important customer lists and internal materials of new products are read. There was a risk of leaking outside.

Disclosure of the invention

Therefore, a first object of the present invention is to provide a security system that allows a user to easily input a password and at the same time has high security against an illegal intruder.

The second objective is to provide a security system that is highly secure against illegal intruders. It is a third object of the present invention to provide a security system for an information processing device from which confidential data of a hard disk device cannot be read.

In order to achieve the first object described above, a security system for an information processing apparatus according to a first aspect of the present invention comprises: a pass-word managing means in which pass-code is stored for each user; Time monitoring means for obtaining the information or Z and time information, and password data corresponding to the day of the week information or Z and time information obtained from the time monitoring means from the pass data of a specific user, and reading the password. It is composed of security control means for determining whether the user is permitted to use the data by comparing the data with a password input by the user.

In this case, the security control means divides a predetermined period set in advance into a usable time zone and a use prohibition time zone, and determines which time zone from the day of the week information or the time information obtained from the time monitoring means, In the available time period, the password data of a specific user is read from the password management means, and the passcode is compared with the password input by the user to determine whether the user is permitted to use the password. The power supply of the system may be turned off during the off-hours.

Further, the password management means may store a plurality of password data having different degrees of difficulty for each time zone for each user, and the security control means may divide a predetermined period set in advance into a plurality of time zones, and The time zone is determined from the day of the week information or time information obtained from the monitoring means, the passcode data corresponding to the time zone determined by the password management means is read, and the password data and the passcode inputted by the user are read. By comparing with the user, the user's permission to use may be determined.

Further, in order to achieve the above-mentioned second object, a security system for an information processing apparatus according to a second aspect of the present invention comprises: a password management unit storing password data for each user; External storage means including a first area storing a plurality of files accessed based on the information, a second area storing the directory information, and a third area secured as a spare area. The password data of a specific user is read out from the password management means, and when the password data matches the password input by the user, the user is permitted to use the password. When the password data does not match the input password, security control means for moving the directory information stored in the second area of the external storage means to the third area is formed.

Further, in order to achieve the third object described above, the security system of the information processing apparatus according to the third invention comprises a detecting means for detecting an abnormal state due to an external factor, and a detecting means for detecting the abnormal state. Prohibiting means for prohibiting reading of data stored in the auxiliary storage device, and invalidating means for invalidating data read prohibition processing by the prohibiting means by turning on a safety switch are provided.

According to the security system of the information processing apparatus according to the first invention, the password data of the specific user corresponding to the day of the week information or the Z and time information is compared with the password input by the user, Whether the passwords match or not is determined, but the correct password changes depending on the day of the week information or the Z and time information, thereby improving the security of the information processing device.

In addition, when a predetermined period is managed by dividing into a usable time period and a use prohibited time period, a correct password is determined depending on whether the day information or time information obtained from the time monitoring means is within the usage time period or not. Since it changes, the security of the information processing device is improved. Furthermore, when the predetermined period is divided into a plurality of time zones and the difficulty level of the password is changed depending on the time zone, for example, the difficulty level of the information processing device can be changed by changing the difficulty level of the passcode according to the risk level. Sex is improved.

Further, according to the security system of the information processing apparatus of the second invention, when the passcode data of a specific user is read from the password management means, and the password is given by the input operation of the user, The password is compared with the read password data. If these data do not match, the directory information stored in the second area of the external storage means is moved to the third area by a command from the security control means. This transfer of directory information prevents access to all files stored in the first area of the external storage device.

Further, according to the security system of the information processing device of the third invention, when an abnormal state occurs due to an external factor, the data stored in the auxiliary storage device is read. However, if this abnormal state is expected, it can be made readable.

BRIEF DESCRIPTION OF THE FIGURES

FIG. 1 is a circuit diagram showing an embodiment of the first invention, FIG. 2 is a flowchart showing the operation of the embodiment of the first invention, FIG. 3 is a flowchart showing the operation of the embodiment of the first invention, and FIG. 1 is a flowchart showing the operation of the embodiment of the invention, FIG. 5 is a circuit diagram showing an embodiment of the second invention, FIG. 6 is a flowchart showing the operation of the embodiment of the second invention, and FIG. 7 is an embodiment of the second invention 8 is a circuit diagram showing one embodiment of the third invention, FIG. 9 is a circuit diagram showing one embodiment of the third invention, and FIG. 10 is a circuit diagram showing one embodiment of the third invention. FIG. 11 is a circuit diagram showing one embodiment of the third invention, and FIG. 12 is a circuit diagram of a hard disk drive.

BEST MODE FOR CARRYING OUT THE INVENTION

Hereinafter, a security system for a personal computer according to an embodiment of the first invention will be described with reference to FIGS. 1 to 4 of the accompanying drawings.

FIG. 1 is a circuit diagram of a security system for a personal computer according to the first embodiment. The first embodiment includes security control means 10 for determining whether or not use of a personal computer is permitted, backup SRAM 20 as password management means in which password data is stored, and time monitoring means for outputting day of week information and time information. It comprises a real-time clock 30, VRAM 40 storing image data and the like, and input / output means 50. The security control means 10 includes a CPU 11 for issuing a command to each storage device and the input / output means 50 and a ROM 12 for storing a bus-side control program. The input / output means 50 includes a keyboard device 51 for inputting a password by a user, a keyboard interface 52, a display device 53 for displaying a password input prompt, and a display controller 54.

Next, the operation of the first embodiment will be described with reference to FIGS. First, the system When the power is turned on (step 101), a command is issued from the security control means 10 to determine whether the real-time clock 30 is operating normally (step 102). If the real-time clock 30 is not operating normally, as an error process of the real-time clock 30, for example, an error message is displayed on the display device 53, and then the system power is turned off (step 103). . When the real time clock 30 is operating normally, a prompt to input a user ID is displayed on the display device 53 according to a command from the security control means 10. When the user inputs a user ID registered in advance, the day of the week information is read from the real-time clock 30 according to a command from the security control means 10 (step 104). The backup SRAM 20 stores one week of different password data corresponding to each user ID. Then, based on the read day of the week information, the passcode data of the day of the week is read from the backup SRAM 20 (step 105). In this reading, first, a prompt for inputting a password is displayed on the display device 53 by an instruction of the security control means 10 (step 106). The user enters the password corresponding to today's day of the week from the different passwords for one week registered in advance. Then, it is checked whether this password matches the passcode data read out in step 105 (step 107). If not, the input state of the passcode in step 1◦6 is checked. Return to processing. If they match, the user is determined to be a legitimate qualifier and the PC is ready for use (step 108)

A feature of the first embodiment is that a number of passcodes corresponding to the day of the week can be registered for one user ID. The following is an example of registering this specific password.

First, as a first example, seven different passwords are registered for each day of the week. In this case, the user has to enter a different password every day. Note that a different password may be registered for each time zone of each day of the week. For example, if two hours are set during business hours and outside business hours, 14 types of passcodes are registered.

As a second example, different passwords are registered for work days and holidays. this In this case, there are a method of adding a character string after the work day pass word to make a holiday pass word, and a method of completely different work day and holiday pass words.

As a third example, two types of passwords are registered in the holiday password: a password for the day of work and another password. That is, in the case of a holiday, the user must enter another password after entering the workday passcode.

Next, the operation of the second embodiment will be described with reference to FIGS. First, when the system power is turned on (step 201), a command is issued from the security control means 1◦ to determine whether the real time clock 30 is operating normally (step 202) _β real time clock 3 If 0 is not operating normally, as the error processing of the real-time clock 30, for example, an error message is displayed on the display device 53, and then the system power is turned off (step 203). If the real-time clock 30 is operating normally, the time information is read from the real-time clock 30 by the command of the security control means 10 (step 2◦4). In the following, it reads the information of the previously stored used time zone from the backup SRAM, the time information by the current time determine available time slot if (Step 2 0 5) _beta available time zone out, A message to the effect that the personal computer cannot be used is displayed on the display device 53 (step 206), and the system power of the personal computer is turned off (step 2◦7). If the time period is within the usable time zone, a prompt to input a user ID is displayed on the display device 53 according to a command from the security control means 10. When the user inputs a user ID registered in advance, password data corresponding to the user ID is read from the backup SRAM 20 (step 208). In this reading, first, a prompt for inputting a password is displayed on the display device 53 in accordance with a command from the security control means 10 (step 209). When the user enters the password, it is checked whether the password matches the password read out in step 208 (step 210). If the password does not match, step 2 is executed. The process returns to the password input state of 09. If they match, the user is determined to be a valid qualifier, and the personal computer is ready for use (step 211).

Next, the operation of the third embodiment will be described with reference to FIGS. In this example, It is divided into two parts: working hours and non-working hours, and security is applied using passwords that have different degrees of difficulty depending on the time of day. Therefore, a personal computer can be easily used by using a passcode with low difficulty during working hours, and by using a password with high difficulty during working hours (at night or on holidays), it is possible to use a personal computer. Illegal entry into a personal computer. More specifically, the processing is the same as that of the above-described embodiment up to step 304 in FIG. The working hours are checked in step 305. If the working hours are not during working hours, step 309 is performed. If the working hours are out of working hours, step 306 is performed. Read data is read. Then, in step 09, the password data of low difficulty level is read out, and it is checked whether the password matches the password entered by the user (step 310, step 311). Then, the password data having a high degree of difficulty is read, and it is checked whether or not the password data matches the password entered by the user (step 307, step 308). If they match, the user is determined to be a legitimate qualifier, and the personal computer can be used (step 312).

In the third embodiment, passwords having different degrees of difficulty are used between working hours and non-working hours. Other examples include the following. First, an example is shown in which a character string is added after the pass during the working hours to create a pass during the non-work hours. In this example, the password during off-hours is a long character string, increasing the difficulty. Next, an example of registering two kinds of passwords, a password for the working hours and another password, as the password for the non-working hours. In other words, in the case of non-working hours, the user must enter a password for working hours and then another password.

Hereinafter, a security system for a personal computer according to an embodiment of the second invention will be described with reference to FIGS. 5 to 7 in the accompanying drawings.

FIG. 5 is a circuit diagram of a personal computer security system according to the first embodiment of the second invention. In the present embodiment, security control means 10 for deciding whether to use a personal computer, RAM 60 containing various application programs, and backup SRAM 20 serving as password management means storing password data are provided. And a VRAM 40 in which image data and the like are stored, an external storage means 70 in which a plurality of files are stored, and an input / output means 50. The security control means 10 includes a CPU 11 for issuing a command to each storage device and the input / output means 50 and a ROM 12 for storing a control program. The external storage means 70 includes a large-capacity hard disk drive 71 storing a plurality of files, a hard disk controller (HDC) 72, and a small-capacity floppy disk drive storing a plurality of files. 73 and a floppy disk controller (FDC) 74. In addition, the input / output means 5 include a keyboard device 51 for the user to input a password, a keyboard interface 52 and a display device 53 for displaying a password input prompt, and a display controller 54. Is provided. The password management means may use an EEPROM or a ROM instead of the backup SRAM.

Next, the operation of this embodiment will be described with reference to FIGS. First, when the system power is turned on (step 401), a prompt to input a user ID is displayed on the display device 53 according to a command from the security control means 1◦. When the user inputs the user ID registered in advance, the password data corresponding to the user ID is read from the backup SRAM 2◦ (step 402). Next, a prompt for inputting a password is displayed on the display device 53 according to a command from the security control means 10. User enters a pre-registered passcode

(Step 403) 0 Then, it is checked whether or not this password matches the password data read in Step 402 (Step 404). If they do not match, the directory information is saved from the directory area, which is the second area of the hard disk drive 71, to the reserve area (step 405). This reserve area is a third area of the hard disk device 71 reserved as a spare area. After saving the directory information, the directory area destruction flag is set to "1" (step 406). The directory area destruction flag is, for example, a flag that is placed in the backup SRAM 20 and records the state of the directory information in the directory area. In other words, when the directory area destruction flag is set to "0", it indicates that directory information exists and the directory area is destroyed. When the destruction flag is set to "1", it indicates that the directory information has been deleted. Next, the directory information in the directory area is deleted (step 407). O The files stored in the first area of the hard disk drive 71 are accessed based on the directory information. Deletion of directory information makes access to the file impossible. By such processing, ノ,. The computer is error-activated when the hard disk device 71 cannot be used (step 408). Thereafter, the user can use the personal computer except for the file access of the hard disk device 71. Also, in step 404, NO. If the speed and the password data match, check whether "0" is set in the directory area destruction flag (step 409). 0 The directory area destruction flag is set to "0". If it is not "0", the directory information saved in the reserved area is restored (Step 410), and the directory area destruction flag is cleared to "0" (Step 411). On the basis of the directory information restored in the above, files of the hard disk device 71 can be accessed thereafter. Then, the personal computer is started normally (step 4 12), and the user can use the personal computer including the hard disk drive 71.

A feature of the present embodiment is that a user who does not know the passcode can use the PC under certain restrictions. In other words, the personal computer of this embodiment can access only the confidential data stored in the hard disk device 71 by a specific person. However, other basic functions are devised so that anyone can use them. With this feature, the usage environment of a specific user and the usage environment of other users are provided on a single personal computer at different service levels. Such a function is desirable from the viewpoint of effective use of personal computers.

Next, the operation of the second embodiment of the second invention will be described with reference to FIGS. First, when the system power is turned on (step 501), a prompt for inputting a user ID is displayed on the display device 53 according to a command from the security control means 10. When the user inputs a user ID registered in advance, a password corresponding to this user ID is read from the backup SRAM 20 (step 502). Next, the password input is set to iS according to the instruction of the security control means 10. Prompt is displayed on the display device 53. The user inputs a password registered in advance (step 503). 0, and checks whether the password matches the password read out in step 502 (step 504). If not, for example, a block game is started as a dummy program (step 505). The execution time of this game program is counted (step 506), and when the release key is pressed from the keyboard 61 within a predetermined time to stop the game program (step 507), the step 50 Pass 3 is re-executed from the password input. If a legitimate user mistakenly performs an operation and enters a different passcode, he or she knows that the dummy program will be started, so the release key must be pressed within a predetermined time. Can be. The release key is a specific key of the keyboard device 51 that is negotiated between users. If this is the case when an illegal third party who is not the user enters a different password, a predetermined time elapses while hesitates to suddenly start this game program, and the disk drive All the files stored in 71 are erased (step 507). By this process, even if a third party subsequently enters the correct password and can use the personal computer, the file stored in the hard disk drive 71 cannot be accessed. If the password and the password data match in step 504, the system is normally started (step 509), and the subsequent users can use the personal computer.

In the second embodiment, the ability to erase all files stored in the disk drive 71 is not required. Unlike the first embodiment, the file is not erased, and the directory is deleted. Information can also be saved to the reserve to allow legitimate users to restart.

Further, in the present embodiment, security measures are applied to the files stored in the hard disk device 71, but security measures can be similarly applied to the files stored in the floppy disk device 73. .

Hereinafter, a personal computer according to an embodiment of the third invention will be described with reference to FIGS. 8 to 12 of the accompanying drawings. FIG. 8 is a circuit diagram of an embodiment of the present invention. The hard disk controller (hereinafter referred to as HD) that operates according to the command of CPU 11 72), a built-in hard disk device 90, a gun contact cable 80 connecting the HDC 72 and the hard disk device 90, and a power supply device 120. The gun contact cable 80 includes a cable 81 and a connector 82 connected to the HDC 72 side, and a cable 83 and a connector 84 connected to the hard disk device 90 side. A part of the cable 81 is provided with a loop wire 85. Further, the hard disk device 90 includes a control device 91, a detection terminal 93 connected to the control device 91 by a signal line 92, and a voltage of the detection terminal 93 converted to a high-level voltage which is a power supply voltage. A resistor 94 to be lifted, a ground terminal 95 to which a single-level voltage as a reference voltage is applied, and a security release switch 96 to give a release signal to the control device 91 to prevent data erasure and the like. And an operation unit 1000 for writing and reading data according to a command from the control device 91, and a backup power supply device 110 for supplying power to the control device 91 and the operation unit 100. ing. The operating unit 100 includes a magnetic disk 101 on which data is stored, a spindle motor 102 for rotating the magnetic disk 101, and a spindle motor drive circuit 10 for controlling the spindle motor 102. A magnetic head 104 that moves on the magnetic disk 101 to write and read data, and a read head that gives a write or read command to the magnetic head 104. Head circuit 105, a head moving motor 106 for moving the magnetic head 104 onto a desired magnetic disk 101, and a head moving motor drive circuit 10 for controlling this movement. 7 are provided. Further, the backup power supply device 11 ◦ is provided with a built-in battery 1 1 1 and a switching device 1 1 2 for switching between the built-in battery 1 1 1 and the power supply device 1 20.

Next, the operation of the present embodiment will be described. A cable 83 and a signal line 92 are connected to the detection terminal 93, respectively. When the connector 82 and the connector 84 are connected, the detection terminal 93 and the ground terminal 95 are electrically connected via the loop wire 85. Therefore, a current flows between the detection terminal 93 and the ground terminal 95 due to the high-level voltage applied to the detection terminal 93, and the potential of the detection terminal 93 decreases. Due to the lowering of the potential at the detection terminal 93, a low-level signal is supplied to the controller 91 through the signal line 92. Next, from PC 1 to the hard disk drive When the gun between the connector 82 and the connector 84 of the connection cable 80 is released in order to remove 9◦, the detection terminal 93 and the ground terminal 95 are electrically disconnected. In this state, since no current flows from the detection terminal 93 to the cable 83, a high-level voltage applied to the detection terminal 93 is applied to the control device 91 through the signal line 92. In step 91, the voltage signal supplied from the signal line 92 is detected to change from a single level to a high level, and all circuits stored in the magnetic disk 1◦1 are stored in each circuit of the operating section 100. Give a command to erase the data. Here, even if the main power supply of the personal computer is turned off and the power from the power supply unit 120 is not supplied to the hard disk drive 90, it is built in by the switching unit 1 12 of the backup power supply unit 110. Since the mode is switched to the battery 111, power is supplied to the operating part 100 from the internal battery 111, so that data can be reliably erased.

If it is necessary to remove the hard disk drive 9◦ from the personal computer 1 for repair or the like, it is necessary to insert a security release switch 96 to prevent the magnetic disk 101 from being erased in the evening. When the security release switch 96 is turned on, a release signal is input to the control device 91, and the data erasure command from the control device 91 is invalidated.

Next, another embodiment of the present invention will be described with reference to the circuit diagram of FIG. The difference between the configuration of the present embodiment and the configuration of the above-described embodiment is that the signal line 86 extending from the detection terminal 93 is directly connected to the external terminal 130. One end of a lock chain 13 1 is connected to the external terminal 130, and the other end of the lock chain 13 1 is tied to a leg of a desk 72 that is grounded. In the operation of the present embodiment, when the lock tune 13 1 is tied to the legs of the desk 13 2, the signal line 86 and the lock tune 1 3 1 are connected from the detection terminal 93 to which a high-level voltage is applied. And the current flows. Therefore, almost no current flows through the signal line 92 connected to the detection terminal 93, and a single-level voltage signal is given to the control device 91 connected to the signal line 92. Next, when the lock chain 13 1 is cut off to remove the personal computer, no current flows through the signal line 86 and the lock chain 13 1. In this state, the high-level signal given to the detection terminal 93 is added to the control device 91 through the signal line 92. In the control device 91, the voltage signal supplied from the signal line 92 is low level. , And instructs each circuit of the operation unit 100 to erase all data stored in the magnetic disk 101.

Next, another embodiment of the present invention will be described with reference to the circuit diagram of FIG. The difference between the configuration of the present embodiment and the configuration of the embodiment described with reference to FIG. 8 is that a detection means 140 that receives a command from the CPU 11 and a microswitch connected to the detection means 140 are provided. 14 1 and a safety key 14 2 are provided. The configuration diagrams of the micro switch 14 1 and the safety key 14 2 are shown in FIGS. 11 (a) and (b). FIG. 11A is a cross-sectional view showing a state where the cover 102 is attached to the housing 151 of the personal computer and fixed with the screws 103. When the cover 102 is thus attached, the microswitch 141 fixed to the housing 151 holds the closed state. In the operation of the present embodiment, as shown in FIG. 11A, when the cover 15 1 of the housing is fixed, the micro switch 14 1 is in the closed state, and the detection means 140 has a high level. A signal is provided. The detection means 140 supplies a low-level signal to the control device 91 in correspondence with this signal. Next, when the screw 1◦3 is removed from the housing and the cover 15 1 is removed, the micro switch 14 1 is cut off. In this state, a low-level signal is supplied to the detection means 140. The detection means 140 supplies a high-level signal to the control device 91 in correspondence with this signal. The control unit 91 detects that the voltage signal changes from low level to high level, and erases all data stored in the magnetic disk 1◦1 in each circuit of the operation unit 100. Command. This command erases all data on the magnetic disk 101. Next, the safety key 142 shown in FIG. 11B will be described. The safety key 14 2 can be switched between a locked state and an unlocked state by inserting and turning a dedicated key. The lip state is a state in which data is erased when the cover 152 is removed from the housing 151 as described above. On the other hand, the unlocked state is a state in which data is not erased even when the cover 15 2 is removed from the housing 15 1. Therefore, if the user needs to remove the cover 15 2 from the housing 15 1 due to repair, etc., put the safety key 1 4 2 in the unlocked state and then remove the cover 15 2 Is performed, the data stored on the magnetic disk 101 is not erased. The features of the above embodiment are as follows. First, if a malicious third party removes the connector, cuts the rod or chain 131, or removes the housing cover 152, an abnormal situation occurs. 9 The detection signal applied to 1 changes from low level to high level. The control device 91 detects this voltage change and issues a command to the operation section 100 to erase the data. The operating unit 100 receiving this command erases all data stored on the magnetic disk 1 • 1. In the data erasing process, when power is not supplied from the power supply device 120, the power of the internal battery 111 is supplied. This switch ensures that all data is erased.

By the way, in the above embodiment, when an abnormal situation occurs, the data stored in the magnetic disk 101 is erased to prevent leakage of confidential data. In order to prevent data leakage, there is a method other than this method, in which a large current is applied to burn out the magnetic head 104 so that data cannot be accessed. FIG. 12 shows a circuit diagram of a disk drive # 70 to which the data leakage prevention method is applied. The difference from the hard disk device 90 from FIG. 8 to FIG. 1 ° is that a dedicated coil 17 1 is wound around the magnetic head 104, and this dedicated coil 17 1 is connected to the backup power supply 110. It is connected. Then, when an abnormal situation occurs, a large current flows through the dedicated coil 17 1 according to a command from the control device 91. This large current burns out the magnetic head 104, making subsequent data access impossible. Industrial applicability

In the security system for an information processing device according to the first invention, the password is different for each day of the week. Access can be blocked.

With the information processing device security system of the second invention, if a third party uses the information processing device by inputting an incorrect password, the file stored in the hard disk device cannot be accessed. Therefore, confidential information stored in the hard disk device can be reliably protected.

If the security system of the third aspect of the invention is an illegal intruder,

Claims

^ Even if you disconnect the auxiliary storage device connected to the physical device and take it out by disconnecting the connection cable, all data stored in the auxiliary storage device will be deleted when the connection cable is disconnected. The secret power is not leaked outside. WO 92/09946 PCT / JP91 / 01631 1 7 Scope of request

1. Password management means in which password data is stored for each user, time monitoring means for obtaining day information and / or time information, and day of the week obtained from the time monitoring means from password data of a specific user Security control means that reads password information corresponding to the information or the time information and compares the password data with a password input by the user to determine whether the user is permitted to use the password data. Security system for information processing equipment.

2. The security control means divides a predetermined period set in advance into a usable time zone and a use prohibition time zone, and determines which time from the day information or Z and time information obtained from the time monitoring means. The passcode management means reads the passcode data of the specific user from the passcode management means during the available time zone, and compares the passcode with the passcode input by the user to use the passcode. 2. The security system according to claim 1, wherein the system determines whether or not the user is permitted to use the system, and turns off the system power supply during the use prohibited period.

3. The security system for an information processing device according to claim 2, wherein the usable time period and the use prohibited time period are periodically repeated.

4. The password management means stores a plurality of password data having different degrees of difficulty for each time zone for each user,

The security control unit divides a predetermined period set in advance into a plurality of time zones, determines which time zone is based on the day-of-week information or the time information obtained from the time monitoring unit, and determines from the password management unit 3. The security system according to claim 1, wherein the passcode data corresponding to the determined time zone is read, and the passcode input by the user is compared with the passcode data to determine whether the user is permitted to use the security system. .

5. The security system according to claim 4, wherein the plurality of time zones are periodically repeated.

6. A passcode management means that stores passcode data for each user, A first area storing a plurality of files to be accessed based on the directory information; a second area storing the directory information; and a third area reserved as a spare area. The passcode data of a specific user is read from the external storage means and the password management means, and when the password data matches the password input by the user, the use of the user is permitted, and the password data is deleted. Security control means for moving the directory information stored in the second area of the external storage means to the third area when the evening and the input passcode do not match. Equipment security system.

7. In the security control means, if the password data does not match the entered password data and the entered password, the directory information is moved to the third area, and then the use of the user is permitted. 6. The security system of the information processing device according to 6.

8. In the security control means, if the password data and the password input by the specific user match, and the directory information has already been moved to the third area of the external storage means, 7. The security system for an information processing device according to claim 6, wherein the user is permitted to use the directory information after moving the directory information from the third area to the second area.

9. The security control means executes the dummy program when the password data does not match the passcode input by the specific user, and the user executes the dummy program until a predetermined time elapses. A request for erasing all files in the first area of the external storage means if the execution of the dummy program is stopped and the procedure is restarted from the password input processing, and if the execution of the dummy program is not stopped. 8. The security system of the information processing device according to 8.

10. A detecting means for detecting an abnormal state due to an external factor, a prohibiting means for prohibiting reading of data stored in the auxiliary storage device by detecting the abnormal state by the detecting means, and turning on a safety switch. A security system for an information processing apparatus, comprising: invalidation means for invalidating data readout prohibition processing by the data prohibition means.

11. The detection means includes a connection between the auxiliary storage device and the auxiliary storage device controller. WO 92/09946 PCT / JP91 / 01631

19

10. The security system for an information processing device according to claim 10, wherein the disconnection of the integrated cable is detected.

12. The security system for an information processing apparatus according to claim 10, wherein said detection means detects a disconnection of a lock chain attached so as not to be taken out.

13. The security system for an information processing apparatus according to claim 10, wherein said detection means detects removal of a cover of a housing.

14. The security system for an information processing apparatus according to claim 10, wherein the prohibiting means deletes data stored in the auxiliary storage device.

10. The security system for an information processing apparatus according to claim 10, wherein the prohibiting means burns off a read / write head of the auxiliary storage device.

16. The security system for an information processing apparatus according to claim 15, wherein the connection cable includes a connector having a detection unit to which a detection signal is applied when the connection cable is removed.

17. The security system for an information processing device according to claim 12, wherein one end of the lock tune is connected to a detection terminal of the auxiliary storage device, and the other end is buried in a fixed object grounded.

14. The information processing apparatus according to claim 13, wherein said detection means includes a detection switch for detecting removal of a cover of a housing, and a safety gear for invalidating the operation of the detection switch. Security system.

19. The read / write head moves on the rotating disk to write and read data stored on the disk, and a detection signal is applied to the auxiliary storage device through the connection cable. A control terminal connected to the detection terminal for instructing the operation section to erase data stored in the disk based on a detection signal from the detection terminal; 15. The security system for an information processing device according to claim 14, further comprising: a backup power supply device that supplies power of a built-in battery to the operation unit and the control device.

20. The auxiliary storage device is provided with an operation unit for moving a read / write head on a rotating disk to write and read data stored on the disk, and a detection signal is applied through the connection cable. Detection terminal and the read / write head And a detection terminal for supplying a current to the dedicated coil based on a detection signal supplied from the detection terminal and instructing the operation unit to burn off the read / write head. 16. The security system for an information processing device according to claim 15, further comprising: a control device configured to supply power from an external power supply or a built-in battery to the operation unit, the control device, and the dedicated coil. Tem.