JP2000259276A - Password control device - Google Patents

Abstract

PROBLEM TO BE SOLVED: To obtain a password controller reinforced with password security without increasing cost and complicatedness in user operation, etc., as much as possible. SOLUTION: Plural passwords such as first and second passwords are set by a password setting means 101 and allowable frequency of erroneous input of the passwords is set by a means 103 for setting allowable frequency for erroneous input of password. A password function is duplicated by validating the second password when input frequency of incorrect passwords exceeds the allowable frequency for erroneous output of password for the first password by a password function control means 109. Thus, the password function is successively reinforced only when the password is about to be fraudulently detected.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

[0001] 1. Field of the Invention [0002] The present invention relates to a password device used in a computer system and the like and a method of controlling the password device.

[0002]

2. Description of the Related Art In recent years, information terminal devices and server devices such as personal computers have been provided with a password function to prevent internal data from being stolen by others and require a password input at power-on. It is common practice to require a password to access a specific file or folder.

Conventionally, as a method of strengthening the security of such a password, a method of displaying an alert or notifying an administrator to monitor an unauthorized access when an unauthorized password is entered a specified number of times has been proposed. It has been known.
Other known methods include simply increasing the number of digits of a password and inputting both a user name and a password.

[0004]

However, simply displaying a warning and notifying the user that an incorrect password has been entered requires the user to determine on a case-by-case basis whether or not the password needs to be changed. If the password is changed each time the warning is displayed, there is a problem that the operation of the user becomes complicated. In addition, the method of notifying the administrator when an incorrect password has been entered a specified number of times has a problem that the management cost increases. On the other hand, in the method of simply increasing the number of digits in the password, the more digits in the password, the stronger the security of the password. Become. In addition, the method of inputting a user name and a password has a problem that it is impossible to determine whether an unauthorized password has been input.

An object of the present invention is to solve the above-mentioned problem, and an object of the present invention is to enhance password security without increasing costs and increasing user complexity as much as possible.

[0006]

SUMMARY OF THE INVENTION In order to solve the above-mentioned problems, the present invention provides a method in which a plurality of passwords are provided, and when an invalid password is input a predetermined number of times for a first password,
When the second password function is enabled, and furthermore, when an incorrect password is input for the second password a specified number of times, the third password function is enabled, whereby an incorrect password input occurs and the password is changed. The system is configured such that a plurality of passwords are input only when the password is about to be broken, thereby effectively strengthening the password.

[0007]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS The invention according to claim 1 of the present invention comprises a password setting means for setting a plurality of passwords, and a password storage means for storing the plurality of passwords set by the password setting means. Means for setting the number of times an incorrect password is entered before adding the password function, and a password incorrect input for storing the allowable number of incorrect passwords set by the password incorrect input count setting means. An allowable number of times storage means, a password input means for the user to input a password, a password verification means for verifying whether the password input by the password input means matches the password stored by the password storage means, Unauthorized password input count that counts the number of times a password has been entered Counting means, an unauthorized password input number storage means for storing the number of times of unauthorized password input counted by the unauthorized password input number counting means, and how many passwords among the plurality of passwords are to be enabled or disabled. Password function control means for controlling, and a password function control state storage means for storing the valid / invalid state of the password function controlled by the password function control means. A password control device characterized by increasing the number of passwords that are enabled by the password function control means when the password is exceeded, without complicating the operability of the user and increasing the cost without increasing the cost. It is possible to enhance security.

According to a second aspect of the present invention, there is provided the password control device according to the first aspect, wherein the incorrect password input count storage means sets the number of incorrect password input counts to zero when a correct password is input. The password control device is characterized in that once a correct password has been entered, the number of times an incorrect password is entered becomes zero, so that the password is strengthened against erroneous input of the input password due to a simple mistake of the correct user. This has the effect of not being done.

According to a third aspect of the present invention, in the password control apparatus according to the first aspect of the present invention, the incorrect password input count counting means includes a number of consecutive occurrences of the incorrect password and a storage of the incorrect password. The password setting means includes means for counting the number of times, and the password incorrect input allowable number setting means includes means for setting the allowable number of consecutive incorrect passwords and the allowable number of accumulated incorrect passwords. The control means is a password control device characterized by increasing the number of passwords that are valid according to the number of consecutive occurrences of unauthorized passwords or the number of times of storage of unauthorized passwords,
It is possible to strengthen the password in consideration of both the continuous number of unauthorized passwords and the number of times of accumulation, and more fine-grained password control becomes possible.

According to a fourth aspect of the present invention, in the password control apparatus according to the first aspect, when an incorrect password is input, the number of times the incorrect password is input is set to the allowable number of incorrect passwords. The password control device is characterized in that the power supply of the main unit is turned off when the password exceeds the limit and there is no password to be validated by the password function control means. In this case, there is an effect that turning off the power supply of the main body does not permit any further unauthorized user access.

Further, a password device control method according to claim 5 is a control method for a password device having the same effect as the password control device according to claim 1, and the password device control method according to claim 6. The recording medium on which the control program is recorded can be transferred to a device such as a personal computer and executed, and has the same effects as the password control device according to the first aspect.

An embodiment of the present invention will be described below with reference to the drawings.

(Embodiment 1) FIG. 1 is a configuration diagram of a password control device according to an embodiment of the present invention.

In FIG. 1, reference numeral 101 denotes a means for setting a password, and it is possible to set a plurality of passwords. Reference numeral 102 denotes a unit for storing a plurality of passwords set by the password setting unit 101. Reference numeral 103 denotes a password error input allowable number setting unit for setting how many times an incorrect password is input and then adding a password function to enable the password function. Numeral 104 denotes a unit for storing the allowable number of incorrect inputs set by the password incorrect input number setting unit 103. Reference numeral 105 denotes a password input unit;
Reference numeral 6 denotes a unit for checking whether the password input by the password input unit 105 matches the password stored by the password storage unit 102,
107 is a means for counting the number of times an unauthorized password has been entered based on the result of verification by the password verification means 106.
Numeral 108 is a unit for storing the number of times of input of the unauthorized password counted by the unauthorized password input number counting unit 107. Reference numeral 109 denotes a password erroneous input allowable number setting unit 103 set by the password erroneous input allowable number setting unit 103.
04 is compared with the number of times of incorrect password entry stored in the storage unit 108, and if the number of times of unauthorized input exceeds the number of times allowed, the next password Is a password function control unit that enables the password check function to be strengthened by enabling. Reference numeral 110 denotes a password function control state storage unit which stores a flag indicating whether to use the password for a plurality of passwords (whether the password is valid or invalid) for the plurality of passwords. It is something to keep.

The operation of the password control device according to the present embodiment will be described below.

First, a description will be given of an operation in which a user sets an initial setting number of times that a password and an unauthorized input of a password are allowed up to. FIG. 2 is a flowchart showing a processing procedure for inputting the password and the allowable number of incorrect password input. In this flowchart, it is assumed that two passwords, a first password and a second password, are input.

(Step 201) The user sets two passwords, a first password and a second password.

(Step 202) The first password and the second password set in step 201 are
Etc. in a non-volatile memory.

(Step 203) The number of times of incorrect password input is set to set how many times an incorrect password is entered for the first password before the second password function is enabled.

(Step 204) The allowable number of incorrect passwords set in step 203 is stored in a nonvolatile memory such as a CMOS.

The password name and the number of times of incorrect input described in the above flowchart are stored in the form of a data structure diagram for storing information relating to the password shown in FIG. In FIG. 3, reference numeral 301 denotes an order in which passwords are presented to the user, 302 denotes a password name,
Reference numeral 303 denotes validity / invalidity of the password (whether or not to use the password), reference numeral 304 denotes the number of incorrect inputs, and reference numeral 305 denotes the allowable number of incorrect inputs. In the state where the password and the allowable number of incorrect inputs to the password are initially set by the user, the password name 302 and the allowable number of incorrect inputs 305 are set, and only the portion corresponding to the first password is “valid” for valid / invalid 303. , And the other parts are set to “invalid”. In addition, the number of incorrect inputs 304
Are all set to "0". For example, in the example of FIG. 3, the item of the password name 302 includes “PK1472”.
And “123DF5” are set, and the corresponding valid / invalid 3
03, the number of erroneous inputs 304, and the number of allowable erroneous inputs 305 are "valid", "2", "5" and "invalid", "0",
“5” is set respectively.

Next, how the password function operates will be described with reference to FIG. FIG. 5 is a flowchart showing a processing procedure from when the user turns on the power of the main unit, inputs a password, and starts the main unit.

(Step 501) The power of a main unit such as a personal computer is turned on. In this step,
A process such as POST is executed so that the user can use the password function.

(Step 502) The user is required to input a password.

(Step 503) It is checked whether or not the password input in step 502 matches the password stored in the non-volatile memory such as the CMOS (the item of the password name 302 in FIG. 3) in step 202. . If the password is correct, the process proceeds to step 508. If the password is not correct, the process proceeds to step 504.

(Step 504) The number of times of unauthorized input of a password is read out from the number of times of unauthorized input stored in a non-volatile memory such as a CMOS and counted up, and then the CM is again entered.
It is stored in a non-volatile memory such as an OS.

(Step 505) The number of unauthorized inputs counted up in step 504 is equal to the CM
It is checked whether the number of allowable password erroneous inputs (item 305 of allowable erroneous inputs in FIG. 3) stored in a non-volatile memory such as an OS is exceeded. If the number exceeds the allowable number of erroneous inputs, the process proceeds to step 506. If the number does not exceed the allowable number of erroneous inputs, the process returns to step 502 to prompt the user to input the password again.

(Step 506) It is determined whether there is a next password. In FIG. 3, it is checked whether or not another password name is further set. If no other password is set, the process proceeds to step 510 without permitting the activation of the main unit, and the power is turned off. If another password name has been set, the process proceeds to step 507.

(Step 507) This is a process for enabling the password function. In FIG. 3, the area of valid / invalid 303 corresponding to the password name to be used next is set to “valid”. After the setting, the process proceeds to step 502 to prompt the user to input a password again.

(Step 508) It is determined whether there is another password to be determined next. If there is another password, the process proceeds to step 502, where the user is required to input the password. If there is no password to be determined, the flow shifts to step 509 to activate the main unit.

As described above, according to the present embodiment, the number of password inputs required only when the number of incorrectly input passwords exceeds the allowable number is increased.
It is possible to enhance password security without complicating user operability and increasing costs.

(Embodiment 2) This embodiment is different from Embodiment 1 in that the power is turned off once if an incorrect password is entered even once, and the second password is used. However, if a correct password is input, only the first password is used and the number of times of incorrect input is cleared to zero.

A description will be given below with reference to a flowchart of FIG. 6 for performing a password process according to the second embodiment of the present invention.

(Step 601) The personal computer is turned on. In this step, a process such as POST is executed to make the user use the password function.

(Step 602) The first password is input.

(Step 603) It is checked whether or not the password input in step 602 matches the first password stored in a nonvolatile memory such as a CMOS in step 202 in FIG. If the passwords match, the process proceeds to step 608. If the passwords do not match, the process proceeds to step 604.

(Step 604) The number of unauthorized inputs stored in a nonvolatile memory such as a CMOS is read out and counted up, and the number of unauthorized inputs is stored again in a nonvolatile memory such as a CMOS.

(Step 605) The number of unauthorized inputs counted up in Step 604 is calculated in Step 204 of FIG.
To check whether the number of times of password erroneous input allowed stored in a nonvolatile memory such as a CMOS is exceeded. If the number exceeds the allowable number of incorrect inputs, the process proceeds to step 607 to turn off the power.
Move to 6.

(Step 606) The second password function is enabled. As described in the first embodiment, “valid” is set at a location corresponding to the second password name in the valid / invalid area 303 of FIG.

(Step 608) This is a process for checking whether the second password function is valid or invalid. This process
The valid / invalid 303 flag corresponding to the second password name is read from the data structure having information on the password stored in the nonvolatile memory such as the CMOS shown in FIG. 3 to check whether the flag is set to “valid”. If "valid", the process proceeds to step 609, and if invalid, the process proceeds to step 614 to start the main unit.

(Step 609) The user is prompted to enter a second password.

(Step 610) It is checked whether or not the password input in step 609 matches the second password stored in a nonvolatile memory such as a CMOS in step 202 in FIG. If the passwords match, the process proceeds to step 611. If the passwords do not match, the process proceeds to step 607 to turn off the power.

(Step 611) When all of the correct passwords have been input, if the second password has been used, the user who has input the correct password is caused to change the first password. The next time the power is turned on, the password to be verified will be the password newly set this time.

(Step 612) The second password function is invalidated. The next time the power is turned on, it is set to require only the first password.

(Step 613) The number of incorrect inputs (the number of incorrect inputs) is cleared to zero, and the number of incorrect inputs is stored. The next time the power is turned on, the number of incorrect inputs will start from zero.

(Step 614) The main unit is started.

As described above in detail, according to the present embodiment, once a correct password is input, the next password is only the first password and the number of times of inputting the incorrect password is zero. An erroneous input of the input password due to a simple mistake has the effect that the password is not accumulated and strengthened.

In the above embodiment, the count of the number of times of incorrect password input is sequentially accumulated and cleared to zero when a correct password is input. However, the counting method does not necessarily need to be cumulative. For example,
A configuration may be adopted in which the number of times of incorrect password input is cleared to zero when a correct first password is input.
In this case, if an incorrect password is input M times consecutively for the first password, the second password function is activated. Also, the counting method of the number of times of inputting the unauthorized password may be used in combination with both accumulation and continuous. For example, if the password allowable cumulative incorrect input count is X times and the password allowable continuous false input count is Y times, if the incorrect password is continuously input Y times, or if the cumulative password is input X times, the second password is set. The function may be enabled. In such a configuration, the data structure shown in FIG. 4 is used as a data structure for storing information about the password.

[0049]

As described in detail above, according to the present invention, only when the first password is about to be broken, the second or other plural password functions are enabled. Thus, the security of the password can be strengthened without complicating the operability of an authorized user so much and without increasing the cost. Further, when the second password is valid, it is known that the first password has been broken, so that the user can take measures such as changing the first password. .

[Brief description of the drawings]

FIG. 1 is a diagram showing a password control device according to an embodiment of the present invention.

FIG. 2 is a flowchart showing a processing procedure for inputting a password and the number of times a password can be incorrectly input;

FIG. 3 is a diagram showing an example of a data structure for storing information regarding a password.

FIG. 4 is a diagram showing an example of a data structure for storing information related to a password.

FIG. 5 is a flowchart showing a processing procedure of a password control device according to the first embodiment for confirming a password;

FIG. 6 is a flowchart showing a processing procedure of a password control device according to a second embodiment for confirming a password;

[Explanation of symbols]

 Reference Signs List 101 password setting means 102 password storage means 103 password incorrect input allowable number setting means 104 password incorrect input allowable number storing means 105 password input means 106 password collating means 107 incorrect password input count counting means 108 incorrect password input count storing means 109 password function control Means 110 Password function control state storage means

Claims (6)

[Claims] A password setting means for setting a plurality of passwords; a password storage means for storing the plurality of passwords set by the password setting means;
Password incorrect input count setting means for setting how many times an incorrect password is entered before adding the password function, and password incorrect input setting for storing the password incorrect input count set by the password incorrect input count setting means. Number-of-times storage means, password input means for a user to input a password, password verification means for verifying whether the password input by the password input means matches the password stored by the password storage means, and an unauthorized password Means for counting the number of times an unauthorized password has been entered, means for saving the number of times an unauthorized password has been entered counted by the means for counting the number of unauthorized passwords entered, Enable password for Password function control means for controlling whether the password function is disabled or invalidated, and a password function control state storage means for storing the valid / invalid state of the password function controlled by the password function control means. A password control device characterized in that when the number of times exceeds the allowable number of incorrect password inputs, the number of passwords valid by the password function control means is increased. 2. The password control device according to claim 1, wherein said incorrect password input count storage means sets the number of incorrect password inputs to zero when a correct password is input. 3. An unauthorized password input count counting means,
The system has means for counting the number of consecutive occurrences of unauthorized passwords and the number of times of storage of unauthorized passwords. 2. The method according to claim 1, further comprising means for setting an allowable number of passwords, wherein the password function control means increases the number of valid passwords according to the number of consecutive occurrences of unauthorized passwords or the number of times of storing unauthorized passwords. The password control device according to 1. 4. If the number of incorrect passwords exceeds the allowable number of incorrect passwords and there is no password to be validated by the password function control means when an incorrect password is input, the power supply of the main unit is turned off. The password control device according to claim 1, wherein the password control device is turned off. 5. A password setting step for setting a plurality of passwords, a password saving step for storing the plurality of passwords set in the password setting step, and a password function added when an unauthorized password is entered a number of times. The user inputs a password, and the password erroneous input allowable number setting step of storing the password erroneous input allowable number set in the password incorrect input number setting step. A password input step, a password verification step of verifying whether the password input in the password input step matches the password stored in the password storage step, and an incorrect password input count for counting the number of times an incorrect password is input Counting step and inputting the illegal password An unauthorized password input count saving step of saving the number of input of the unauthorized password counted in the counting step, a password function control step of controlling how many passwords among the plurality of passwords are enabled or disabled, and A password function control state storing step of storing a valid / invalid state of the password function controlled in the password function control step, wherein the password function control step is performed when the number of incorrect password inputs exceeds the allowable number of incorrect password inputs. A method for controlling a password device, comprising: increasing the number of passwords that are valid in (1). 6. A recording medium recording a control program for a password device used in an information processing apparatus such as a personal computer, wherein the password setting step sets a plurality of passwords and the password setting step. A password storage step of storing a plurality of passwords, a password incorrect input count setting step for setting how many times an incorrect password is entered before adding the password function, and a password incorrect input count setting step. A password erroneous input allowable number storing step of storing the allowed password erroneous input allowable number, a password input step of inputting a password by the user, and a password stored in the password storing step. Password matching process to check if they match And incorrect password input number of times count step of counting the number of times an incorrect password is entered,
An unauthorized password input number saving step of storing the number of times of entering the unauthorized password counted in the unauthorized password input number counting step, and a password function for controlling how many passwords among the plurality of passwords are enabled or disabled A password function control state storing step of storing a valid / invalid state of the password function controlled in the password function control step, wherein the number of times of incorrect password input exceeds the allowable number of incorrect password inputs. A recording medium storing a control program for a password device, wherein the number of passwords valid in the password function control step is increased.