JP2002351847A - Authentication data management method, information processing system and mobile communications device - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an authentication data management method which makes it possible to manage by storing the authentication data on a card medium and realize easy management with high security when contents being used increases. SOLUTION: A browser is initialized and new contents is accessed after the card medium is inserted into a card slot 13 of a PC 10. In this process, the authentication data for the new contents is stored on a card medium 14 on the contents by contents basis. In this case, stored contents of the card medium 14 is protected by an encrypted code. After the authentication data is stored on the card medium 14 as described above, the authentication data is automatically read out from the card medium 14 and inputted to the browser when a user accesses targeted contents on the browser. Therefore, an authentication job is automatically performed without manual input of the authentication data by the user.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

[0001] 1. Field of the Invention [0002] The present invention relates to an authentication data management system for managing authentication data used when accessing the Internet using a card medium, an information processing apparatus, and a mobile communication apparatus.

[0002]

2. Description of the Related Art In general, when accessing contents widely deployed on the Internet, a user accesses his / her own personal authentication data based on rules determined by the contents every time the user accesses the contents, that is,
It is necessary to set and manage an ID (Identification) and a password.

The above-mentioned authentication data has different rules for each content, that is, the number of digits of a password, the required number of characters, and the like. For this reason, as the number of contents to be used increases, the number of IDs and passwords to be remembered increases, and management becomes very troublesome. It is. In order to solve such a problem, it is conceivable to manage authentication data by storing it in a file in a personal computer (hereinafter abbreviated as a personal computer) or a mobile phone.

[0004]

As described above, the authentication data can be stored in a file in a personal computer and managed. However, easily storing the authentication data in a file in the personal computer has a security problem, and there is a problem that the content cannot be used on another personal computer that does not store the authentication data.

SUMMARY OF THE INVENTION The present invention has been made to solve the above-mentioned problems, and can store and manage authentication data in a card medium, so that even if contents to be used increase, management is easy and high security can be obtained. It is an object to provide a data management method, an information processing device, and a mobile communication device.

[0006]

An authentication data management system according to the present invention manages authentication data used when accessing contents on the Internet by an information processing apparatus by recording the authentication data for each content on a card medium. It is characterized by. Specifically, means for recording, on a card medium, authentication data used for accessing content on the Internet by a browser stored in an information processing device, for each content, authentication data recorded on the card medium, And means for accessing the content by using the authentication data read from the card medium, and means for preventing data in the card from being copied to the information processing apparatus.

[0007] As described above, the authentication data for each content is recorded on the card medium and integrally managed, so that when accessing the content on the Internet, the authentication data is automatically read out from the card medium and authenticated. Since the work is performed, the authentication data, that is, the ID
Content can be used without manually inputting a password and a password, and even if the content to be used increases, it can be easily managed. Also, by recording the authentication data on the card medium, it is not necessary to store the authentication data in a file in the information processing device, and high security can be maintained. Further, by carrying a card medium on which authentication data is recorded or a portable terminal equipped with the same function, the content can be freely accessed by attaching or connecting to any other information processing device.

[0008]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS An embodiment of the present invention will be described below with reference to the drawings. FIG. 1 shows a configuration example of a general personal computer 10 as an information processing apparatus. The personal computer 10 includes a personal computer main body 11 and a display 12, and the personal computer main body 11 includes a card slot 13 for mounting a card medium 14 such as a PC card, an SD card, a smart media, and an IC card. Further, a keyboard 15 and a mouse 16 are connected to the personal computer body 11. Further, the personal computer 11 is provided with IP (Internet) together with various software.
Protocol) A browser (browser software) for accessing a network (Internet) 17 is installed. It is assumed that the personal computer 10 is prepared so as to be able to access the IP network 17 via a provider.

The browser has a function of recording the authentication data input by the user on the card medium 14 inserted in the card slot 13 when accessing a new content requiring authentication on the Internet. Thereafter, when accessing the content, a function of reading authentication data from the card medium 14 and accessing the content is provided. That is, the browser has a function of writing and reading authentication data to and from the card medium 14 in addition to a function of accessing content on the Internet, which is conventionally provided.
In the card medium 14, a password is registered as necessary, and the internal data can be accessed only when the passwords match.

Next, a description will be given of a processing operation when accessing content on the Internet by the browser. First, a process for accessing new content requiring authentication will be described with reference to the flowchart shown in FIG.

First, the card slot 13 of the personal computer 10
The card media 14 is inserted into the device (step A1). Next, a browser is started (step A2), and access is made to new desired contents requiring authentication via the IP network 17 (step A3). At this time, the browser displays a screen for inputting authentication data, that is, an ID and a password on the display 12 (step A).
4) Wait until the user inputs authentication data (step A5).

When the user inputs the authentication data from the keyboard, the browser displays a message on the display 12 as to whether the input authentication data is to be stored in the card medium 14 (step A6).

FIG. 3 shows a display example of a message. For example, a message 21 of "Do you want to save the authentication data in the card?" Is displayed, a check button 22 of "Yes", and a message of "No". A check button 23 is displayed, and a password input area 24 is displayed in correspondence with the "Yes" check button 22.

The input authentication data is transferred to the card medium 14.
To save the password, the user clicks the "Yes" check button 22 with a mouse or the like, inputs the password of the card medium 14 into the password input area 24, and then operates the "Enter" key. If the authentication data is not to be saved, the user clicks the “No” check button 23.

The browser determines in step A7 whether or not the authentication data is to be stored, that is, which of the check buttons 22 and 23 has been operated, and if the "Yes" check button 22 has been operated, the password is determined. It waits until a password is input in the number input area 24. And
When the personal identification number is input to the personal identification number input area 24, it is determined whether the personal identification number is correct, that is, whether the input personal identification number matches a previously registered personal identification number (step A9). If the input password is incorrect, an error message such as "The password is incorrect" is displayed on the display 12.
(Step A10), and returns to Step A8 to prepare for re-input of the personal identification number. If an incorrect password is entered several times consecutively, it is determined that there is a security problem, and the process is terminated.

If it is determined in step A9 that the input password is correct, the authentication data is recorded on the card medium 14 in association with the content (step A11). Thereafter, the content is accessed using the authentication data (step A1).
2). If it is determined in step A7 that the "No" check button 23 has been operated, the process immediately proceeds to step A12 to access the content without recording the authentication data on the card medium 14. Thus, the process for accessing the new content is completed. The authentication data recorded on the card medium 14 as described above is managed for each content, and a plurality of data can be managed.

When the authentication data recorded on the card medium 14 is to be changed, the authentication data is changed when accessing contents on the Internet. When the authentication data change process is performed, the browser displays a message as to whether or not to record the changed authentication data on the card medium 14 as shown in step A2 in FIG. The authentication data recording process is executed accordingly.

Next, a process for accessing contents on the Internet using the authentication data recorded on the card medium 14 will be described with reference to a flowchart shown in FIG.

First, the card medium 14 on which the authentication data is recorded as described above is inserted into the card slot 13 of the personal computer 10 (step B1). Next, a browser is started (step B2), and the target content requiring authentication is accessed via the IP network 17 (step B3). At this time, the browser displays a message on the display 12 as to whether to read the authentication data from the card medium 14 (step B4).

FIG. 5 shows a display example of a message. For example, a message 31 of "Do you want to read the authentication data from the card?" Is displayed on the display 12, and a "Yes" check button 32 and a "No" Is displayed, and a password input area 34 is displayed in correspondence with the "Yes" check button 32.

When the authentication data is read from the card medium 14, the user clicks the "Yes" check button 32 to input the personal identification number of the card medium 14 into the personal identification number input area 34 from the keyboard.
the "r" key. If the authentication data is not read from the card medium 14, the user clicks the "No" check button 33.

The browser uses the check buttons 32, 3
3 is operated in step B5, and “Y
If the "es" check button 32 is operated, the process waits until a password is entered in the password input area 34, and when the password is entered (step B6), it is determined whether or not the password is correct. A decision is made (step B7).
If the entered password is incorrect, an error message such as "The password is incorrect" is displayed (step B8), and the process returns to step B6 to prepare for re-input of the password. If an incorrect password is input several times consecutively, the process is terminated as it is, and the data in the card medium 14 is made unreadable thereafter.

If it is determined in step B7 that the input password is correct, the recorded contents of the card medium 14 are searched and the authentication data corresponding to the accessed content is read (step B9). Is input on the browser (step B10). At this time, the password character string is not displayed. Thereafter, the content is accessed using the authentication data (step B1).
1).

If it is determined in step B5 that the "No" check button 33 has been operated, an authentication data input screen is displayed (step B12), and the process waits until authentication data is input (step B13). . When the authentication data is input, the process proceeds to step B11, and the content is accessed using the authentication data.

Thus, the processing for accessing the content using the authentication data recorded on the card medium 14 is completed.

As described above, the authentication data for each content is recorded on the card medium 14 and managed in a centralized manner. By inserting the card medium 14 into the card slot 13 of the personal computer 10, access to the content can be performed. The content can be used without manually inputting necessary authentication data, that is, an ID and a password, and the content can be easily managed even if the content to be used increases. In addition, by recording the authentication data on the card medium 14, it is not necessary to individually store the authentication data in a file in the personal computer 10, and high security can be maintained. In addition, the card media 14
By registering the password in the password, there is no fear that the authentication data is stolen by others. Further, by adding a guarantee against theft to the card media 14, damage can be compensated in case of theft. Further, by adding a credit function to the card media 14, it becomes possible to use the credit as a means of payment to the content destination.

Further, by adding a function of enabling access to the card medium 14 by means of version upgrade to the conventional browser installed in each personal computer 10, the card medium 14 on which the authentication data is recorded can be used. The content can be freely accessed by attaching it to another personal computer. In the above embodiment,
The case where the present invention is applied to the personal computer 10 has been described.
A mobile communication device such as A (Personal Digital Assistant) can be similarly implemented.

[0028]

As described above in detail, according to the present invention, when accessing content on the Internet, authentication data for each content is recorded on a card medium and centrally managed, thereby enabling authentication data to be managed. Content can be used without manual input, and even if the content to be used increases, it can be easily managed. Further, by recording the authentication data for each content on the card medium, it is not necessary to store the authentication data in the information processing apparatus, and high security can be maintained. Also, by carrying the card media or a portable terminal equipped with the same function as above and attaching or connecting it to another personal computer as required, the authentication data is automatically read out and the authentication work is performed. It is possible to freely access contents on the Internet without manually inputting data. Further, by registering the personal identification number in the card medium, there is no fear that the authentication data is stolen by another person, and the security can be improved.

[Brief description of the drawings]

FIG. 1 is a diagram showing a configuration example of a general personal computer.

FIG. 2 is a flowchart showing a processing operation when accessing new content in the authentication data management method according to an embodiment of the present invention.

FIG. 3 is an exemplary view showing a message display example at the time of storing authentication data in the embodiment.

FIG. 4 is a flowchart showing a processing operation at the time of accessing content using authentication data recorded on a card medium in the embodiment.

FIG. 5 is an exemplary view showing a message display example at the time of reading authentication data in the embodiment.

[Explanation of symbols]

 10 Personal Computer (PC) 11 Personal Computer 12 Display 13 Card Slot 14 Card Media 15 Keyboard 16 Mouse 17 IP Network 21, 31 Message 22, 32 "Yes" Check Button 23, 33 "No" Check Button 24, 34 PIN Number input area

 ──────────────────────────────────────────────────続 き Continued on the front page F term (reference) 5B035 AA13 BB09 CA38 5B058 CA27 KA01 KA06 KA12 KA33 5B085 AE02 AE03 AE12 BC01 5J104 AA07 KA01 NA05 NA35 NA38 PA01 PA07 5K067 BB04 DD17 EE02 HH24 KK00

Claims (6)

[Claims] 1. An authentication data management system characterized in that authentication data used when accessing content on the Internet by an information processing device is recorded and managed on a card medium for each content. 2. A means for recording, on a card medium, authentication data used for accessing content on the Internet by a browser stored in an information processing apparatus for each content, and authentication data recorded on the card medium. And a means for accessing the content by using the authentication data read from the card medium. 3. The authentication data management method according to claim 1, wherein a password is registered in said card medium to protect recorded data. 4. An information processing apparatus and browser software on the apparatus, which read authentication data previously recorded for each content on a card medium and access the content on the Internet using the authentication data. 5. A means for recording authentication data used when accessing content on the Internet on a card medium for each content, a means for reading authentication data recorded on the card medium, and a means for reading from the card medium Means for accessing the content by using the obtained authentication data, and browser software on the apparatus. 6. A mobile communication device having a function according to any one of claims 1 to 5.