JPH0233648A - Password controller - Google Patents

Abstract

PURPOSE:To avoid such an inconvenient case where a password is easily used by an outsider by making a user use a character string evolved from another character string registered previously as a password and therefore using the different character strings as passwords for each input of passwords. CONSTITUTION:In a computer system the character strings having the finite lengths are registered into a password control information storing means 30 as the password register character strings 31 for each user. The means 30 stores the password register character string access control information 32 as the control information which have accesses to the strings 31. The information 32 is used as an index to show an optional position in the string 31 and initialized when the string 31 is registered. Then a user can have an access to the computer system when the registration of a password is through. When the user inputs a password, a character string length extracting means 10 obtains the character string length of the password. This character string length is sent to a password control information access means 20.

Description

DETAILED DESCRIPTION OF THE INVENTION [Field of Industrial Application] The present invention relates to password control means for detecting and preventing unauthorized access to a computer system.

〔overview〕

The present invention provides means for preventing unauthorized access to a computer system, by providing a means that allows a character string expanded from a registered character string to be used as a password, thereby making it possible to use a different character string as a password each time a password is input. It was made so that it could be done.

[Conventional technology]

FIG. 2 shows a conventional password control device. In the conventional device, when a user inputs a password, the password management information access means 100 accesses the password management information storage means 2.
A password registration character string 210 registered in advance for each user in 00 is read out and compared with the character string input by the user by the character string comparison means 300 to determine whether or not they are equal.

In this case, a predetermined single fixed pattern has been registered as the password registration character string 210 to be compared with the character string input by the user.

[Problem that the invention seeks to solve]

With conventional password control methods like this, users must enter the same password each time unless they change their password registration, and for this reason, if someone intercepts the password when entering it, this password could be used fraudulently. There was a risk that the system could be accessed by someone else.

The present invention aims to eliminate such drawbacks and provides a password control device that can prevent unauthorized access to a computer system using a password that has been intercepted.

[Means for solving problems]

The present invention provides a password control device having a control means for permitting or prohibiting access to a computer by a user. Management information storage means for storing a password registration string consisting of a finite number of registered characters, access control information indicating a reading start character position of this password registration string, and a character at the reading start character position indicated by the access control information. Next, the number of characters counted by the character string length extraction means is extracted from the cyclic character string generated based on the password registered character string, and the next reading starts at the character position following the last character of this extracted character string. A password management information access means updates access control information as character positions, compares a character string extracted by this password management information access means with a character string input as a password, and controls the above control means based on the comparison result. The present invention is characterized by comprising a character string comparison means for controlling.

[Effect]

The length of a character string is extracted from a character string input as a password by a user of a computer system. Input character string extracted using access control information, which is a finite-length password registration character string registered in advance for each computer system user and a password registration character string that can be expanded into an infinite-length cyclic character string. Expand a circular string from the password registration string by the length.

The expanded cyclic character string and the character string input as the password are compared to determine whether they are equal.

〔Example〕

Hereinafter, one embodiment of the present invention will be described based on the drawings. 1st
The figure is a block configuration diagram showing the configuration of this embodiment. That is, as shown in FIG. 1, this embodiment consists of a character string length extraction means 10 that counts the number of characters in a character string input as a password, and a finite number of characters registered in advance for each user. Password management information storage means 30, which is a management information storage means for storing a password registration character string 31 and password registration string access control information 32, which is access control information indicating the reading start character position of this password registration character string; Character string length extraction means 1 following the character at the reading start character position indicated by information
Password registration character string 31 is the number of characters counted by 0.
Password management information access means 20 extracts from the cyclic character string generated based on the extracted character string, and updates the password registered character string access control information 32 by setting the character position following the last character of the extracted character string as the next reading start character position.
and a character string comparing means 40 for comparing the character string extracted by the password management information access means 20 and the character string input as the password.

Next, the operation of this embodiment will be explained.

When using the computer system, a finite length character string is registered in advance in the password management information storage means 30 as a password registration character string 31 for each user. The password management information storage means 30 includes password registration character string access control information 32 as control information for accessing the password registration character string 31. Specifically, the password registration string access control information 32 is an index that can indicate the position of any character included in the password registration string 31. The password registration character string access control information 32 is initialized when the password registration character string 31 is registered. Once such password registration is completed, the user can access the computer system.

When accessing the system, a user must enter a password together with a user identifier to authenticate the user. When a user enters a password, first
The character string length of the input password is obtained by the character string length extraction means 10. The determined character string length is transferred to the password management information access means 20. The password management information access means 20 expands a character string based on the password registration character string 31 from the character position indicated in the password registration character string access control information 32 by the length of the input character string. When expanding a character string, if the input string length is larger than the remaining character string length of the password registration string 31, the password registration string access control is performed after expanding up to the last character of the password registration string 31. The information 32 is updated and the remaining character strings are expanded continuously from the beginning of the password registration character string 31. After character string expansion, the password registration string access control information 32 is updated to point to the character position in the password registration character string 31 at which expansion will start next. The password character string input by the user and the character string expanded by the password management information access control means 20 are transferred to the character string comparison means 40. The character string comparing means 40 compares the two and determines whether the password input by the user is correct.

Here, if the password registration string is BCDEF, the user can memorize the pattern of this password registration string and the password pattern input just before, and create a password using the following similar characters and patterns, for example. You can also enter it.

C E.F. Eight B D.E. ABC EFAB DEFAB CDEFABC Also, the password registration string is In this case, you can enter the password as follows.

A A A, to AAA A Note that even if you forget the last character of the password you used last time, you can confirm a valid password by sequentially inputting the registered characters of the password one by one.

〔Effect of the invention〕

As explained above, the present invention is based on a character string registered in advance by the user, and a group of character strings expanded from this character string can be used as a password. The column can be used as a password, which has the effect that even if the password is intercepted, it cannot simply be used by someone else.

Further, the present invention has the advantage that it can be easily implemented.

[Brief explanation of the drawing]

FIG. 1 is a block configuration diagram showing the configuration of an embodiment of the present invention. FIG. 2 is a block configuration diagram showing the configuration of a conventional example. 10... Character string length extraction means, 20.100... Password management information access means, 30.200... Password management information storage means, 31.210... Password registration character string, 32... Password Registered character string access control information, 40.300...Character string comparison means.

Claims (1)

[Scope of Claims] 1. In a password control device having a control means for permitting or prohibiting access to a computer by a user, a character string length extraction means for counting the number of characters in a character string input as a password; management information storage means for storing a password registration character string consisting of a finite number of characters registered in advance for each person, and access control information indicating the reading start character position of this password registration character string; The number of characters counted by the character string length extraction means following the character at the character position is extracted from the cyclic character string generated based on the password registration character string, and the character position following the last character of this extracted character string is extracted. The password management information access means updates the access control information as the next reading start character position, compares the character string extracted by this password management information access means with the character string input as the password, and based on the comparison result, A password control device comprising character string comparison means for controlling the control means.