JPH03216754A - Rejection system for set-up of session - Google Patents

Abstract

PURPOSE:To reduce the possibility for rejection of set-up of a session due to a simple input mistake of a justified user by rejecting unconditionally the set-up of the session when the session set-up rejection rate calculated per unit time based on the session set-up rejection history of the user information is larger than the system setting value. CONSTITUTION:A password processing means 3 decides an illicit password received through an interactive terminal 10 without collating it with the password of the user information and rejects the set-up of a session if the session set-up rejection rate calculated per unit time based on the session set-up rejection history of the user information is larger than the system setting value. Meanwhile the means 3 performs the collation of passwords and decides the propriety for set-up of the session based on the result of collation when the session set-up rejection rate is smaller than the system setting value. Thus it is possible to surely reject the session set-up request given from an illicit user without giving any adverse influence to the session ser-up request to be given from a justified user.

Description

DETAILED DESCRIPTION OF THE INVENTION [Field of Industrial Application] The present invention relates to a session establishment refusal method, and more particularly to a session establishment refusal method for a user who is not registered as a valid computer system user in a conversation processing computer system.

[Conventional technology]

Conventionally, in this type of session establishment refusal method, session establishment was unconditionally rejected if the cumulative value of the number of incorrect password instructions by the user up to the present time exceeded a system setting value.

[Problem to be solved by the invention]

In the conventional session opening refusal method described above, if the cumulative number of incorrect password input by the user exceeds the system setting value, the session is unconditionally refused. If a person enters the password incorrectly for a certain period of time, one day, the session opening will be suddenly refused, so there is a drawback that it is necessary to periodically initialize the cumulative value of the number of incorrect passwords. .

Furthermore, if the system setting value for denying session opening is increased, there is a drawback that the denial of session opening for unauthorized users is relaxed.

In view of the above-mentioned points, an object of the present invention is to eliminate the possibility of a session opening being refused due to a simple input error by a legitimate user, and at the same time, to prevent a session opening from being refused for an unauthorized user. The purpose is to provide a method for refusing to open a session.

[Means to solve the problem]

The session establishment refusal method of the present invention verifies a session establishment request from a conversation terminal with a conversation processing computer system based on a password input from the conversation terminal to determine whether the user is authorized to use the conversation processing computer system. In a session opening control method that controls whether or not a session can be opened, a user information confirmation means reads user information corresponding to a user identification name instructed from a conversation terminal from a user management file, and this user information confirmation means If the session establishment refusal rate per unit time calculated based on the session establishment refusal history of the read user information is greater than the system setting value, the password input from the conversation terminal is compared with the password of the user information. a password processing means that rejects the session establishment as unauthorized without any error, and verifies the password if the session establishment refusal rate does not exceed a system setting value, and determines whether or not the session opening is possible based on the result; a warning display means for notifying a system operator that a session opening request has been made by an unauthorized user according to instructions; and a user corresponding to the user identification name in the user management file according to instructions from the password processing means. and a user information update means for updating the session establishment refusal history of information to the latest state.

[Effect]

In the session establishment refusal method of the present invention, the user information confirmation means reads the user information corresponding to the user identification name instructed from the conversation terminal from the user management file, and the password processing means reads the user information with the user information confirmation means. If the session establishment refusal rate per unit time calculated based on the session establishment refusal history of the user information provided is greater than the system setting value, the password entered from the conversation terminal will not be checked against the password of the user information. If the session opening is rejected as unauthorized and the session opening rejection rate does not exceed the system setting value, the password is verified and based on the result it is determined whether or not the session can be opened, and the warning display means detects unauthorized access according to instructions from the password processing means. The system operator is notified that a session opening request has been made from the user, and the user information update means updates the session of user information corresponding to the user identification name in the user management file according to instructions from the password processing means. Update the establishment refusal history to the latest state.

〔Example〕

Next, the present invention will be explained in detail with reference to the drawings.

FIG. 1 is a block diagram showing the configuration of a session establishment refusal system according to an embodiment of the present invention. The session establishment refusal method of this embodiment includes a terminal identification name setting means 1, a user information confirmation means 2, a password processing means 3, a warning display means 4, a user information updating means 5, and a user information buffer. 6, a terminal information area 7, a user management file 8,
The display device 9 is configured to include a display device 9. In addition, the code 10
indicates a conversation terminal.

The conversation terminal 10 requests the conversation processing computer system to establish a session, and inputs the user identification name and the user's password.

The terminal identification name setting means 1 sets the terminal identification name 71 of the conversation terminal 10 in the terminal information area 7 when a session establishment request is received from the conversation terminal 10.

The user information confirmation means 2 reads the user information corresponding to the user identification name input from the conversation terminal 10 from the user management file 8 into the user information bath sofa 6. If the user information is successfully read into the user information buffer 6, the user information@confirmation means 2 sends the password instructed by the conversation terminal 10 to the password processing means 3 and the usage transferred to the user information buffer 6. If the user information is not read normally, a message to that effect is output to the conversation terminal 10 and the session establishment is rejected.

Password processing 1,000 steps 3 refers to the session establishment refusal history for the conversation terminal 10 in the user information Ba Nofa 6, and if the session establishment refusal rate per unit time exceeds the system setting value, it is determined that it is fraudulent. In order to notify the system operator that a session opening request has been made from the user, the session is opened after requesting the warning display means 4 to display a warning message and outputting a message indicating that the password is invalid to the conversation terminal 10. and requests the user information updating means 5 to update the session establishment refusal history. On the other hand, if the session establishment refusal rate does not exceed the system setting value, the password processing means 3 compares the password instructed from the conversation terminal 10 with the password in the user information buffer 6, and if they match, the password processing means 3 allows the session to be established. Permit the establishment. If the passwords do not match, the password processing means 3 outputs a message indicating that the password is invalid to the conversation terminal 10, then rejects the session establishment, and requests the user information updating means 5 to update the session establishment refusal history.

The warning display means 4 displays a warning message on the display device 9 to the effect that an unauthorized session opening request has been made from the conversation terminal 10.

User information update 1,000 steps 5 is the conversation terminal 1 set in the terminal information frequency range 7 in the user information in the user information buffer 6.
After adding the terminal identification name 7l of 0 and the current date and time as a new session establishment refusal history entry (hereinafter simply referred to as a refusal entry), the user information of the user identification name of the user management file 8 is added to the user information. Update the contents of information buffer 6. Referring to FIG. 2, the user information in the user information bath sofa 6 includes a user identification name 61, a password 62, a rejection rate determination period 63, a rejection rate setting value 64, and the number of registrable entries 65. , the number of currently registered entries 66, and a plurality of rejection entries 67 consisting of terminal identification names and establishment rejection dates and times. Note that the rejection rate determination period 63 and the rejection rate setting value 64 are system setting values set in advance by the conversation processing computer system, and the number of registrable entries 65 is determined at the time of user information registration.

Next, the operation of the session establishment refusal method of this embodiment configured as described above will be explained.

The terminal identification name setting means 1 activated by a session establishment request from the conversation terminal 10 sets the terminal identification name 7l of the conversation terminal 10 in the terminal information nodding area 7.

Next, the user information confirmation means 2 checks the user management file in order to confirm whether the user identification name instructed from the conversation terminal 1o is a legitimate user identification name registered in the conversation processing computer system. 8, the user information corresponding to the user identification name is read into the user information buffer 6.

If the user information has been successfully read, the user information confirmation means 2 requests the password processing means 3 to check the password 62 in the user information buffer 6 with the password instructed from the conversation terminal 10, and then confirms the use of the password. If the user information cannot be read normally, a message is output to the conversation terminal 10 to the effect that the instruction was an invalid user identification name, and the session establishment is rejected. The password processing means 3, which has received the password verification request, refers to the current number of registered entries 66 in the user information bath sofa 6, and if the value is zero, calculates the session establishment refusal rate per unit time for the conversation terminal IO. In order to calculate,
Extract the rejection entry 67 from the current date and time to before the rejection rate determination period 63, and in which the same terminal identification name as the terminal identification name 7l of the terminal information area 7 is stored, and reject the session establishment per unit time. Calculate the rate. When there is no registered refusal entry 67 or when the number of extracted refusal entries 67 is less than two, the calculated value of the session establishment refusal rate per unit time is set to zero.

Next, the password processing means 3 compares the calculated session establishment refusal rate with a refusal rate setting value 64 which is a system setting value, and if the calculated session establishment refusal rate is large, the session establishment by an unauthorized user is rejected. Regarded as a request,・
After requesting the warning display 1000 steps 4 to display a warning message to the system operator and outputting a message to the conversation terminal 10 to the effect that the password was an invalid instruction to refuse the session establishment, the user information updating means 5 Request update of user information of user identification name.

On the other hand, if the calculated session establishment refusal rate is small, the password processing step 3 uses the password instructed from the conversation terminal IO and the password 6 in the user information buffer 6.
2. As a result of the verification, if the passwords match, the user is authorized to open a session as a legitimate user. If the passwords do not match, the password processing means 3 outputs to the conversation terminal 10 a message indicating that the password was an invalid instruction, rejects the opening of the sesocilon, and then sends the user identification name to the user information updating means 5. Rely on information updates.

The warning display means 4 displays the user identification name 61 in the user information bath sofa 6, the terminal identification name 7I in the terminal information area 7, and the session opening refusal rate per unit time calculated by the password processing means 3. It is edited into a possible format, and the contents of the &I collection are displayed on the display device 9 along with a message indicating that a session opening request has been made from an unauthorized user.

The user information updating means 5 increments the current number of registered entries 66 if the current number of registered entries 66 in the user information buffer 6 is less than the number of registrable entries 65, and increments the current number of registered entries 66 if it is equal to the number of registrable entries 65 The area from the rejection entry 67 to the final rejection entry 67 is moved up one entry at a time, and the final rejection entry 67 is made into an empty area.

Next, the user information updating means 5 updates the current registered entry number 66.
The terminal identification name 71 in the terminal information area 7 and the current date and time are transferred to the area of the refusal end entry 67 indicated by , and the user information corresponding to the user identification name 61 in the user management file 8 is transferred to the user information buffer 6. Update the contents to complete the session establishment refusal process.

〔Effect of the invention〕

As explained above, the present invention provides user information confirmation means in a session establishment control method in a conversation processing computer system based on a session establishment request from a conversation terminal. Password processing means. By providing a warning display means and a user information update means, it is possible to refuse session openings from unauthorized users without adversely affecting session opening requests from legitimate users. This has the effect of eliminating the need for regular maintenance of information. In detail, the system operator will be able to recognize an abnormality in the number of incorrect password instructions from the same conversation terminal as soon as the abnormality is detected. All session openings from conversation terminals in an abnormal state will be rejected within a certain period of time. A session can be opened correctly by a legitimate user from another conversation terminal; the accumulated number of incorrect password instructions over a long period of time is not determined to be an abnormal state; and the abnormality detection criteria are based on the history of session opening refusals. By making this change, it is possible to detect unauthorized users at an early stage.

[Brief explanation of drawings]

FIG. 1 is a block diagram showing the configuration of a session establishment refusal method according to an embodiment of the present invention, and FIG. 2 is a diagram showing user information stored in the user information buffer in FIG. 1. In the figure, 1...Terminal identification name setting means, 2...User information confirmation means, 3...Password processing means, 4...Warning display means, 5...User information updating means, 6 ...User information bath sofa, 7.Terminal information area, 8.User management file, 9.Display device, 10.Conversation terminal, 61.User identification name, 62.Password. , 63... Rejection rate determination period, 64... Rejection rate setting value, 65... Number of registrable entries, 66... Number of currently registered entries, 67... Rejection entry, 71 - Terminal identification name.

Claims (1)

[Claims] A request for opening a session with a conversation processing computer system from a conversation terminal is verified based on a password input from the conversation terminal to determine whether the user is authorized to use the conversation processing computer system. In the session opening control method that controls whether or not the session can be opened, there is a user information confirmation means that reads the user information corresponding to the user identification name specified from the conversation terminal from the user management file; If the session establishment refusal rate per unit time calculated based on the session establishment refusal history of the user information is greater than the system setting value, the password entered from the conversation terminal is not checked against the password of the user information and is rejected. a password processing means that rejects the session establishment as described above and verifies the password if the session establishment refusal rate does not exceed a system setting value, and determines whether or not the session can be opened based on the result; a warning display means for notifying a system operator that a session opening request has been made from a user, and a session of user information corresponding to the user identification name in the user management file according to instructions from the password processing means. A session establishment refusal method comprising: a user information update means for updating an establishment refusal history to the latest state.