JPS58163983A - Password method - Google Patents

Abstract

(57) [Summary] This bulletin contains application data before electronic filing, so abstract data is not recorded.

Description

DETAILED DESCRIPTION OF THE INVENTION Technical Field of the Invention The present invention relates to a password system used to permit only specific persons to use protected resources.

Technical background Computer systems contain valuable resources that require a lot of time and expense to create, and automatic deposit systems contain personal property and resources (ledgers) that must be kept confidential.
If these are plagiarized by others without permission, various problems arise. Therefore, a unique password is usually set for the resource to be protected, so that only those who know the password can use the resource.

Conventional technology and problems However, conventional passwords are fixed, so once someone else knows the password, resources are completely consumed until the authorized password holder or administrator notices and changes the password. This leaves you vulnerable to plagiarism.

Purpose of the Invention The present invention improves the above points and changes the password according to the date and time, so that even if the password at a certain date and time is known, the password will change at a different date and time. This is an attempt to further strengthen resource protection by making it impossible to use natural resources.

Structure of the Invention The password method of the present invention changes a part of a password consisting of multiple characters depending on the date and time, registers the change mode, and calculates the password from the input password and the registered change mode. This method is characterized in that the use of the protected resource is permitted only when the password at that date and time matches, and this will be explained in detail below with reference to the illustrated embodiment.

Embodiment of the Invention FIG. 1 is an explanatory diagram of a date/time changing password showing an embodiment of the invention. The password PW in this example is 8 characters C+
=Ce, and each character consists of any one of the alphabets A-Z and numbers O to 9. In this example, the third character C3 and the sixth character C6 are used as changing parts. 3rd letter C
3 is the diurnal change section, where there are 7 letters M; T starting from January 1st.

One of the characters W, T, F, S, and S is inserted in order according to the day of the week. Of course, this is just an example, and the character type and change period may be set arbitrarily. The sixth character C6 is a time-varying part,
This content is 6 characters 6, 5, 4, 3, 2 starting from 0 o'clock.
．． 1 will be replaced every 4 hours. The character type and change time interval can also be set arbitrarily. The time change period is 24
It's time. Remaining character parts C1, C2, C4, C5, C
7 and C8 can be variable parts, but in this example, they are fixed, and for example, A, B, D, E, and 2.3 are inserted here. This password change mode (change rule) is stored by the user and also in a memory table of a device such as a computer or an input/output terminal.

FIG. 2 is an explanatory diagram of the password registration table 20 in which various information that changes the date and time of the password pw mentioned above is registered. 21 is an area for storing the resource name (or a pointer to the resource) to be protected, and 22 is the main area. 23 is an area for storing the number n (up to 8, but 2 in this example) of change information entries that the table has; 23 is the original form of the password PW (
As shown in FIG. 1, the changing portion C3, Ca is left blank or C, 1, etc. Each character is e.g. 8
(expressed in bits), 24, 25. −
----- is n change information entries.

Change information entry 24 is for C3 in this example,
"3" is set in the change part pointer 31, "1" is set in the next date/time change display column 32, and the third character C3
shows that it changes from day to day. Note that this column is a flag indicating whether the changing part changes depending on whether it changes at 9 o'clock on the day, so one bit is sufficient, and in this example, 1 indicates a daily change, and 0 indicates a hourly change. The change cycle tank 33 below shows how many days the third character C3 changes. In this example, one character is selected from seven characters and replaced every day, so the change cycle until the same character is used again is "7".
(Sun). The changing character type 34 below stores changing characters M, T, W, -111, - for one cycle.

The change information entry 25 has a similar configuration, but the change part pointer 35 is set to "6" to indicate that this entry stores information regarding the sixth character C6, and the date/
The time change display column 36 is "0", indicating that the time change will change at the sixth character 06 o'clock. In the case of time change, the change period is fixed at 24 hours, so column 37 shows the change time interval. The change time interval field 37 shows how many hours the sixth character C6 changes. In this example, 6 characters are replaced every 4 hours, so the change time interval until the same character is inserted again is 4 hours.
” (time). Below that, the changing character type 38 includes changing characters 6, 5, 4 for one period (24 hours). ------
One is stored.

If it is a date/time change password with the above configuration, if it starts with ABMDE623 at 0:00 on January 1st, then 4
The contents change every time and ABMDE523. ABMDE
423. ------ABTMDE623 (1 day later>-
--- It becomes first class and it takes 7 days to return to the same value. Regular password holders are aware of this change pattern, so for example, if you want to use a resource at 7am on January 4th, you should enter a password with the third character C3 set to W and the sixth character C6 set to 5 (others are fixed). value). On the device side, from the contents of table 20, the password as of today's time is ABWDE52.
3, and if the password entered by the user is equal to this, the use of the resource is permitted. However, since this password is valid only from 4:00 AM to 8:00 AM on that day, the resource cannot be used even if it is used after 8:00 AM. Therefore, even if the date and time password is known to someone else, resource theft can be prevented as long as it is not used immediately. Of course, as mentioned above, the same password is 7.
It can be used once a day, but unless someone who knows the password at a certain point in time knows the changes, it is nearly impossible to predict the relevant date and time. Furthermore, if some of the character styles registered in Variable Character Type 34.38 are reserved words that cannot be specified by the resource user (for example, a period), no one can use the resource on the corresponding day or time. Can be done. If such a time lock mechanism is used in combination, the possibility of resource theft is further reduced.

FIG. 3 is a flowchart of the password check processing program when a resource use request is issued. When there is a request to use a resource, the original password is first read from the area 23 of the table 20 and moved to the work area of the main memory (or other memory). Then, it is determined whether there is a changing part.

If there is no changing part, the comparison operation will start immediately as before, but
If there is a transition part, it is necessary to determine the character that will enter the transition part at that point. For this purpose, the current date and time are obtained from a calculator, etc., and the daily change part is based on January 1st, and the hourly change part is based on the change period with midnight as the reference. Characters table 2
Draw from 0. Next, the retrieved variant characters are inserted into the password original form in the work area to create the current password, and this is compared with the password specified by the resource user. If the results match, the resource is allowed to be used, but if not, the resource is denied.

This is because the determination of the presence or absence of a changing part can range from a case where all characters of the password pw are a changing part to a case where no character is a changing part (all characters are a fixed part). To make one character part a fixed part, either do not allocate a change information entry to that character part (do not indicate it with a pointer), or even if it is assigned, all change characters should be the same.

Effects of the Invention As described above, the present invention has the advantage that even if a password is known to another person, the possibility of resource theft can be significantly reduced.

[Brief explanation of the drawing]

FIG. 1 is an explanatory diagram of a date and time changing password showing an embodiment of the present invention, FIG. 2 is an explanatory diagram of a password registration table, and FIG. 3 is a flowchart of a password check processing program. In the figure, PW is the memorized password, C3 is the daily change section, and C6
is the time-varying part. Applicant Fujitsu Ltd. Representative Patent Attorney Minoru Aoyagi Figure 1

Claims (1)

[Claims] A part of the password consisting of multiple characters is changed depending on the date and time, and the change mode is registered, and only when the input password and the password at that date and time determined from the registered change mode match. A password method characterized by permitting the use of protected resources.