JP2011107956A - Computer system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To achieve a compact and low cost computer system with a simple structure having a high level security function. <P>SOLUTION: In a computer system 100, a keyboard 1 includes: a means 11-1 for storing a keyboard identifier; and a means 12 for transmitting the key code of a depressed key to a computer 2 after receiving a keyboard identifier and a keyboard permission signal when a power is supplied. The computer 2 includes: a means 21 for storing the keyboard identifier of the keyboard 1 whose connection is permitted and the password of the user whose use is permitted; a means 22 for determining the matching of the received keyboard identifier with the keyboard identifier stored in the means 21; a means 23 for, when those keyboard identifiers are matched, transmitting a keyboard permission signal to the keyboard; a means 24 for determining the matching of the key input after the keyboard identifier is transmitted and the password stored in the means 21; and a means 25 for, when they are matched, permitting the use of the received key code by the application. <P>COPYRIGHT: (C)2011,JPO&INPIT

Description

  The present invention relates to a computer system including a keyboard having a security function.

  In recent years, there has been an increase in the need for an information processing apparatus having an authentication function due to social demands such as high security requirements and diversified personal needs.

  For example, there is a method of performing password authentication in a computer or server to which a keyboard is connected by inputting a password from a keyboard (see, for example, Patent Document 1). In addition to key operations using a keyboard, there is a method of reading a password stored in an ID card using a card reader. Besides such password authentication, there are biometric authentication such as fingerprints or retinal blood vessels, authentication by handwriting input, and the like.

  In addition, there is an information recording apparatus that can reproduce operations performed in the past by accumulating information input from information input means such as a keyboard and later analyzing the accumulated information (for example, Patent Document 2). reference).

JP 2001-125714 A JP-A-10-222274

  Depending on the usage environment, security functions may not be sufficient with password authentication alone. In addition, biometric authentication, which has a relatively high security function, has a drawback that the system itself is complicated and expensive.

  Accordingly, an object of the present invention is to provide a computer system having a high security function, an easy structure, a small size, and a low cost in view of the above problems.

  To achieve the above object, according to the present invention, in a computer system having a computer and a keyboard connected to the computer, the keyboard includes keyboard side storage means in which a keyboard identifier unique to the keyboard is stored; Keyboard-side control means for transmitting to the computer a keyboard identifier at power-on, and a key code corresponding to a key to be pressed after receiving a keyboard permission signal from the computer. Computer-side storage means storing a keyboard identifier for a keyboard that is allowed to be connected to a computer and a password for a user who is permitted to use the keyboard, and a keyboard identifier received from the keyboard are stored in the computer-side storage A keyboard authenticating unit that determines whether or not the keyboard identifier stored in the keyboard matches, and a signal generating unit that generates a keyboard permission signal and transmits it to the keyboard when the keyboard authenticating unit determines that the keyboard identifier matches. User authentication means for determining whether or not the key input corresponding to the key code received from the keyboard after transmission of the keyboard identifier matches the password stored in the computer-side storage means, and determination that the password matches by the user authentication means And a permission means for permitting use of the key code received from the keyboard after the application by application processing in the computer. The permission unit prohibits the use of the key code received from the keyboard by application processing in the computer when it is determined by the keyboard authentication unit that they do not match.

  The keyboard-side control means in the keyboard preferably has a log recording means for recording a press history of keys pressed after receiving the user permission signal in the computer-side storage means. In this case, the signal generation means in the computer generates a user permission signal when the user authentication means determines that the passwords match.

  According to the present invention, an advanced security function can be provided by these two authentications, authentication for a keyboard that can be connected to a computer and authentication for a user who can use the keyboard. That is, according to the present invention, it is possible to construct a high-level security environment in which only a specific user who uses a specific keyboard can use an application program in a computer. The computer system according to the present invention stores a unique keyboard identifier in the keyboard, and on the other hand, the computer system can be realized by installing the software program for executing the above two authentications, so that the structure is easy. In addition, it is small in size and low in cost. According to the present invention, a security system can be easily introduced to a computer already owned by a user.

  Furthermore, according to the present invention, by recording a pressing history (operation log) of a key to be pressed, a user who is permitted to use the keyboard can perform any key operation using the keyboard. It is also possible to grasp whether it has been done. As a result, when a problem occurs on the computer side or the network communication network side to which the computer is connected, it is possible to search for the cause based on the keyboard pressing history.

1 is a block diagram of a computer system according to an embodiment of the present invention. 5 is a flowchart showing an operation flow until a user is permitted to use the computer system according to the embodiment of the present invention. It is a flowchart which shows the operation | movement flow about the logout process in the computer system by the Example of this invention. It is a flowchart which shows the operation | movement flow about the resume from suspend mode in the computer system by the Example of this invention.

  FIG. 1 is a block diagram of a computer system according to an embodiment of the present invention. A computer system 100 according to an embodiment of the present invention includes a computer 2 and a keyboard 1 connected to the computer 2.

  The keyboard 1 includes keyboard side storage units 11-1 and 11-2, a keyboard side control unit 12, a notification unit 13, and a key matrix 14. The key matrix 14 may be provided on a general keyboard.

  The keyboard storage unit 11-1 stores a keyboard identifier (keyboard ID) unique to the keyboard 1 in advance. Further, as will be described later, a pressing history (operation log) for a key pressed after receiving a user permission signal is stored in the keyboard-side storage unit 11-2 in a log record provided in the keyboard-side control unit 12. Recorded by means 15. The key to be pressed is detected by the key matrix 14.

  For example, when the keyboard 1 according to this embodiment is manufactured, a keyboard identifier unique to the keyboard 1 is stored in advance in the keyboard-side storage unit 11-1. The keyboard-side storage unit 11-1 preferably holds a keyboard identifier unique to the keyboard 1, and is preferably composed of a ROM.

  On the other hand, the keyboard-side storage unit 11-2 is preferably composed of a RAM because the pressing history of keys to be pressed is sequentially recorded. The storage capacity may be designed as necessary. For example, the larger the storage capacity, the more pressing history can be left. In addition, the corridor history may be recorded to the full storage capacity. In such a case, the log recording unit 15 described later executes a process of deleting the oldest press record and writing the latest press record. Like that.

  The pressing history is a record of which key on the keyboard 1 the user has pressed together with the pressing order, and is recorded in a key code format, for example. As will be described later, according to the present embodiment, only the authorized user can use the keyboard 1, but the permission / non-permission of use by the user is stored in advance in the computer-side storage means 21 in the computer 2. It is managed by a user-specific password. Since the keyboard-side control means 12 can grasp information such as which user (that is, the user permitted to use) is currently using the keyboard 1, the log recording means 15 in the keyboard-side control means 12 can be grasped. Records the above-mentioned press record in the keyboard side storage means 11-2 together with the password of the user currently in use. As a result, the key operation performed by the user who is permitted to use the keyboard using the keyboard is recorded as a log. When the user reads out the information recorded in this way using the computer 2, the user who has been permitted to use the keyboard can understand what key operation has been performed using the keyboard. . As will be described later, the log transmission means 28 in the computer 2 reads the pressing history recorded in the keyboard side storage means when the computer 2 is connected to the network communication network 32, and sends it to the network communication network 32. It has a function to transmit. With these configurations, if any problem occurs on the computer 2 side or the network communication network 32 side to which the computer 2 is connected, it is possible to search for the cause based on the recorded press history. For example, when a certain user performs fraud using the keyboard 1, there is a record regarding what kind of key operation is performed on the keyboard 1 in the press history, and the key operation is performed. Since information on who is the person is also recorded, the elucidation work on the illegal operation becomes smooth.

  In this embodiment, the keyboard identifier and the pressing history are described as being stored and stored in the separate keyboard storage units 11-1 and 11-2. However, one storage unit is stored in a plurality of memory areas separately. -You may make it record. As a further alternative, these keyboard-side storage means may be realized as an internal memory in the keyboard-side control means 12. For any of these alternatives, the keyboard storage means should be composed of a rewritable memory RAM or FLASH memory or the like.

  The keyboard side control means 12 is for controlling and controlling various processes in the keyboard 1 and is realized by, for example, a microprocessor. As one of its functions, the keyboard-side control means 12 transmits a keyboard identifier to the computer 2 when the keyboard 1 is turned on, and is pressed on the keyboard 1 after receiving a keyboard permission signal from the computer 2. The key code corresponding to the key to be transmitted is controlled to be transmitted to the computer 2. In addition to the transmission function, the keyboard-side control unit 12 performs data read / write processing on the keyboard-side storage units 11-1 and 11-2 and controls the notification unit 13. Further, the detection result by the key matrix 14 is input to the keyboard-side control means 12.

  The notification means 13 is for notifying the user of predetermined information, and its operation is controlled by the keyboard side control means 12. The notification unit 13 includes a sound generation unit 16 that generates predetermined information as sound, and a speaker 17 that emits sound. Note that the voice generation means 16 may be realized in the keyboard side control means 12 as one function of the keyboard side control means 12.

  In addition, the notification unit 13 includes a display unit 18 that displays predetermined information. The display means 18 may be realized by a liquid crystal display (LCD) or an organic EL display, and is provided at an appropriate position on the casing of the keyboard 1.

  In the present embodiment, the notification means 13 is the two by the sound generation means 16 and the speaker 17 and the one by the display means 18. However, only one of them may be provided.

  The predetermined information notified to the user by the notification means 13 is that a password should be input to the user, that the connection between the keyboard 1 and the computer 2 is not permitted to the user, and The use of the keyboard 1 may be prohibited. Details thereof will be described later in connection with the operation of the computer 2.

  In the computer system 100 according to this embodiment, the computer 2 is connected to the keyboard 1.

  The computer 2 includes a computer-side storage unit 21, a keyboard authentication unit 22, a signal generation unit 23, a user authentication unit 24, a permission unit 25, a resume unit 26, a network communication unit 27, a log transmission unit 28, a keyboard interface 29, and a network interface. 30. Reference numeral 31 indicates a general application program that runs on the operating system (OS) of the computer 2.

  The keyboard authentication unit 22, the signal generation unit 23, the user authentication unit 24, the permission unit 25, the resume unit 26, the network communication unit 27, and the log transmission unit 28 are realized as a software program format as the authentication program 20. The authentication program 20 is installed in a hard disk device (not shown) in the computer 2 and is loaded into the work memory 33 and executed during its operation. The keyboard interface 29 is for connecting the keyboard 1 to the computer 2, and the network interface 30 is for connecting the computer 2 to the network communication network 30, which are usually provided in a general computer. It may be. Examples of the network communication network 30 include the Internet and an intranet.

  The computer-side storage unit 21 stores a keyboard identifier for the keyboard 1 that is permitted to connect to the computer 2 and a password for a user that is permitted to use the keyboard 1. If a plurality of passwords for users who are permitted to use the keyboard 1 are stored in the computer-side storage means 21, a plurality of users can use the application program 31 in the computer 2 via the keyboard 1. In addition, if a plurality of keyboard identifiers for the keyboard 1 permitted to be connected to the computer 2 are stored in the computer-side storage means 21, the keyboard 1 to be connected to the computer 2 may be selected from among the permitted keyboards. become able to. As described above, by managing the keyboard identifier and the password stored in the computer-side storage unit 21, only a specific user using a specific keyboard can use the application program 31 in the computer 2. Can be.

  The computer-side storage means 21 may be realized by a storage device such as a hard disk device or a solid state drive in the computer 2. As an alternative example, an external storage device external to the computer 2 may be used. The keyboard identifier for which connection is permitted and the password for the user who is permitted to use are written into the computer-side storage means 21 by the authentication program 20, and are read from the computer-side storage means 21 during operation and are stored in the work memory. 33 is used for processing.

  When the keyboard 1 is connected to the computer 2 and the power is turned on, the keyboard control means 12 in the keyboard 1 reads a keyboard identifier unique to the keyboard 1 from the keyboard-side storage means 11-1 and transmits it to the computer 2. The keyboard authentication means 22 determines whether or not the keyboard identifier received from the keyboard 1 via the keyboard interface 29 matches the keyboard identifier stored in the computer-side storage means 21. The keyboard identifier stored in the computer-side storage means 21 is a keyboard identifier for the keyboard 1 that is permitted to be connected to the computer 2.

  If the keyboard authentication unit 22 determines that the keyboard identifiers match, the signal generation unit 23 generates a keyboard permission signal and transmits it to the keyboard 1 via the keyboard interface 29. The keyboard authentication unit 22 does not match the keyboard identifiers. If it is determined, the keyboard non-permission signal is generated and transmitted to the keyboard 1 via the keyboard interface 29. If the user authentication means 24 described later determines that the passwords match, the signal generation means 23 generates a user permission signal and transmits it to the keyboard 1 via the keyboard interface 29. If it is determined that the passwords do not match, a user non-permission signal is generated and transmitted to the keyboard 1 via the keyboard interface 29.

  As described above, when the keyboard authentication unit 22 determines that the keyboard identifiers match, the signal generation unit 23 generates a keyboard permission signal and transmits it to the keyboard 1 via the keyboard interface 29. When the keyboard control signal 12 in the keyboard 1 receives this keyboard permission signal from the computer 2, it controls the notification device 13 to notify the user that the password should be input. The user is prompted to enter a password by this notification. After receiving the keyboard permission signal from the computer 2, the keyboard-side control means 12 in the keyboard 1 transmits a key code corresponding to the key pressed down by the user to the computer 2. The user authentication unit 24 described later determines whether or not the key input corresponding to the received key code matches the password stored in the computer-side storage unit 21.

  The user authentication unit 24 determines whether or not the key input corresponding to the key code received from the keyboard 1 after the keyboard identifier is transmitted by the signal generation unit 23 matches the password stored in the computer-side storage unit 21. As described above, the password stored in the computer-side storage means 21 is a password for a user who is permitted to use the keyboard 1.

  The permission unit 25 permits the use of the key code received from the keyboard 1 after the user authentication unit 24 determines that the passwords match with each other by the processing of the application program 31 in the computer 2. At this time, the signal generation unit 23 generates a user permission signal and transmits it to the keyboard 1. In response to this, the log recording unit 15 in the keyboard side control unit 12 in the keyboard 1 receives the user permission signal. After that, the pressing history of the key that has been pressed is recorded in the keyboard storage unit 11-2.

  On the other hand, if the user authentication unit 24 determines that the passwords do not match, the permission unit 25 prohibits the use of the key code received from the keyboard 1 by the processing of the application program 31 in the computer 2. At this time, the signal generation unit 23 generates a user non-permission signal and transmits it to the keyboard 1. In response to this, the keyboard side control unit 12 in the keyboard 1 does not allow the user to use the keyboard 1. The notifying means 13 is controlled so as to notify that it is permitted.

  Further, even when the keyboard authentication unit 24 determines that the keyboard identifiers do not match, the permission unit 25 prohibits the use of the key code received from the keyboard 1 by the processing of the application program 31 in the computer 2. At this time, the signal generation unit 23 generates a keyboard non-permission signal and transmits it to the keyboard 1. In response to this, the keyboard side control unit 12 in the keyboard 1 sends the keyboard 1, the computer 2, and the like to the user. The notification means 13 is controlled so as to notify that the connection is not permitted.

  With the configuration described above, only a specific user who uses a specific keyboard can use the application program 31 in the computer 2. When the specific user finishes using the application program 31 and leaves the keyboard 1, the user performs a logout operation. The logout may be performed, for example, when a predetermined key operation is performed on the keyboard 1. In this case, when the key matrix 14 detects a key operation instructing logout, the keyboard-side control unit 12 logs out. Is generated and transmitted to the computer 2. As an alternative example of the logout operation, a user may operate a graphical user interface (GUI) displayed on the screen of a display device (not shown) connected to the computer 2 using a mouse. Good. When the permitting unit 25 receives a signal requesting logout, the permission unit 25 prohibits the use of the key code received from the keyboard 1 thereafter by the processing of the application program 31 in the computer 2 in the computer 2.

  When the computer system 100 is not used for a predetermined time, the computer system 100 shifts from the normal mode to the suspend mode. When the resume means 26 receives a resume request signal from the keyboard 1, the resume means 26 returns the computer 2 in the suspend mode (power saving mode) to the normal mode, but may be provided in a normal general computer.

  When the computer 2 and the keyboard 1 are in the suspend mode, the keyboard-side control means 12 in the keyboard 1 notifies the user that a password should be input when the key matrix 14 detects a key operation. The means 13 is controlled and a resume request signal is generated and transmitted to the computer 2. The user is prompted to enter a password by this notification.

  When the resume means 26 in the computer 2 receives the resume request signal, the computer 2 returns the computer 2 from the suspend mode to the normal mode. In the present embodiment, it is assumed that authentication processing by the user authentication means 24 is always executed when the computer 2 returns to the normal mode.

  The user authentication unit 24 determines whether or not the key input corresponding to the key code received from the keyboard 1 matches the password stored in the computer-side storage unit 21 after the resume mode 26 returns to the normal mode.

  The operation after the authentication processing by the user authentication means 24 in the computer 2 that has returned to the normal mode return is the same as that after the authentication processing by the user authentication means 24 already described. That is, when the user authentication unit 24 determines that the passwords match, the permission unit 25 permits the use of the key code received from the keyboard 1 by the processing of the application program 31 in the computer 2 thereafter. At this time, the signal generation unit 23 generates a user permission signal and transmits it to the keyboard 1. In response to this, the log recording unit 15 in the keyboard side control unit 12 in the keyboard 1 receives the user permission signal. After that, the pressing history of the key to be pressed is recorded in the keyboard storage unit 11-2. On the other hand, if the user authentication unit 24 determines that the passwords do not match, the permission unit 25 prohibits the use of the key code received from the keyboard 1 by the processing of the application program 31 in the computer 2. At this time, the signal generation unit 23 generates a user non-permission signal and transmits it to the keyboard 1. In response to this, the keyboard side control unit 12 in the keyboard 1 does not allow the user to use the keyboard 1. The notifying means 13 is controlled so as to notify that it is permitted.

  The computer 2 in this embodiment is connected to the network communication network 32 via the network interface 30.

  When the computer 2 is connected to the network communication network 32, the network communication unit 27 includes communication information transmitted from the computer 2 to the network communication network 32 after the user authentication unit 24 determines that the passwords match. A keyboard identifier for the keyboard 1 permitted to connect to the computer 2 and / or a password for a user permitted to use the keyboard 1 is added. As a result, it is grasped by analyzing the added information from the network communication network 32 side about which keyboard or communication user the communication information transmitted from the computer 2 is from. become able to.

  When the computer 2 is connected to the network communication network 32, the log transmission unit reads the press history recorded in the keyboard side storage unit 11-2 and transmits it to the network communication network 32. As a result, from the network communication network 32 side, it is determined from which keyboard the communication information transmitted from the computer 2 is from which user, and what operation has been performed. It becomes possible to grasp by analyzing the added information. With the above configuration, when any problem occurs, the cause can be searched from the network communication network side 32 based on the recorded pressing history.

  According to the present embodiment, when fraud can be detected as described above, it is possible to further prohibit the use of the fraudulent user or the illegally used keyboard as a defense measure.

  A configuration for prohibiting the use of the keyboard 1 by an unauthorized user is as follows. That is, the computer-side storage unit 21 stores a non-permitted password as a password for a user who is not permitted to use the keyboard. The writing of the unauthorized password is executed via the authentication program 20 operating on the computer 2. For example, the graphical user interface displayed on the screen of a display device (not shown) connected to the computer 2. The rewriting operation may be performed using the mouse via (GUI). Furthermore, the unauthorized password may be written from outside the computer 2 via the network communication network 32. For example, when a system administrator in a company or school can detect a user's fraud from the network communication network side 32 as described above, the system administrator uses the unauthorized user's password as a non-permitted password. The data is written into the computer storage unit 21 via the communication network 32.

  The user authentication means 24 determines whether or not the key input corresponding to the key code received from the keyboard 1 after transmitting the keyboard permission signal matches the non-permitted password stored in the computer-side storage means 21.

  The permission unit 25 prohibits the use of the key code received from the keyboard 1 by the processing of the application program 31 in the computer 2 when the user authentication unit 24 determines that the password does not match.

  The configuration for prohibiting the unauthorized use of the keyboard 1 is as follows. That is, the non-permitted keyboard identifier is stored in the computer-side storage unit 21 as a keyboard identifier for the keyboard 1 that is not permitted to be connected to the computer 2. The writing of the unauthorized keyboard identifier is executed via the authentication program 20 that operates on the computer 2, and the user displays a graphical image displayed on the screen of a display device (not shown) connected to the computer 2. What is necessary is just to enable it to perform rewriting operation using a mouse | mouth via a user interface (GUI). Furthermore, the unauthorized keyboard identifier may be written from outside the computer 2 via the network communication network 32. For example, when a system administrator in a company or school can detect unauthorized use of the keyboard 1 from the network communication network side 32 as described above, the system administrator determines the keyboard identifier of the unauthorized keyboard 1 to be used. The non-permitted keyboard identifier is written into the computer-side storage means 21 via the network communication network 32.

  The keyboard authentication means 22 determines whether or not the keyboard identifier received from the keyboard 1 matches the unauthorized keyboard identifier stored in the computer-side storage means 21.

  The permission means 25 prohibits the use of the key code received from the keyboard 1 by the processing of the application program 31 in the computer 2 when it is determined by the keyboard authentication means 22 that it matches the non-permitted keyboard identifier.

  When the computer system 100 according to the present embodiment is commercially supplied as a product to the market, a portable recording medium such as a keyboard 1 storing a unique keyboard identifier and a DVD or CD in which an authentication program 20 is stored. And will be sold to the market as a set. When the user purchases the computer system 100 according to the present embodiment, first, the keyboard 1 in the computer system 100 is connected to the computer 2. Note that the computer 2 may be a generally available computer that is commercially available, for example, a computer already owned by the user. Then, a portable recording medium storing the authentication program 20 is inserted into the disk drive device of the computer 2 and the authentication program 20 is installed in the computer 2 so that the computer system 100 can be used.

  In this embodiment, the computer 2 is used by being connected to the network communication network 32. However, when the computer 2 is not connected to the network communication network 32, the network communication means 27, the log transmission means are used. 28 and the network interface 30 may be omitted to reduce costs. In the present embodiment, the computer 2 has the resume function. However, when the computer 2 does not have the resume function, the resume means 26 may be omitted to reduce the cost.

  FIG. 2 is a flowchart showing an operation flow until the user is permitted to use the computer system according to the embodiment of the present invention.

  First, when the computer 2 is turned on in step S101, the keyboard 1 connected to the computer 2 is also turned on in step S102. Then, in step S103, the keyboard 1 is subjected to various initialization processes by the computer 2.

  The computer 2 starts execution of the authentication program 20, and transmits a signal for requesting transmission of a keyboard identifier to the keyboard 1 in step S104. Then, in step S105, the keyboard 1 receives a request signal for transmitting a keyboard identifier.

  In step S <b> 106, the keyboard side control means in the keyboard 1 reads the keyboard identifier unique to the keyboard 1 from the keyboard side storage means 11-1 and transmits it to the computer 2. Then, in step S107, the computer 2 receives the keyboard identifier.

  Next, in step S108, the keyboard authentication means 22 in the computer 2 determines whether or not the keyboard identifier received from the keyboard 1 via the keyboard interface 29 matches the keyboard identifier stored in the computer-side storage means 21. judge.

  If the keyboard authentication unit 22 determines that the keyboard identifiers match in step S108, the signal generation unit 23 in the computer 2 generates a keyboard permission signal and transmits it to the keyboard 1 via the keyboard interface 29 in step S109. To do. Then, in step S110, the keyboard 1 receives a keyboard permission signal.

  Next, in step S111, the keyboard-side control means 12 in the keyboard 1 controls the notification means 13 to notify the user that a password should be input. The user is prompted to enter a password by this notification.

  If the keyboard authentication unit 22 determines that the keyboard identifiers do not match in step S108, the permission unit 25 in the computer 2 uses the key code received from the keyboard 1 by the processing of the application program 31 in the computer 2. Ban. At this time, the signal generation means 23 in the computer 2 generates a keyboard non-permission signal and transmits it to the keyboard 1 via the keyboard interface 29. Then, the keyboard side control means 12 in the keyboard 1 controls the notification means 13 to notify the user that the connection between the keyboard 1 and the computer 2 is not permitted.

  When the user inputs a password by operating the keyboard 1 in step S112 according to the password input notification, the keyboard-side control means 12 in the keyboard 1 corresponds to the key pressed by the user in step S113. The key code to be transmitted is transmitted to the computer 2. Then, the computer 2 receives the password in step S114.

  Next, in step S 115, the user authentication unit 24 in the computer 2 determines whether or not the key input (password) corresponding to the key code received from the keyboard 1 matches the password stored in the computer-side storage unit 21. judge.

  If the user authentication means 24 determines that the passwords match in step S115, in step S116, the permission means 25 in the computer 2 subsequently processes the application program 31 in the computer 2 for the key code received from the keyboard 1. Allow use. As a result, the use of the application program 31 in the user's computer 2 is permitted. At this time, in step S117, the signal generation means 23 in the computer 2 generates a user permission signal and transmits it to the keyboard 1.

  If the user authentication means 24 determines that the passwords do not match in step S115, the permission means 25 in the computer 2 uses the key code received from the keyboard 1 thereafter by the processing of the application program 31 in the computer 2. Is prohibited. At this time, the signal generation means 23 in the computer 2 generates a user non-permission signal and transmits it to the keyboard 1. In response to this, the keyboard side control means 12 in the keyboard 1 gives the keyboard 1 The notification means 13 is controlled so as to notify that the use of is not permitted.

  If the use of the application program 31 in the user's computer 2 is permitted in step S116, the user operates the keyboard 1 by key operation (step S118). The key code corresponding to the pressed key is transmitted to the computer 2 in step S119 and used for the application program 31 (step S120). In step S121, the log recording unit 15 in the keyboard side control unit 12 in the keyboard 1 records, in the keyboard side storage unit 11-2, a pressing history for a key pressed after receiving the user permission signal. To do. The recorded press history is transmitted to the computer 2 in response to a request from the authentication program 20 in the computer 2 in step S122. In step S123, the computer 2 receives the press history.

  By the processing described above, only a specific user who uses a specific keyboard can use the application program 31 in the computer 2.

  FIG. 3 is a flowchart showing an operation flow of logout processing in the computer system according to the embodiment of the present invention.

  When the user who is permitted to use the computer 2 ends the use of the application program 31 and leaves the keyboard 1, a logout operation is performed in step S201. The logout may be performed, for example, when a predetermined key operation is performed on the keyboard 1. In this case, when the key matrix 14 detects a key operation instructing logout, in step S202, the logout in the keyboard 1 is performed. The keyboard-side control means 12 generates a signal requesting logout and transmits it to the computer 2. Then, in step S203, the computer 2 receives a signal requesting logout. Next, the computer 2 performs logout processing in step S <b> 204, and when the permission unit 25 receives a signal requesting logout, the key code received from the keyboard 1 thereafter is the application program 31 in the computer 2 in the computer 2. The use by the process is prohibited (S205).

  FIG. 4 is a flowchart showing an operation flow for resuming from the suspend mode in the computer system according to the embodiment of the present invention.

  When the computer system 100 is not used for a predetermined time, the computer system 100 shifts from the normal mode to the suspend mode. In step S301, the computer 2 transmits a signal requesting the keyboard 1 to shift from the normal mode to the suspend mode. Then, the keyboard 2 receives a signal requesting to shift from the normal mode to the suspend mode. Next, in step S303, the keyboard 1 shifts from the normal mode to the suspend mode.

  When the user performs a key operation on the keyboard 1 and inputs a key in step S304, the key matrix 14 in the keyboard 2 detects the key operation. Then, the keyboard side control means 12 in the keyboard 1 generates a resume request signal and transmits it to the computer 2 in step S305. Then, the computer 2 receives a resume request signal in step S306. Note that the same processing is performed not by key operation of the keyboard but also by mouse operation. In step S307, the keyboard-side control unit 12 in the keyboard 1 controls the notification unit 13 to notify the user that a password should be input. The user is prompted to enter a password by this notification.

  In step S308, when the resume means 26 in the computer 2 receives the resume request signal, the computer 2 returns (resumes) the computer 2 from the suspend mode to the normal mode.

  When the user inputs a password by operating the keyboard 1 in step S309 according to the password input notification, the keyboard-side control means 12 in the keyboard 1 corresponds to the key pressed by the user in step S310. The key code to be transmitted is transmitted to the computer 2. Then, the computer 2 receives the password in step S311.

  Thereafter, the processing described with reference to FIG. 2 is executed. That is, in step S115, the user authentication means 24 in the computer 2 determines whether or not the key input (password) corresponding to the key code received from the keyboard 1 matches the password stored in the computer-side storage means 21. judge.

  If the user authentication means 24 determines that the passwords match in step S115, in step S116, the permission means 25 in the computer 2 subsequently processes the application program 31 in the computer 2 for the key code received from the keyboard 1. Allow use. As a result, the use of the application program 31 in the user's computer 2 is permitted. At this time, in step S117, the signal generation means 23 in the computer 2 generates a user permission signal and transmits it to the keyboard 1.

  If the use of the application program 31 in the user's computer 2 is permitted in step S116, the user operates the keyboard 1 by key operation (step S118). The key code corresponding to the pressed key is transmitted to the computer 2 in step S119 and used for the application program 31 (step S120). In step S121, the log recording unit 15 in the keyboard side control unit 12 in the keyboard 1 records, in the keyboard side storage unit 11-2, a pressing history for a key pressed after receiving the user permission signal. To do. The recorded press history is transmitted to the computer 2 in response to a request from the authentication program 20 in the computer 2 in step S122. In step S123, the computer 2 receives the press history.

  Through the processing described above, only a specific user who uses a specific keyboard can use the application program 31 in the computer 2 again.

  The present invention can be used as a security system in a computer usage environment. According to the present invention, an advanced security function can be provided by these two authentications, authentication for a keyboard that can be connected to a computer and authentication for a user who can use the keyboard. That is, according to the present invention, it is possible to construct a high-level security environment in which only a specific user who uses a specific keyboard can use an application program in a computer. According to the present invention, a security system can be easily introduced to a computer already owned by a user.

DESCRIPTION OF SYMBOLS 1 Keyboard 2 Computer 11-1, 11-2 Keyboard side memory | storage means 12 Keyboard side control means 13 Notification means 14 Key matrix 15 Log recording means 16 Audio | voice production | generation means 17 Speaker 18 Display means 20 Authentication program 21 Computer side memory | storage means 22 Keyboard authentication Means 23 Signal generation means 24 User authentication means 25 Authorization means 26 Resume means 27 Network communication means 28 Log transmission means 29 Keyboard interface 30 Network interface 31 Application program 32 Network communication network 33 Working memory 100 Computer system

Claims (20)

A computer system having a computer and a keyboard connected to the computer,
The keyboard is
Keyboard-side storage means in which a keyboard identifier unique to the keyboard is stored;
Keyboard control means for transmitting to the computer the keyboard identifier at power-on, and a key code corresponding to a key to be pressed after receiving a keyboard permission signal from the computer;
With
The computer
Computer-side storage means for storing a keyboard identifier for a keyboard permitted to be connected to the computer and a password for a user permitted to use the keyboard;
Keyboard authentication means for determining whether a keyboard identifier received from the keyboard matches a keyboard identifier stored in the computer-side storage means;
A signal generating means for generating the keyboard permission signal and transmitting it to the keyboard when the keyboard authentication means determines that the keyboard identifiers match;
User authentication means for determining whether a key input corresponding to a key code received from the keyboard after transmission of the keyboard identifier matches a password stored in the computer-side storage means;
When the user authentication means determines that the passwords match, the key code received from the keyboard is allowed to be used by application processing in the computer, and when the user authentication means determines that the passwords do not match, Permission means for prohibiting use of the key code received from the keyboard by application processing in the computer;
A computer system comprising:   The computer system according to claim 1, wherein when the keyboard authentication unit determines that the keyboard identifiers do not match, the permission unit prohibits the use of the key code received from the keyboard by application processing in the computer. The signal generating means generates a user permission signal and sends it to the keyboard when the user authentication means determines that the passwords match,
3. The computer system according to claim 2, wherein the keyboard-side control unit includes a log recording unit that records, in the keyboard-side storage unit, a pressing history of a key that is pressed after receiving the user permission signal.   The computer system according to claim 3, wherein the keyboard further comprises notification means for notifying a user of predetermined information.   5. The computer according to claim 4, wherein the keyboard-side control unit controls the notification unit to notify the user that a password should be input as the predetermined information when the keyboard permission signal is received from the computer. system. The signal generation means, if it is determined by the keyboard authentication means that the keyboard identifier does not match, generates a keyboard non-permission signal and sends it to the keyboard,
The said keyboard side control means controls the said alerting | reporting means to alert | report that the connection of the said keyboard and the said computer is not permitted with respect to a user, when the said keyboard disapproval signal is received from the said computer. The computer system described. The signal generating means generates a user non-permission signal and sends it to the keyboard when the user authentication means determines that the passwords do not match,
The said keyboard side control means controls the said alerting | reporting means to alert | report that the use of the said keyboard is not permitted with respect to a user as said predetermined information, when the said user disapproval signal is received. The computer system described. The computer system according to any one of claims 1 to 7, wherein when the resume request signal is received, the computer further includes resume means for returning the computer in the suspend mode to the normal mode.
The keyboard-side control means is configured to notify the user that a password should be input as the predetermined information when the keyboard is operated by a key when the computer and the keyboard are in a suspend mode. Controlling the means and sending a resume request signal to the computer;
The resume means, when receiving the resume request signal, returns the computer from the suspend mode to the normal mode,
The user authentication means determines whether or not a key input corresponding to a key code received after returning to the normal mode by the resume means matches a password stored in the computer-side storage means;
The permission unit is a computer system that permits the use of the key code received from the keyboard after the password is determined to match by the user authentication unit by application processing in the computer. The notification means includes
Voice generating means for generating the predetermined information as voice;
A speaker that emits the sound;
The computer system according to claim 4, comprising:   The computer system according to any one of claims 4 to 8, wherein the notification means includes display means for displaying the predetermined information.   The permission means prohibits the use of the key code received from the keyboard by application processing in the computer when receiving a signal requesting logout after the user authentication means determines that the passwords match. 3. The computer system according to 2.   The computer system according to claim 11, wherein the keyboard-side control unit generates a signal requesting the logout when a predetermined key operation is performed on the keyboard, and transmits the signal to the computer.   When the computer is connected to a network communication network, the computer transmits communication information transmitted from the computer to the network communication network after the user authentication means determines that the passwords match. The computer system according to claim 2, further comprising network communication means for adding a keyboard identifier for a keyboard that is permitted to connect and / or a password for a user that is permitted to use the keyboard.   The computer further comprises log transmission means for reading the press history recorded in the keyboard-side storage means and transmitting it to the network communication network when the computer is connected to a network communication network. The computer system described. The computer-side storage means stores an unauthorized password as a password for a user who is not permitted to use the keyboard,
The user authentication means determines whether or not a key input corresponding to a key code received from the keyboard after transmission of the keyboard permission signal matches the non-permission password;
The computer system according to claim 2, wherein the permission unit prohibits the use of the key code received from the keyboard by application processing when the user authentication unit determines that the password does not match.   The computer system according to claim 15, wherein the non-permission password is stored in the computer-side storage unit via a network communication network. The computer-side storage means stores a non-permitted keyboard identifier as a keyboard identifier for a keyboard that is not permitted to connect to the computer.
The keyboard authentication means determines whether a keyboard identifier received from the keyboard matches the non-permitted keyboard identifier;
3. The computer system according to claim 2, wherein when the keyboard authentication unit determines that the permission unit matches the non-permitted keyboard identifier, the permission unit prohibits use of the key code received from the keyboard by application processing in the computer. .   The computer system according to claim 17, wherein the non-permitted keyboard identifier is stored in the computer-side storage unit via a network communication network.   The computer system according to any one of claims 1 to 18, wherein the computer-side storage unit stores a plurality of keyboard identifiers for a keyboard that is permitted to be connected to the computer.   The computer system according to any one of claims 1 to 18, wherein the computer-side storage unit stores a plurality of passwords for users who are permitted to use the keyboard.

Images