JP4859589B2 - Secure display device - Google Patents

Description

  The present invention relates to a security-protected display device that is used to display an image on a display surface based on a PC signal that is an image signal sent from a computer main body.

  Conventionally, various security protection functions have been proposed in order to prevent information leakage in a computer system and maintain safety. For example, a computer that authenticates a user by inputting a user ID and password from a keyboard when the computer is started up or returned from a screen saver is generally used. In recent years, some authentication is performed using a fingerprint or a vein pattern instead of keyboard input.

  However, these conventional security protection functions are under the control of the OS of the computer, and cannot be realized unless the OS supports them. Also, in OS-controlled security protection, there is a method of avoiding authentication by not starting up the OS, and it is difficult to say that security protection is perfect only by this.

In order to cope with such a problem, it is proposed to prepare a board-tagged electronic key and shift to the security mode depending on whether or not the electronic key is attached to the attachment / detachment port (Patent Document). 1).
JP 2001-34355 A

  However, since the method proposed in Patent Document 1 uses an electronic key as hardware, if the management is sufficient, the security protection is further enhanced, but there is a disadvantage that the management of the electronic key is troublesome.

  As described above, since there is a drawback in security protection under the OS, it is necessary to ensure security protection by using a plurality of methods in combination.

  The present invention has been made in view of the above-described problems, and provides a display device with further enhanced security protection without depending on the OS of a computer and without using an electronic key or the like as hardware. Objective.

  An apparatus according to the present invention is a display device used to display an image on a display surface based on a PC signal that is an image signal sent from a computer main body, and adjusts an image displayed on the display surface. An operation unit for performing, a storage unit for storing a combination of one or more user IDs and passwords as registration keys, and an image based on the PC signal on the display surface on condition that a predetermined event has occurred A PC ID concealment unit that disallows display, and a user ID and password are input to the user by operating the operation unit in a state in which display of an image based on the PC signal is disallowed by the PC signal concealment unit An input screen generating means for displaying on the display surface an input screen for causing the user ID and password input on the input screen to A return processing unit for canceling the display permission of the image based on the PC signal by the PC signal concealing unit when there is a match with the user ID and password stored as the registration key in the storage unit; Have

  Preferably, an input signal detection unit for detecting an input signal from an input operation device for inputting data to the computer main body is provided, and the predetermined signal is detected when there is no input signal for a preset time. If the above event occurs, the PC signal concealing unit disallows display of an image based on the PC signal.

  Further, a sensor for detecting the presence / absence of the user in front of the display surface is provided, and the PC signal concealing unit determines that the predetermined event has occurred when the sensor detects the absence of the user. Disallow image display based on signals.

  A second storage unit storing an initial password; initial input screen generation means for displaying an initial input screen for allowing a user to input an initial password on the display surface; and an initial input on the initial input screen. A registration screen generating means for displaying on the display surface a registration screen for inputting a user ID and password as a registration key when the password matches the initial password stored in the second storage unit; and input on the registration screen And a registration processing unit that stores the user ID and password thus registered as a registration key in the storage unit.

  The storage device built in the display device stores a computer program for realizing the functions of the initial input screen generation means, the registration screen generation means, and the registration processing unit. Is configured to be executed at the time of initial setting of the display device.

  According to the present invention, it is possible to further enhance the security protection of the display device without depending on the OS of the computer and without using an electronic key as hardware.

  1 is a diagram showing an appearance of a display device 3 according to an embodiment of the present invention, FIG. 2 is a block diagram showing an electric circuit of the display device 3, FIG. 3 is a block diagram functionally showing the display device 3, and FIG. FIG. 5 is a diagram showing an example of the initial password table SH stored in the memory, FIG. 5 is a diagram showing an example of the password table PH stored in the memory, FIG. 6 is a diagram showing an example of a password registration screen, and FIG. It is a figure which shows the example of.

  A display device 3 shown in FIG. 1 is a self-supporting type in which a display device body 11 is supported by a stand 12. A display device 15 made of LCD, CRT, PDP, or the like is attached to the display device main body 11, and a display surface HG thereof is disposed. Below the display surface HG, an operation button group 16 and a sensor 17 are provided. An electric circuit for processing, generating and controlling the image signal is mounted inside the display device body 11.

  The operation button group 16 includes a power button 161, a menu button 162, a cursor left move button 163, a cursor right move button 164, a decision input button 165, and the like. The sensor 17 detects the presence or absence of the user in front of the display surface of the display device 3, and an ultrasonic sensor, an infrared sensor, or the like is used.

  As shown in FIG. 2, the display device 3 is connected to the computer 2 when used, and basically displays a screen based on the PC signal S <b> 1 from the computer 2. Although only the computer 2 and the display device 3 are shown in the figure, these allow connection to other peripheral devices such as a keyboard, a mouse, a printer, a scanner, an external storage device, a communication line such as a LAN or the Internet. The computer system 1 having an interface for the above is configured.

  The electric circuit of the display device 3 includes a CPU 21, a memory 22, an OSD 23, a switching unit 24, an interface unit 25, connectors 27 and 28, and the like.

  The CPU 21 executes a program stored in a ROM or the like and performs processing necessary for realizing the function of the display device 3. In particular, in the present embodiment, in order to protect the security of the computer system 1, a process for concealing the PC signal S1 of the computer 2 from users other than those who have passed a predetermined procedure is performed. In addition, the CPU 21 controls the entire display device 3.

  The memory 22 stores a program, data, password table PH, initial password table SH, and the like for realizing the functions of the display device 3. The memory 22 can be configured using a semiconductor memory such as a ROM and a RAM, a memory chip, a magnetic disk, and other various storage devices.

  The OSD 23 is a block for realizing an OSD (On Screen Display) function in the display device 3. The OSD 23 generates a screen necessary for functions unique to the display device 3 such as setting of the display device 3 and processing for security protection separately from the screen based on the PC signal S1 from the computer 2, and displays the display device 15 on the display device 15. Display on the surface.

  The switching unit 24 switches between the PC signal S1 from the computer 2 and the signal S2 generated by the OSD 23 under the control of the CPU 21 and outputs it to the display device 15. That is, normally, the PC signal S1 is selected and the image sent from the computer 2 is displayed on the display device 15. However, under a predetermined condition, the switching unit 24 is switched by a command from the CPU 21 and the signal S2 is switched. Is selected, and the screen generated by the OSD 23 is displayed. The switching unit 24 can be realized by a multiplexer, for example.

  The interface unit 25 is an interface for inputting signals from the operation button group 16 and the sensor 17 to the CPU 21.

  The connector 27 is an interface for inputting the PC signal S1 from the computer 2 or outputting a signal to the computer 2 as necessary. The connector 28 is an interface for inputting data to the CPU 21. For example, a serial interface or a parallel interface is used.

  In FIG. 3, the display device 3 is provided with a concealment determination unit 31, a return processing unit 32, a registration processing unit 33, a key signal detection unit 34, and the like, particularly when the CPU 21 executes a predetermined program.

  The concealment determining unit 31 determines whether or not a predetermined event has occurred, and disallows display of an image based on the PC signal S1 when the predetermined event has occurred. This is the security mode.

  The predetermined event includes turning on the display device 3, switching to the power saving mode or the sleep mode, leaving the user, and not operating the computer 2 for a predetermined time. When these events occur, the security mode is entered.

  The return processing unit 32 compares the user ID and password input on the login screen HG3 with the user ID and password stored in the password table PH, and if there is a match, the return processing unit 32 generates a PC signal S1 from the concealment determining unit 31. A process of canceling the disapproval of the display of the image based on is performed. That is, in the security mode state, the user authentication is executed when the release condition is satisfied, and when the user authentication is performed, the security mode is canceled and the normal mode is set.

  Note that the release condition includes the end of the start-up process when the power is turned on, the return from the power saving mode or the sleep mode, the seating of the user, the resumption of the operation of the computer 2, and the like.

  The registration processing unit 33 stores the user ID and password input on the registration screen HG2 as the registration key TK in the password table PH.

  The key signal detection unit 34 detects an input signal from an input operation device for inputting data to the computer 2, for example, a keyboard or a mouse.

  The OSD 23 includes an initial input screen generation unit 41, a registration screen generation unit 42, a login screen generation unit 43, and other screen generation units.

  The initial input screen generation unit 41 generates an initial input screen HG1 for allowing the user to input an initial password (temporary password). The initial input screen HG1 is displayed when the user who has purchased the display device 3 first turns on the power. On the initial input screen HG1, the user inputs the initial password notified to the purchaser (user) of the display device 3 by a warranty card, an instruction manual, or the like. This input is performed by the user operating the operation button group 16.

  The registration screen generation unit 42 displays the registration screen HG2 on the display surface HG when the initial password input on the initial input screen HG1 matches the initial password recorded in the initial password table SH shown in FIG. The user inputs and registers a registration key TK for security protection on the registration screen HG2.

  In FIG. 6, a registration screen HG2 is a screen for inputting a registration key TK composed of a combination of a user ID and a password. A plurality of users can register for each user. The user inputs predetermined symbols and characters in the user ID and password fields, and clicks the registration completion button BT1. As a result, the newly entered registration key TK is registered in the password table PH shown in FIG.

  The login screen generation unit 43 displays the login screen HG3 on the display surface HG at an appropriate timing in a state where the display of the image based on the PC signal S1 is not permitted by the concealment determination unit 31, that is, in the security mode. The login screen HG3 corresponds to the “input screen” in the present invention.

  In the login screen HG3 shown in FIG. 7, the user operates the operation button group 16 and inputs a user ID and a password. When operating the operation button group 16, for example, the cursor left move button 163 and the cursor right move button 164 are pressed from the alphabet group displayed at the bottom of the login screen HG3 to move the cursor to the target alphabet. Then, the decision input button 165 is pressed. As a result, the alphabet is selected and displayed in the input field. When the selection of the alphabet is completed, the selected alphabet is input as the user ID and password by operating a specific button in the operation button group 16. In addition, as operation of the specific button at this time, for example, the determination input button 165 is continuously pressed twice, or the menu button 162 and the determination input button 165 are simultaneously pressed. The input user ID and password are collated with the password table PH in the concealment determination unit 31.

  The menu is displayed by pressing the menu button 162, and the initial input screen HG1, the registration screen HG2, or the login screen HG3 described above can be selected and displayed.

  Next, the operation of the display device 3 configured as described above will be described.

  When the power is turned on by pressing the power button 161 in the initial state of the display device 3, the switching unit 24 selects the signal S2, and the initial input screen HG1 is displayed in a series of screens for initial setting. . The user operates the operation button group 16 and inputs an initial password on the initial input screen HG1. When the input initial passwords match, a registration screen HG2 is displayed, so that the user inputs and registers his or her own user ID and password.

  When the power is turned on, the security mode is set, and the PC signal S1 from the computer 2 is not displayed as it is. After the initial setting is completed, the login screen HG3 is displayed.

  The user inputs his / her user ID and password on the login screen HG3. When the input user ID and password match the registration key TK registered in the password table PH in advance, the return processing unit 32 switches the switching unit 24 so as to select the PC signal S1. As a result, the normal mode is set, an image based on the PC signal S1 from the computer 2 is displayed, and the user can start normal use of the computer system 1. In this state, the processing operation is performed under the management of the computer 2.

  For example, when the user stands up and leaves the seat while using the computer 2, the sensor 17 detects it. The concealment determining unit 31 detects that the user is absent from the signal S3 from the sensor 17, and switches the switching unit 24 so as to select the signal S2. As a result, the security mode is set, and the image based on the PC signal S1 from the computer 2 is hidden and is not displayed on the display surface HG.

  Thereafter, when the user returns to the seat, the sensor 17 detects it. The return processing unit 32 detects the presence of the user based on the signal S3 from the sensor 17, and instructs the OSD 23 to display the login screen HG3. As a result, the login screen HG3 is displayed on the display surface HG.

  The user inputs his / her user ID and password on the login screen HG3. When the input user ID and password match the registration key TK registered in the password table PH in advance, the normal mode is restored and the user can continue to use the computer system 1 as before.

  In addition, when the PC signal S1 from the computer 2 disappears or no longer changes, the display device 3 enters the power saving mode or the sleep mode. Even when the power saving mode or the sleep mode is set, the security mode is set at the same time, and an image based on the PC signal S1 is not displayed. When returning from the power saving mode, the return processing unit 32 displays the login screen HG3 as described above, and returns to the normal mode when the user ID and the password match.

  Furthermore, in the normal mode, when the operation of the computer 2, that is, the input signal from the input operation device is interrupted for a predetermined time T1, the key signal detector 34 detects it. The concealment determining unit 31 sets the security mode based on the signal S4 from the key signal detecting unit 34. When the operation of the computer 2 is started again, the return processing unit 32 displays the login screen HG3 as described above, and returns to the normal mode when the user ID and the password match.

  Note that, in the security mode, the display surface HG is completely dark, or “erasing”, “hidden”, “security protected”, “security mode”, and the like are displayed.

  As described above, according to the display device 3, only a specific user who has registered the registration key TK in the password table PH can view the screen based on the PC signal S1 from the computer 2, and an unspecified third party can use the computer. 2 cannot be handled, so that the security protection of the computer system 1 is enhanced. In particular, since these processes are performed inside the display device 3, security protection is further ensured without depending on the OS of the computer 2. In addition, it is not necessary to use an electronic key as hardware as in the prior art, and it is possible to carry out by software using the OSD 23, so it is not necessary to manage hardware such as an electronic key. Convenient.

  Next, the processing operation for security protection in the display device 3 will be described with reference to a flowchart.

  FIG. 8 is a flowchart showing a processing operation for security protection in the display device 3.

  In FIG. 8, when the display device 3 is started up initially (# 11), the initial input screen HG1, the registration screen HG2, etc. are displayed and the registration key TK is set (# 12). When a predetermined event occurs (Yes in # 13), the security mode is set (# 14). If there is a cancellation condition (Yes in # 15), the login screen HG3 is displayed (# 16), the user ID and password entered by the user are checked (# 17), and this is registered in the password table PH. It is determined whether or not it matches the registration key TK (# 18). If they match, the security mode is canceled and the normal mode is set (# 19). If they do not match, the security mode is not canceled.

  In the embodiment described above, the registration key TK is registered in the password table PH by displaying the registration screen HG2 and allowing the user to input it. Instead of this, or in addition to this, registration in the password table PH may be performed by inputting the data of the registration key TK from the external device via the connector 28.

  As for the functions of the initial input screen generation unit 41, the registration screen generation unit 42, and the registration processing unit 33 in the OSD 23 described above, a computer program for realizing the functions is stored in the memory 22 in advance. The computer program is realized by the CPU 21 executing the initial setting of the display device 3. Such a computer program can be stored in a compressed state.

  However, such a computer program may be installed in the computer 2 and executed in the computer 2, or the computer program may be transferred from the computer 2 to the display device 3 in the display device 3 during initial setting. May be executed.

  In the embodiment described above, the format, contents, the number of items that can be registered, and the like of the password table PH and the initial password table SH can be variously changed. The registration screen HG2 and the login screen HG3 can have various configurations other than those described above. Various methods other than those described above can also be adopted as the operation method when executing on these screens. The contents of the predetermined event, the contents of the release condition, and the like can be variously changed.

  In addition, the configuration, content, number, processing content or order of the whole or each part of the display device 3 can be appropriately changed in accordance with the spirit of the present invention.

It is a figure which shows the external appearance of the display apparatus of embodiment which concerns on this invention. It is a block diagram which shows the electric circuit of a display apparatus. It is a block diagram which shows a display apparatus functionally. It is a figure which shows the example of the initial password table stored in memory. It is a figure which shows the example of the password table stored in memory. It is a figure which shows the example of the registration screen of a password. It is a figure which shows the example of a login screen. It is a flowchart which shows the processing operation for security protection.

Explanation of symbols

1 Computer system 2 Computer (computer itself)
3 Display device 16 Operation button group (operation unit)
17 Sensor 21 CPU
22 Memory (storage unit, second storage unit, storage device)
23 OSD
24 Switching unit (PC signal concealment unit)
31 Concealment judgment unit (PC signal concealment unit)
32 Return processing part (Return processing part)
33 Registration Processing Unit 34 Key Signal Detection Unit (Input Signal Detection Unit)
41 Initial input screen generator (initial input screen generator)
42 Registration screen generator (Registration screen generator)
43 Login screen generator (input screen generator)
HG1 Initial input screen HG2 Registration screen HG3 Login screen (input screen)
TK registration key S1 PC signal S2 signal

Claims (5)

A display device used to display an image on a display surface based on a PC signal which is an image signal sent from a computer main body,
An operation unit for adjusting an image displayed on the display surface;
A storage unit that stores a set of one or more user IDs and passwords as a registration key;
A PC signal concealing unit that disallows display of an image based on the PC signal on the display surface on condition that a predetermined event has occurred;
In the state where display of an image based on the PC signal is not permitted by the PC signal concealing unit, an input screen for allowing a user to input a user ID and a password by operating the operation unit is displayed on the display surface. , Input screen generation means,
An image based on the PC signal by the PC signal concealing unit when there is a user ID and password entered on the input screen that match the user ID and password stored as the registration key in the storage unit A return processing unit that cancels the disapproval of display,
A secure display device characterized by comprising: An input signal detection unit for detecting an input signal from an input operation device for inputting data to the computer body is provided,
The PC signal concealment unit disallows display of an image based on the PC signal as the predetermined event has occurred when the input signal has not existed for a preset time,
The secure display device of claim 1. A sensor for detecting the presence or absence of the user in front of the display surface is provided,
When the sensor detects the absence of the user, the PC signal concealing unit disallows display of an image based on the PC signal as the predetermined event has occurred.
The secure display device of claim 1. A second storage unit storing an initial password;
An initial input screen generating means for displaying an initial input screen for allowing the user to input an initial password on the display surface;
A registration screen for displaying on the display surface a registration screen for inputting a user ID and a password as a registration key when the initial password input on the initial input screen matches the initial password stored in the second storage unit Generating means;
A registration processing unit for storing the user ID and password input on the registration screen as a registration key in the storage unit;
The display device with security protection according to claim 1, comprising: The storage device built in the display device stores a computer program for realizing the functions of the initial input screen generation unit, the registration screen generation unit, and the registration processing unit,
The computer program is configured to be executed at the time of initial setting of the display device.
The secure display device according to claim 4.