JPH06332859A - User authentication method - Google Patents

Abstract

PURPOSE:To continuously prevent information from being stolen by adding a function for detecting that a host or a server is accessed by any unauthorized illicit user. CONSTITUTION:The host or the server generates an authentication code to be inputted when a connecting user succeedingly accesses a system (S100), sends the generated authentication code to a terminal equipment (S101) and holds the authentication code (S102). Then, the held authentication code is transmitted to the host or the server (S106), the host or the server received with a connection request compares the authentication code received from the user with the authentication code held at the host or the server (S107) and when the authentication code received from the user is different from the held authentication code, it is judged that system invasion caused by the third person is generated (S108). When the authentication code received from the user is matched with the held authentication code, it is judged that the system invasion caused by the third person is not generated (S109).

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a user authentication method, and more particularly to a host system, a server, a communication line, and a LAN.
The present invention relates to a user authentication method capable of detecting an unauthorized access to information by a third party in an information processing system in which a plurality of terminal devices are connected using the above.

[0002]

2. Description of the Related Art Conventionally, as a first method for user authentication in an information processing system for connecting a terminal device to a host and a server using a communication line, a LAN, etc., when available terminal devices are limited. Is the self-identification information (self ID) of the hardware installed in the terminal device.
Is sent to the host or server, and if it is recognized that the terminal device is allowed to access, the user actually inputs specific identification information (password) and confirms the validity of the password at the center or server. , Host or
There is a user authentication method that permits the use of servers and the like.

As a second conventional method of user authentication, as a recent tendency, free access without limiting available terminals, that is, an arbitrary workstation (W
S), a host from a personal computer (PC),
Alternatively, an information processing system that allows access to a server is common. In this system, the user usually inputs his own ID manually.

If the password or the like is not noticed to be destroyed, the theft of information will continue until the real user changes the password.

In such a case, from the viewpoint of ensuring security, the system designer generally obliges the password to be forcibly changed on a monthly basis, for example, in order to prevent the information from being stolen. Is. As a result, information is prevented from being stolen indefinitely.

Further, as a third conventional method of user authentication, in a recent information processing system, as a method of authenticating a user, a special encryption device is distributed to each user, and the user is a host or a server. The host or server sends a special code to the terminal device when sending its own ID for connection to. There is a system in which a terminal device inputs a transmitted code into an encryption device and transmits the result as a password to a center or a server to authenticate a user.

Further, in another information processing system, an input device such as an IC card is installed in place of the encryption device, and the IC card distributed to each user is used so that the user's own I
By inserting the IC card into the IC card input device, the D input and the password input are performed for the user authentication.

[0008] In such a user authentication method that also uses some kind of hardware device, it is possible to explicitly recognize the theft of the hardware (if a simple password, it cannot be explicitly determined that the device has been stolen. However, it is possible to avoid continuity of information theft by utilizing the point that the theft of hardware is always found when the next access request is made).

Further, by storing the password in the IC card, it is possible to eliminate the need for user management of the password, prevent the password from being stolen, and strengthen the security.

As described above, in the conventional information processing system,
As the authorized user authentication method, the user's ID information and the accompanying password are used.

[0011]

However, in the above-mentioned conventional user authentication method, in the method of using the self ID and the password, if the self ID and the password are stolen or leaked to someone, the stolen ID, There is a risk that a third party using the password may intrude into the host or server improperly to obtain or destroy information (destruction of security). Further, if the password or the like is not noticed and the security is destroyed, the information is stolen until the true user changes the password.

The above user authentication method using a password cannot be achieved unless the user respects the rules defined by the system and voluntarily and regularly changes the password in order to prevent theft of information.

Further, the method of authenticating a user using an encryption device or an IC card has drawbacks such as additional investment in hardware and limitation of usable personal computers and workstations.

As described above, in the user authentication, there is a possibility that the password used for authenticating the user is leaked or the information in the host or the server is improperly accessed by the third party due to the theft of the encryption device. There is. Therefore, it is important to promptly detect an unauthorized access to a host or a server by a third party, prevent continuous theft and destruction of information, and reduce damage.

The present invention has been made in view of the above points,
To solve the above conventional problems, a function to detect that a host or server is accessed by an unauthorized user without adding special hardware to the terminal device side is added, It is an object of the present invention to provide a user authentication method capable of preventing information theft.

[0016]

FIG. 1 is a diagram for explaining the principle of the present invention.

The present invention is a user authentication method for recognizing a user based on data received from a terminal device of an information processing system including a host or server and a plurality of terminal devices. In the user authentication method, the host or server is connected. An authentication code to be input when the user next accesses the system is generated (step 100), and the generated authentication code is sent to the terminal device (step 101).
The user holding the authentication code (step 102) and receiving the authentication code holds the received authentication code (step 103), disconnects the connection with the host or the server (step 104), and then the user sends the host or the host. A connection request is made to the server (step 105), and the held authentication code is transmitted to the host or server (step 1).
06), the host or server receiving the connection request compares the authentication code received from the user with the authentication code held in the host or server (step 107), and the authentication code received from the user holds it. If it is different from the authentication code, it is determined that a system intrusion by a third party has occurred (step 108), and if the authentication code received from the user matches the held authentication code, it is determined by a third party. It is determined that no system intrusion has occurred (step 109).

[0018]

According to the present invention, in an information system composed of a host or server and a plurality of terminal devices, each user should put in the next connection request in the host or server corresponding to the user who uses the terminal device. An authentication code is generated, the authentication code is sent to the terminal device used by the user, and is also secured in the host or server, and the authentication code entered by the user at the next access from the user and the secured authentication. By judging whether the codes match, it is judged whether the access is from a true user or the system has been intruded by a third party. As a result, if it is determined that a third party has invaded the system, the access is denied, and if it is an access from a true user and no intrusion to the system has occurred, the next access is made. Generates an authentication code to be used at the time of request, sends it to the user, and permits the user to access the system.

Therefore, unless the same user continuously accesses the host or the server, the authentication code mismatch occurs, and the host or the server voluntarily detects the access to the unnecessary system. Continuous theft and destruction of information by a third party can be prevented.

[0020]

Embodiments of the present invention will be described below with reference to the drawings.

FIG. 2 shows an example of the configuration of an information system according to an embodiment of the present invention. In the present embodiment, the functions of the host and the server are the same, so the following description will be made assuming that the host and the terminal device are connected.

In the figure, a plurality of terminal devices 101 to 1
0n is connected to the server 11 and the gateway 112 via the LAN 110. The gateway 112 is connected to the host 113 via a line system. Terminal device 101-
10n is the connection of the server 111 via the LAN 110,
Alternatively, it indicates that the host 113 can be connected via the gateway 112.

FIG. 3 shows the configuration of the user authentication function of the host according to an embodiment of the present invention.

The host has a user information holding table 20.
1, a user ID holding unit 202, a user authentication code holding unit 207, an authentication processing unit 208, and a status reporting unit 212.

The user information holding table 201 comprises a password holding unit 203, an authentication code holding unit 204, an expiration date holding unit 205, and an abnormal status holding unit 206.

The password holding unit 203 of the user identification information holding table 201 stores the user password,
The authentication code storage unit 204 stores the authentication code transmitted to the user at the time of the previous access, and the expiration date storage unit 205.
Holds information for determining whether or not to permit this access according to the elapsed time from the previous access, and the abnormal status holding unit 206 causes the access from the previous user for some reason. Holds the reason for rejecting the request.

User authentication processing in the host 113 is as follows.
This user identification information holding table 201 is mainly implemented. As the user identification information holding table 201, a table of specific user information can be selected by the user ID holding unit 202 holding the user ID input by the user from the terminal device.

For example, if the user has a user ID from the terminal device
When “AAA” is input, the user ID holding unit 202
Holds “AAA”, and the password holding unit 2 of the user identification information holding table 201 corresponding to the “AAA”.
Search for 03.

Further, the authentication processing section 208 for performing the user authentication processing is composed of a new authentication code generating section 209, an expiration date setting section 210 and an abnormal status generating section 211.

The new authentication code generation unit 209 uses the authentication process 2
When a correct user is recognized by executing the user authentication of 08, a new authentication code for the next access is generated and sent to the authentication code holding unit 204 of the user identification information holding table 201 and the status reporting unit 212.
Forward it to.

The expiration date setting unit 210 sets an expiration date until the next access, and transfers it to the expiration date holding unit 205 of the user identification information holding table 201.

The abnormal status generation unit 211 generates an abnormal code when an abnormality is detected by executing the user authentication of the authentication processing unit 208, sends it to the abnormal status holding unit 206 of the user identification information table 201, and the status reporting unit. Also forward to 212.

The status reporting unit 212 is the authentication processing unit 2
When the user has been authenticated as a correct user, the authentication error code from the abnormal status generation unit 211 of 08 or the authentication code generated by the new authentication code generation unit 209 is output to the user terminal.

The specific operation of the user authentication of the host having the above-mentioned structure will be described below by dividing it into the user authentication of the first step and the second step.

The first step shown below is a step of judging whether or not the user is a true user by comparing the contents held on the host side with the user ID and password from the user, and in this step, The second-stage processing can be performed only when the user is determined to be the user.

The second step is a step of checking whether the authentication code holding section held in the first step matches the user authentication code input by the user again or whether the expiration date has passed.

(1) First Stage User Authentication FIG. 4 is a sequence chart for explaining the first stage user authentication of an embodiment of the present invention.

Step 1) A user who uses the terminal device 101 initiates a LA to initiate a connection request to the host 113.
A communication path is established via N113 and the gateway 112.

Step 2) The host 113, which has detected the path establishment request, requests the terminal device 101 to input the user ID and password.

Step 3) The user ID input by the user is held in the user ID holding unit 202.

Step 4) The designated user identification information holding table 201 is searched from the user ID holding unit 202, and the entered password is compared with the password held in the password holding unit 203.

Step 5) If the user ID and password do not match, retry is performed a prescribed number of times. If the user ID and the password match within the prescribed number of times and the user can confirm them correctly, the authentication code holding unit 204 of the user identification information holding table 201 sends the user authentication code to the terminal device, and the terminal device receives the received user authentication code. Hold. The process proceeds to the second stage user authentication process.

Step 6) In step 4, if the user ID and password cannot be confirmed and the user can be identified, a code indicating the password mismatch is recorded in the abnormal status holding unit 206, and the communication path with the terminal 101 is passed. To disconnect the process.

Step 7) If the user cannot be specified, the communication path with the terminal 101 is simply cut off and the process is terminated.

(2) Second Stage User Authentication FIG. 5 is a sequence chart for explaining the second stage user authentication of an embodiment of the present invention.

Step 10) The host requests the terminal device 101 to input the user authentication code, and holds the input user authentication code in the user authentication code holding unit 207.

Step 11) The authentication processing unit 208 performs the following authentication processing based on the information in the user identification information holding table 201.

If there is a history of abnormalities (abnormal status) in the abnormal status holding unit 206, a level 2 abnormal status is generated.

The contents of the authentication code holding unit 207 holding the contents entered by the user and the contents of the authentication code holding unit 204 of the user identification information holding table 201 match, but the contents of the expiration date holding unit 205 If the expiration date has passed, a level 1 abnormal status is generated.

If the contents of the user authentication code holding unit 207 and the authentication code holding unit 204 do not match even after retrying the specified number of times, a level 2 abnormal status is generated.

The user authentication code holding unit 207 and the authentication code holding unit 204 of the user identification information holding table 201.
Contents match, it is within the expiration date, and abnormal status 2
If 06 does not exist, the recognition processing result is normal.

Step 12) The following processing is performed according to the authentication processing result of the authentication processing unit 208.

When normal termination is reported (when the contents of the authentication code holding unit 204 of the user identification information holding table 201 and the user authentication code holding unit 207 (input user authentication code) match and the validity period is not reached) ) Has
New authentication code generation unit 209 and expiration date setting unit 210
Generates a new authentication code and a new expiration date.

In this embodiment, the new authentication code generation unit 209
Is 1/10 the time when the recognition processing unit 208 determines that it is normal.
The authentication code holding unit 20 of the user identification information holding table 201 is taken out in units of 0 seconds to generate a new authentication code
Update the contents of 4. Furthermore, the new authentication code generator 20
9 notifies the status report unit 212 of the generated new authentication code.

The expiration date setting unit 210 sets the expiration date to 30 days from the current day, calculates the date after 30 days, and updates the contents of the expiration date holding unit 205.

When the abnormal status of level 1 is reported, the abnormal status generation unit 211 sets the error code of level 1 in the contents of the abnormal status holding unit 206 and the expiration date has passed to the status reporting unit 212. To notify.

When a level 2 abnormal status is reported, the host judges that an unnecessary intrusion from a third party has occurred in the information processing system, and the abnormal status generation unit 211 prohibits the use of the user. The code shown is generated and set in the abnormal status holding unit 206 of the user identification information holding table 201, and the host 113 reports the system intrusion to the system administrator. In addition, the status reporting unit 212 reports information indicating that the user has been blocked from the system by unauthorized use. (Step 13) The status reporting unit 212 sends a message to the terminal device 101 according to the information in step 12.

It should be noted that the report that the expiration date has passed (level 1
The user who has received the abnormal status (1) requests the system administrator of the host 113 to update the expiration date by another means such as a telephone, and makes an access request again.

The user who receives the report of the user blockage investigates the intrusion situation of the third party into the information processing system, and thereafter requests the system administrator to register the user again.

As in the above embodiment, in the first step, the user is prompted to enter the password and user ID, and the host side is requested to match the contents held therein. An authentication code is generated, the authentication code is notified to the user in preparation for the next access of the user, and the user holds the authentication code. In the second step, when the user requests access, the authentication code input by the user Then, a request is made to match the authentication code held in advance on the host side, and if it matches, access is permitted.

Even if the authentication codes match, if the authentication code has expired,
An error occurs and access is not granted to the user. Host 1
The user can notify the user of this fact and request the host side to update the expiration date of the authentication code.

Further, if there is an unauthorized use by a third party and the user can be identified, the abnormal status holding unit 206 holds the access history, so that the unauthorized user may make an access request again. But do not allow access.

[0063]

As described above, according to the present invention, by performing the two-step user authentication, the third person who knows the password by an improper means and the host in which the originally authorized user is alternated. When a situation occurs in which the host is accessed, the continuity of the user authentication code set on the host side is lost, and intrusion into the information processing system can always be detected on the host side, preventing continuous theft or destruction of information. it can.

Further, since the host side detects an intrusion into the system, even if there is a user who has a low awareness of security assurance (a user who is at a high risk of leakage without strictly managing passwords and the like), an intrusion into the information processing system is possible. It can be detected, and damage such as information theft can be minimized.

Furthermore, since the user authentication method does not require any special hardware on the terminal device side, it is economical because additional investment of hardware is unnecessary.

Although FIG. 1 shows an example in which the authentication code to be input at the end of the work is generated and sent to the terminal device, the timing is, for example, immediately after the authentication code is determined to be correct. May be

[Brief description of drawings]

FIG. 1 is a diagram for explaining the principle of the present invention.

FIG. 2 is a diagram showing a configuration example of an information system according to an embodiment of the present invention.

FIG. 3 is a configuration diagram of a host user authentication function according to an embodiment of the present invention.

FIG. 4 is a sequence chart for explaining the first step of user authentication according to an embodiment of the present invention.

FIG. 5 is a sequence chart for explaining the second step of user authentication according to an embodiment of the present invention.

[Explanation of symbols]

 101 to 10n Terminal device 110 LAN 111 Server 112 Gateway 113 Host 201 User identification information holding table 202 User ID holding unit 203 Password holding unit 204 Authentication code holding unit 205 Expiration date holding unit 206 Abnormal status holding unit 207 User authentication code holding unit 208 Authentication processing unit 209 New authentication code generation unit 210 Expiration date setting unit 211 Abnormal status generation unit 212 Status reporting unit

Claims (1)

[Claims] 1. In a user authentication method for recognizing a user based on data received from the terminal device of an information processing system including a host or server and a plurality of terminal devices, the host or server is a connected user. Generates an authentication code to be input next time the user accesses the system, sends the generated authentication code to the terminal device, holds the authentication code, and the user who receives the authentication code receives the received authentication code. Holding the authentication code, disconnecting the connection with the host or the server, then requesting the connection from the user to the host or the server, and transmitting the held authentication code to the host or the server. The host or server receiving the connection request receives the authentication code received from the user from the authentication code holding in the host or server. If the authentication code received from the user is different from the stored authentication code, it is determined that a system intrusion by a third party has occurred, and the authentication code received from the user However, it is determined that a system intrusion by a third party has not occurred when the stored authentication code matches the stored authentication code.