JP4585159B2 - Computer with authentication data automatic input function - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention provides a network system for business using the IC card, a computer with authentication data autofill function Ru improved operability convenience of users.
[0002]
[Prior art]
With the spread of computers, business operations have been carried out by a network system composed of a large number of client computers used by employees and a small number of server computers that provide some service to these computers. In recent years, network systems themselves have become large-scale, and it is very common to perform business using these systems. Also, business performed on the network is in areas related to payments and approvals. Therefore, it is extremely important to appropriately manage security related to the network system such as unauthorized access to data whose access should be restricted and prevention of impersonation of other users.
[0003]
Therefore, recent computers designed as personal computers have some functions in the operating system (OS) for improving the security. As is well known, personal computers have also been equipped with an OS function that displays a user login dialog at startup and cannot use the computer unless a correct user name and password are entered.
[0004]
In addition, in order to limit the application program itself to only those who are permitted to use the application program, there are those that first require the input of a user name and a password when activated. Such an application program can prevent the use of unauthorized users. If the application program is a program that searches a database, access to highly sensitive database data from unauthorized persons can be prevented.
[0005]
[Problems to be solved by the invention]
In general, there is a problem that when the security function is enhanced, the usability is deteriorated accordingly. When an application program that requires a user name or password is used, the user of the program must enter the user name and password each time.
[0006]
The present invention has been made in consideration of such problems, and once the user name and password are entered, the login dialog prompts the user name and password when the application program is started. It is an object of the present invention to provide an authentication data automatic input function that automatically inputs them when they appear.
[0009]
[Problems to be solved by the invention]
The first invention for solving the problems is an authentication data automatic input means to the computer connected to the IC card reader-writer, were recorded to the text data to input to the information and the window for specifying the user authentication window A computer having an authentication data automatic input function to be used by using an IC card , comprising a monitoring means for constantly monitoring the state of the IC card reader / writer, wherein the authentication data automatic input means is configured such that the IC card is the IC card reader. When it is notified from the monitoring means that it has been inserted into the writer, it enters an active state, and the information for identifying the user authentication window recorded in the IC card and the text data to be input to the window are read out and predetermined. Stored in the memory buffer and the user stored in the predetermined memory buffer Whether the window is displayed that matches the information for specifying an authentication window constantly monitored, when such window appeared, the text data to be input to the user authentication window stored in the predetermined memory buffer Is automatically input to the dialog input interface of the window to execute user authentication, and when the IC card is removed from the IC card reader / writer, the contents stored in the predetermined memory buffer are erased to enter a dormant state. The computer has an authentication data automatic input function, characterized in that the authentication data automatic input function is realized so that the authentication data automatic input function does not function while the IC card is not inserted .
[0011]
When a program that functions as an authentication data automatic input means is in a dormant state, if data read from an IC card as user authentication data remains in the computer, there is a security problem. If there is data read into the computer as user authentication data, they are all cleared. As a mode of realization, the program functioning as the authentication data automatic input means is configured such that the process is started every time the IC card is inserted and the process is terminated each time the IC card is removed. Alternatively, a process that is in a sleep state may be simply activated when an IC card is inserted, and may return to a sleep state when the IC card is removed.
[0013]
The second invention for solving the problems is a computer, a computer program to function as the authentication data automatic input means in the first invention.
[0015]
DETAILED DESCRIPTION OF THE INVENTION
Hereinafter, the apparatus 1 which is one embodiment of the present invention will be described with reference to the drawings. FIG. 4 is a configuration diagram of a client computer that performs setting of user authentication information and automatic input of user authentication information according to the embodiment of this invention. Reference numeral 10 denotes a computer main body. Reference numeral 9 denotes an input unit such as a keyboard and a mouse. Reference numeral 8 denotes an IC card reader / writer. Reference numeral 5 denotes an IC card used by the user as an ID card. The computer main body 10 includes an application program 13, an authentication information setting unit 18, and an authentication data automatic input unit 19. Authentication information setting means 18 and authentication data automatic input means 19 are also realized as software programs.
Reference numeral 17 denotes a monitoring program provided as monitoring means for constantly inspecting the state of the IC card reader / writer 8 (whether an IC card is inserted or not). The monitoring program 17 is activated when the computer main body 10 is activated, and continuously monitors the IC card reader / writer 8.
[0016]
The monitoring program 17 always keeps the state of the IC card reader / writer 8 through driver software (provided in the computer 10 as part of the OS) for controlling the IC card reader / writer 8 (precisely, at regular time intervals). Check and write the result as a flag value in a memory area that can be referenced by other processes. Further, when a card is inserted into the IC card reader / writer 8, the sleeping authentication data automatic input means 19 is activated. This is because the authentication data automatic input means 19 is programmed so that it is once activated when the computer main body 10 is activated, but immediately enters a sleep state.
[0017]
FIG. 1 is a flowchart for explaining the operation of the authentication information setting means 18. The operation of the authentication information setting unit 18 will be described below with reference to FIG. In the embodiment described below, the authentication information setting means 18 is realized as a software program called a setting wizard.
[0018]
First, the setting wizard is activated (S01). FIG. 6 shows a user authentication window selection screen 600 that appears in the wizard. Here, the user activates the target application (S02). Then, a user authentication window is displayed (S03). A user authentication window 700 as shown in FIG. 13 appears in the window of the activated application. Here, the user drags the finder icon 601 appearing on the user authentication window selection screen 600 of FIG. 6, selects the user authentication window 700, and acquires information specifying the window (S04).
[0019]
This step will be described in detail with reference to the flowchart of FIG. First, when the user brings the mouse cursor over the viewfinder icon 601, the shape of the mouse cursor is switched to the shape of the viewfinder icon (S41). If the cursor of the finder icon is held up to the user authentication window 700 of the target application displayed on the screen while being held down without releasing the mouse button, and the mouse button is released on the user authentication window 700, The window 700 is selected (S42). When the window 700 is selected, the OS holds the identification number of the window in an area for recording the identification number of the currently selected window in the memory area managed by the OS. The currently selected window means a window that accepts an input character string from a keyboard or the like. The OS provides a method for the application program to obtain the window identification number held in this area by a specific method. The setting wizard acquires the identification number of the currently selected window (user authentication window 700) by using the method (S43).
[0020]
Next, the setting wizard obtains property information of the window object using the acquired window identification number (S44). When the user releases the mouse button, the viewfinder icon returns to the normal mouse cursor shape and the function of the viewfinder icon stops (S45).
[0021]
The window property information acquired in step S44 includes the displayed program name, window title, text data displayed in the window, etc. in addition to the size and display position of the window. Information that can be identified is taken out and used as a part of setting information (S04). As a result, the contents are displayed in the window title / executed file name / display message field 602 in the user authentication window selection screen 600 of FIG. 6, and the user can confirm that the data has been read.
[0022]
Next, the user ID input screen 610 of FIG. 7 appears in the setting wizard. Here, the user ID is entered in the input field 611. When the “Next” button 618 is selected, the setting wizard changes to the user ID input field setting screen 620 shown in FIG. 8, and the finder icon 621 appears again to prompt the user to select the user ID input field. The OS holds the identification number of the currently selected input control in a predetermined area in the memory area managed by the OS. The OS provides a method for the application program to obtain the identification number held in this area. Therefore, the setting wizard uses the method to select the user ID input field 701 of the user authentication window 700 in the same procedure as when the user selects the user authentication window 700 using the finder icon 621. The identification number of the selected input control 701 is acquired. As a result, “completed” is displayed in the selection status field 622 of the user ID input field setting screen 620. This completes the setting of the user ID (S05).
[0023]
When the “Next” button 628 is selected, a password input screen 630 shown in FIG. 9 appears in the setting wizard. Here, the password is entered in the input field 631. When the “Next” button 638 is selected, the setting wizard changes to the password entry field setting screen 640 shown in FIG. 10, and the finder icon 641 appears again to prompt the user to select a password entry field. Therefore, the user selects the password input field 702 of the user authentication window 700 using the finder icon 641 in the same procedure as described above. The setting wizard obtains the identification number of the input control 702 currently selected from the OS. As a result, “completed” is displayed in the selection status field 642 of the password input field setting screen 640. This completes the password setting (S06).
[0024]
When the “Next” button 648 is selected, a setting button 650 shown in FIG. 11 appears in the setting wizard. The viewfinder icon 651 appears again and prompts the user to select the confirm button. Therefore, the user uses the finder icon 651 to select the confirmation button 708 in the user authentication window 700. The setting wizard acquires the identification number of the currently selected button control 708 from the OS. As a result, the selected button control character string is displayed in the button character string display field 652 of the confirmation button setting screen 650. This confirms whether the correct button control has been selected. If this display is “Cancel”, it means that the button has been selected incorrectly, and the selection can be made again using the finder icon 651. This completes the setting of the confirmation button (S07).
[0025]
When the “Next” button 648 is selected, the setting wizard is displayed as shown in FIG. At this stage, as a result of setting the user authentication window 700 by the setting wizard, data as shown in FIG. 5 is created in a certain memory area handled by the setting wizard. FIG. 5 shows that the user authentication window 700 is generated by the execution program gyomudiary.exe, the title is “business diary”, and the text to be displayed is “Please enter user ID and password”. Has been. These are used later as information for specifying the user authentication window 700 by the authentication data automatic input means 19. It is shown that the character string ktanaka0019 is input as the user ID,% & 596319 is input as the password, and the button control 004 is selected as the confirmation button. These pieces of information are used as user authentication operations to generate text data to be given to the window 700 by the authentication data automatic input means 19 when the user authentication window 700 is displayed. Here, when the “Finish” 668 button is selected, the data of the contents shown in FIG. 5 recorded in the memory area in the setting wizard are stored in a predetermined area of the non-volatile memory of the IC card 5 as a set of automatic setting information. It is recorded (S07).
[0026]
The operation of the setting wizard has been described above. As long as the capacity of the non-volatile memory of the IC card allows, a plurality of sets of automatic setting information can be set as necessary. Next, the authentication data automatic input means 19 will be described with reference to the flowchart of FIG.
[0027]
The authentication data automatic input means 19 is activated by the monitoring program 17 when a new card is inserted into the IC card reader / writer 8. First, all the automatic setting information recorded on the IC card is read and temporarily recorded in the memory buffer of the computer main body 10 (S11). Next, the input interface window displayed by the application program 13 is constantly monitored, and each time a new window is generated, the name of the execution program that generated the window, the window title, and the display text are automatically recorded. It is checked whether the information matches (S13). If they match, the setting information (character string to be input as the user ID, input control identification number to which the user ID is input, password character string, and password are input. The data to be passed to the user authentication window is created from the power input control identification number and the setting button control identification number) and passed to the application program 13 (S15). Then, the process proceeds to step S17.
[0028]
If no new window is generated in step S13, or if an unrelated window that does not match the automatic setting information is generated, the process proceeds to step S17 without doing anything.
[0029]
In step S17, it is inspected whether the inserted IC card has been removed. This can be checked by checking the flag as a result of the monitoring program 17 checking the state of the IC card reader / writer 8. As a result, if the IC card is inserted as it is, the process returns to step S13.
[0030]
If it is detected that the IC card has been removed, the contents of the buffer read from the IC card are cleared in step S11 (S19), and the device enters a sleep state.
[0031]
When a new IC card is inserted into the IC card reader / writer 8, the process embodying the authentication data automatic input means 19 becomes active again. After all, the authentication data automatic input means 19 inputs the user name and password by hand to the user authentication window displayed by the application program 13, and when the user clicks the confirm button, the data passed to the application program 13 The same data is composed and passed.
[0032]
Such authentication data automatic input means 19 can automate the input of the application program for daily use into the user authentication window. Further, since the authentication data automatic input means 19 immediately clears the setting information and pauses execution when the IC card is removed, no user setting information remains on the client computer 10. Further, when the IC card is not inserted, the authentication data automatic input function is never executed. Therefore, it can be said that the security level of the system is maintained while providing a user-friendly function.
[0033]
The functions such as causing the running process to sleep itself and causing the running process to cause other processes that are sleeping are functions of the OS. Since API (Application programming interfaces) are prepared so that these functions can be used, an ordinary software engineer can use a known programming technique. Further, instead of “process sleep, activation from sleep”, “process termination, process activation” may be used.
[0034]
In the embodiment having the configuration shown in FIG. 4 described above, the computer 10 is provided with both the authentication information setting means 18 and the authentication data automatic input means 19. It is possible to produce the effect which the invention makes a problem. That is, the apparatus excluding the authentication data automatic input means 19 from the configuration of FIG. 4 is a user authentication information setting apparatus that performs only the process of recording the automatic setting information shown in FIG. 5 on the IC card.
[0035]
4 can be used as a computer having an authentication data automatic input function by using the IC card 5 in which the automatic setting information shown in FIG. 5 is recorded.
[0036]
By carrying the IC card 5 on which the automatic setting information shown in FIG. 5 is carried, the authentication data automatic input function can be used wherever a computer having the authentication data automatic input function of the above configuration can be used. Since the automatic setting information is recorded on the IC card without being left on the computer, there is no possibility of unauthorized use by others.
[0037]
Note that the contents shown in FIG. 5 are required to be recorded on the IC card as a set of automatic setting information including information for specifying a user authentication window and information that can be appropriately input to the window. This is explained by a specific example. Therefore, the automatic setting information does not necessarily have to be configured as shown in the items of FIG. 5 as long as it is information that can configure information specifying a window and data to be appropriately input to the window.
[0038]
The authentication information setting means 18 and the authentication data automatic input means 19 are realized as a computer program. Accordingly, by downloading and installing the authentication information setting means 18 and the authentication data automatic input means 19 or any one of the programs to the computer connected with the IC card reader / writer through the magnetic recording medium or through the network, The computer having such a configuration can be a computer having an authentication data automatic input function or a user authentication information setting device.
[0039]
【The invention's effect】
As described above in detail, if a computer having an authentication data automatic input function having the configuration of FIG. 4 or a computer having an authentication data automatic input function excluding the authentication information setting means 18 from the configuration of FIG. Even if a login dialog requesting a user name / password appears when the program is started, if there is an IC card in which setting information is recorded, the user does not need to input manually. In addition, this function does not function if the IC card is removed, so that there is no security problem.
[0040]
Further, the computer having the authentication data automatic input function having the configuration shown in FIG. 4 or the user authentication information setting apparatus excluding the authentication data automatic input means 19 from the configuration shown in FIG. There is a remarkable effect that necessary setting information is created and recorded on the IC card.
[0041]
In addition, the IC card in which the setting information is recorded has a remarkable effect that the convenient authentication data automatic input function can be used anywhere as long as a computer that can execute the authentication data automatic input function can be used.
[0042]
Further, the computer program describing a series of instructions for realizing the authentication information setting means 18 and the authentication data automatic input means 19 makes it possible to use the computer device as a user authentication information setting device or a computer having an authentication data automatic input function. Has a remarkable effect.
[Brief description of the drawings]
FIG. 1 is a flowchart for explaining the operation of authentication information setting means 18;
FIG. 2 is a flowchart for explaining the operation of authentication information setting means 18;
FIG. 3 is a flowchart for explaining the operation of authentication data automatic input means 19;
FIG. 4 is a configuration diagram of a client computer having an authentication data automatic input function according to an embodiment of the present invention.
FIG. 5 is a diagram illustrating setting information recorded on an IC card.
6 is a user authentication window selection screen 600 of the authentication information setting means 18. FIG.
7 is a user ID setting screen 610 of the authentication information setting means 18. FIG.
8 is a user ID input field setting screen 620 of the authentication information setting unit 18. FIG.
9 is a password input screen 630 of the authentication information setting means 18. FIG.
10 is a password input field setting screen 640 of the authentication information setting means 18. FIG.
11 is a confirmation button setting screen 650 of the authentication information setting means 18. FIG.
12 is a setting end screen of authentication information setting means 18. FIG.
FIG. 13 is an example of a user authentication window displayed by an application program.
[Explanation of symbols]
5 IC card 8 IC card reader / writer 9 input unit 10 computer main body 13 application program 17 monitoring program 18 authentication information setting means 19 authentication data automatic input means

Claims (2)

An authentication data automatic input means to the computer connected to the IC card reader-writer, the information and authentication data autofill function which uses using an IC card which records the text data to be input to the window for specifying the user authentication window A computer having:
Comprising monitoring means for constantly monitoring the state of the IC card reader / writer,
The authentication data automatic input means includes:
When the monitoring means notifies that the IC card has been inserted into the IC card reader / writer, it becomes active, and information for identifying the user authentication window recorded in the IC card and the window should be entered Read the text data and store it in a predetermined memory buffer,
Whether the window that matches the information specifying the user authentication window stored in the predetermined memory buffer is displayed constantly monitors, when such windows appeared was stored in the predetermined memory buffer Text data to be input to the user authentication window is automatically input to the dialog input interface of the window, and user authentication is executed .
When the IC card is removed from the IC card reader / writer, the contents stored in the predetermined memory buffer are erased, and a pause state is established.
The authentication data automatic input function is configured not to function while the IC card is not inserted.
Realize automatic authentication data input function ,
A computer having an authentication data automatic input function. The computer, computer program to function as the authentication data automatic input means of claim 1.

Images