Information processing apparatus, password strength display method, and program

Abstract

To solve the problem that when entering a password using a software keyboard, it may be difficult to display a password strength meter at the same time.SOLUTION: An information processing apparatus comprises a user interface for display to a user and for input by the user, and a control unit. The control unit displays, by the user interface, a software keyboard for inputting a password, and if displaying a password strength meter indicating the strength of the password through the user interface, calculates the strength of the password entered via the software keyboard and displays the password strength meter indicating the strength of the entered password, superimposed on the software keyboard.SELECTED DRAWING: Figure 10

Description

[Technical field]

[0001] The present invention relates to an information processing device having, for example, a function for displaying password strength, and a method and program for displaying password strength. [Background technology]

[0002] Passwords are the most widely used authentication method around the world, but many incidents have occurred in which information has been easily stolen by setting weak passwords. NIST SP800-63-3 is a guideline on password security proposed by the National Institute of Standards and Technology (NIST). This guideline recommends providing guidance such as a password strength meter when users set passwords. Patent Document 1 proposes a technology for displaying password strength. Patent Document 1 describes a technology for displaying the quality of a passphrase on the passphrase input screen. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] U.S. Patent No. 8,108,685 Summary of the Invention [Problem to be solved by the invention]

[0004] When entering a password on a device such as an image forming apparatus or a mobile terminal, a software keyboard is displayed and used for input. On devices with limited display area, the software keyboard covers the screen, leaving no room to display a meter indicating the password strength. Even if the password strength is displayed after transitioning to a screen other than the software keyboard screen, it is difficult to check the display of the strength at the same time as entering the password.

[0005] The present invention has been made in consideration of the above-mentioned problems, and aims to display a password strength meter while entering a password, even when entering a password using a software keyboard on a device with a limited display area. [Means for solving the problem]

[0006] In order to achieve the above object, the present invention has the following configuration: According to one aspect of the present invention, there is provided a method for controlling a display device, comprising: and a control means, The control means displaying a software keyboard for inputting a password by the user interface means; When the password strength meter showing the strength of a password is displayed by the user interface means, Calculate the strength of the password entered from the software keyboard; The password strength meter, which indicates the strength of the input password, is displayed on the software keyboard. The present invention provides an information processing apparatus comprising: Effect of the Invention

[0007] According to the present invention, even when a password is entered using a software keyboard on a device with a limited display area, the password strength meter can be displayed during password entry. [Brief description of the drawings]

[0008] [Figure 1] FIG. 1 illustrates a network configuration. [Diagram 2] FIG. 2 is a diagram illustrating a hardware configuration of an MFP. [Diagram 3] FIG. 2 is a diagram illustrating a software configuration. [Figure 4] FIG. 13 is a diagram showing a setting screen in a local UI. [Diagram 5]FIG. 13 illustrates a user management screen. [Figure 6] FIG. 2 is a diagram showing a user interface of a software keyboard. [Figure 7] 13 is a flowchart showing an operation flow when entering a password from the user management screen. [Figure 8] 11 is a flowchart showing an operation flow when entering a password from the login screen. [Figure 9] 13 is a flowchart showing an operation flow when a password is reset. [Figure 10] 13 is a flowchart showing a flow of a password strength meter display request analyzing unit. [Figure 11] FIG. 13 illustrates a user interface of a software keyboard with an intensity meter. [Figure 12] 13 is a flowchart showing an operation flow when calculating password strength. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0009] Hereinafter, the embodiments will be described in detail with reference to the attached drawings. Note that the following embodiments do not limit the invention according to the claims. Although the embodiments describe a number of features, not all of these features are essential to the invention, and the features may be combined in any manner. Furthermore, in the attached drawings, the same reference numbers are used for the same or similar configurations, and duplicated descriptions are omitted.

[0010] [Embodiment 1] As an example of an image forming apparatus for implementing the password strength display method of this embodiment, a multi-function peripheral (MFP) equipped with functions such as copying, printing, and scanning, which is installed in an office, will be described.

[0011] <System configuration> A network configuration in an office environment of this embodiment will be described with reference to Fig. 1. An MFP 101 communicates with a personal computer terminal (e.g., PC 102) connected via a network LAN 103. A user can access the MFP 101 from a web browser on the PC 102 and use a remote UI of the MFP 101. The MFP 101 can also receive requests for access to print jobs and documents stored in the MFP 101 from the terminal (e.g., PC 102).

[0012] <Hardware configuration> 2 is a simplified diagram showing the hardware configuration of the MFP 101. The CPU 201 is a central processing unit (processor) that controls the overall operation of the MFP 101. The random access memory (RAM) 203 is a volatile memory, a work area, and is used as a temporary storage area for expanding various control programs stored in the ROM 202 and the HDD 204.

[0013] The ROM 202 is a non-volatile memory and stores a boot program and the like for the MFP 101. The HDD 204 is a non-volatile hard disk having a larger capacity than the RAM 203. The HDD 204 stores a program for controlling the MFP. The operating system (OS) and application programs are also stored in the HDD 204.

[0014] When the MFP 101 starts up, the CPU 201 executes a boot program stored in the ROM 202. This boot program is for reading out the OS program stored in the HDD 204 and expanding it on the RAM 203. After executing the boot program, the CPU 201 subsequently executes the OS program expanded on the RAM 203 and controls the MFP 101. The CPU 201 also stores data used for operation by the control program on the RAM 203 and reads and writes it.

[0015] In the MFP 101, one CPU 201 executes each process shown in the flowcharts described later, but other configurations are also possible. For example, multiple CPUs or microprocessors (MPUs) can cooperate to execute each process shown in the flowcharts described later. Also, some of the processes described later can be executed using hardware circuits such as application specific integrated circuits (ASICs) and field programmable gate arrays (FPGAs).

[0016] The operation panel 205 is a display that can be operated by touch. The printer 206 is a printer engine that prints print data received from the outside via a communication unit 207 and digital data acquired from a scanner 207 . The scanner 207 is a scanner device that reads a paper document and converts it into digital data.

[0017] A communication unit 208 is a network interface for connecting to the Internet or an office local area network (LAN). The IC card reader 209 is a device for reading information used for user authentication from an IC card, and is a unit necessary for implementing IC card authentication. The USB interface 210 is an interface to which devices compatible with the USB standard can be attached.

[0018] As described above, the MFP 101 is sometimes called an information processing device because it processes information by executing programs using a processor (CPU).

[0019] <Software configuration> 3 is a simplified diagram showing the software configuration of the MFP 101. A local UI 301 of the MFP 101 uses the display of the operation panel 205 to provide a user interface for a user locally accessing the MFP 101 to change settings and utilize functions of the MFP 101.

[0020] The remote UI 302 has an HTTP (Hypertext Transfer Protocol) server function. It provides a user interface configured in HTML (HyperText Markup Language) to a user making remote access. The user can access the remote UI 302 using a web browser on the PC 102 to change the settings of the MFP 101 and use its functions. The web browser on the PC terminal displays a user interface configured in HTML. The user can change the settings and use its functions by operating the user interface displayed on the web browser.

[0021] The user authentication service 303 is a software module that authenticates a user who uses the local UI 301 or the remote UI 302. The user authentication service 303 authenticates a user who uses the local UI 301 with a user name, password, or IC card input from a keyboard (including a software keyboard). The user authentication service 303 also authenticates a user who uses the remote UI 302 with a user name, password, and one-time password. The IC card reader driver 304 is a driver that controls the IC card reader 209, obtains information from the IC card, and provides the IC card information to the user authentication service 303.

[0022] The user authentication service 303 holds and manages user information 305 and has the functions of a password strength calculation unit 306 that calculates the strength of an input password and a password strength display request analysis unit 307. The password strength display request analysis unit 307 has a function of determining whether to call up a software keyboard with a password strength meter or a software keyboard without a password strength meter when inputting a password on the local UI 301.

[0023] <Password strength> Password strength is a numerical expression of how difficult it is to guess a password, taking into account its length, complexity, etc. Passwords generally have rules such as using multiple types of characters (numbers, symbols, uppercase letters, lowercase letters) and having a certain length (8 characters or more). Password strength is then calculated based on the length and types of characters used. There is also a calculation method in which a dictionary file is kept containing frequently used keywords, common names, English words, and character strings that are easily guessed from the keyboard layout (qwerty), and if a password matches any of these when entered, it is deemed to be low in security.

[0024] In this embodiment, the password strength calculation unit 306 quantifies the password strength using the method described above. As the calculation result of the password strength, an integer value in one of five levels from 1 to 5 is returned. The password strength meter visualizes the above-mentioned password strength on the screen.

[0025] <User information> The user information 305 managed by the user authentication service 303 will be described. The user authentication service 303 stores and manages the user information 305 in a user information table as shown in Table 1. The user information table is a database recorded in the HDD 204. Note that a database of another node on the network may be used after encrypting the communication path and storage and preventing tampering. The user information table records the card ID, password, user role, email address, and the like used for IC card authentication for each user.

[0026] [Table 1]

[0027] A role is information indicating a user's usage rights for MFP 101. Examples of roles and usage rights are shown in the role information table (Table 2) below. In addition to the role definitions that MFP 101 has when shipped from the factory, it may be possible for users to set detailed usage rights and create new roles. Note that the setting changes in Table 2 refer to changes to values ​​set in MFP 101, such as user authentication settings and user management, which will be described later. Note that it may also be possible to change a wide variety of settings, such as network settings and print function settings for MFP 101. Administrator is a role given to an administrator user, and GeneralUser and / or LimitedUser are roles given to general users.

[0028] [Table 2]

[0029] <User authentication settings> Next, the user authentication setting provided in the MFP 101 will be described with reference to the user interface (UI) in Fig. 4. When the MFP 101 is started, the local UI 301 displays a menu screen 401 for selecting an application.

[0030] An administrator user can display a user authentication setting screen 402 via a menu screen 401. In the user authentication setting screen 402, the user can select whether to enable or disable the user authentication function. Furthermore, if the user selects to enable the user authentication function, the user can further select one or both of the login functions from keyboard authentication and IC card authentication. The user authentication setting screen 402 shows a state in which the user authentication function is enabled and all login functions are selected. The settings selected by the user are stored in the HDD 204, and the user authentication service 303 refers to them and activates the login functions according to the user settings. The user authentication functions selectable from the user authentication setting screen 402 are sometimes referred to as login functions.

[0031] When both login functions (keyboard authentication and IC card authentication) are enabled, the local UI 301 displays an IC card authentication screen 404 for user authentication. Note that keyboard authentication can also be performed by selecting a button 411 to transition to a keyboard authentication screen 403.

[0032] If only keyboard authentication is valid, a keyboard authentication screen 403 is displayed, whereas if only IC card authentication is valid or both IC card authentication and keyboard authentication are valid, an IC card authentication screen 404 is displayed. If only IC card authentication is valid, a button 411 for transitioning from the IC card authentication screen 404 to the keyboard authentication screen is not displayed.

[0033] When the user authentication service 303 reads the information (card ID) recorded on the IC card, it refers to the account information stored in the HDD 204 and allows a user with a matching card ID to log in to the MFP 101 .

[0034] The user authentication service 303 checks the user name and password entered on the keyboard authentication screen 403 against the account information stored in the HDD 204 , and allows the matching user to log in to the MFP 101 .

[0035] The user authentication service 303 stores information about the logged-in user in an object called a login context, and transmits it to other software modules. An example of information stored in the login context is shown in Table 3 below. The login context stores the user name, role, email address, etc. of the logged-in user, as shown in Table 3.

[0036] [Table 3]

[0037] If login to the MFP 101 is successful, the local UI 301 closes login screens such as the keyboard authentication screen 403, and transitions the screen to the menu screen 401. The menu screen 401 references the login context described above, identifies the logged-in user, and then provides a menu screen for the user according to the role of the logged-in user. The menu screen and screens for various functions (copy and scan) provide a function that allows personalization according to the user's preferences.

[0038] When a password strength meter setting is selected from the setting items via the menu screen 401, a password strength meter setting screen 421 is displayed.

[0039] The password strength meter display setting 422 is a setting indicating whether or not to display the password strength meter, that is, whether or not to display the password strength meter. When the setting is ON, the password strength meter is displayed on the software keyboard when a password is entered. When the setting is OFF, the password strength meter is not displayed.

[0040] The setting 423 for prohibiting input of weak passwords and the setting of the prohibited strength level 424 are settings for prohibiting password input when the strength of the input password is calculated by the password strength calculation unit 306 and the result is equal to or less than the value set in the strength level setting 424. That is, the user can set a reference value in the strength level setting 424 and set the setting 423 so that the setting of a password equal to or less than the reference value is not accepted. The calculation result of the strength is handled as an integer value of 5 levels from 1 to 5. For example, when the strength level is set to 1, a password with a strength value of 1 is prohibited, and when the strength level is set to 2, a password with a strength value of 1 or 2 is prohibited. Prohibition means that the setting of the corresponding password is not allowed. Therefore, the calculation of the password strength and the restriction of a password with a low strength are performed when the password is set or changed.

[0041] <User Management> 5 shows an example of a UI provided by the local UI 301 for managing user accounts of the MFP 101. In addition to the local UI 301, a similar UI may be provided for the administrator by the remote UI 302.

[0042] The user management screen 501 is a screen for managing a list of user accounts. Only administrators with the Administrator role can access it. The user management screen 501 provides a function for registering a new user account and selecting an already registered account to edit or delete it. For example, to register a user, the user "Admin" presses the registration button on the user management screen 501. In response, the local UI 301 displays a user registration screen 502. On the user registration screen 502, a user name, password, card ID, email address, role, etc. can be registered and saved.

[0043] When editing a user, the user "Admin" selects the account of an existing user, for example "Alice", and presses the edit button. In response, the local UI 301 displays a user edit screen 503. On the user edit screen 503, the password, card ID, email address, role, etc. can be edited and saved. When deleting a user, the administrator user selects the target user and then presses the delete button, and the user information of the selected user is deleted.

[0044] The user registration screen 502 and the user change screen 503 have a setting 511 for changing the password at the next login, and if this is on, the user is asked to set a new password when logging in. In this case, when the user logs in, screen 504 is displayed, and the password change procedure is started first. Also, when a new password is to be set on the user registration screen 502 or the user change screen 503, a password change screen 505 is displayed. The password entered on the password change screen 505 is set as the new password in the user information. Note that password changes may be permitted even for users who do not have administrator authority, as long as the password is set by the user. In that case, for example, if a user selects settings while logged in, a user edit screen 503 displaying only the user information of the logged-in user may be displayed instead of the user management screen 501. Even on this screen, only items that are left to the user's settings, such as passwords and PIN numbers, may be editable, and other items may be hidden or may be displayed but not editable.

[0045] <About displaying the password strength meter> In a system that does not have a keyboard as standard, such as the MFP 101 of this embodiment, a password entry screen 601 with a software keyboard shown in Fig. 6 is displayed in order to enter a password on the user registration screen 502 and the user edit screen 503, for example. The screen size of the operation panel 205 of the MFP 101 is considerably smaller than that of a personal computer, etc. Therefore, when the software keyboard is displayed, it occupies the screen, making it difficult to display the password strength.

[0046] It is also possible that a keyboard is mounted on MFP 101, or that a USB keyboard is used for input via USB interface 210. However, password registration and change are performed while other screens such as user registration screen 502 and user edit screen 503 are displayed, limiting the display area, and it is still difficult to display the password strength as the password is entered.

[0047] In this embodiment, in order to solve these problems, a password strength meter is displayed on the password entry screen 601 with a software keyboard, thereby solving the above problems. Also, the password strength meter is not always displayed when a password is entered, but is displayed only when a new password is registered or changed. It is not displayed when a password is entered to verify an already registered password. These processes are switched depending on whether a password strength display request is made when the software keyboard is called, and this request is judged by the password strength display request analysis unit 307. Based on the request, the password strength display request analysis unit 307 switches between calling a software keyboard with a password strength meter or calling a software keyboard without a password strength meter. Furthermore, when a password is entered on the password input screen 601 with a software keyboard and the next button is pressed, a password confirmation screen 602 with a software keyboard is displayed to confirm the entered value. In this embodiment, the password confirmation screen 602 does not display a password strength meter, but the password strength meter may be configured to be displayed during confirmation as well. The password input screen 601 with a software keyboard and the password confirmation screen 602 with a software keyboard are collectively referred to as the software keyboard or software keyboard screen.

[0048] <Operation flow for displaying the password strength meter> The process of the user authentication service 303 calling up the software keyboard according to the determination result of the password strength display request analysis unit 307 will be described. In this embodiment, the procedure shown in the flow below is recorded in the software program (also simply called a program) of the local UI 301 and the user authentication service 303. The software program is stored in a non-volatile storage such as the ROM 202 or the HDD 204, and is loaded into the RAM 203, and the flow shown in the flowchart is executed by the CPU 201. In addition, the software such as the local UI 301 and the user authentication service 303 provide APIs to each other, and operate in coordination by using the APIs mutually. In the description of the operation flow, the calling of the API is omitted. In addition, in the description of the figure, each software module shown in FIG. 3 that is realized by the CPU 201 executing the program is regarded as the subject of software, but as described above, the CPU 201 is the subject of hardware.

[0049] ● When registering or changing a password FIG. 7 is a flowchart showing the operation flow when the password button is pressed on the registration screen 502 or the user edit screen 503 from the user management screen 501.

[0050] When the user authentication service 303 receives a display request for a user management screen from the menu screen 401, it displays the user management screen 501 (S701). When the user presses a button on the user management screen 501, the user authentication service 303 detects the button press and determines which button was pressed (S702). Note that the delete button is not considered here. When it detects that the registration button has been pressed, it displays the user registration screen 502 (S703), and when it detects that the edit button has been pressed, it displays the user edit screen 503 (S704). When the user presses the password button on the user registration screen 502 or the user edit screen 503, the user authentication service 303 detects that the password button has been pressed (S705). In response to this detection, it sends a display request for a software keyboard with a password strength meter to the password strength display request analysis unit 307 (S706).

[0051] FIG. 10 is a flowchart showing the operational flow of the password strength display request analysis unit 307, which is a function of the user authentication service 303, that receives a request to display the software keyboard.

[0052] The password strength display request analysis unit 307 determines whether the password strength meter display setting 422 is enabled (ON) (S1001). If it is determined that the password strength meter display setting is enabled, the password strength display request analysis unit 307 determines whether there is a password strength meter display request (S1002). The password strength meter display request is transmitted by the user authentication service 303 when the password button is detected to be pressed. In the above-mentioned S706, a request for password strength meter display is made. If there is a password strength meter display request, the password strength display request analysis unit 307 transmits a display request for a software keyboard with a password strength meter to the local UI 301 (S1003). If there is no display request in S1002, or if the display setting is not enabled (OFF) in S1001, a display request for a software keyboard without a password strength meter is transmitted to the local UI 301 (S1004).

[0053] When the local UI 301 receives a display request for a software keyboard with a password strength meter, it displays the software keyboard with a password strength meter. When the local UI 301 receives a display request for a software keyboard without a password strength meter, it displays the software keyboard without a password strength meter. The software keyboard with a password strength meter may be, for example, a screen in which a password strength meter is added to the password entry screen 601. An example is shown in FIG. 11. The software keyboard without a password strength meter may be, for example, the password entry screen 601 itself.

[0054] When a password is entered on the password entry screen 601 and the "Next" button is touched, a password confirmation screen is displayed and the user is requested to enter the same password again. In this case, in this embodiment, a software keyboard without a password strength meter may be displayed. The password confirmation screen 602 in FIG. 6 is just such an example. That is, in response to touching the "Next" button, the user authentication service 303 may request the password strength display request analysis unit 307 to display a software keyboard without a password strength meter. Then, in response to touching the "OK" button on the password confirmation screen 602, the password entered on the password entry screen 601 with the password strength meter and the password entry screen 602 are compared. If they match, the password is registered in the user information as a new password for the logged-in user.

[0055] ●When authenticating with a password FIG. 8 is a flowchart showing the operation flow when the password button is pressed on the keyboard authentication screen 403.

[0056] The user authentication service 303 displays the keyboard authentication screen 403 (S801) and detects pressing of the password button on the keyboard authentication screen (S802). Upon detection, a display request for a software keyboard without a password strength meter is sent to the password strength display request analysis unit 307 (S803). As described above, the login screen only checks the password against registered passwords, so there is no need to display the strength of the entered password. Therefore, a display request without a password strength meter is sent here.

[0057] The password strength display request analysis unit 307 performs steps S1001 to S1004 in the same manner, and therefore the description thereof will be omitted.

[0058] FIG. 9 is a flowchart showing an operation flow when a user who has newly registered as a user or edited user information attempts to log in by enabling the setting 511 for changing the password at next login on the user registration screen 502 and the user edit screen 503.

[0059] When the setting 511 for changing the password at the next login on the user registration screen 502 and the user edit screen 503 is enabled, the user is requested to change the password the next time the user logs in.

[0060] When the user authentication service 303 detects the input of a user name and password on the keyboard authentication screen 403 (S900), it determines whether the user name and password are correct (S901).

[0061] If the user name and password are incorrect, the process ends. If they are correct, the user authentication service 303 performs login processing (S902). The user authentication service 303 then determines whether the setting 511 for changing the password at the next login is valid (S903). If it determines that the setting is invalid, the process ends.

[0062] If it is determined that the settings are valid, the user authentication service 303 displays a screen 504 requesting a password change (S904). The user authentication service 303 determines whether OK or Cancel has been pressed on the screen 504 requesting a password change (S905). If it is determined that Cancel has been pressed, the user authentication service 303 ends the process. In this embodiment, it is possible to cancel and log in, but it is also possible to make it impossible to log in without changing the password. In that case, the cancel button is not displayed on the screen 504 requesting a password change, and only changing the password is an option. In this case, in S905 of FIG. 9, the process waits for the OK button to be touched, and if the OK button is touched, the process proceeds to S906.

[0063] If it is determined that OK has been pressed on the screen 504 requesting a password change, the user authentication service 303 displays a password change screen 505 (S906).

[0064] When the password button on the password change screen 505 is pressed, the user authentication service 303 detects the pressing of the password button (S907), and transmits a request to display a software keyboard with a password strength meter to the password strength display request analysis unit 307 (S908).

[0065] The password strength display request analysis unit 307 performs steps S1001 to S1004 in the same manner, and therefore the description thereof will be omitted.

[0066] In the above procedure, if the setting 511 for changing the password at next login is valid, the user can reset the password when logging in. In the procedure of Fig. 9, the user is logged in when the password is reset at login, but it is possible not to log in in that case. In that case, it is necessary to log in with the new password after resetting.

[0067] <About the software keyboard with password strength meter> Regarding the software keyboard with a password strength meter, it has been explained that it may be, for example, a screen in which a password strength meter is added to the password input screen 601. Fig. 11 is a diagram showing an example of such a software keyboard with a password strength meter. A software keyboard with a password strength meter 1101 displays a meter section 1102 indicating the strength of the password and a level display section 1103 using characters indicating the strength level of the password in an empty space (empty area) of the software keyboard. At that position, neither the meter section 1102 indicating the password strength nor the password strength level display section 1103 overlaps with the password or any key on the keyboard.

[0068] In the example of software keyboard 1101, the intensity level is determined to be 1. The display on meter section 1102 shows the intensity level 1, and "Weak" is displayed in 1103 as characters representing the intensity level 1. In this embodiment, as an example of the intensity display, a meter display and characters representing the intensity level are displayed, but the display format may be either one or the other, or the intensity level may be displayed as it is.

[0069] Also, methods other than the software keyboard 1101 can be considered for displaying the password strength meter. For example, a software keyboard 1111 with a password strength meter displays a strength meter section 1112 in the center of the screen, which includes a meter indicating the password strength and characters indicating the password strength level. The display is displayed at a fixed position, but does not have to be in the center of the screen. This display is performed every time a password is entered, and the screen is displayed so that the display disappears after a fixed time. This is based on the assumption that there is no space to display the display on the software keyboard, and by disappearing after a fixed time, usability is not impaired even if the display overlaps with the keyboard.

[0070] In addition, in software keyboard 1121 with a password strength meter, the display location of strength meter section 1114 including a meter indicating the password strength and characters indicating the password strength level may be changed according to the position of pressed button 1113.

[0071] The password strength meter may be displayed in other manners. For example, the number indicating the evaluated password strength may be displayed in a specific place on the password input screen. Alternatively, the number may be synthesized and displayed as a watermark image on the password input screen. For example, if the evaluation is on a five-point scale, any one of the numbers 1 to 5 is displayed.

[0072] In this way, the password strength meter is superimposed on the software keyboard and displayed in a manner that does not interfere with the display of either, particularly the input character string. It may also be displayed in a manner that does not interfere with the display of the keyboard. In this way, even when entering a password using a software keyboard displayed on a small display unit, the user can visually check both the password and the password strength.

[0073] <Password strength calculation> Fig. 12 is a flowchart showing the operation flow when the user authentication service 303 calculates the strength of a password entered on the software keyboard with a strength meter 1101. Note that the process in Fig. 12 only needs to be executed when the password strength meter is displayed, and does not need to be executed when a password is entered on the software keyboard 601 without a strength meter. In that case, the user authentication service 303 only needs to accept the entered characters.

[0074] When character input on the software keyboard with strength meter 1101 is detected, the local UI 301 transmits the password character string being input to the user authentication service 303. When the user authentication service 303 receives the password character string (S1201), the password strength calculation unit 306 calculates the password strength using a predetermined formula (S1202). The user authentication service 303 determines whether the setting 423 prohibiting input of low-strength passwords is on and the calculated strength is equal to or less than the value of the prohibited strength level setting 424 (S1203).

[0075] If it is determined that entry of a low-strength password is prohibited and that the strength level is equal to or lower than the prohibited strength level setting, the user authentication service 303 notifies the local UI 301 that the strength level is set to be prohibited (S1204). The local UI 301 that receives the notification makes it impossible to press the Next button 1104 on the software keyboard 1101 with a strength meter. If the strength level is not equal to or lower than the prohibited strength level setting in S1203, the user authentication service 303 notifies the local UI 301 that the strength level is not set to be prohibited (S1205). The local UI 301 that receives the notification makes it possible to press the Next button 1104 on the software keyboard 1101 with a strength meter.

[0076] <Effects of the First Embodiment> As described above, the MFP101 described in this embodiment provides a method for displaying a password strength meter while a password is being entered using a software keyboard on a device with a limited display area, thereby making it possible to provide a highly convenient information processing device. In the above embodiment, the password strength meter is switched between display and non-display with reference to the password strength meter setting 421, but it may be displayed at all times when a password is entered. Even in this case, however, the password strength meter may be displayed when a password is entered for registration or change, and may be hidden when a password is entered for confirmation and authentication. [Other Examples] The present invention can also be realized by a process in which a program for implementing one or more of the functions of the above-described embodiments is supplied to a system or device via a network or a storage medium, and one or more processors in a computer of the system or device read and execute the program. The present invention can also be realized by a circuit (e.g., ASIC) that implements one or more of the functions.

[0077] Summary of embodiments The above embodiments can be summarized as follows: (Item 1) a user interface means for display to and input by a user; and a control means, The control means displaying a software keyboard for inputting a password by the user interface means; When the password strength meter showing the strength of a password is displayed by the user interface means, Calculate the strength of the password entered from the software keyboard; The password strength meter, which indicates the strength of the input password, is displayed on the software keyboard. 23. An information processing apparatus comprising: (Item 2) Item 1. The information processing device according to item 1, The method further includes a storage unit for storing a first setting by a user indicating whether to display or hide the password strength meter; The case where the password strength meter indicating the strength of the password is displayed by the user interface means is when the display of the password strength meter is set in the first setting. 23. An information processing apparatus comprising: (Item 3) Item 2. The information processing device according to item 2, The case where the password strength meter indicating the strength of the password is displayed by the user interface means is when the display of the password strength meter is set in the first setting and the password is input for setting the password. 23. An information processing apparatus comprising: (Item 4) Item 2 or 3, the information processing device, the storage means further stores a second setting indicating that a password having a strength equal to or less than a reference value will not be accepted; When the first setting is set to display the password strength meter and the second setting is set to not accept the setting of a password whose strength is equal to or less than a reference value, the control means does not accept the setting of a password whose strength is equal to or less than the reference value. 23. An information processing apparatus comprising: (Item 5) An information processing device according to any one of items 2 to 4, The control means displays a user interface for receiving the first setting by the user interface means. 23. An information processing apparatus comprising: (Item 6) 6. The information processing device according to item 4 or 5, The control means displays a user interface for receiving the second setting by the user interface means. 23. An information processing apparatus comprising: (Item 7) 7. The information processing device according to any one of items 1 to 6, The control means displays the password to be input on the software keyboard for inputting a password, and displays the password strength meter in a free area of ​​the software keyboard that does not overlap with the password. 23. An information processing apparatus comprising: (Item 8) An information processing device according to any one of items 1 to 7, The control means turns off the password strength meter after displaying it for a certain period of time. 23. An information processing apparatus comprising: (Item 9) An information processing device according to any one of items 1 to 8, The control means changes a display position of the password strength meter in accordance with characters inputted through the software keyboard. 23. An information processing apparatus comprising: (Item 10) 10. A program for causing a computer to function as the information processing device according to any one of items 1 to 9. (Item 11) An information processing device according to any one of items 1 to 9, Further comprising an image forming means 23. An information processing apparatus comprising:

[0078] The present invention is not limited to the above-described embodiments, and various modifications and variations are possible without departing from the spirit and scope of the invention. Therefore, the following claims are appended to apprise the public of the scope of the invention. [Explanation of symbols]

[0079] 301 Local UI, 302 Remote UI, 303 User authentication service, 101 MFP

Claims

1. a user interface means for display to and input by a user; and a control means, The control means displaying a software keyboard for inputting a password by the user interface means; When the password strength meter showing the strength of a password is displayed by the user interface means, Calculate the strength of the password entered from the software keyboard; The password strength meter, which indicates the strength of the input password, is displayed on the software keyboard.

23. An information processing apparatus comprising:

2. 2. The information processing device according to claim 1, The password strength meter further includes a storage unit for storing a first setting by a user, the first setting indicating whether the password strength meter is to be displayed or not; The case where the password strength meter indicating the strength of the password is displayed by the user interface means is when the display of the password strength meter is set in the first setting.

23. An information processing apparatus comprising:

3. 3. The information processing device according to claim 2, The case where the password strength meter indicating the strength of a password is displayed by the user interface means is when the display of the password strength meter is set in the first setting and the password is input for setting the password.

23. An information processing apparatus comprising:

4. 3. The information processing device according to claim 2, the storage means further stores a second setting indicating that a password having a strength equal to or less than a reference value will not be accepted; When the first setting is set to display the password strength meter and the second setting is set to not accept the setting of a password whose strength is equal to or less than a reference value, the control means does not accept the setting of a password whose strength is equal to or less than the reference value.

23. An information processing apparatus comprising:

5. 3. The information processing device according to claim 2, The control means displays a user interface for receiving the first setting by the user interface means.

23. An information processing apparatus comprising:

6. 5. The information processing device according to claim 4, The control means displays a user interface for receiving the second setting by the user interface means.

23. An information processing apparatus comprising:

7. 2. The information processing device according to claim 1, The control means displays the password to be input on the software keyboard for inputting a password, and displays the password strength meter in a free area of ​​the software keyboard that does not overlap with the password.

23. An information processing apparatus comprising:

8. 2. The information processing device according to claim 1, The control means turns off the password strength meter after displaying it for a certain period of time.

23. An information processing apparatus comprising:

9. 2. The information processing device according to claim 1, The control means changes a display position of the password strength meter in accordance with characters inputted through the software keyboard.

23. An information processing apparatus comprising:

10. A program for causing a computer to function as the information processing device according to any one of claims 1 to 9.

11. 10. The information processing device according to claim 1 , Further comprising an image forming means 23. An information processing apparatus comprising:

12. 1. A method for displaying password strength by an information processing device having a user interface means for displaying to a user and for input by the user and a control means, comprising: the control means displays, by the user interface means, a software keyboard for inputting a password; In a case where the control means displays a password strength meter indicating the strength of a password by the user interface means, Calculate the strength of the password entered from the software keyboard; The password strength meter, which indicates the strength of the input password, is displayed on the software keyboard.

13. A method for displaying password strength, comprising:

Images