Password generation and management device, password generation and management method, and program

Abstract

The system generates passwords that are easy for users to use while discouraging users from reusing passwords. [Solution] The password generation and management device includes a first string generation unit that generates a first string, a display control unit that displays a display screen including a first display area that displays the first string, an input field that accepts input of a second string from a user, and a second display area that displays a password obtained by concatenating or inserting the first string into the second string, and a password generation unit that generates a password.

Description

Technical Field

[0001] The present invention relates to a password generation management device, a password generation management method, and a program.

Background Art

[0002] By "reusing passwords" using the same ID and password for different web services, the risk of unauthorized access to other web services with the leaked password increases. Therefore, web services need to take measures to prevent unauthorized access, such as raising awareness about password reuse, setting password expiration periods, prohibiting changes to previously used passwords, and defining password policies to prohibit easily guessable passwords. Patent Document 1 discloses a password generation device that converts a text received from a user according to a password policy and generates a password from the text.

Prior Art Documents

Patent Documents

[0003]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0004] However, in the above-described technology, even if a user enters a string that is easy to remember or easy to input for themselves, it will be replaced with another string unintended by the user, so a password that is necessarily easy to use for the user is not always generated.

[0005] The present invention has been made in view of such circumstances, and an object thereof is to provide a password generation management device, a password generation management method, and a program that can generate a password that is easy for a user to use while suppressing password reuse by the user. [Means for solving the problem]

[0006] To solve the above-mentioned problems, one aspect of the present invention is a password generation and management device comprising: a first string generation unit for generating a first string; a display control unit that displays a display screen including a first display area for displaying the first string; an input field for receiving input of a second string from a user; and a second display area for displaying a password obtained by concatenating or inserting the first string into the second string; and a password generation unit for generating the password.

[0007] Furthermore, one aspect of the present invention is a password generation and management method performed by a computer used in a password generation and management device, which generates a password by displaying a display screen that includes a first display area for generating and displaying a first string, an input field for receiving input of a second string from a user, and a second display area for displaying a password obtained by concatenating or inserting the first string into the second string.

[0008] Furthermore, one aspect of the present invention is a program that causes a computer used in a password generation and management device to generate a first string, to display a display screen including a first display area for displaying the first string, an input field for receiving input of a second string from a user, and a second display area for displaying a password obtained by concatenating or inserting the first string into the second string, and to generate the password. [Effects of the Invention]

[0009] As explained above, this invention makes it possible to generate passwords that are easy for users to use while suppressing the reuse of passwords by users. [Brief explanation of the drawing]

[0010] [Figure 1] This is a schematic block diagram showing the configuration of the password generation and management device according to this embodiment. [Figure 2] This is an image diagram showing an example of a password setting screen displayed by the password generation and management device according to this embodiment. [Figure 3] This is an image diagram showing an example of a password setting screen displayed by the password generation and management device according to this embodiment. [Figure 4] This is an image diagram showing an example of a password setting screen displayed by the password generation and management device according to this embodiment. [Figure 5] This flowchart shows an example of the processing flow in the password generation and management device according to this embodiment. [Figure 6] This is an illustrative diagram showing an example of inputting a position for concatenating or otherwise modifying the first string. [Figure 7] This is an image illustrating an example of inputting a change instruction for the first string. [Figure 8] This is an image illustrating an example of inputting a change instruction for the first string. [Modes for carrying out the invention]

[0011] Hereinafter, a password generation and management device, a password generation and management method, and a program according to one embodiment of the present invention will be described with reference to the drawings.

[0012] <Configuration of password generation and management device 100> Figure 1 is a schematic block diagram showing the configuration of the password generation and management device 100 according to this embodiment. The password generation and management device 100 is an information processing device that generates passwords for use by users in web services, etc. (for example, for logging into a website). The password generation and management device 100 is connected to a user terminal 200 used by the user via a communication network NW such as the Internet.

[0013] The user terminal 200 is an information terminal operated by the user. For example, a smartphone, tablet, or PC (Personal Computer) can be used as the user terminal 200.

[0014] As shown in Figure 1, the user terminal 200 comprises a control unit 210, an input unit 220, a communication unit 230, and a display unit 240. The control unit 210 has the function of controlling the overall operation of the user terminal 200. The control unit 210 is realized, for example, by having the CPU (Central Processing Unit) provided as hardware in the user terminal 200 execute a program. The input unit 220 has the function of receiving input from the user. The function of the input unit 220 is realized, for example, by a mouse, keyboard, buttons, touch panel, microphone, etc. provided in the user terminal 200. The communication unit 230 has the function of sending and receiving various information. The communication unit 230 communicates with external devices by wired or wireless connection. The display unit 240 has the function of displaying various information. The display unit 240 is composed of a display device such as a display device or touch screen (touch panel) provided as hardware in the user terminal 200.

[0015] The communication network NW may be any or a combination of the following: the Internet, a Public Land Mobile Network (PLMN), a Local Area Network (LAN), or a Virtual Personal Network (VPN).

[0016] As shown in FIG. 1, the password generation management device 100 includes a control unit 110, a communication unit 120, and a storage unit 130. The control unit 110 has a function of controlling the overall operation of the password generation management device 100. The control unit 110 is realized, for example, by causing a CPU (Central Processing Unit) included in the password generation management device 100 as hardware to execute a program. The control unit 110 includes a first character string generation unit 111, a second character string input unit 112, a display control unit 113, and a password generation unit 114.

[0017] The first character string generation unit 111 generates a first character string to be included in the password. For example, the first character string generation unit 111 randomly generates a character string of a specific number of characters. The number of characters of the first character string (for example, 2 characters, etc.) may be set in advance in the password generation management device 100. For example, the number of characters of the first character string can be arbitrarily set by an administrator or the like. For example, according to a policy for each web service, the number of characters may be determined for each web service. Note that the first character string generation unit 111 may generate first character strings of different numbers of characters each time it generates.

[0018] The second character string input unit 112 receives an input of a second character string arbitrarily set by the user from the user.

[0019] The display control unit 113 displays a display screen (a password setting screen described later) including a first display area for displaying the first character string, an input field for receiving an input of the second character string from the user, and a second display area for displaying a password obtained by concatenating the first character string and the second character string. Here, each time the user inputs a character in the input field, the display control unit 113 causes the second character string at the input stage to be displayed in the second display area.

[0020] The password generation unit 114 generates a password by concatenating a first string and a second string. For example, the password generation unit 114 generates a password by concatenating the first string to the beginning or end of the second string. The password generation unit 114 may also insert the first string at any position in the second string (for example, the second character from the beginning, the third character from the end, in the middle, etc.), not just at the beginning or end. The password generation unit 114 writes the generated password to the password information storage unit 131, which will be described later, in association with the user's user ID. The user ID is identification information that identifies each user.

[0021] The communication unit 120 has the function of sending and receiving various types of information. The communication unit 120 communicates with external devices via wired or wireless connection.

[0022] The storage unit 130 has the function of storing various types of information. The storage unit 130 is composed of storage media provided as hardware by the password generation and management device 100, such as HDD (Hard Disk Drive), SSD (Solid State Drive), flash memory, EEPROM (Electrically Erasable Programmable Read Only Memory), RAM (Random Access read / write Memory), ROM (Read Only Memory), or any combination of these storage media. The storage unit 130 includes a password information storage unit 131. The password information storage unit 131 is a database that stores user IDs and passwords in association with each other.

[0023] <Processing by password generation and management device 100> Next, with reference to Figures 2 to 5, the processes executed by the password generation and management device 100 according to this embodiment will be described.

[0024] Figures 2 to 4 are illustrative diagrams showing an example of a password setting screen 300 displayed by the password generation and management device 100 according to this embodiment. The display control unit 113 displays the password setting screen 300 shown in these figures on the user terminal 200, for example, when a user registers for a new web service or changes the password for a web service. For example, the display control unit 113 sends information to the user terminal 200 for displaying the password setting screen 300. The user terminal 200 displays the password setting screen 300 based on the information received from the password generation and management device 100.

[0025] As shown in Figure 2, the password setting screen 300 includes a first display area 301 for displaying a first string and an input field 302 for receiving input from the user for a second string to be included in the password. The first string generation unit 111 generates the first string when displaying the password setting screen 300. In this embodiment, the first string generation unit 111 randomly generates a two-character string. In the illustrated example, the first string is "ZQ". The display control unit 113 may display the first display area 301 and the input field 302 in different display modes (for example, different colors, patterns, background colors, borders, fonts, character sizes, etc.). For example, the display control unit 113 may hide the border of the first display area 301 and display the border of the input field 302.

[0026] Furthermore, the display control unit 113 may display the password policy to be set (in the illustrated example, "6 to 18 alphanumeric characters") near the input field 302. The display control unit 113 may also display text on the password setting screen 300 prompting the user to enter a second string, such as "If you wish to change your password, please enter a new password."

[0027] As shown in Figure 3, the user enters a second string to be included in the password into the input field 302. When the user starts typing characters into the input field 302, the display control unit 113 displays a second display area 303 on the password setting screen 300 that displays the password formed by concatenating the first string and the second string, and a button 304 to confirm the password. In the illustrated example, the display control unit 113 concatenates the first string "ZQ" to the beginning of the second string "pas" entered by the user. Here, the display control unit 113 displays the second string at the input stage in the second display area 303 each time the user enters a character into the input field 302 (for example, one character at a time). For example, when the user enters the first character "p" of "password" into the input field 302, the display control unit 113 displays the string "ZQp", which is formed by concatenating the first string "ZQ" and the second string "p", in the second display area 303. Then, when the user enters "pa" in the input field 302, the display control unit 113 displays "ZQpa" in the second display area 303, and when the user enters "pas" in the input field 302, it displays "ZQpas" in the second display area 303. In other words, the display control unit 113 updates the display in the second display area 303 in real time according to the user's input. By displaying the password, which is the concatenation of the first string and the second string, in real time, the user can decide which second string to add to the first string while sequentially checking the concatenated string (i.e., the entire password). In other words, the user can decide on a password that is easy for them to remember or enter while visually checking it.

[0028] Then, as shown in Figure 4, the user enters the second string "password" that they have decided on into the input field 302. The display control unit 113 displays the string "ZQpassword", which is a concatenation of the first string "ZQ" and the second string "password", in the second display area 303 in response to the user's input. At this time, the display control unit 113 may display the first string "ZQ" and the second string "password" in the second display area 303 using different display methods (for example, different colors, patterns, background colors, fonts, font sizes, etc.). For example, the display control unit 113 may display the first string in red and the second string in blue in the second display area 303. By displaying the first string and the second string in different display methods, the user can easily distinguish between the first string set by the system and the second string set by themselves.

[0029] Then, the user decides on a password and presses button 304. When the password generation unit 114 receives the input of pressing button 304 on the password setting screen 300, it generates the string "ZQpassword" by concatenating the first string "ZQ" and the second string "password" as the user's password. The password generation unit 114 then associates the generated password with the user's user ID and writes it to the password information storage unit 131. The display control unit 113 then transitions the display to a screen notifying the user that their password has been confirmed.

[0030] In the example described above, the password generation unit 114 generates a password by concatenating the first string to the beginning of the second string. However, it is not limited to this; for example, the first string may be concatenated to the end of the second string, or the first string may be inserted at any position in the second string.

[0031] <Processing flow> Figure 5 is a flowchart showing an example of the processing flow in the password generation and management device 100 according to this embodiment. The password generation and management device 100 executes the processing shown in this figure when it receives a request from the user terminal 200 for user password setting (for example, when registering a new user) or password change.

[0032] First, the first string generation unit 111 generates a first string (step S101). For example, the first string generation unit 111 randomly generates a string of a specific number of characters (for example, 2 characters).

[0033] Next, the display control unit 113 displays a password setting screen 300 on the user terminal 200, which includes a first display area 301 for displaying the generated first string, an input field 302 for receiving input of a second string from the user, and a second display area 303 for displaying a password obtained by concatenating the first string and the second string (step S102).

[0034] Next, the second string input unit 112 receives input of a second string from the user in the input field 302 of the password setting screen 300 (step S103).

[0035] The display control unit 113 displays a password in the second display area 303, which is a combination of the first string and the second string, in response to user input in the input field 302 (step S104). Once the user has finished entering the second string into the input field 302, they press the button 304 displayed on the password setting screen 300.

[0036] When the password generation unit 114 receives input by pressing button 304 on the password setting screen 300, it generates a password by concatenating the first string and the second string, etc., as the password for that user. The password generation unit 114 then associates the generated password with the user's user ID and writes it to the password information storage unit 131. In this way, the password generation unit 114 sets the password for that user (step S105). The display control unit 113 displays a screen on the user terminal 200 indicating that the password has been set. After that, the process ends.

[0037] As described above, the password generation and management device 100 according to this embodiment comprises a first string generation unit 111, a display control unit 113, and a password generation unit 114. The first string generation unit 111 generates a first string. The display control unit 113 displays a display screen (password setting screen 300) which includes a first display area 301 for displaying the first string, an input field 302 for receiving input of a second string from the user, and a second display area 303 for displaying a password obtained by concatenating or inserting the first string into the second string. The password generation unit 114 generates a password.

[0038] With this configuration, the password generation and management device 100 according to this embodiment can automatically generate a password that includes a second string entered by the user. By automatically generating a password, security can be enhanced without affecting existing password authentication functions (e.g., login screens). Furthermore, because the password includes a second string entered by the user, it is possible to generate a password that is easier for the user to remember compared to when the system specifies all the strings. By concatenating the first string with the second string, even if the second string is the same as a password for another web service, a password different from the password for that other web service can be generated. In other words, the risk of generating a password identical to that of another web service can be reduced. In addition, by including a second display area 303 in the password setting screen 300, the user can decide on the second string while checking the entire password after concatenating the first string with the second string. This reduces the likelihood of uniform passwords while allowing users to set passwords that are easy to remember or enter. This suppresses the reuse of passwords by users while generating passwords that are easy for users to use.

[0039] Furthermore, the password generation and management device 100 according to this embodiment displays the second string at the input stage in the second display area 303 each time the user enters characters into the input field 302. With this configuration, the password generation and management device 100 according to this embodiment updates the display in the second display area 303 in real time according to the user's input. This allows the user to easily see in real time what the password will look like when the second string is added to the first string. This allows the user to decide which second string to add to the first string, while checking what kind of string would be easy to remember or easy to input.

[0040] Furthermore, the password generation and management device 100 according to this embodiment displays the first string and the second string in the second display area 303 in different display modes. This allows the user to easily distinguish between the first string set by the system and the second string set by themselves.

[0041] Furthermore, the password generation and management device 100 according to this embodiment generates a password by concatenating a first string to the beginning or end of a second string. For example, if a user sets a second string that is easy for them to type, inserting the first string between the second strings may make it difficult for the user to type. By concatenating the first string to the beginning or end of the second string, a password can be set without changing the order of the second strings. Therefore, it is possible to reduce the occurrence of uniform passwords while maintaining ease of input.

[0042] Furthermore, the password generation and management device 100 according to this embodiment randomly generates a first string of a specific number of characters. By randomly generating the first string, the risk of using the same password as other web services can be reduced. In addition, by setting the specific number of characters to a small number, such as two characters, it becomes easier for users to remember their passwords.

[0043] In the embodiment described above, the first string generation unit 111 randomly generates a two-character string, but the method of generating the first string is not limited to this. For example, the first string generation unit 111 may generate a string of three or more characters, or it may change the string generated for each user. For example, the first string generation unit 111 may generate a two-character first string for the first user, and a three-character first string for the second user.

[0044] Furthermore, the first string generation unit 111 may generate a string according to certain rules. For example, it may be possible for the administrator to specify some or all of the characters of the first string. For example, the administrator may be able to specify the entire first string. For example, the administrator may be able to specify only "TP" as the first string. In this case, the first string generation unit 111 will always set the first string to "TP". It may also be possible for the administrator to specify multiple first strings. For example, if the administrator limits the first string to the four options "TP", "TO", "PA", and "TN", the first string generation unit 111 will randomly select one of the four options "TP", "TO", "PA", and "TN", and the display control unit 113 will display the selected first string on the password setting screen 300. It may also be possible for the administrator to specify only some of the characters in the first string. For example, if the administrator specifies that the first character of the first string is "T", the first string generation unit 111 randomly generates characters other than the first character (for example, "〇△") and concatenates "T" with "〇△" to create the first string "T〇△". In this case, for example, if the password specified by the user is "password", the display control unit 113 displays "T〇△" + "password" on the password setting screen 300. In this way, by specifying all or part of the first string, the administrator can generate a password that is easy to manage and relatively secure. For example, by specifying characters that conform to the password policy of a web service, the administrator can generate a password that complies with the password policy.

[0045] Furthermore, the first string generation unit 111 may generate the first string based on the password policy of a web service or the like. For example, if the password policy specifies that "symbols must be included," the first string generation unit 111 may generate the first string that includes symbols.

[0046] Furthermore, the password generation unit 114 may change the position at which the first string is concatenated with the second string for each web service or user. For example, the password generation unit 114 may concatenate the first string to the beginning of the second string for the first user, and concatenate the first string to the end of the second string for the second user.

[0047] Alternatively, the password generation unit 114 may change the position at which the first string is concatenated or inserted into the second string, in accordance with the user's instructions. For example, the password generation unit 114 may receive input from the user specifying the position at which the first string is concatenated or inserted, and concatenate the first string at the position specified by the user.

[0048] Figure 6 is an illustrative diagram showing an example of specifying the position to concatenate the first string. For example, the user can change the position to concatenate the first string by tapping (or clicking, etc.) and moving the first display area 301. For example, to change the position to concatenate the first string from the beginning to the end of the second string, the user moves the first display area 301, which is located at the beginning of the input field 302, to the end of the input field 302, as shown in the figure. The password generation unit 114 responds to such user input by setting the concatenation position of the first string to the end of the second string, and generates the password "passwordZQ" by concatenating the first string "ZQ" to the end of the second string "password". The display control unit 113 then displays the generated password "passwordZQ" in the second display area 303.

[0049] Furthermore, the password generation unit 114 may change the first string in response to user instructions. Figures 7 and 8 are illustrative diagrams showing an example of an instruction input for changing the first string. For example, as shown in Figure 7, the display control unit 113 displays a change instruction button 311 near the first display area 301. The change instruction button 311 is an input area that receives input from the user instructing a change to the first string. The user can change the first string by pressing the change instruction button 311. When the change instruction button 311 receives input, the first string generation unit 111 generates a new first string "TT" which is different from the first string "ZQ" before the change.

[0050] Then, as shown in Figure 8, the display control unit 113 updates the displays in the first display area 301 and the second display area 303 to the newly generated modified first string "TT". Note that, not limited to this example, the display control unit 113 may, for example, display multiple candidates for the first string and allow the user to select the first string from among the candidates. In this way, by changing the first string, the user is given the option to select the first string. For example, the user can select a first string that is easy to remember.

[0051] Furthermore, in the embodiment described above, the display control unit 113 displays the first display area 301 before the second string is entered into the input field 302. However, it is not limited to this, and the first display area 301 may be displayed after the input of the second string into the input field 302 is completed, or when the input of the second string into the input field 302 is started.

[0052] In the embodiments described above, the password generation and management device 100 was described as being a terminal device such as a computer. However, at least one of the functions among the first string generation unit 111, the second string input unit 112, the display control unit 113, the password generation unit 114, or the password information storage unit 131 may be provided on a server device connected to the terminal device via a communication network. In this case, the server device may be a physical server or a cloud server provided by a cloud computing service.

[0053] Some or all of the functions of the password generation and management device 100 in the above-described embodiment may be implemented by a computer. In that case, the functions may be implemented by recording a program for implementing these functions on a computer-readable recording medium, loading the program recorded on this recording medium into a computer system, and executing it. Here, "computer system" includes hardware such as an OS and peripheral devices. Furthermore, "computer-readable recording medium" refers to portable media such as flexible disks, magneto-optical disks, ROMs, CD-ROMs, and storage devices such as hard disks built into a computer system. In addition, "computer-readable recording medium" may also include those that dynamically hold programs for a short period of time, such as communication lines used when transmitting programs via networks such as the Internet or communication lines such as telephone lines, and those that hold programs for a certain period of time, such as volatile memory inside a computer system that acts as a server or client in such a case. Furthermore, the above-mentioned program may be for implementing some of the functions described above, or it may be a program that can implement the above-mentioned functions in combination with a program already recorded in the computer system, or it may be implemented using a programmable logic device such as an FPGA (Field Programmable Gate Array).

[0054] Although embodiments of this invention have been described in detail above with reference to the drawings, the specific configuration is not limited to these embodiments and includes designs and the like that do not depart from the spirit of this invention. [Explanation of symbols]

[0055] 100 Password generation and management device 110 Control Unit 111 First string generation unit 112 Second string input section 113 Display Control Unit 114 Password generation section 120 Communications Department 130 Storage section 200 user terminals 210 Control Unit 220 Input section 230 Communications Department 240 Display section 300 Password setting screen 301 First display area 302 Input field 303 Second display area

Claims

1. A first string generation unit that generates a first string, A display control unit that displays a display screen including a first display area for displaying the first string, an input field for receiving input of a second string from a user, and a second display area for displaying a password obtained by concatenating or inserting the first string into the second string, A password generation unit that generates the aforementioned password, A password generation and management device equipped with the following features.

2. The display control unit causes the second string at the input stage to be displayed in the second display area each time the user enters characters into the input field. The password generation and management device according to claim 1.

3. The first string generation unit modifies the first string in accordance with the user's instructions. The display control unit updates the display in the first display area and the second display area to the first string that has been changed in accordance with the user's instructions. The password generation and management device according to claim 1.

4. The display control unit displays an input area on the display screen that receives input from the user instructing a change to the first string. The password generation and management device according to claim 3.

5. The password generation unit changes the position in which the first string is concatenated or inserted into the second string, in accordance with the user's instructions. The password generation and management device according to claim 1.

6. The display control unit displays the first string and the second string in the second display area in different display modes. The password generation and management device according to claim 1.

7. The password generation unit generates a password by concatenating the first string with the second string. The password generation and management device according to claim 1.

8. The first string generation unit randomly generates the first string of a specific number of characters. The password generation and management device according to claim 1.

9. A password generation and management method performed by a computer used in a password generation and management device, Generate the first string, A display screen is displayed that includes a first display area for displaying the first string, an input field for receiving input of a second string from the user, and a second display area for displaying a password obtained by concatenating or inserting the first string into the second string. To generate the aforementioned password, Password generation and management methods.

10. The computer used in the password generation and management device, Generate the first string, A display screen is displayed that includes a first display area for displaying the first string, an input field for receiving input of a second string from the user, and a second display area for displaying a password obtained by concatenating or inserting the first string into the second string. To generate the aforementioned password, program.

Images