Information processing system and computer-readable recording medium

• US 20090249447A1
• Filed: 03/20/2009
• Published: 10/01/2009
• Est. Priority Date: 09/08/2006
• Status: Active Grant

• Current Assignee: Passlogy Co.,Ltd.
• Original Assignee: Passlogy Co.,Ltd.
• Inventors: Ogawa, Hideharu
• Granted Patent: US 8,281,380 B2
• Time in Patent Office: Days
• US Class Current: 726/4
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083

Abstract

When a user makes a remote log-in to a server apparatus from a terminal apparatus, a password managing apparatus, which manages the name of a user of the server apparatus, his/her direct log-in password and transformation rule, displays an authentication purpose symbol sequence on a display apparatus. The user transforms the displayed sequence by his/her transformation rule and supplies, via the terminal apparatus, his/her user name and the post-transformation symbol sequence to the server apparatus, which then sends them to the password managing apparatus. If the result of applying the user'"'"'s transformation rule to any authentication purpose symbol sequence generated in the past coincides with the post-transformation symbol sequence, the password managing apparatus sends the direct log-in password to the server apparatus to pass the remote log-in to the server apparatus by the terminal apparatus as a success.

Claims

1. An information processing system, comprising a server apparatus, a password managing apparatus, a display apparatus, and a terminal apparatus,

wherein (a) said server apparatus includes:

a log-in permission determining unit that determines whether or not to permit a log-in to said server apparatus based on a combination of a user name and a password that are supplied thereto;

a data processing unit that, in response to an instruction entry that is given by a user who is permitted by said log-in permission determining unit to log in, performs data processing corresponding to the instruction entry, and outputs a result of the data processing as a process output;

a direct log-in entry receiving unit that receives an entry of a user name and a password of a direct user; and

a direct processing unit that supplies a combination of the user name and the password that are entered to said log-in permission determining unit, and when it is determined that a log-in to said server apparatus is permitted, receives an instruction entry from the direct user, supplies the instruction entry to said data processing unit, and presents the direct user with a process output that is output by said data processing unit in response to the instruction entry,

wherein (b) said password managing apparatus includes a user information storage unit that stores a user name, a password assigned to the user name, and a transformation rule assigned to the user name in association,

wherein (c) said display apparatus includes a symbol sequence request sending unit that sends an authentication purpose symbol sequence request to said password managing apparatus,

wherein (d) said password managing apparatus further includes;

a symbol sequence request receiving unit that receives the authentication purpose symbol sequence request sent by said display apparatus;

a symbol sequence generating unit that generates an authentication purpose symbol sequence in response to the received authentication purpose symbol sequence request;

a symbol sequence retaining unit that retains the generated authentication purpose symbol sequence until a predetermined elapse time passes; and

a symbol sequence response sending unit that sends an authentication purpose symbol sequence response in which the generated authentication purpose symbol sequence is specified to said display apparatus,

wherein (e) said display apparatus further includes;

a symbol sequence response receiving unit that receives the authentication purpose symbol sequence response sent by said password managing apparatus; and

a symbol sequence displaying unit that displays the authentication purpose symbol sequence specified in the received authentication purpose symbol sequence response,

wherein (f) said terminal apparatus includes;

a remote log-in entry receiving unit that receives an entry of a user name of a remote user who uses said terminal apparatus, and of a post-transformation symbol sequence that is obtained by the remote user by transforming the authentication purpose symbol sequence displayed on said display apparatus based on a transformation rule assigned to the user name; and

a remote log-in request sending unit that sends a remote log-in request in which the user name and the post-transformation symbol sequence that are entered are specified to said server apparatus,

wherein (g) said server apparatus further includes;

a remote log-in request receiving unit that receives the remote log-in request sent by said terminal apparatus; and

a password request sending unit that sends a password request in which the user name and the post-transformation symbol sequence that are specified in the received remote log-in request are specified to said password managing apparatus,

wherein (h) said password managing apparatus further includes;

a password request receiving unit that receives the password request sent by said server apparatus;

a provision determining unit that determines whether a password provision condition is satisfied or not; and

a password response sending unit that, in a case where it is determined that the password provision condition is satisfied, sends a password response in which the password that is stored in association with the user name specified in the received password request is specified to said server apparatus,

wherein the password provision condition is satisfied in a case where any of results of applying the transformation rule stored in association with the user name specified in the received password request to each of authentication purpose symbol sequences that are retained coincides with the post-transformation symbol sequence specified in the received password request,

wherein (i) said server apparatus further includes;

a password response receiving unit that receives the password response sent by said password managing apparatus; and

a remote log-in response sending unit that supplies a combination of the user name specified in the received remote log-in request and the password specified in the received password response to said log-in permission determining unit, and sends a remote log-in response for permitting a remote log-in to said terminal apparatus, in a case where said log-in permission determining unit determines to permit a log-in to said server apparatus,

wherein (j) said terminal apparatus further includes;

a remote log-in response receiving unit that receives the remote log-in response sent by said server apparatus; and

a terminal relay unit that, in a case where a remote log-in by the remote user who uses said terminal apparatus is successful, receives an instruction entry directed by the remote user to said server apparatus from the remote user, relays the instruction entry to said server apparatus, receives a process output directed by said server apparatus to the remote user from said server apparatus, and presents the process output to the remote user,

wherein said terminal relay unit determines that a remote log-in by the remote user who uses said terminal apparatus is successful, in a case where the remote log-in response is received, and

wherein (k) said server apparatus further includes a remote processing unit that supplies the instruction entry from the remote user that is relayed by said terminal apparatus to said data processing unit, and relays the process output that is output by said data processing unit in response to the instruction entry to said terminal apparatus to present the process output to the remote user.

2. The information processing system according to claim 1,

wherein in said password managing apparatus, said symbol sequence generating unit generates the authentication purpose symbol sequence by

(p) randomly selecting and arranging a plurality of symbols, or

(q) randomly selecting any of a plurality of predetermined authentication purpose symbol sequence prospects, or

(r) applying a predetermined conversion to a present time.

3. The information processing system according to claim 1 or 2,

wherein in said password managing apparatus, a password stored in said user information storage unit is an encrypted password obtained by applying a predetermined encryption, and

wherein in said server apparatus, said remote log-in response sending unit supplies a combination of the user name specified in the received remote log-in request and a decrypted password obtained by decrypting the encrypted password specified in the received password response by a decryption manner corresponding to the predetermined encryption to said log-in permission determining unit.

4. The information processing system according to claim 3,

wherein (l) said server apparatus further includes:

a new password entry receiving unit that receives an entry of a user name and a password that is newly assigned to the user name; and

a new password registration request sending unit that sends a new password registration request in which the entered user name, and an encrypted password obtained by encrypting the entered newly assigned password by the predetermined encryption are specified to said password managing apparatus,

wherein said log-in permission determining unit determines to permit a log-in to said server apparatus, in a case where it is supplied with a combination of the entered user name and the entered newly assigned password,

wherein (m) said password managing apparatus further includes;

a new password registration request receiving unit that receives the new password registration request sent by said server apparatus; and

a new password updating unit that updates said user information storage unit by storing the user name specified in the received new password registration request in association with the encrypted password specified in the received new password registration request.

5. The information processing system according to claim 4,

wherein the predetermined encryption is performed based on a passphrase assigned to the user concerned,

wherein in said terminal apparatus, said remote log-in entry receiving unit receives an entry of a passphrase assigned to the user concerned, in addition to an entry of the user name and the post-transformation symbol sequence, and

wherein said remote log-in response sending unit supplies a combination of the user name specified in the received remote log-in request, and a decrypted password obtained by decrypting the encrypted password specified in the received password response based on the entered passphrase to said log-in permission determining unit.

6. The information processing system according to claim 1,

wherein in said password managing apparatus,

said user information storage unit further stores, in association with the user name, an identifier symbol of said display apparatus assigned to the user name,

said symbol sequence retaining unit retains the generated authentication purpose symbol sequence in association with the identifier symbol of a sender of the received authentication purpose symbol sequence request, and

the password provision condition is satisfied in a case where a result of applying the transformation rule stored in association with the user name specified in the received password request to the authentication purpose symbol sequence retained in association with the identifier symbol stored in association with the user name specified in the received password request coincides with the post-transformation symbol sequence specified in the received password request.

7. The information processing system according to claim 1,

wherein said terminal apparatus further functions as said display apparatus.

8. A computer-readable information recording medium that stores a program for controlling a computer to function as each unit of said server apparatus in said information processing system according to claim 1.

9. A computer-readable information recording medium that stores a program for controlling a computer to function as each unit of said password managing apparatus in said information processing system according to claim 1.