Pass-word managing system and pass-word managing method

Claim 2

In a pass-word managing system including a remote host and at least one or more local hosts connected to said remote host through a network, a pass-word managing method comprising the steps of: registering, in a pass-word table in said remote host, with respect to each of a plurality of authorized users, a user ID for identifying one of said authorized users of interest and a corresponding present pass-word for authenticating said authorized user of interest; enciphering the present pass-word and a new pass-word input by a user, with said present pass-word utilized as an enciphering key; transmitting a pass-word updating request including a user ID of said user, the enciphered present pass-word and the enciphered new pass-word to said remote host through said network from said local host; deciphering said pass-word updating request, with said present pass-word utilized as a deciphering key; and updating, a present pass-word registered in said pass-word table with the new pass-word included in said pass-word updating request only when the present pass-word included in said pass-word updating request matches the present pass-word registered in said pass-word table and the user ID included in said pass-word updating request matches a user ID registered in said pass-word table corresponding to the present pass-word registered in said pass-word table.

Claim 3

A pass-word managing method according to claim 1, wherein, for using the present pass-word as the enciphering key and the deciphering key, when a pass-word length is longer than the key length which is determined by a corresponding enciphering or deciphering method, only data from the head of the present pass-word having a length corresponding to the key length is used as the corresponding enciphering or deciphering key, and when the pass-word length is shorter than the key length, Null (Hex"00" ) is added to an end of the present pass-word until the length of the present pass-word matches the key length so as to use the resultant data as either of the enciphering key and deciphering key.

Claim 4

A pass-word managing method according to claim 1, wherein MULTI2 is used as the algorithm of enciphering/deciphering.

Claim 5

A pass-word managing system, comprising: a remote host; and at least one or more local hosts connected to said remote host through a network, wherein said local host comprises: a pass-word data input unit for receiving a pass-word updating request from a user and receiving, as an input, a user ID assigned uniquely to the user in said system, a present pass-word for authenticating the user and a new pass-word, an enciphering unit for enciphering both the present pass-word and the new pass-word, which have been input to said pass-word data input unit, using the present pass-word as an enciphering key, a pass-word updating request producing unit for producing a pass-word updating request frame including the user ID which has been input to said pass-word data input unit, the enciphered present pass-word and the enciphered new pass-word, and a transmission unit for transmitting the pass-word updating request frame to said remote host; and said remote host comprises: a pass-word table in which, with respect to each of a plurality of authorized users, both the user ID and the present pass-word are registered, a reception unit for receiving the pass-word updating request frame transmitted from said local host; a deciphering unit for deciphering the enciphered portion of the pass-word updating request, frame with the present pass-word registered in said pass-word table corresponding to the user ID included in the pass-word updating request frame serving as a deciphering key, and a pass-word control unit for updating the present pass-word registered in said pass-word table with the new pass-word in the pass-word updating request frame only when the present pass-word included in said pass-word updating request frame matches the present pass-word registered in said pass-word table corresponding to the user ID included in said pass-word updating request frame.

Claim 6

A pass-word managing system, comprising: a remote host; and at least one or more local hosts connected to said remote host through a network, wherein said local host comprises: a pass-word data input unit for receiving a pass-word updating request from a user and receiving, as an input, a user ID assigned uniquely to the user in said system, a present pass-word for authenticating the user and a new pass-word, an enciphering unit for enciphering both the present pass-word and the new pass-word, which have been input to said pass-word data input unit, using the present pass-word as an enciphering key, a pass-word updating request producing unit for producing a pass-word updating request frame including the user ID which has been input to said pass-word data input unit, the enciphered present pass-word and the enciphered new pass-word, and a transmission unit for transmitting the pass-word updating request frame to said remote host; and said remote host comprises: a pass-word table in which, with respect to each of a plurality of authorized users, both the user ID and the present pass-word are registered, a reception unit for receiving the pass-word updating request frame transmitted from said local host; a deciphering unit for deciphering the enciphered portion of the pass-word updating request, frame with the present pass-word registered in said pass-word table corresponding to the user ID included in the pass-word updating request frame serving as a deciphering key, and a pass-word control unit for updating the present pass-word registered in said pass-word table with the new pass-word in the pass-word updating request frame only when the present pass-word included in said pass-word updating request frame matches the present pass-word registered in said pass-word table corresponding to the user ID included in said pass-word updating request frame.

Claim 7

A program storage device readable by a machine, tangibly embodying a program of instructions executable by the machine, the machine being connected to a host machine via a network, to perform a method for updating pass-words managed in said host machine, said method comprising the steps of: receiving a pass-word updating request including a user ID for identifying each authorized user, a present pass-word for authenticating the authorized user, and a new pass-word input from a user; enciphering the present pass-word and the new pass-word using the present pass-word as an enciphering key; generating a pass-word updating request frame including the user ID and the enciphered present pass-word and enciphered new pass-word; and transmitting the pass-word updating request frame to said host machine via the network.

Claim 8

A program storage device readable by a machine, tangibly embodying a program of instructions executable by the machine, the machine being connected to a host machine via a network, to perform a method for updating pass-words managed in said host machine, said method comprising the steps of: receiving a pass-word updating request including a user ID for identifying each authorized user, a present pass-word for authenticating the authorized user, and a new pass-word input from a user; enciphering the present pass-word and the new pass-word using the present pass-word as an enciphering key; generating a pass-word updating request frame including the user ID and the enciphered present pass-word and enciphered new pass-word; and transmitting the pass-word updating request frame to said host machine via the network.

Claim 9

A program storage device readable by a machine, tangibly embodying a program of instructions executable by the machine, the machine being connected to at least one local machine via network, to perform a method for updating pass-words in a pass-word table having pairs of a user ID for identifying each authorized user and a present pass-word for authenticating the authorized user stored in the machine, said method comprising the steps of: receiving a pass-word updating request frame including the user ID, the present pass-word in enciphered form and a new pass-word in enciphered form from the local machine via the network; obtaining from the pass-word table a present pass-word corresponding to the user ID included in said pass-word updating request frame; deciphering the enciphered present pass-word and enciphered new pass-word in the received pass-word updating request frame using the present pass-word obtained from the pass-word table as a deciphering key; comparing the present pass-word obtained from the pass-word table with the present pass-word obtained from the received pass-word updating request frame; and when both present pass-words match, updating the pass-word table by replacing the present pass-word obtained from the pass-word table with the new pass-word deciphered in said deciphering step.

Claim 10

A program storage device readable by a machine, tangibly embodying a program of instructions executable by the machine, the machine being connected to at least one local machine via network, to perform a method for updating pass-words in a pass-word table having pairs of a user ID for identifying each authorized user and a present pass-word for authenticating the authorized user stored in the machine, said method comprising the steps of: receiving a pass-word updating request frame including the user ID, the present pass-word in enciphered form and a new pass-word in enciphered form from the local machine via the network; obtaining from the pass-word table a present pass-word corresponding to the user ID included in said pass-word updating request frame; deciphering the enciphered present pass-word and enciphered new pass-word in the received pass-word updating request frame using the present pass-word obtained from the pass-word table as a deciphering key; comparing the present pass-word obtained from the pass-word table with the present pass-word obtained from the received pass-word updating request frame; and when both present pass-words match, updating the pass-word table by replacing the present pass-word obtained from the pass-word table with the new pass-word deciphered in said deciphering step.