JPH1125051A - Information system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To improve operability by allowing a user to input only one certification information for easily operating a certification processing for a host device or the information afterwards. SOLUTION: A certification information storage device 9 stores second certification information requested for connecting a terminal equipment 8 with a host device, and first certification information for protecting the second certification information from being leaked to the others. Host devices A1, B2, and C3 corresponding to a word wide web(WWW) connected with an internet 4 request the second certification information for confirming that a user 10 is a legal user at the time of connection with the terminal equipment 8. The user 10 inputs the first certification information only once so that the second certification information can be automatically transmitted when the second certification information is requested for each specific host device or specific document as long as the necessary second certification information is preliminarily stored in the certification information storage device 9.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to user authentication for specific information or a specific host device. In particular, when user authentication information differs for each target information or for each host device, the user can use the plurality of authentication information items. For information systems that do not need to remember.

[0002]

2. Description of the Related Art In recent years, as represented by the World Wide Web (document system developed by the European Institute for Nuclear Physics, hereafter referred to as WWW), which has been rapidly spreading on the Internet, an information providing system on a network (WWW) has been developed. For example, in a WWW server, there is a case where not only connection to a specific host device but also authentication of the user is required for the specific information in the host device after the authentication of the host device is completed.

In this case, the user needs to transmit the authentication information acquired in advance to the host device each time.

[0004]

However, in some cases, the authentication information is determined for the convenience of the administrator of the host device. In such a case, the authentication information differs for each host device or for each information. It is customary. However, this requires the user to remember all necessary authentication information, which is very troublesome.

[0005] Moreover, it is necessary to handle the authentication information so as not to leak to anyone other than the user himself.

An object of the present invention has been made in view of the above points, and the object is that the user only needs to input one piece of authentication information, and thereafter, the authentication process for the host device or the information is simplified. To be able to do it.

[0007]

The gist of the present invention to achieve the above object is to store a plurality of pieces of authentication information to be transmitted to a host device, and to store the authentication information separately from the information transmitted to read out the authentication information. An authentication information storage device having a function for confirming authentication information separately provided and having a terminal device having a function of writing authentication information to the authentication information storage device or reading authentication information from the authentication information storage device is provided. .

[0008]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS The details of the present invention will be described below with reference to embodiments shown in the drawings.

FIG. 1 is a conceptual diagram of an information system according to a first embodiment of the present invention. In this embodiment,
FIG. 1 shows an example of obtaining information required by a user 10 from a WWW server on the Internet 4 using a protocol.

In FIG. 1, reference numerals 1, 2 and 3 denote host devices A, B and C corresponding to WWW which store information and are connected to the Internet 4 and which are used when connecting to a terminal device 8 which will be described later. The second authentication information is requested in order to confirm that the user 10 is an authorized user. Reference numeral 4 denotes a network which enables transmission and reception of information between the host device and the user 10, and reference numeral 5 denotes an Internet provider which mediates between the user 10 and the Internet 4 by contract. Reference numeral 6 denotes a public network connecting the user 10 and the Internet provider 5;
Is a public line connecting the public line network 6 to the terminal device 8.

Reference numeral 8 denotes a terminal device used by the user 10 to retrieve information from the WWW. The terminal device 8 includes a browser software 12 for using the WWW described later, and can display information and input from the user. It has a function and can read and write data stored in an authentication information storage device 9 described later. Numeral 9 stores second authentication information required to connect the terminal device 8 to the host device, and first authentication information for protecting the second authentication information from leaking out. When reading and writing the second authentication information, the function for performing the authentication process in advance using the first authentication information is always built-in, and the function for selectively reading and writing the second authentication information according to the search condition described later with reference to FIG. It is an authentication information storage device also provided with.

Reference numeral 10 denotes a user of the present system, and 11 denotes a protocol packet carrying information data on the Internet 4 and the public line 7 between the host device and the terminal device 8.

Reference numeral 12 denotes browser software which communicates with the host device by a protocol and presents a document stored in the host device to the user 10 by a display function of the terminal device 8. Browser software 12 is user 10
A function of accessing the Internet 4 based on the information representing the host device and the document name input from the server, detecting that authentication information is requested from the host device, reading the authentication information from the authentication information storage means 9, and transmitting the authentication information. If the second authentication information cannot be read because the authentication of the first authentication information has not been completed yet, the user 1 is prompted to input the first authentication information.
It has a function to request 0.

FIG. 2 shows a host device A1,
"User ID" required to acquire information from host device B2 and host device C3, "authentication information" corresponding to each, and "server name" representing each host
Is shown. Here, the authentication information of the host device B2 and the authentication information of the host device C3 are the same, but all other items require different information, and it is troublesome to learn all of them.

FIG. 3 shows a state in which the browser software 12 requests the user 10 for the first authentication information for enabling the reading and writing of the authentication information storage device 9 in this embodiment. Is an authentication information input field for inputting the first authentication information.

FIG. 4 shows the terminal device 8 when the user 10 connects the terminal device 8 to the host device A1 in this embodiment.
In the example of the screen shown in FIG. 82, Unifom Resou is a description means for specifying a specific host device on the Internet 4.
rce Locator (hereinafter referred to as “URL”), “//www.eart
h. co. "jp" is the server name, and "/pubindex.htm" represents the name of the document obtained from the host device.

In this embodiment, it is assumed that authentication information is required to obtain the document "pubindex.htm". Also, 8
Reference numeral 3 denotes a user ID input field for inputting a user name necessary for referring to the above-mentioned document, and reference numeral 84 denotes an authentication information input field for inputting second authentication information.

FIG. 5 shows an example of a data structure when each authentication information is stored in the authentication information storage device 9 in this embodiment. Reference numeral 91 denotes a user of the authentication information storage device 9.
This is the first authentication information for confirming 0, and if this is not authenticated, the subsequent reading and writing of other data is prohibited by the authentication information storage device 9 itself.

Reference numeral 92 denotes second authentication information to be transmitted to the host device shown in FIG. 2, and reference numeral 93 denotes a search condition for allowing the user to easily select the second authentication information. And the document name. Further, 94 is a user ID, 95 is authentication information, and these are element data of the second authentication information 92. In the authentication information storage device 9, the second authentication information 92 and the search condition 93 are simply treated as a set as a record, and are read and written by the browser software 12.

FIG. 6 shows the host device A1 in this embodiment.
FIG. 11 is a diagram showing a flow when a document “pubindex.htm” is obtained from the terminal device 8, and the process proceeds from S1 to S10.

The operation of this embodiment will be described with reference to FIGS. Here, the user 10 already has the host device A1, host device B2,
And the second authentication information 92 (user ID 94 and authentication information 95) for using the host device C3, and these information are stored in the authentication information storage device 9 as search conditions 93 as shown in FIG. It is stored together with. Then, it is assumed that the user 10 is about to obtain information from the host device A1 connected to the Internet 4 via the public line 6.

First, as shown in FIG. 6, the user 10 activates the terminal device 8 (S1), and then connects the authentication information storage device 9 to the terminal device 8 (S2).

Next, the user 10 connects the terminal device 8 from the public line 7 to the Internet provider 5 through the public line network 6 by using the browser software 12 as shown in FIG. Host device A1
Specify the server name “//www.earth.co.jp”
A connection is made to the host device A1 via the Internet 4 (S3). Then, the target document name “pubindex.htm” is transmitted in the packet 11 to the host device A1 (S
4).

Here, the host device A1 transmits the document "pubinde
If the authentication confirmation is set in “x.htm”, this is notified to the terminal device 8 and the transmission of the second authentication information 92 is requested to the user.
2 detects this request (S5) and sends the authentication information storage device 9
, The acquisition of the second authentication information 92 is attempted using the search condition 93.

However, in this embodiment, since the first authentication information 91 has not yet been confirmed before S5 in FIG.
Even if the browser software 12 tries to retrieve the second authentication information 92 from the authentication information storage device 9, the operation is rejected by the authentication information storage device 9. Then, as shown in FIG. 3, the browser software 12 prompts the user 10 to input the first authentication information 91 (S6).

When the user 10 inputs the first authentication information 91 “Treasure Box” in the authentication information input field 81 and indicates “OK”, the browser software 12 authenticates the first authentication information 91 via the terminal device 8. The information is input to the information storage device 9. Upon receiving the first authentication information 91, the authentication information storage device 9 checks whether the stored first authentication information matches the stored authentication information, and if they match, permits the extraction of the second authentication information 92. (S7).

If they do not match, the user 10
It operates to display a warning message and prompt for re-input.

After confirmation in S7, the browser software 12 stores the second authentication information 92 in the authentication information storage device 9.
The server name and the document name included in the URL 82 are passed to search for the URL. Upon receiving the server name and the document name, the authentication information storage device 9 sequentially retrieves the search condition 93 from the data stored in the record unit as shown in FIG. 5, compares the search condition 93 with the server name and the document name, and finds a match. Find a record.

In this embodiment, since the record at the top in FIG. 5 satisfies the search condition 93, the authentication information storage device 9 stores the second authentication information 92 (user ID 94) stored after the search condition 93 from the same record. "IslandABC" and authentication information 95 "I73161n64")
This is passed to the browser software 12 (S8).

When the browser software 12 receives the second authentication information 92 in this way, the browser software 12 sends the second authentication information 92 to the host device A1 from the user ID input field 83 and the authentication information input field 84 shown in FIG. Send Second authentication information 92
The host device A1 having received the document “pubindex.h”
The document “pubindex.htm” is compared with the authentication information set in “tm” (S9), and if
1 to start transmission, the browser software 12 sequentially receives the packets 11, and displays the document on the screen of the terminal device 8 (S10).

Thereafter, every time the user 10 inputs a new URL 82 and the second authentication information 92 is requested, the processing from S4 to S10 shown in FIG.
Has already been completed, S6 and S7 are skipped.

Although not shown in the flow chart of FIG. 6,
If a record that matches the search condition 93 is not stored in S8, a display notifying the user 10 that the requested second authentication information 92 is not stored is displayed, and a user ID is input in the display of FIG. Both the column 83 and the authentication information input column 84 display blank, and if the user 10 inputs the second authentication information 92 corresponding to the search condition 93, this authentication information will be a new second authentication. The information is stored in the authentication information storage device 9 together with the search condition 93, and the next time the record is searched under the same search condition 93, the reading process of the second authentication information is automatically performed.

In FIG. 5, the search condition 93 is "www.wo".
rld-wide.co.jp ”record has user ID“ Guest ”
Is stored because the host device does not need the authentication information 95.

By performing the above-described processing, the user 10 can input the first authentication information 91 for using the authentication information storage device 9 only once, and can enter a specific host device or a specific document. In the case where the second authentication information is required in advance, or even when the contents of such authentication information are different, the required second authentication information is stored in the authentication information storage device 9 in advance. If any, user 10
The second authentication information 92 is automatically transmitted without manually inputting the second authentication information 92 memorized in the user ID input field 83 and the authentication information input field 84 in FIG. In addition to eliminating input errors, it is very convenient because it can be used simply by remembering one piece of authentication information by combining a plurality of pieces of authentication information.

Although it is necessary to prevent the authentication information from leaking to anyone other than the user, this embodiment has a function of restricting reading and writing of data stored in the authentication information storage device 9 itself. Even if it is separated from the terminal device 8 and lost, there is no fear that the second authentication information 92 leaks to others. Of course, it is obvious that these advantages are not lost even when the authentication information storage device 9 is integrated with the terminal device 8.

Although not described in the embodiment, when S2 is not performed in FIG. 6, when the terminal device 8 is connected to the host device A1 and the document "pubindex.htm" is designated, the authentication information The browser software 12 detects that the storage device 9 is not connected to the terminal device 8, and displays a message urging the user 10 to connect the authentication information storage device 9 to the terminal device 8. And according to the display,
When the user 10 connects the authentication information storage device 9 to the terminal device 8, a screen for inputting the first authentication information 91 can be displayed as shown in FIG.

In this embodiment, U is used as the search condition 93.
Although the server name and the document name included in the RL 82 are used, data included in a protocol for transmitting and receiving data between the host device and the terminal device, for example, an IP address is also used as a search condition. It is easy to imagine that the host device can use various files such as text, voice, image, etc., for which the host device can set authentication.

In this embodiment, if the first authentication information has been confirmed, the second authentication information is automatically read out thereafter. It is also possible to require the user to enter authentication information,
In this case, the user suffers some inconvenience, but if the terminal device is left unchecked while the first authentication information has been confirmed, it is possible to prevent the use of the host device by a third party. Help to do.

FIG. 7 shows another embodiment in relation to the above, and shows an example of a method for terminating a valid period during which reading and writing to the authentication information storage device 9 after confirmation of the first authentication information 91 is completed. It is shown. In FIG. 7, assuming that the authentication information storage device 9 can be separated from the terminal device 8, the above-mentioned validity period ends under four types of conditions.

First, when the read / write effective period of the authentication information storage device 9 starts, the terminal device 8 or the browser software 12
7 periodically follows the flow of FIG. 7, (1) the connection between the terminal device 8 and the host device is terminated, (2) the terminal device 8 or the terminal device 8 is left for a period set in the browser software 12 in advance,
(3) The period independently set in the authentication information storage device 9 has elapsed. (4) The authentication information storage device 9 is
Are sequentially checked. If any of the above conditions is satisfied, the validity period of the authentication information read / write is terminated. If the second authentication information 92 is required again, the first authentication information is checked. It is a thing to try again from. Of course, other conditions may include a case where the power supply voltage is lowered and a case where the user's hand touches the authentication information storage device 9 even if the authentication information storage device 9 is not separated.

Further, in this embodiment, the authentication information storage device 9
Reading and writing are permitted by one piece of authentication information at the same time. For example, if reading and writing of the authentication information storage device 9 can be performed by different authentication information, an administrator managing the host device can First, the second authentication information necessary for the write authentication information is stored, and then this authentication information storage device 9 is distributed to the user, thereby restricting the user from connecting to the host device, Even when the host device (including a plurality of devices) cannot be managed with only one piece of second authentication information for each user, the user can use the host device without being confused by only learning the first authentication information for reading. Of course, the first authentication information for reading is known only to the user, so that security can be maintained.

Although not particularly shown in the present embodiment, the procedure for storing the second authentication information 92 in the authentication information storage device 9 is as follows. Can be performed by writing the second authentication information 92 corresponding thereto, but if there is a search condition that completely matches the search condition 93 to be written in the already stored record, the update of the second authentication information is performed. The user 10 is notified that the operation is to be performed. Further, the authentication information storage device 9
When there is not enough free space available for storage, the user 10 is prompted to prepare a new authentication information storage device 9.
When a new authentication information storage device 9 is replaced, the first authentication information is set first, and then the second authentication information is written.

FIG. 8 shows an example in which attribute information 96 relating to the second authentication information 92 is added to each record in the data structure of FIG. By recording whether the host device is related to, or when the authentication information was obtained, and the expiration date of the second authentication information 92, it can be used for maintenance such as deleting or updating the authentication information. I can do it.

When the authentication information storage device that can be used in the above-described embodiment is of a separate type and attaches importance to portability, for example, an IC card conforming to ISO7816 can be used. .

In the case where the terminal device is incorporated in a terminal device, an IC chip having a function also conforming to ISO7816 is mounted, or such a function is integrated into one IC chip together with a CPU that controls the terminal device. It is considered to fit.

[Second Embodiment] FIG. 9 is a conceptual diagram of an information system according to a second embodiment of the present invention. In this embodiment,
This is an example of a case where a device that does not have any function of protecting reading and writing of stored data is used as a device that stores authentication information. However, as in the first embodiment, a plurality of pieces of second authentication information 92 are stored, and the user 10 can transmit these pieces of information to the host device as needed only by memorizing one piece of information. Is the same. Also,
In the figure, the same components as those in the previous embodiment are denoted by the same reference numerals, and description thereof will be omitted to avoid duplication.

In FIG. 9, reference numeral 13 denotes a data storage device which stores information required for connecting the terminal device 8 to the host device, and which can read and write data at any time without restrictions such as authentication information.

Reference numeral 14 denotes a second authentication information encryption process for encrypting the second authentication information 92 stored in the data storage device 13 with the password information 16 to be described later and outputting encrypted second authentication information 97. Reference numeral 15 denotes a second authentication information. Contrary to the encryption processing 14, the second authentication information decryption processing for decrypting the encrypted second authentication information 97 with the password information 16 and outputting the original second authentication information 92, 1
Reference numeral 6 denotes information that the user 10 memorizes. The password 6 is key information for encrypting and decrypting the second authentication information 92 in the second authentication information encryption processing 14 and the second authentication information decryption processing 15. Information. Reference numeral 97 denotes second authentication information encrypted by the password information 16 in the second authentication information encryption processing 14, which is the encrypted second authentication information stored in the data storage device 13.

FIG. 10 shows the host device A in this embodiment.
7 is a diagram showing a flow when a document “pubindex.htm” is obtained from the terminal device 8 to the terminal device 8, and the process proceeds from S1 to S10.

The operation of this embodiment will be described with reference to FIGS.

Here, similarly to the first embodiment, the host device A1 has target information, the host device A1 is connected to the Internet 4, the target information is specified by the URL 82, and the specified information is Assume that second authentication information is required.

First, as shown in FIG. 10, the user 10
First, the terminal device 8 is started (S1), and the data storage device 13 is started.
Is connected to the terminal device 8 (S2).

Next, the user 10 connects the terminal device 8 from the public line 7 to the Internet provider 5 through the public line network 6 using the browser software 12 as shown in FIG. A connection is made to A1 (S3), and a target document name "pubindex.htm" is transmitted in the packet 11 to the host device A1 (S4). When the authentication confirmation is set in the document “pubindex.htm”, the host device A1 notifies the terminal device 8 of this fact, and the user 1
Requesting the transmission of the second authentication information 92 to 0. The operation up to this point is the same as in the first embodiment.

Next, upon detecting the request (S5), the browser software 12 of the terminal device 8 requested to transmit the second authentication information 92 retrieves the search condition 93 from the URL 82 and retrieves the search condition 93 from the data storage device 13. Then, the encrypted second authentication information 97 is read by using (S6).

Since the read encrypted second authentication information 97 is in an encrypted state, it needs to be decrypted. Then, the browser software 12 requests the user 10 to input the password information 16 (S7).

When the password information 16 is input, the browser software 12 inputs the password to the second authentication information decryption processing 15 together with the encrypted second authentication information 97, and decrypts the second authentication information 9.
Get 2.

When the browser software 12 receives the second authentication information 92 in this manner, the browser software 12 transfers the user ID input field 83 and the authentication information input field 84 shown in FIG. The second authentication information 92 is transmitted to the
When this is confirmed (S9), the document “pubindex.htm” is transmitted, and the browser software 12 sequentially receives the document, and
The document is displayed on the screen of the terminal device 8 (S10).

Thereafter, every time the user 10 inputs a new URL 82 and the second authentication information 92 is requested, the processing from S4 to S10 shown in FIG. 10 is repeated, but since the password information 16 has been input once, S7 is skipped.

By performing the above-described processing, the user 10 needs to input the password information 16 only once and is required to request the second authentication information for each specific host device or each specific document. Further, even in the case where the contents of such authentication information are different, if the required second authentication information is stored in the data storage device 13 in advance, the second authentication information 92 is automatically transmitted. Therefore, it is very convenient because a plurality of pieces of authentication information can be used simply by remembering one piece of password information.

Also, it is necessary to ensure that the authentication information does not leak to anyone other than the user. However, in this embodiment, since the data stored in the data storage device 13 is encrypted, the authentication information is not separated from the terminal device 8. Even if the second authentication information 92 is lost, there is no fear that the second authentication information 92 leaks to others.
Obviously, these advantages are not lost even when the data storage device 13 is integrated with the terminal device 8.

With the above configuration, the control of the expiration date for automatically reading the second authentication information described in the first embodiment and the processing when there is no corresponding search condition are the same. The second authentication information in the search condition executes the update process, the addition of the attribute information, the process when the data storage device is not connected to the terminal device, the type of data constituting the search condition, etc. are the same as those in the first embodiment. Can also be realized in this embodiment.

Further, as in the present embodiment, the data storage device itself does not have a function of protecting the stored information. Therefore, if the stored data itself is encrypted to prevent leakage, the terminal device specifications or If the functions of the browser software are the same, the data storage device can be carried by itself and the host device can be used from another terminal device. However, the difference in the data recording format in the data storage device and the encryption / decryption processing. They cannot be used if they exist or differ.

To cope with these problems, for example, in a recording format, the same data can be improved by storing the same data in a plurality of formats. In addition, the encryption and decryption processing can be improved by creating a program for performing these processing according to the architecture of the terminal and storing the program in a plurality of formats.

[0064]

According to the present invention, even when a user needs to send a plurality of authentication information to the host device when obtaining the information from the host device, the user inputs only one authentication information. Then, the authentication process for the host device or the information can be easily performed thereafter.

[Brief description of the drawings]

FIG. 1 is a conceptual diagram of an information system according to a first embodiment.

FIG. 2 is a diagram illustrating an example of a user ID and the like registered in a host device for describing a first embodiment and a second embodiment.

FIG. 3 is a diagram showing an example of a screen display for explaining a first embodiment and a second embodiment.

FIG. 4 is a diagram showing an example of a screen display for explaining a first embodiment and a second embodiment.

FIG. 5 is a diagram illustrating a data structure of the first embodiment.

FIG. 6 is an explanatory diagram showing a processing flow of the first embodiment.

FIG. 7 is a flowchart illustrating control of a period during which authentication information can be automatically extracted in the first embodiment.

FIG. 8 is a diagram supplementing the description of the data structure of the first embodiment.

FIG. 9 is a conceptual diagram of an information system according to a second embodiment.

FIG. 10 is an explanatory diagram illustrating a flow of a process according to a second embodiment.

[Explanation of symbols]

DESCRIPTION OF SYMBOLS 1 ... Host apparatus A, 2 ... Host apparatus B, 3 ... Host apparatus C, 4 ... Internet, 5 ... Internet provider, 6 ... Public line network, 7 ... Public line,
8: terminal device, 81: authentication information input field, 82:
Uniform Resource Locator (URL), 83: User ID input field, 84: Authentication information input field, 9: Authentication information storage device, 91
... first authentication information, 92 ... second authentication information, 93 ... search conditions, 94 ... user ID, 95 ... authentication information,
96: Attribute information, 97: Cryptographic second authentication information, 10
... user, 11 ... packet, 12 ... browser software, 13 ... data storage device, 14 ... second authentication information encryption process, 15 ... second authentication information decryption process,
16 ... Password information.

Claims (10)

[Claims] 1. A method according to claim 1, wherein various kinds of information are stored, and the user can retrieve the information by a terminal device. When the user retrieves the information, the user confirms that the user is an authorized registrant. A host device having a function of requesting a user for authentication information for transmitting and receiving data of the various types of information by connecting to the host device, and a function of presenting the information to the user;
An information system comprising: a terminal device having a function of receiving an input from a user; and an information system configured to store various data, read and write the data by the terminal device, and read the data. Before storing the authentication information, the first authentication information for permitting the authentication information is stored, and the authentication information storage device having a function of performing the permission process is further provided. The authentication method storage device or the terminal device has a function of selectively reading and writing the second authentication information in the authentication method storage device or the terminal device. Read the necessary second authentication information by simple selection only by memorizing the first authentication information, without having to remember the respective authentication information, and necessary to connect to the host device. An information system characterized in that a simple confirmation process can be completed. 2. The communication device according to claim 1, wherein the host device and the terminal device have a function of transmitting and receiving information according to a protocol, and the terminal device needs to perform confirmation processing for connection with the host device according to the protocol. Function to detect
A function of the terminal device reading the second authentication information from the authentication information storage device and transmitting the second authentication information to the host device in response to the detection result, and a confirmation procedure based on the first authentication information to the authentication information storage device in advance. A function of completing the first authentication information when the second authentication information is requested from the host device, so that the user does not need to input the first authentication information each time. Information system. 3. The method according to claim 2, wherein the host device and the terminal device are connected by TCP / IP, and an IP address is used as condition information for selectively reading the second authentication information from the authentication information storage device. An information system characterized by the following. 4. The condition information for selectively reading the second authentication information from an authentication information storage device according to claim 1 or 2, wherein the condition information for selectively reading out the second authentication information is a URL (Uniform Resource Locator).
An information system characterized by using r). 5. The method according to claim 2, wherein a valid period in which reading and writing to the authentication information storage device performed in advance by the first authentication information is ended when the connection between the terminal device and the host device is disconnected. An information system characterized by the following. 6. The method according to claim 2, wherein a valid period in which reading and writing to the authentication information storage device performed in advance by the first authentication information is longer than a period preset in the terminal device or the authentication information storage device. An information system characterized by terminating. 7. The terminal device according to claim 2, wherein the terminal device has a function of automatically stopping the terminal function at a preset time, and reading and writing to the authentication information storage device performed in advance by the first authentication information is performed. An information system characterized in that a possible effective period ends when the terminal function stops. 8. The information system according to claim 1, wherein the authentication information storage device can be carried separately from the terminal device by a user operation. 9. The device according to claim 2, wherein the authentication information storage device can be carried separately from the terminal device by a user operation.
An information system, wherein a valid period in which reading and writing to the authentication information storage device, which has been performed by the first authentication information in advance, ends when the authentication information storage device is separated from the terminal device. 10. The terminal according to claim 1, wherein said authentication information storage device is capable of freely reading and writing data stored therein, and said terminal device encrypts data by using password information memorized by a user as key data. A function of performing decryption, encrypting the second authentication information, storing the encrypted information in an authentication information storage device, and decrypting the stored encryption information with the password information as needed to read out the second authentication information. In addition to preventing the second authentication information from leaking, the second authentication information necessary for the connection to the host device is read out by reading the necessary second authentication information by simple selection only by memorizing only the password information. An information system characterized by being completed.