JP2002304376A - Authentication system for user of radio portable terminal - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a system capable of reliably checking wrongful access by recording present time and positional information from a radio portable terminal and verifying likeness to the user him/herself of the terminal, and also to provide a wrongful access checking system using biological information of the user of the terminal. SOLUTION: This authentication system comprises a communication network 2200, a portable browser terminal 2201, a GPS satellite 2202, a base station for the portable terminal 2203, and an authentication site 2204. The portable browser terminal 2201 obtains the present time and the positional information by receiving a GPS signal from the GPS satellite 2202. The authentication site 2204 authenticates the present time, the positional information and terminal ID of the portable browser terminal 2201 by receiving the present time and the positional information from the portable terminal together with the terminal ID.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an authentication system using a wireless portable terminal, and more particularly, to a wireless system for performing authentication by combining personal information of an access terminal owner with terminal position information and action information obtained from an authentication target time. The present invention relates to a mobile terminal user authentication system.

[0002]

2. Description of the Related Art Recently, Internet connection services for wireless portable terminals of communication companies such as i-mode are rapidly growing in the market scale. The wireless portable terminal may be lost because it can be used inside a company or at home, or it can be carried outside. However, at present, few measures have been taken to prevent information leakage or deter theft.

On the other hand, in the Internet connection service, services requiring security such as bank transfer and bookstore EC (electronic commerce) have been started, and interest in security against unauthorized access to a service providing system is increasing. . There are a method of using the user authentication information provided by the carrier, a method of inputting a password of the terminal, and a method of inputting an ID and a password registered in advance. However, in such a method, if the ID and the password are stolen together with the wireless portable terminal, it is impossible to check whether the access is unauthorized.

[0004]

Here, a system which records the authentication target time and position information of a wireless portable terminal, verifies the identity of the user of the terminal, and checks the unauthorized access, and furthermore, the system It is an object of the present invention to provide an unauthorized access check system using biometric information of a terminal user.

[0005]

Means for Solving the Problems In order to solve the above-mentioned problems, the present inventors have conducted intensive studies and have taken the following means.
That is, in the user authentication system using the wireless portable terminal, 1) use detecting means for detecting use of the wireless portable terminal, 2) time acquiring means for acquiring the time of use described above, and 3) the above-mentioned provided in the wireless portable terminal. A) a wireless portable terminal comprising: a time acquiring means; a storing means for storing information acquired by the use detecting means described above; 4) a transmitting means for transmitting information stored in the wireless portable terminal to an authentication center; A system including an authentication center including usage time verification means for calculating the degree of coincidence with the user by comparing the detected usage and the time with the above-described reference information corresponding to the user may be adopted.

As a second invention which is a modification of this system, there is provided a user authentication system using a wireless portable terminal, comprising: a wireless portable terminal having the following means: 1) use detecting means for detecting use of the wireless portable terminal; Time acquisition means for acquiring the time of use; 3) a terminal ID for uniquely identifying the wireless portable terminal; 4) transmitting the use and the time to the authentication center each time the use occurs in the wireless portable terminal. Means of transmission,
And an authentication center including the following means: A) a user specifying means for specifying the user of the wireless portable terminal with reference to the terminal ID; and B) the detected use and the time of the use for each of the users. What is necessary is just to employ a system constituted by using time verification means for calculating the degree of coincidence with the user himself / herself by comparing with the registered reference information.

[0007] As a third invention which is a modification of this system, in a user authentication system using a wireless portable terminal, a wireless portable terminal comprising the following means: 1) use detecting means for detecting use of the wireless portable terminal; Time acquisition means for acquiring the time of use; 3) transmission means for transmitting a preset personal ID, the use and the time to the authentication center each time the use occurs in the wireless portable terminal; Authentication center including means A) User registration means for a user to register his / her own personal ID, B) The above-mentioned detected use and the time of the above-mentioned personal ID
A use time verification unit that calculates the degree of coincidence with the user by comparing the registered information with the reference information registered for each user.

As a fourth invention which is a modification of this system, there is provided a user authentication system using a wireless portable terminal, comprising: a wireless portable terminal having the following means: 1) use detecting means for detecting use of the wireless portable terminal; Position detecting means for detecting the position of the wireless portable terminal; 3) storing means for storing the information obtained by the above-described position detecting means provided in the wireless portable terminal; Means for transmitting the received information to the authentication center, and an authentication center including the following means: A) Comparing the detected position and usage with reference information corresponding to the user to calculate the degree of coincidence with the user himself / herself A system composed of a use position verification unit may be adopted.

As a fifth invention which is a modification of this system, a user authentication system using a wireless portable terminal includes the following means: a wireless portable terminal having the following means: 1) use detecting means for detecting use of the wireless portable terminal; Position detecting means for detecting the position of the wireless portable terminal; 3) a terminal ID for uniquely identifying the wireless portable terminal; 4) each time the use of the wireless portable terminal occurs,
A transmitting means for transmitting the use and the position to the authentication center, and an authentication center including the following means: A) a user specifying means for specifying a user of the wireless portable terminal by referring to the terminal ID; B) A use position verification means for comparing the detected position and the use with the reference information registered for each user and calculating the degree of coincidence with the user may be employed.

According to a sixth aspect of the present invention, which is a modification of the system, in a user authentication system using a wireless portable terminal, a wireless portable terminal comprising the following means: 1) use detecting means for detecting use of the wireless portable terminal; Position detecting means for detecting the position of the wireless portable terminal, 3) each time the above-mentioned use occurs in the above-mentioned wireless portable terminal,
A communication means for transmitting a preset personal ID, the above-mentioned use and the above-mentioned position to the authentication center, and an authentication center including the following means: A) a user registration means for a user to register his / her own personal ID; It is sufficient to employ a system comprising a use position verification means for comparing the detected position and use with the above-mentioned reference information registered for each personal ID and calculating the degree of coincidence with the user.

According to a seventh aspect of the invention, which is a modification of this system, a user authentication system using a wireless portable terminal includes the following means: 1) a terminal ID for uniquely identifying the wireless portable terminal; Usage detecting means for detecting the use of the mobile terminal; 3) storing means for storing the information obtained by the above-mentioned usage detecting means; 4) transmitting means for transmitting the stored information to the authentication center; A) User identification means for identifying the user of the wireless portable terminal with reference to the terminal ID, B) comparing the detected use with the reference information registered for each user. And a personal verification means for calculating the degree of coincidence with the user.

According to an eighth aspect of the present invention, which is a modification of this system, a user authentication system using a wireless portable terminal includes the following means: 1) a terminal ID for uniquely identifying the wireless portable terminal; Use detection means for detecting use of the mobile terminal; 3) transmission means for transmitting the use to the authentication center each time the use occurs in the wireless mobile terminal; and authentication center including the following means: B) user identification means for identifying the user of the wireless portable terminal by referring to the terminal ID of the user, B) comparing the detected usage with the reference information registered for each user and matching with the user himself / herself , An identity verification means for calculating the following equation.

A ninth aspect of the present invention, which is a modification of this system, is a user authentication system using a wireless portable terminal, comprising: a wireless portable terminal having the following means: 1) use detecting means for detecting use of the wireless portable terminal; Storage means for storing the information obtained by the use detection means of 3), a transmission means for transmitting the stored information to the authentication center, and an authentication center including the following means A) The user registers his / her personal ID User registration means; B) personal verification means for calculating the degree of coincidence with the user by comparing the detected usage with reference information registered for each personal ID. Good.

As a tenth invention which is a modification of this system, in a user authentication system using a wireless portable terminal, a wireless portable terminal comprising the following means: 1) use detecting means for detecting use of the wireless portable terminal; Each time the use occurs in the wireless portable terminal, a transmission means for transmitting the preset personal ID and the use to the authentication center, and an authentication center including the following means A) The user registers his / her personal ID User registration means; and B) personal verification means for calculating the degree of coincidence with the user by comparing the detected use with the reference information registered for each personal ID. I just need.

According to an eleventh aspect of the present invention, which is a modification of the system, in a user authentication system using a wireless portable terminal, a wireless portable terminal comprising the following means: 1) time acquiring means for acquiring time at a predetermined timing; Position detecting means for detecting the position of the mobile terminal; 3) storing means for storing the information obtained by the above-mentioned time obtaining means and the above-mentioned position detecting means; 4) transmitting means for transmitting the above-mentioned stored information to the authentication center; A) An authentication center including the following means: A) A time position at which the acquired time and the position detected at that time are compared with the above-mentioned reference information corresponding to the user to calculate the degree of coincidence with the user. And a verification unit. And a system composed of

According to a twelfth aspect of the present invention, which is a modification of the system, in a user authentication system using a wireless portable terminal, a wireless portable terminal comprising the following means: 1) time acquisition means for acquiring time at a predetermined timing; Position detection means for detecting the position of the mobile terminal; 3) a terminal ID for uniquely identifying the wireless mobile terminal; 4) every time the above-mentioned time acquisition occurs, the above-mentioned time and the detected position are sent to the authentication center. A transmitting means for transmitting, and an authentication center including the following means: A) a user specifying means for specifying the user of the wireless portable terminal with reference to the terminal ID; and B) the obtained time and the detection at that time Time position verification means for comparing the registered position with the aforementioned reference information registered for each user to calculate the degree of coincidence with the user. It may be employed Temu.

According to a thirteenth aspect of the present invention, which is a modification of the system, in a user authentication system using a wireless portable terminal, a wireless portable terminal comprising the following means: 1) use detecting means for detecting use of the wireless portable terminal; Time acquisition means for acquiring the time of use of the mobile terminal; 3) position detection means for detecting the position of the wireless portable terminal at the time of use; 4) the time acquisition means, the position detection means, and the use detection means Storage means for storing the information acquired by the mobile terminal; 5) a transmission means for transmitting the information stored in the wireless portable terminal to the authentication center; and an authentication center including the following means: A) the time, position, A system for determining the degree of coincidence with the user by comparing it with the reference information registered for each user. Bayoi.

According to a fourteenth aspect of the present invention, which is a modification of this system, a user authentication system using a wireless portable terminal includes the following means: 1) use detecting means for detecting use of the wireless portable terminal; Time acquisition means for acquiring the time of use of the mobile terminal; 3) position detection means for detecting the position of the wireless portable terminal at the time of use; 4) the time acquisition means, the position detection means, and the use detection means Storage means for storing the information acquired by the mobile terminal; 5) a transmission means for transmitting the information stored in the wireless portable terminal to the authentication center; and an authentication center including the following means: A) the time, position, A system for determining the degree of coincidence with the user by comparing it with the above-mentioned reference information corresponding to the user. Good.

According to a fifteenth aspect of the present invention, which is a modification of the system, in a user authentication system using a wireless portable terminal, a wireless portable terminal comprising the following means: 1) use detecting means for detecting use of the wireless portable terminal; Time acquisition means for acquiring the time of use of the mobile terminal; 3) position detection means for detecting the position of the wireless mobile terminal at the time of use described above; 4) terminal ID for uniquely identifying the wireless mobile terminal; A transmission means for transmitting the above-mentioned use, its time, and the position of the above-mentioned use to the authentication center every time it occurs; and an authentication center including the following means: B) a user specifying means for specifying a user, B) comparing the transmitted time, position, and use with the reference information registered for each user and May be adopted.

A sixteenth aspect of the present invention, which is a modification of this system, is a user authentication system using a wireless portable terminal, comprising: a wireless portable terminal having the following means: 1) use detecting means for detecting use of the wireless portable terminal; Time acquisition means for acquiring the time of use; 3) position detection means for detecting the position of the wireless portable terminal at the time of use described above; 4) terminal ID for uniquely identifying the wireless portable terminal; Each time the user uses the above, the time, and the location of the above-mentioned use to the authentication center, and an authentication center including the following means: A) User registration means for the user to register his / her personal ID; B ) The time, location, usage and the individual I mentioned above
A system for determining the degree of coincidence with the user himself / herself by comparing with reference information registered for each D may be adopted.

Here, it is desirable for security that the reference information is the information previously input by the user, the use record of the site providing the service, or the past history information of the user.

The position is detected by a method of calculating the electric field strengths of a plurality of base stations measured by a wireless portable terminal, a method of calculating a GPS signal from a GPS satellite received by the wireless portable browser terminal described above, Accurate detection can be expected according to at least one selected from a method of detecting by combining information calculated from the electric field strength and information obtained by calculating the GPS signal.

The time obtaining means includes a built-in clock of the wireless portable terminal, a radio clock for receiving a standard time signal for standard time setting and calibrating the current time, an FM multiplex broadcast receiving apparatus, and a satellite navigation signal for receiving an observation point. At least one selected from GPS that captures the current time of the vehicle.

The authentication center according to the present invention further comprises a biometric information acquiring means, and when the biometric information acquired by the verification means is compared with the biometric information of a user registered in advance, more reliable authentication can be performed. it can. Here, the biometric information is preferably at least one selected from face information, fingerprint information, voiceprint, and glow, from the viewpoint of system security because unauthorized access by another user is difficult. The information acquisition means is at least one selected from a camera and a microphone.

The above-mentioned transmission means is a physical connection by a terminal,
It may be at least one selected from a short-range wireless connection and a connection via a telecommunications network. In addition, as accumulation means,
At least one selected from a RAM and a hard disk is desirable from the viewpoint of speed and compactness.

The above-mentioned use is preferably at least one selected from voice communication and data communication.

[0027]

DESCRIPTION OF THE PREFERRED EMBODIMENTS

Embodiment 1 FIG. 1 shows an outline of Embodiment 1. Communication network 100, mobile terminal 101, mobile terminal base station 102,
The configuration is an authentication center 103.

FIG. 2 is a diagram showing the configuration of the portable terminal 101. Antenna 201, RF circuit 202, memory unit 2
03, external connection terminal 204, interface unit 20
5, a long-wave antenna 206 and a timer 207. This mobile terminal is a communication carrier (NTT DOCOMO, J
Phone, AU, etc.)
Communication network 1 via base station 102 installed by a communication carrier
00 and can use services (call services, data communication services such as the Internet).

Each time a user makes a call connection to use a service, the memory unit 203 stores the use time in the memory unit 203. FIG. 3 shows an example of the accumulated use time data. Here, the type of use is recorded together with the time of occurrence. The present invention is not limited to this record, and may record a specific use type such as purchase on an EC (electro commerce) site.

The external terminal 204 is a terminal conforming to a predetermined standard for transmitting information by directly transmitting data to an external terminal or the like. The user can use the authentication center 10 when necessary, for example, when there is a doubt on an invoice for shopping at the EC.
Go to 3 and insert the external terminal of its own browser phone into a predetermined connection terminal of the authentication terminal, and transmit the use time stored in the memory unit 202.

An interface unit 205 is an input key for a user, a voice microphone, and the like.
It works under the control of

The long wave antenna 206 is for receiving a radio signal for transmitting a standard time, and
At 7, the analyzed time is obtained.

The control unit 208 includes a ROM, a RAM, and a CPU storing predetermined software programs. The control unit 208 controls the RF circuit 202, the memory unit 203, the external connection terminal 204, the interface unit 205, and the clock unit 207 to control the predetermined. Function.

FIG. 4 is a detailed diagram showing the configuration of the authentication center. Authentication mechanism 401, usage information database 40
2. A counter 403 that records the detected abnormal behavior.
The configuration includes an authentication terminal 404 and an input device 405.

The authentication center 103 that has received the use time stored in the memory unit 202 receives the time at which the service (call, data communication, etc.) was used. At the same time, the user inputs a bill number or the like from the input device 406 and sets a bill to be authenticated. FIG. 5 shows an input device designation screen. Here, the user has set authentication for the sent bill (no.xxx1234) for authentication on December 15. Usage information database 4
02 stores the use information of the EC site in association with the time. FIG. 6 shows a bill no. xxx1234
This is usage information for use on December 15 of the above.

Although the bill number is input here, the system of the present invention is not restricted to this, and if the user is registered in advance at the authentication center and a personal ID is issued, the system becomes an authentication target. You only need to specify the time zone and the date. Alternatively, if the terminal ID is registered, the type and time of use can be transmitted to the authentication center every time the use occurs, and the authentication center communicates with the user's credit company etc. every predetermined time, An authentication system that extracts this user's usage record and verifies abnormal behavior can be constructed.

The counter 403 compares the usage information set by the authentication mechanism 401 with the authentication time and the usage time stored in the memory unit, and when a mismatch is detected, the counter is counted as an abnormal action. For example, when the accumulated use time data of FIG. 3 is compared with the use information of FIG. 6, time 9: 5
5, since the usage information at time 14:21 and time 23:29 is not stored in the memory unit of the mobile terminal, it is detected as abnormal behavior.

FIG. 7 is a flowchart showing the authentication operation. In the connection waiting step 701, the connection terminal of the authentication terminal is empty. User terminal connection step 702
In, users check the questionable invoice,
The user goes to the authentication center 103, inserts the external terminal of his / her browser phone into the connection terminal of the authentication terminal, and transmits the use time stored in the memory unit 202. Next, in a user authentication setting 703, an authentication target is set from the input screen shown in FIG. In a data extraction step 704, the usage information is extracted by searching for the usage information using the authentication target setting input as a key.

In the data comparison step 705, the extracted data is compared with the stored data. Here, TRUE, that is, when they match, access standby 7
It returns to the state of 01. When a FALSE, that is, a mismatch is detected, an abnormal action is notified in the abnormal notification 706.

[0040]

Second Embodiment FIG. 8 shows an outline of a second embodiment. It has a communication network 800, a mobile terminal 801, a GPS satellite 802, a base station 803 of the mobile terminal, and an authentication center 804.

The portable terminal 801 of this embodiment has a terminal ID for uniquely identifying itself. FIG. 9 is a diagram showing a configuration of the mobile terminal 801. Antenna 901, RF
Circuit 902, memory unit 903, use detection unit 904, interface unit 905, GPS antenna 906, GP
The configuration includes an S circuit 907 and a control unit 908. This mobile terminal is a communication carrier (NTT DoCoMo, J Phone, A
U) are connected to the communication network 900 via the base station 102 installed by the communication carrier to provide services (call services, data communication services such as the Internet). Can be used.

The use detection unit 903 monitors the use of services such as telephone calls and data communication. When the use of services is detected, the use position is recorded in the memory unit 904. When the record reaches a predetermined capacity, the authentication center 80
4 together with the terminal ID of the portable terminal. Here, the timing for transmitting the record to the authentication center is the timing when the record reaches a predetermined capacity. However, the present invention is not limited to this, and the data is transmitted each time a service use event occurs. May be sent.

FIG. 10 shows an example of use position data transmitted from a portable terminal owned by a certain user (A). Here, the use position is converted to specific area data at the city / ward level with reference to the map data. Further, the type of use is transmitted together with the use position.

An interface unit 905 is an input key for a user, a voice microphone, and the like.
It works under the control of

The GPS antenna 906 is for receiving a GPS signal.
Get the current position after being parsed. Here, the current position transmitted to the authentication center is converted into specific area data at the city / ward level with reference to the map data.

The control unit 908 includes a ROM, a RAM storing a predetermined software program and a terminal ID, and a CPU.
And controls the RF circuit 902, the use detection unit 903, the memory unit 904, the interface unit 905, and the GPS circuit 907 to execute a predetermined function.

FIG. 11 is a detailed diagram showing the configuration of the authentication center 804. It has an authentication mechanism 1101, a personal information database 1102, an activity area database 1103, and a counter 1104 for recording detected abnormal behavior. The operation of the authentication mechanism 1101 will be described later. The personal information database 1102 stores the terminal ID of the registered user in association with the personal information of the user. FIG. 12 is a diagram showing a data configuration of a user activity area database.

The counter 1104 has an authentication mechanism 1101
Is compared with the transmitted usage position information and the activity area and usage type stored in the activity area database, and if a mismatch is detected, it is counted as an abnormal activity. For example, when the record of the user A in FIG. 10 is compared with the registration data (action area, type of use) of the user A shown in FIG. 2, no. No. 3 is inconsistent in usage type, and no. Reference numeral 5 indicates that the use position does not match the registered action area. A total of three times are detected as abnormal behavior,
Be counted.

FIG. 13 is a flowchart showing the authentication operation. When there is data transmission 1302 from the portable terminal in the access standby state 1301, the data acquisition 13
At 03, use position information and the terminal ID of the mobile terminal are received from the user's mobile terminal. User identification 1304
Is performed by searching the personal information database 1102 using the terminal ID as a key. In data comparison 1305,
The user's action area data is called from the action area database 1103 and compared with the acquired data.

If TRUE, that is, if they match, the process returns to the access waiting state 1301. If a FALSE, that is, a mismatch is detected, abnormal behavior is counted in the abnormal record 1306. Here, each time a mismatch is detected, 1 is added to the count value n (n = n + 1).

In the unauthorized access verification 1307, if n has not reached the predetermined value N, the state returns to the access waiting state 401. When reaching a predetermined value N (n ==
N), the mobile terminal is temporarily disabled, and the user goes to the nearest authentication center and inputs a predetermined word or sentence from the microphone of the authentication terminal by voice to authenticate the voiceprint or the generated pattern. Here, verification was performed by inputting a voice from a microphone.However, the verification means in the present invention is not limited to this. Alternatively, authentication may be performed by inputting a fingerprint using an optical sensor that reads the fingerprint.

If the result of the unauthorized access verification is TRUE, that is, if the user is himself, the count value is set to 0.
(N = 0), and returns to the state of access waiting 1301. If the access is determined to be FALSE, that is, an unauthorized access is made, a notification 1308 is sent to the communication carrier and the service providing site, and processing such as disabling the corresponding terminal is performed.

[0053]

Third Embodiment FIG. 14 shows an outline of a third embodiment. Network 1400, portable terminal 1401, portable terminal base stations 1402, 1403, 1404, authentication center 14
05.

The portable terminal 1401 is a base station 1 of the portable terminal.
The position information is obtained by calculating the electric field strengths of the base stations 402, 1403, and 1404 by a three-point survey method. The authentication center transfers the location information from the mobile browser terminal to its terminal ID.
Receive with. Here, the acquisition of the position information is performed at predetermined time intervals, and the transmission to the authentication center is performed simultaneously with the acquisition.

Here, a three-point surveying method is adopted as a method of measuring the position information. However, the position acquiring means of the present invention is not limited to this, and an electric field distribution map is prepared in advance by actual measurement and measured by a portable terminal. By measuring the electric field strength of multiple base stations on the electric field distribution map and detecting the position of the mobile terminal as the area where the corresponding isoelectric curves intersect, or by modeling the electric field strength distribution of the base station A method of creating an electric field distribution map without detecting the position of the mobile terminal, or a method of correcting GPS satellite data with base station data may be used.

The authentication center 1405 authenticates the portable browser terminal 1401. FIG. 15 shows the authentication center 1405.
FIG. 3 is a detailed diagram showing the configuration of FIG. The configuration includes an authentication mechanism 1501, a personal information database 1502, an action pattern database 1503, an action database 1504 for recording (time, position) data to be authenticated, and a time acquisition unit 1505. The operation of the authentication mechanism 1501 will be described later with a flowchart. Personal information database 15
02 stores the personal ID of the registered user in association with the terminal ID. In the behavior pattern database 1503, registered users who declare and input their behavior are registered.

Here, a radio clock is employed as the time acquisition means 1505. By reading the data of the radio clock, the data (time, position) to be authenticated is acquired together with the position information calculated by the above-described method, and the behavior database 15 is obtained.
Record at 04.

Here, the radio timepiece is used as the time acquisition means, but the position acquisition means of the present invention is not limited to this, and may be an FM multiplex broadcast receiver, a GPS signal receiver, or the like.

FIG. 16 is a flowchart showing the operation of the authentication mechanism 1501 of the authentication center 1405. In the authentication permission / setting 1601, the registered user performs initial settings such as authorization to perform authentication and (timing, position) data acquisition timing, data comparison timing, and input of an action pattern. FIG. 17 shows the initial setting screen. Here, authentication is permitted, data is acquired every 30 minutes, and data comparison is performed every 5 hours. For the action pattern input, a pre-input and a comparison input are selected.
FIG. 18 shows behavior pattern data input by a motor journalist living and working in Tokyo, in Kawasaki City, Kanagawa Prefecture. If it is pre-input, it is input in this step. If the input is a comparison time input, the user inputs his / her own behavior in a self-reporting manner in a behavior pattern calling step of 1605.

When the initial setting is completed as described above, a standby 1602 state is set. Set timing (here 3
(Every 0 minutes) Obtain terminal (time, position) data 1603
Are performed, and the (time, position) data accumulation 1604 of the terminal is repeated. When the set time (here, 5 hours) elapses, an action pattern is called or input in the action pattern call / input 1605, and the process moves to the (time, position) relation comparison 1606 step.

FIG. 19 shows an example of (time, position) data acquired by the terminal and stored in the memory of the terminal.
In this case, the data acquired and accumulated at 17:54, 18:24, and 18:54 indicates an abnormal behavior as compared with the behavior pattern that is initially set in FIG. FIG.
In this time zone, it should be located in Minato-ku, Tokyo or Kawasaki-shi, Kanagawa, but the position data of Omiya-shi, Saitama has been obtained. In this example, the determination result of the (time, position) relation comparison 1606 is FALSE, and a part or all of the (time, position) data stored in the memory of the terminal is cleared, and the unauthorized access verification of 1607 is performed. Processing shifts. The data cleared at this time may be stored at the authentication site.

In the present embodiment, action data input in advance is detected and compared in order to detect an abnormal action. Instead of the (time, position) relation comparison 1606 of the present invention, the previously stored (time, The position) data may be plotted to determine the appropriate range of the current time or the latest (time, position) data, and if the data deviates from the appropriate range, it may be determined as FALSE.

FIG. 20 shows data stored in the past (time and position).
It is an example of data. FIG. 21 is a map showing a mechanism of determination. Reference numeral 2101 denotes a flow line in which (time, position) data acquired and accumulated by the terminal is plotted.
The circle shown at 102 indicates the appropriate range of the position data expected at 17:24 at the current time. Reference numeral 2103 denotes position data actually acquired at 17:24. In this example, since the behavior greatly deviates from the expected range, it is detected as an abnormal behavior, and the process proceeds to an unauthorized access verification step 1607.

In the unauthorized access verification 1607, the user accesses and makes a voice input of a predetermined word or sentence from the microphone of the portable terminal, and authenticates the voiceprint or occurrence pattern. Here, the verification was performed by inputting a voice from the microphone, but the verification means in the present invention is not limited to this, and the face,
Authentication may be performed by photographing the iris and inputting an image, or an optical sensor for reading a fingerprint may be installed in the portable terminal to input the fingerprint.

If the result of the unauthorized access verification indicates that the user is TRUE, that is, the user himself / herself, the standby 1602 is set.
Return to the state. When the access is determined to be FALSE, that is, when the access is unauthorized, a notification 1608 is sent to a communication carrier and a service providing site, and processing such as disabling the terminal is performed.

[0066]

Fourth Embodiment FIG. 22 shows an outline of a fourth embodiment. Communication network 2200, portable terminal 2201, GPS satellite 220
2. Mobile terminal base station 2203, authentication center 2204
It is a configuration.

The portable terminal 2201 is connected to the GPS antenna 22
Browser phone equipped with a GPS satellite 22
02 to receive the current time and position information. This mobile terminal is a base station 2203 installed by a communication carrier (NTT DoCoMo, J-phone, AU, etc.).
To connect to a communication network via the Internet and use services (calls, data communication, etc.). Authentication Center 2204
Receives the current time, location information, and the type of use together with the terminal ID from the portable terminal at the timing of using the service (call, data communication, etc.).

FIG. 23 is a detailed diagram showing the configuration of the authentication center 2204. Authentication mechanism 2301, personal information database 2302, behavior pattern database 2303,
The counter 2304 records the detected abnormal behavior. The operation of the authentication mechanism 2301 will be described later. The personal information database 2302 stores the personal ID of the registered user in association with the terminal ID. FIG.
FIG. 4 is a diagram showing a data structure of a behavior pattern database of a salaried worker living in Kanagawa Prefecture. 2401 indicates a weekday action pattern, and 2402 indicates a holiday action pattern.

The counter 2304 has an authentication mechanism 2301
Compares the authentication target time, the position information, and the usage type with the behavior pattern stored in the behavior pattern database, and if a mismatch is detected, the behavior is counted as an abnormal behavior. For example, if the mobile terminal of a salaried worker living in Kanagawa Prefecture, which has registered the behavior pattern of FIG. 24, is accessed from Hiratsuka City, Kanagawa Prefecture at 3:20 pm on weekdays, it is 9: 00-18 corresponding to 2401. 0:00 (location, Minato-ku, Tokyo) is detected as abnormal behavior. Alternatively, when an EC site is used on a holiday, the behavior does not match the behavior pattern of 2402, and an abnormal behavior is detected.

FIG. 25 is a flowchart showing the operation of the authentication mechanism 2301 of the authentication center 2204. In the state of access standby 2501, when there is an access 2502 from the user, the terminal ID, (time, position, type of use)
In data acquisition 2503, the authentication target time, position information, usage type, and terminal ID of the mobile terminal are received from the user's mobile terminal. The user identification 2504 is performed by searching the personal information database 2302 using the terminal ID as a key. (Time, location, type of use) Data comparison 2
In 505, the user's behavior pattern data is called from the behavior pattern database using the personal ID as a key,
Compare with the acquired (time, position, usage type) data.

TRUE, that is, when they match, the process returns to the access standby 2501 state. When FALSE, that is, inconsistency is detected, abnormal behavior is counted in the abnormal record 2506. Here, each time a mismatch is detected, 1 is added to the count value n (n = n + 1).

In the unauthorized access verification 2507, if n has not reached the predetermined value N, the state returns to the access waiting state 401. When reaching a predetermined value N (n ==
N), the access user is caused to input a predetermined word or sentence from the microphone of the portable browser terminal by voice, and the voice print or the generated pattern is authenticated. Here, verification was performed by inputting a voice from a microphone.However, the verification means in the present invention is not limited to this. Alternatively, an optical sensor for reading a fingerprint may be installed in the portable terminal to input the fingerprint.

If the result of the unauthorized access verification indicates that the user is TRUE, that is, the user himself / herself, the count value is set to 0.
(N = 0), and returns to the state of access standby 2501. If the access is determined to be FALSE, that is, an unauthorized access, a notification 2508 is sent to the communication carrier and the service providing site, and processing such as disabling the terminal is performed.

[0074]

As described above, according to the present invention, at the time of access from a wireless portable terminal, the authentication target time and position information are recorded, the identity of the user of the terminal is verified, and a check for unauthorized access is ensured. It is possible to provide an unauthorized access check system that uses the biometric information of the user of the terminal and the biometric information of the user of the terminal.

[Brief description of the drawings]

FIG. 1 is an outline of a first embodiment.

FIG. 2 is a configuration of a mobile terminal.

FIG. 3 shows an example of use time data.

Fig. 4 Configuration of authentication center

FIG. 5: Designation screen

FIG. 6: Usage information

FIG. 7 is a flowchart showing an authentication operation.

FIG. 8 is an outline of a second embodiment.

FIG. 9 is a configuration of a portable terminal.

FIG. 10 shows an example of use position data

FIG. 11 shows the configuration of an authentication center.

FIG. 12 is a data configuration of an action area database.

FIG. 13 is a flowchart illustrating an authentication operation.

FIG. 14 is an outline of a third embodiment.

FIG. 15 shows the configuration of an authentication center.

FIG. 16 is a flowchart showing the operation of the authentication mechanism.

FIG. 17: Initial setting screen

FIG. 18: Behavior pattern data

FIG. 19 shows an example of (time, position) data.

FIG. 20 shows data (time, position) accumulated in the past.

FIG. 21 is a map showing a discrimination mechanism.

FIG. 22 is an overview of a fourth embodiment.

FIG. 23 shows the configuration of an authentication center.

FIG. 24 is a data configuration of an action pattern database.

FIG. 25 is a flowchart showing the operation of the authentication mechanism.

──────────────────────────────────────────────────の Continued on the front page (51) Int.Cl. ⁷ Identification symbol FI Theme coat ゛ (Reference) H04Q 7/38 H04B 7/26 109R 109S (72) Inventor Hiroshi Kurita 1-4-13 Katase, Fujisawa City, Kanagawa Prefecture Ferris 3-201 Katase 3-201 F term (reference) NN21 PP03

Claims (25)

[Claims] 1. A user authentication system using a wireless portable terminal, comprising: a wireless portable terminal comprising the following means: 1) use detecting means for detecting use of the wireless portable terminal; 2) time acquiring means for acquiring the use time; 3) the time acquisition means provided in the wireless portable terminal, a storage means for storing the information acquired by the use detecting means, 4) a transmitting means for transmitting the information stored in the wireless portable terminal to the authentication center, A) a use time verification means for comparing the detected use and the time with reference information corresponding to the user to calculate the degree of coincidence with the user. Wireless mobile terminal user authentication system. 2. A user authentication system using a wireless portable terminal, comprising: a wireless portable terminal having the following means: 1) use detecting means for detecting use of the wireless portable terminal; 2) time acquiring means for acquiring the use time; 4) a terminal ID for uniquely identifying the wireless portable terminal; 4) a transmitting means for transmitting the use and the time to the authentication center every time the use occurs in the wireless portable terminal;
An authentication center including the following means: A) a user specifying means for specifying a user of the wireless portable terminal with reference to the terminal ID; and B) the detected use and the time of the use with reference information registered for each user. And a use time verification means for comparing and calculating the degree of coincidence with the user himself / herself. 3. A user authentication system using a wireless portable terminal, the wireless portable terminal comprising the following means: 1) use detecting means for detecting use of the wireless portable terminal; 2) time acquiring means for acquiring the use time; Each time the use occurs in the wireless portable terminal, a communication means for transmitting a preset personal ID, the use and the time to the authentication center, and an authentication center including the following means. User registration means for registering a personal ID; B) use time verification means for calculating the degree of coincidence with the user by comparing the detected use and the time with reference information registered for each personal ID. A wireless portable terminal user authentication system characterized by comprising: 4. A user authentication system using a wireless portable terminal, the wireless portable terminal comprising the following means: 1) use detecting means for detecting use of the wireless portable terminal; 2) detecting the position of the wireless portable terminal at the time of use. Position detecting means, 3) the position detecting means provided in the wireless portable terminal, storing means for storing information obtained by the use detecting means, 4) transmitting means for transmitting the stored information to an authentication center, An authentication center including the following means: A) a use position verification means for calculating the degree of coincidence with the user by comparing the detected position and use with reference information corresponding to the user; Wireless mobile terminal user authentication system. 5. A user authentication system using a wireless portable terminal, comprising: a wireless portable terminal having the following means: 1) use detecting means for detecting use of the wireless portable terminal; 2) detecting a position of the wireless portable terminal at the time of use. 3) a terminal ID for uniquely identifying the wireless portable terminal 4) a transmitting unit for transmitting the use and the position to an authentication center every time the use occurs in the wireless portable terminal;
And an authentication center including the following means: A) user identification means for identifying the user of the wireless portable terminal with reference to the terminal ID; B) reference information registered for each of the detected position and use for each user And a use position verifying means for calculating the degree of coincidence with the user as compared with the user authentication system. 6. A user authentication system using a wireless portable terminal, the wireless portable terminal comprising the following means: 1) use detecting means for detecting use of the wireless portable terminal; 2) detecting the position of the wireless portable terminal at the time of use. Position detecting means, 3) a transmitting means for transmitting a preset personal ID, the use, and the position to an authentication center every time the use occurs in the wireless portable terminal, and an authentication center including the following means: A) User registration means for the user to register his / her personal ID; B) use position verification means for calculating the degree of coincidence with the user by comparing the detected position and use with reference information registered for each personal ID And a wireless mobile terminal user authentication system. 7. A user authentication system using a wireless portable terminal, comprising: a wireless portable terminal having the following means: 1) a terminal ID for uniquely identifying the wireless portable terminal; and 2) a use detecting means for detecting use of the wireless portable terminal. 3) accumulating means for accumulating information obtained by the use detecting means, 4) transmitting means for transmitting the accumulated information to an authentication center, and an authentication center including the following means: A) referring to the terminal ID User identification means for identifying the user of the wireless portable terminal; B) identity verification means for calculating the degree of coincidence with the user by comparing the detected usage with reference information registered for each user. A wireless mobile terminal user authentication system characterized by being performed. 8. A user authentication system using a wireless portable terminal, comprising: a wireless portable terminal having the following means: 1) a terminal ID for uniquely identifying the wireless portable terminal; and 2) a use detecting means for detecting use of the wireless portable terminal. 3) a transmitting means for transmitting the usage to the authentication center every time the usage occurs in the wireless mobile terminal; and an authentication center including the following means: A) The user of the wireless mobile terminal with reference to the terminal ID B) personal identification means for calculating the degree of coincidence with the user by comparing the detected usage with reference information registered for each user. Wireless mobile terminal user authentication system. 9. A user authentication system using a wireless portable terminal, a wireless portable terminal comprising the following means: 1) use detecting means for detecting use of the wireless portable terminal; 2) storing information acquired by the use detecting means. Storage means; 3) a communication means for transmitting the stored information to an authentication center; and an authentication center including the following means: A) a user registration means for a user to register his / her personal ID; A personal verification means for calculating the degree of coincidence with the user by comparing the reference information registered for each personal ID with the user. 10. A user authentication system using a wireless portable terminal, comprising: a wireless portable terminal having the following means: 1) use detecting means for detecting use of the wireless portable terminal; 2) each time the use occurs in the wireless portable terminal. A communication means for transmitting a preset personal ID and the use to the authentication center; and an authentication center including the following means: A) a user registration means for the user to register his / her own personal ID; and B) the detected use. A personal verification means for calculating the degree of coincidence with the user by comparing the personal information with reference information registered for each personal ID. 11. A user authentication system using a wireless portable terminal, the wireless portable terminal comprising the following means: 1) time acquiring means for acquiring time at a predetermined timing; 2) position detecting means for detecting the position of the wireless portable terminal. 3) a storage unit for storing the information obtained by the time acquisition unit and the position detection unit; 4) a transmission unit for transmitting the stored information to an authentication center; and an authentication center including the following units. Time position verification means for comparing the acquired time and the position detected at that time with reference information corresponding to the user to calculate the degree of coincidence with the user himself / herself. Terminal user authentication system. 12. A user authentication system using a wireless portable terminal, a wireless portable terminal comprising the following means: 1) time acquiring means for acquiring time at a predetermined timing; 2) position detecting means for detecting the position of the wireless portable terminal. 3) a terminal ID for uniquely identifying the wireless portable terminal 4) a transmission means for transmitting the time and the position detected at that time to the authentication center every time the time acquisition is performed;
An authentication center including the following means: A) user identification means for identifying the user of the wireless portable terminal by referring to the terminal ID; B) the acquired time and the position detected at that time are defined for each user. And a time position verifying means for calculating a degree of coincidence with the user by comparing the reference information registered in the wireless terminal with the user. 13. A user authentication system using a wireless portable terminal, the wireless portable terminal comprising the following means: 1) time acquiring means for acquiring time at a predetermined timing; 2) position detecting means for detecting the position of the wireless portable terminal. 3) transmitting means for transmitting the time and the position detected at that time to an authentication center each time the time is acquired;
An authentication center including the following means: A) User registration means for a user to register his / her own personal ID B) The acquired time and the position detected at that time are registered with reference information registered for each personal ID. And a time position verification means for comparing and calculating the degree of coincidence with the user. 14. A user authentication system using a wireless portable terminal, the wireless portable terminal comprising the following means: 1) use detecting means for detecting use of the wireless portable terminal; 2) time acquiring means for acquiring the use time; 3) position detecting means for detecting the position of the wireless portable terminal at the time of use; 4) storing means for storing information acquired by the time obtaining means, the position detecting means, and the use detecting means; A transmitting means for transmitting the information stored in the terminal to the authentication center, and an authentication center including the following means: A) comparing the transmitted time, location, use, and the reference information corresponding to the user with the user's identity And a personality determination means for calculating the degree of coincidence with the user identification system. 15. In a user authentication system using a wireless portable terminal, a wireless portable terminal comprising the following means: 1) use detecting means for detecting use of the wireless portable terminal; 2) time acquiring means for acquiring the use time; 3) position detecting means for detecting the position of the wireless portable terminal at the time of use; 4) a terminal ID for uniquely identifying the wireless portable terminal; 5) each time the use occurs, the use, the time,
And a transmitting means for transmitting the location of use to an authentication center; and an authentication center including the following means: A) a user specifying means for specifying a user of the wireless portable terminal with reference to the terminal ID; Wireless personal digital assistant user authentication system, comprising: time, position, use, and personality determination means for calculating the degree of coincidence with the user by comparing with reference information registered for each user. . 16. A user authentication system using a wireless portable terminal, the wireless portable terminal comprising the following means: 1) use detecting means for detecting use of the wireless portable terminal; 2) time acquiring means for acquiring the use time; 4) a position detecting means for detecting the position of the wireless portable terminal at the time of use, 4) a terminal ID for uniquely identifying the wireless portable terminal, 5) each time the use occurs, the use, the time,
And a transmission means for transmitting the location of the use to the authentication center; and an authentication center including the following means: A) a user registration means for the user to register his / her personal ID; B) the transmitted time, location, and use; The personal ID
A personality determination means for calculating a degree of coincidence with the user by comparing the reference information registered for each user with the reference information. 17. The information processing apparatus according to claim 1, wherein the reference information is information input by the user in advance, a use record of a site that provides a service, or past history information of the user. Wireless mobile terminal user authentication system according to the paragraph. 18. The method according to claim 18, wherein the position detection includes calculating a field intensity of a plurality of base stations measured by the wireless mobile terminal, calculating a GPS signal from a GPS satellite received by the wireless mobile terminal, 17. The method according to claim 1, wherein at least one selected from a method of detecting a combination of information calculated from the electric field strength of the station and information obtained by calculating a GPS signal is used. Wireless mobile terminal user authentication system. 19. The time acquiring means receives a built-in clock of a wireless portable terminal, a radio clock for receiving a standard time signal for standard time setting and calibrating the current time, an FM multiplex broadcast receiver, and a satellite navigation wave. 17. The wireless portable terminal user authentication system according to claim 1, wherein the at least one selected from GPS which captures the current time of the observation point. 20. The authentication center according to claim 1, wherein the biometric information obtained by the biometric information obtaining means provided in the authentication center for determining the degree of coincidence with the user. A system wherein information is compared with pre-registered biometric information of the user. 21. The wireless portable terminal user authentication system according to claim 20, wherein said biometric information is at least one selected from face information, fingerprint information, voiceprint, and glow. 22. The wireless portable terminal user authentication system according to claim 20, wherein said biometric information acquiring means is at least one selected from a camera and a microphone. 23. The transmission means, comprising: a physical connection by a terminal;
12. The wireless communication system according to claim 1, wherein the connection is at least one selected from a short-range wireless connection and a connection via a telecommunications network.
Item 3. The wireless portable terminal user authentication system according to item 3. 24. The wireless portable terminal according to claim 1, wherein the use is at least one selected from voice communication and data communication. User authentication system. 25. The method according to claim 1, wherein said storage means is at least one selected from a RAM and a hard disk.
Item 14. The wireless portable terminal user authentication system according to Item 13.