JP2008112313A - Electronic apparatus, and control method for the same - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To enhance security by concealing the number of combinations of operations, in addition to operation contents, to a malicious third party. <P>SOLUTION: A control section 15 decides whether an operation performed from an operation section 12 coincides with a predetermined operation content stored in a memory 14. In the case of coincidence, the predetermined operation is permitted and in the case of non-coincidence, further, the control section decides whether the number of operations performed from the operation section 12 coincides with an obtained arbitrary numerical value. In the case of coincidence, the control section issues a predetermined alarm. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to an electronic device and a control method for the electronic device, which are suitable for applications that restrict (permit) a predetermined operation based on a predetermined operation.

  Electronic devices such as mobile phones currently on the market are equipped with various security functions in order to protect the privacy of the owner. Among them, the most common one is a security that locks using a PIN set with 4 to 8 digits, for example, and restricts access to prevent others from sending without permission or using applications It is a function. While access is restricted, the functions of the mobile phone are not executed unless the lock is released by inputting a preset password.

  By the way, a data input device is known in which a user can grasp the operation contents by notifying by voice whether or not a correct operation has been performed at the time of inputting a personal identification number (for example, Patent Document 1). reference).

According to the technique disclosed in Patent Document 1, as shown in the paragraph “0008”, when there is an erroneous input operation regarding a password, an error occurs after the input of the password corresponding to all the digits is completed. It is configured to warn that there is.
JP-A-8-30364

  As described above, according to the technique disclosed in Patent Document 1, if there is an erroneous input operation regarding a security code, it is an error after input of the security code corresponding to all the set digits is completed. As a result, the data related to the number of digits set as the security code, that is, the data related to the number of combinations of operations necessary to allow a predetermined operation, is leaked to a malicious third party. End up.

  The present invention has been made based on the above-described circumstances, and provides an electronic device and a control method in the electronic device that can conceal the number of combinations of operations as well as the operation contents to a third party. The purpose is to do.

  An electronic apparatus according to a first aspect of the present invention is performed by an operation unit, a storage unit that stores a predetermined operation content that includes a predetermined number of combinations of operations performed by the operation unit, and the operation unit. Is determined to match the predetermined operation content stored in the storage unit, and if it matches, a predetermined operation is permitted, and if not, a numerical value obtained by a random number and A controller that determines whether or not the number of operations performed by the operation unit matches, and that performs control to issue a predetermined warning when the random number and the number of operations match. is there.

  According to a second aspect of the present invention, there is provided a control method for an electronic device, in which a predetermined preset operation content composed of a predetermined number of combinations of operations performed by the operation unit and a constant numerical value different from the predetermined number are stored in the storage unit. And controlling the electronic device to permit a predetermined operation in accordance with the operation content performed by the operation unit, wherein the operation performed by the operation unit coincides with the stored predetermined operation content When it is determined that the first step and the first step match, the predetermined operation is permitted. When it is determined that they do not match, the predetermined value and the operation unit are used. A second step of determining whether or not the number of operations to be matched matches, and a third step of issuing a predetermined warning when it is determined to match in the second step.

  According to the present invention, it is possible to conceal the number of combinations of operations as well as the operation contents for permitting the operation to a third party.

FIG. 1 is a block diagram showing an internal configuration of an electronic apparatus according to an embodiment of the present invention. Here, a mobile phone is exemplified as the electronic device.
As shown in FIG. 1, the mobile phone includes a communication unit 11, an operation unit 12, a display unit 13, a storage unit 14, a control unit 15, a voice processing unit 16, a speaker (SP17), and a microphone. (MIC18).

  The communication unit 11 performs wireless communication with a base station (not shown) connected to the communication network. For example, the transmission data supplied from the control unit 15 is subjected to predetermined modulation processing to be converted into a radio signal, and the converted radio signal is transmitted via an antenna (not shown). In addition, the radio signal from the base station received by the antenna is subjected to predetermined demodulation processing to be converted into reception data, and the reception data is output to the control unit 15.

The operation unit 12 includes keys to which various operation contents are assigned, such as a power key, a call key, a numeric key, a character key, a selection key, and a determination key. For example, when a numeric key is operated by the user, a signal corresponding to the operation content is generated and output to the control unit 15.
The operation unit 12 may be configured by a touch sensor. In this case, a signal corresponding to the touch operation is generated and the signal is output to the control unit 15.

The display unit 13 is configured using a display device such as a liquid crystal display panel or an organic EL (Electro-Luminescence) panel, for example, and displays an image corresponding to the video signal generated by the control unit 15.
For example, various information and images such as telephone numbers of incoming and outgoing calls at the time of outgoing / incoming voice calls, contents of received mail and outgoing mail, date, time, remaining battery level, standby screen, and the like are displayed.

The storage unit 14 includes, for example, a non-volatile storage device (nonvolatile semiconductor memory, hard disk device, optical disk device, etc.), a randomly accessible storage device (eg, SRAM, DRAM), and the like. Holds various data used for. For example, a computer program provided in the control unit 15, an address book for managing personal information such as a telephone number and an email address of a communication partner, an audio file for playing a ringtone or an alarm sound, an image file for a standby screen, Various setting data, temporary data used in the program processing, etc. are stored.
Here, a preset predetermined operation content including a predetermined number of combinations of operations performed by the operation unit 12 is further stored. As used herein, “operation content” refers to either a password or unlock operation, and “combinations of a predetermined number of operations” refers to the number of digits of the password or the number of operations for unlock operation. Say. Details of both will be described later.

The control unit 15 comprehensively controls the overall operation of the mobile phone. That is, various processes of the mobile phone (voice calls performed via a circuit switching network, creation and transmission / reception of e-mail, browsing of the Internet Web (World Wide Web) site, etc.) are input via the operation unit 12. The operation of each block described above (transmission / reception of signals in the communication unit 11, display of images on the display unit 13, etc.) is controlled so as to be executed according to an appropriate procedure.
The control unit 15 includes a computer (microprocessor) that executes processing based on a program (OS, application thin manager, application program, etc.) stored in the storage unit 14, and is described above according to a procedure instructed in this program. Execute the process. That is, the instruction code is sequentially read from the program stored in the storage unit 14 and the process is executed.

The control unit 15 executes a part of the various processes described above by an application program that operates under a predetermined execution environment (platform). For example, processing related to security such as browsing of a website on the Internet, display of an image in a standby mode, or access restriction is executed by an application program. That is, when a predetermined event occurs in response to an operation from the operation unit 12, the control unit 15 activates a predetermined application program corresponding to the event and executes a specific process.
Here, the control unit 15 determines whether or not the operation performed by the operation unit 12 matches the predetermined operation content stored in the storage unit 14, and when the operation matches, the predetermined operation is permitted. If not, it is determined whether or not the number of operations performed by the operation unit 12 matches an arbitrary numerical value acquired, and predetermined when the number of operations matches the arbitrary numerical value. It has a function to issue a warning. Details will be described later.

  Note that the audio processing unit 16 processes an audio signal output from the speaker 17 and an audio signal input from the microphone 18. That is, the sound input from the microphone 18 is amplified, analog-to-digital converted, and further subjected to signal processing such as encoding, converted into digital sound data, and output to the control unit 15. In addition, the audio data output from the control unit 15 is subjected to signal processing such as decoding, digital-analog conversion, amplification, and the like, converted into an analog audio signal, and output to the speaker 17.

Specifically, the mobile phone described above is composed of a CPU and a peripheral LSI including a memory, and the function of the control unit 15 serving as a control center is that the CPU sequentially reads and executes a program recorded in the memory. It is realized by.
The functions of the communication unit 11, the operation unit 12, the display unit 13, and the audio processing unit 16 are realized by a peripheral LSI that is programmable controlled by the CPU, and is controlled via an input / output port (not shown). 15 is connected to a CPU that realizes the functions of 15. In addition, the memory | storage part 14 shall be allocated and memorize | stored in memory.

FIG. 2 is a block diagram showing an expanded function of the internal configuration of the control unit 15 shown in FIG.
As shown in FIG. 2, the control unit 15 includes an operation content acquisition unit 151, an operation number management unit 152, a random number generation unit, a first determination unit 154, a function execution unit 155, and a random number acquisition unit 156. The second determination unit 157 and the warning generation unit 158 are configured.

The operation content acquisition unit 151 acquires the operation content operated by the operation unit 12 and outputs the operation content to the first determination unit 154. In addition, the first determination unit 154 receives a preset predetermined operation content including a predetermined number of combinations of operations performed by the operation unit 12 from the storage unit 14.
The operation number management unit 152 counts the number operated by the operation unit 12 and outputs the counted number to the second determination unit 157.

  The random number generation unit 153 generates a random number and outputs it to the random number acquisition unit 156. The random number acquisition unit 156 compares the operation content operated by the first determination unit 154 with the operation unit 12 and a predetermined operation content set in advance, which is read from the storage unit 14 and includes a predetermined number of operations. When a decision is made that they do not match, a random number generated by the random number generation unit 153 is acquired, and the numerical value is output to the second determination unit 157.

  In addition, data related to the number of operations counted by the operation number management unit 152 is output to the second determination unit 157, where the numerical value acquired by the random number acquisition unit 156 and the operation number management unit 152 When it is determined that the counted number of operations matches, the warning generation unit 158 is activated to control the voice processing unit 16. The first determination unit 154 is also connected to the function execution unit 155, and the first determination unit 154 reads the operation content operated by the operation unit 12 and the predetermined number of operations read from the storage unit 14. Comparison with a predetermined operation content set in advance consisting of a combination is performed, and if it is determined that they match, execution of the application by the function execution unit 155 is permitted.

FIG. 3 is a flowchart cited for explaining the operation and control method of the electronic apparatus according to the embodiment of the present invention.
The operation of the electronic apparatus according to the embodiment of the present invention shown in FIGS. 1 and 2 will be described in detail below with reference to the flowchart shown in FIG.

  During standby, in order to release the access restriction, it is determined whether or not the user has requested to release the access restriction by operating a predetermined key of the operation unit 12 (S301), and until the predetermined key operation is performed. The same determination is repeated. When a predetermined key operation is performed and an access restriction release request is generated, the control unit 15 displays a password input screen on the display unit 13 (S302). Subsequently, according to the password input screen displayed on the display unit 13, it is determined whether or not the user has input the password by operating the operation unit 12 (S303), and the operation unit 12 is operated. The same determination is repeated until the password is entered. When the code number is input, the operation number management unit 152 of the control unit 15 then counts the number of corresponding digits (number operated on the operation unit 12) n of the input code number ( S304). In this case, since the corresponding number of digits of the input personal identification number is the first number of digits, n = 1. In addition, the operation content acquisition unit 151 of the control unit 15 acquires the input content of the n-digit password (S305), and outputs the acquired password to the first determination unit 154.

  In addition, since the regular user-registered personal identification number stored in the storage unit 14 is read and input to the first determination unit 154, the first determination unit 154 receives the user registration from the storage unit 14. An n-digit personal identification number is obtained from the already-registered normal personal identification number (S306). Then, the first determination unit 154 compares and collates the n-th code number output from the operation content acquisition unit 151 and the n-th code number of the regular code number acquired from the storage unit 14 (S307). ), It is determined whether or not they match (S308).

  As a result of the comparison and collation by the first determination unit 154 in step S308, the n-th code number output from the operation content acquisition unit 151 matches the n-th code number of the regular code number acquired from the storage unit 14. In this case, the control unit 15 then determines that the number of digits n counted by the operation number management unit 152 is the number of digits N (predetermined number) of the registered personal identification number (in this case, for example, 4 to 8). (S309). When the number of digits n matches the number of digits N of the regular password registered as a user, the user who entered the password is regarded as a legitimate user, and the access restriction is canceled. Execution of a predetermined function that has been restricted (predetermined operation), for example, execution of a calling function of a mobile phone is permitted (S310). The predetermined function permitted to be executed here is not limited to the calling function of the mobile phone, but may be other functions.

  On the other hand, if the corresponding number of digits n counted by the operation number management unit 152 does not match the number N of digits of the regular password registered by the user in step S309, the process returns to step S303 again, and the same as above. Repeat the procedure. Here, since n is 1 and the number N of digits of the regular personal identification number is 4 to 8, they do not match, and the process returns to step S303 again to repeat the same procedure as described above.

  Next, in step S309, the n-digit personal identification number output from the operation content acquisition unit 151 is compared with the personal identification number of the corresponding digit number n of the regular personal identification number acquired from the storage unit 14, and both are compared. If not, the first determination unit 154 then activates the random number acquisition unit 156, acquires the random number generated by the random number generation unit 153 at that time (S311), and outputs it to the second determination unit 157 To do. The random number generated by the random number generation unit 153 is any number within the range of digits that can be set in advance as a personal identification number (here, N = 4 to 8 digits) (that is, 4 to 8). Suppose there is.

  Next, the second determination unit 157 acquires information on the operation number n of the operation unit 12 counted by the operation number management unit 152 in step S304, and the random number generated by the random number generation unit 153 is the operation number management. It is determined whether or not it matches the number of corresponding digits n counted by the unit 152 (S312). If they do not match, the control unit 15 further confirms whether or not the password is entered by the user (S313), and whenever it is entered, the operation number management unit 152 counts the number of digits of the entered password. n is counted (S314), and then the process returns to step S312 and the second determination unit 157 again matches the random number generated by the random number generation unit 153 with the corresponding number of digits n counted by the operation number management unit 152. It is determined whether or not to do so.

  If it is determined in step S312 that the random number generated by the random number generation unit 153 matches the number of digits n counted by the operation number management unit 152, the warning generation unit 158 is activated next. The display unit 13 displays a warning, for example, a warning such as “the password is different”, or the speaker 17 is driven via the voice processing unit 16 to indicate that the password is incorrect. Is output (S315). When the warning notification is made in step S315, the access restriction release request generated in S301 is canceled and the original standby state is restored.

  As described above, according to the present embodiment, the warning is output and the timing of the warning is unlocked based on the random number acquired by the random number acquisition unit 156 unless the correct password is correctly input to the end. The number of digits is difficult for a malicious third party to predict not only the contents of the PIN but also the number of digits, thereby increasing the security effect and improving safety. Can do.

The operation of the control unit 15 described above is as follows when viewed from a malicious third party. That is, it is assumed that there is a mobile phone that can set a 4- to 8-digit password, and “12345” is set and registered in the storage unit 14 as a regular password.
Here, it is assumed that a third party tries to unlock the mobile phone and first inputs an appropriate password “0”. However, since the personal identification number “0” does not match the regular personal identification number “1” at this time, the control unit 15 obtains random numbers (the control unit 15 always generates and outputs random numbers 4 to 8 in sequence). is doing). If the random number acquired here is “7”, a warning is issued when a third party inputs up to 7 digits. That is, when a third party inputs an appropriate password up to 7 digits, for example, a warning message “The password is incorrect” is displayed on the display unit 13. You should think that it is set to 7 digits.

  Therefore, when the third party tries again to input the personal identification number starting from “0”, the personal identification number “0” does not match the regular personal identification number “1”. Get a random number again. If the random number acquired at this time is “4”, a warning is issued when a third party inputs up to four digits. As a result, a warning was issued at the time of entry of the 4th digit for the password that was thought to be 7 digits earlier, so that the third party was confused and tried to unlock the password every time it tried to perform the unlocking operation. I fall into the illusion that the number of digits changes. For this reason, it seems that the third party falls into a state where it is difficult to predict even the number of digits of the personal identification number, and finally the lock release.

In addition, according to the above-described embodiment, the numerical value of the personal identification number is exemplified as the “operation content”. However, the present invention can be similarly applied even to a key action. Here, the key action refers to a continuous operation such as twice on the right and three times on the left, which is performed to release the lock using a touch sensor, for example. 2. Description of the Related Art In recent years, services that can be paid only by using a mobile phone incorporating a non-contact IC chip and holding it over a terminal installed in a member store such as shopping, transportation, and amusement are spreading. In such an application, the function of the non-contact IC chip is normally locked, and a method of releasing the lock only at the time of use is taken.
At this time, for example, touch sensors mounted on the right side and the left side of the display direction of the sub display, which are mounted around the sub display of the mobile phone, are operated according to preset key actions. Since the mobile phone can be unlocked with the mobile phone closed, it is possible to provide convenience from the viewpoint of operability, which will be described in detail below with specific examples. The operation means an operation to the right touch sensor with respect to the display direction of the sub-display, and the operation “left” means an operation to the left touch sensor with respect to the display direction of the display. The same effect can be obtained by operating the side keys regardless of the touch sensor.

In addition, according to the above-described embodiment, the timing for generating a warning for erroneous input of a personal identification number is determined using a random number. Value) may be acquired from the storage unit 14 and used. For example, when 8 digits are set as the password, 7 digits are stored in the storage unit 14 as a fixed number of digits, and a warning sound is always generated at the timing when the 7th password is input. If generated, security can be similarly strengthened. In this case, it can be realized by replacing the operation of “random number acquisition” in step S311 in the flowchart shown in FIG. 3 with the operation of acquiring the certain number of digits from the storage unit 14.
Further, according to the above-described embodiment, the timing for acquiring the random number has been described as the time when the second determination unit 157 determines that there is a mismatch, but in addition to the operation start time, the time when a predetermined number of digits are input Any time other than after the input of the personal identification number corresponding to all the digits is completed, such as when an erroneous input is detected.

  Hereinafter, specific examples in the case where the “operation content” is the unlocking operation by the personal identification number and the unlocking operation by the continuous operation such as two times to the right and three times to the left are described as examples. To do.

(Example 1)
Regular PIN: “12345”
Input PIN: “120009”
Here, it is assumed that the regular password stored in the storage unit 14 is 5 digits of “12345”, and the password entered through the operation unit 12 and acquired by the control unit 15 is “120009”. Here, the warning is given when the number of digits corresponding to the numerical value acquired by the random number acquisition unit 156 is input.
For example, if the numerical value acquired by the random number acquisition unit 156 is “3”, a warning is issued when “0” in the third digit is input. Further, if the numerical value acquired by the random number acquisition unit 156 is “6”, a warning is issued at the timing when “9” of the sixth digit is input.

According to the first embodiment, the timing at which the warning is issued is the timing at which the third digit “0” is input or the timing at which the sixth digit “9” is input. Since the number of digits to be used, “5” in this case, is not known, safety is high. However, it is conceivable that the random number acquired by the random number acquisition unit 156 accidentally becomes “5” and a warning is issued when the fifth digit “0” is input. However, the acquired random number is always “5”. Therefore, it is understood that “5”, which is the number of digits constituting the regular password, is not known to a third party.
Note that the random number may be acquired at any time when the operation is started, when a predetermined number of digits are input, or when an erroneous input is detected. In addition, as described above, the above-described operation content includes not only a password release operation but also a lock release operation by continuous operations such as twice right and three times left.

(Example 2)
Regular PIN: “12345”
Input PIN: “120009”
Here, as in the first embodiment, the regular password stored in the storage unit 14 is 5 digits of “12345”, and the password entered via the operation unit 12 and acquired by the control unit 15 is “120009”. To do. Here, the warning is issued when the number of digits stored in the storage unit 14 (always constant) is input. For example, if the number of digits stored in the storage unit 14 is “3”, a warning is issued at the timing when the third digit “0” is input.
If the number of digits stored in the storage unit 14 is “6”, a warning is issued at the timing when “9” of the sixth digit is input.

  According to Example 2, a malicious third party assumes that the personal identification number is 3 digits in the former case, and assumes that the personal identification number is 6 digits in the latter case. The number of digits is not deciphered, thus improving safety.

(Example 3)
Regular operation content: “Right, Left, Right, Left, Right”
Operation input content: “Right, Right, Right, Left, Right, Left”
Here, the regular operation content stored in the storage unit 14 is the number of operations of 5 times “right, left, right, left, right”, which is input via the operation unit 12 (touch sensor), and the control unit 15 The operation input content acquired by the above is “right, right, right, left, right, left”. Here, the warning is issued when the number of operations corresponding to the numerical value acquired by the random number acquisition unit 156 is performed.
For example, if the numerical value acquired by the random number acquisition unit 156 is “3”, a warning is issued when “right” of the third operation is input.
If the numerical value acquired by the random number acquisition unit 156 is “6”, a warning is issued at the timing when the sixth operation “left” is input. As described above, according to the third embodiment, the timing at which the warning is issued is the timing at which “right” that is the third operation or “left” that is the sixth operation is input. The tripartite is not safe to read, which is the normal required number of operations.

Example 4
Regular operation content: “Right, Left, Right, Left, Right”
Operation input content: “Right, Right, Right, Left, Right, Left”
Here, as in the third embodiment, the regular operation content stored in the storage unit 14 is set to five operation times “right, left, right, left, right” and input via the operation unit 12 (touch sensor). The operation input content acquired by the control unit 15 is “right, right, right, left, right, left”.
Here, the warning is issued when the number of operations corresponding to the numerical value (always constant) acquired from the storage unit 14 is performed.
For example, if the numerical value acquired from the storage unit 14 is “3”, a warning is issued when “right” of the third operation is input. If the numerical value acquired from the storage unit 14 is “6”, a warning is issued at the timing when the sixth operation “left” is input.

  According to the fourth embodiment, the malicious third party assumes that the number of operations is 3 according to the former, and assumes that the number of operations is 6 according to the latter. Since it is not deciphered 5 times, safety is improved.

(Example 5)
Regular PIN: “12345”
Input PIN: “1200”
Here, it is assumed that the regular password stored in the storage unit 14 is 5 digits of “12345”, and the password entered through the operation unit 12 and acquired by the control unit 15 is “1200”. Here, the warning is given when a numerical value acquired by the random number acquisition unit 156 or a number of digits corresponding to a certain number acquired from the storage unit 14 is input.
However, the number of digits acquired at this time is less than the normal number of digits “5” and more than the number of digits already input (second predetermined number) when acquiring a numerical value. To do. That is, the number of digits of “5” or more is set not to be acquired. For example, the numerical value acquired by the random number acquisition unit 156 is “4”, which is the number of digits less than “5”. In this case, a warning is issued at the timing when the fourth digit “0” is input.

According to the fifth embodiment, a malicious third party assumes that the personal identification number has fewer than 5 digits, and therefore tries to determine the personal identification number within the range of this small number of digits. Here, even if you accidentally determine the correct PIN number up to this small number of digits, you will be prompted to enter the next 5 digit PIN, which may cause confusion and give up the PIN Is expensive.
As described above, since the regular number of digits cannot be read, safety is improved. Although it is possible to issue a warning with a larger number of digits (eg, 6 digits) than the normal number of digits, in this case, it may be possible to accidentally determine a normal password before the above confusion occurs. It is done. Therefore, for safety reasons, it is preferable to issue a warning with a smaller number of digits than the normal number of digits.

(Example 6)
Regular operation content: “Right, Left, Right, Left, Right”
Operation input content: “Right, Right, Right, Left”
Here, the regular operation content stored in the storage unit 14 is the number of operations of 5 times “right, left, right, left, right”, which is input via the operation unit 12 (touch sensor), and the control unit 15 The operation input content acquired by the above is “right, right, right, left”. In this case, the warning is issued when the number of operations corresponding to the numerical value acquired by the random number acquisition unit 156 is performed. However, it is assumed that the number of operations acquired at this time is less than the regular number of times “5” and is greater than the number of input operations (second predetermined number) when the numerical value is acquired. That is, the number of digits of “5” or more is set not to be acquired. For example, the numerical value acquired by the random number acquisition unit 156 is “4”, which is the number of times less than “5”. In this case, a warning is issued at the timing when the fourth operation “left” is input.

According to the sixth embodiment, a malicious third party assumes that the number of operations is four times less than the normal number of operations, and therefore tries to determine the normal operation content within the range of the small number of operations. To do. Here, even if the normal operation content up to the small number of times is found by chance, the next fifth operation is required, so there is a high possibility of causing confusion and giving up the input of the operation content.
As described above, since the number of legitimate operations cannot be read, safety is improved. Although it is possible to issue a warning with a number larger than the number of regular operations (for example, 6 times), in this case, it may be possible to accidentally determine the content of regular operations before the above confusion occurs. It is done. Therefore, for safety reasons, it is preferable to issue a warning with a smaller number of operations than the number of regular operations.

(Example 7)
Regular PIN: “12345”
Input PIN: “120009”
Here, it is assumed that the regular password stored in the storage unit 14 is 5 digits of “12345”, and the password entered through the operation unit 12 and acquired by the control unit 15 is “120009”. In this case, the control unit 15 acquires a random number from the random number acquisition unit 156 or acquires a certain number from the storage unit 14 when an erroneous input is detected. Here, a random number or a constant value is acquired when the third digit “0” is input. In this case, the warning is given when a random number or a number of digits corresponding to a certain value is input.
For example, if the numerical value acquired from the random number acquisition unit 156 or the storage unit 14 is “3”, a warning is issued at the timing when the third digit “0” is input. If the numerical value acquired from the random number acquisition unit 156 or the storage unit 14 is “6”, a warning is issued at the timing when “9” in the sixth digit is input.

  According to Example 7 described above, a malicious third party assumes that the personal identification number is 4 digits in the former case, and assumes that the personal identification number is 6 digits in the latter case. For the three, the correct number of digits (5 digits) is not deciphered, and therefore it is highly secure. In addition, when a legitimate user inputs a legitimate password, there is no need to obtain a random number for determining the warning timing or a constant numerical value stored in the storage unit 14, so that the control can be simplified. Realized.

(Example 8)
Normal operation content: right, left, right, left, right Operation input content: right, right, right, left, right, left Here, the normal operation content stored in the storage unit 14 is “right, left, right, “Left, right” is the number of operations five times, and the operation input content input through the operation unit 12 (touch sensor) and acquired by the control unit 15 is “right, right, right, left, right, left”. To do.
In this case, the control unit 15 acquires a random number from the random number acquisition unit 156 or detects a certain number from the storage unit 14 when an erroneous input is detected. Here, when the third operation “right” is detected, a random number or a constant value is acquired. In this case, the warning is given when a random number or a number corresponding to a certain value is operated.
For example, if the numerical value acquired from the random number acquisition unit 156 or the storage unit 14 is “3”, a warning is issued at the timing when the third operation “right” is detected. Further, if the numerical value acquired from the random number acquisition unit 156 or the storage unit 14 is “6”, a warning is issued at the timing when the sixth operation “left” is detected.

  According to Example 8 described above, a malicious third party assumes that the number of operations is 3 in the former case, and assumes that the number of operations is 6 in the latter case. For the three parties, the regular number of operations (5 times) is not deciphered, so it is highly safe. In addition, when a legitimate user inputs a legitimate password, there is no need to obtain a random number for determining the warning timing or a constant numerical value stored in the storage unit 14, so that the control can be simplified. Realized.

As described above, according to the electronic apparatus according to the embodiment of the present invention, the control unit 15 determines whether or not the operation performed by the operation unit 12 matches the predetermined operation content stored in the storage unit 14. If a match is found, a predetermined operation is permitted. If not, a determination is made as to whether or not the number of operations performed by the operation unit 12 matches the obtained arbitrary numerical value. In this case, since a predetermined warning is issued, a malicious third party cannot read not only the predetermined operation content but also the number of combinations of operations, and safety is improved. On the other hand, conventionally, since a warning is issued when a predetermined number of operations are performed, it is easy to interpret the predetermined number.
In addition, the control unit 15 generates a random number within a predetermined number range, acquires the generated random number, or acquires a predetermined numerical value different from the predetermined number from the storage unit 14. Since a warning is issued when a number of operations different from the number is performed, it becomes difficult for a malicious third party to know the predetermined number of digits or the number of operations.

Further, when the number of operations performed by the operation unit 12 is a second predetermined number smaller than the predetermined number, the control unit 15 performs the predetermined operation stored in the storage unit 14 by the operation performed by the operation unit 12. It is determined whether or not the contents match, and if they do not match, the malicious third party obtains a numerical value in the range of numerical values greater than or equal to the second predetermined number and smaller than the predetermined number, Since the number of digits or the number of operations in the becomes unpredictable, the safety is further increased.
In other words, a malicious third party tries to determine the PIN number within the range of the small number of digits or the number of operations, but even if it accidentally calculates the PIN number up to the small number of digits or the number of operations, It is necessary to enter the PIN or operation details for the next number of digits, thus creating confusion and making it unpredictable how many digits the PIN is or how many times it is operated. There is a high possibility of giving up the content. On the other hand, it is conceivable to issue a warning with more digits than the regular password, but in this case, the regular password may be accidentally allocated before confusion occurs. Therefore, it can be said that it is safer to issue a warning with fewer digits than the normal number of digits.

  In addition, each time an operation is performed by the operation unit 12, the control unit 15 determines whether or not a predetermined number of combinations of the operated operations match a predetermined operation content stored in the storage unit 14. If it is determined not to be acquired and an arbitrary numerical value is acquired at a timing, it is not necessary to acquire a numerical value in advance, and control can be simplified.

  In addition, the flowchart shown in FIG. 3 also shows each process (step) which the security management method in the electronic device of this invention has.

  That is, the security management method in the electronic device according to the present invention includes the operation unit 12, the storage unit 14 that stores predetermined regular operation content performed by the operation unit 12, and the security management of the operation content performed by the operation unit 12. The control unit 15 performs a first step of determining whether or not the operation performed by the operation unit 12 matches a predetermined operation content stored in the storage unit 14 (S308). If it is determined in the first step (S308) that it is coincident, execution of a predetermined function is permitted (S307), and if not coincident, the number of operations performed by the operation unit 12 is further acquired. The second step (S312) for determining whether or not the value matches the given numerical value and the third step for issuing a predetermined warning when it is determined that the values match in the second step (S312). A step (S315), and has a.

  According to the security management method for an electronic device of the present invention, it is possible to increase security by concealing not only the operation content but also the number of combinations of operations from a malicious third party, thereby making the electronic device safer. Can be used.

In addition, according to the above-described electronic device according to the embodiment of the present invention, a mobile phone is exemplified as the electronic device. The same effect can be obtained.
The functions of the constituent blocks of the electronic device of the present invention may be realized entirely by software, or at least a part thereof may be realized by hardware. For example, the processing in the control unit 15 and the data processing in the communication unit 11 and the voice processing unit 16 may be realized on a computer by one or a plurality of programs, and at least a part thereof is realized by hardware. Also good.

It is a block diagram which shows the internal structure of the electronic device which concerns on embodiment of this invention. It is the block diagram which expanded and showed the internal structure of the control part 15 shown in FIG. It is the flowchart quoted in order to demonstrate operation | movement and the control method of the electronic device concerning embodiment of this invention.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 11 ... Communication part, 12 ... Operation part, 13 ... Display part, 14 ... Memory | storage part, 15 ... Control part, 16 ... Audio | voice processing part, 17 ... Speaker, 18 ... Microphone, 151 ... Operation content acquisition part, 152 ... Number of operation Management unit 153 ... random number generation unit, 154 ... first determination unit, 155 ... function execution unit, 156 ... random number acquisition unit, 157 ... second determination unit, 158 ... warning generation unit.

Claims (6)

An operation unit;
A storage unit that stores a predetermined operation content that is set in advance and includes a predetermined number of combinations of operations performed by the operation unit;
It is determined whether or not the operation performed by the operation unit matches the predetermined operation content stored in the storage unit, and if the operation matches, the predetermined operation is permitted, and if the operation does not match, a random number is determined. Determine whether the numerical value acquired by the number of operations performed by the operation unit matches,
A control unit that performs control to issue a predetermined warning when the random number matches the number of operations;
An electronic device characterized by comprising: An operation unit;
A storage unit that stores a preset predetermined operation content including a predetermined number of combinations of operations performed by the operation unit and a predetermined numerical value different from the predetermined number;
It is determined whether or not the operation performed by the operation unit matches the predetermined operation content stored in the storage unit, and if the operation matches, the predetermined operation is permitted, and if the operation does not match, the operation is performed. A control unit that determines whether or not a certain numerical value matches the number of operations performed by the operation unit, and performs a control to issue a predetermined warning when the certain numerical value matches the number of operations; ,
An electronic device characterized by comprising: The controller is
It is determined whether or not the operation performed by the operation unit matches the predetermined operation content stored in the storage unit, and if not, the number of operations performed by the operation unit is When the number is smaller than the predetermined number, the numerical value is acquired in a numerical value range that is equal to or larger than the number of operations and smaller than the predetermined number
The electronic device according to claim 1, wherein the electronic device is an electronic device. The control unit sequentially determines whether or not it matches the predetermined operation content stored in the storage unit for each operation performed by the operation unit, and obtains the numerical value when it is determined that they do not match To
The electronic device according to any one of claims 1 to 3, wherein A method for controlling an electronic device that stores in a storage unit predetermined preset operation content including a predetermined number of combinations of operations performed by the operation unit, and permits a predetermined operation in accordance with the operation content performed by the operation unit. Because
A first step of determining whether or not an operation performed by the operation unit matches the stored predetermined operation content;
If it is determined in the first step that the values match, a predetermined operation is permitted. If it is determined that the values do not match, whether or not the numerical value acquired by the random number matches the number of operations performed by the operation unit A second step of determining
A third step for issuing a predetermined warning when it is determined in the second step that they match,
A control method for an electronic device, comprising: A preset predetermined operation content composed of a combination of a predetermined number of operations performed by the operation unit and a constant numerical value different from the predetermined number are stored in the storage unit, and a predetermined value is determined according to the operation content performed by the operation unit An electronic device control method that permits operation,
A first step of determining whether or not an operation performed by the operation unit matches the stored predetermined operation content;
When it is determined in the first step that they match, a predetermined operation is permitted, and when it is determined that they do not match, it is determined whether or not the certain numerical value matches the number of operations performed by the operation unit. A second step of determining;
A third step for issuing a predetermined warning when it is determined in the second step that they match,
A control method for an electronic device, comprising:

Images