JP2011008427A - Device and method for input of password information, and program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a password information input device in which such password information as a personal identification number is hard to be presumed, and further which facilitates input operation of the password.SOLUTION: When principal confirmation is necessary for transaction selected in an S100, a personal identification number is requested (S120: YES). In this case, 10 pieces of numbers ranging from "0" to "9" are rearranged at random, so that a number array can be determined (S130). Then, the rearranged numbers ranging from "0" to "9" are displayed as well as a button image (S140). Particularly in S150, whether the input of the personal identification number having the scheduled number of digits has ended is determined, and when the input has not ended (S150: NO), the rearrangement of those numbers is not performed, and the number array is maintained.

Description

  The present invention relates to input of password information.

  An automated teller machine (hereinafter referred to as “ATM”) has become widespread. ATMs have been established not only in banks but also in convenience stores. Also, ATMs that can be used for 24 hours are increasing.

  In such an ATM, it is necessary to input a password of a predetermined digit (for example, four digits) when cash is withdrawn. The password is input using a touch panel, for example. The touch panel is generally integrated with a display device. Therefore, the password can be input by touching the button image displayed on the screen. Further, the button images displayed on the screen are arranged in a matrix such as 3 columns in the vertical direction and 4 rows in the horizontal direction. Therefore, it is easy to find a desired one from the button images.

  By the way, in recent years when ATMs have spread, it is not uncommon for a large number of queues 3 to be formed in front of ATM 1 as shown in FIG. As a result, there is a concern that the password may be stolen by an unauthorized person by looking into the movement of the arm or finger of the operator 2 from behind. If the password is stolen by an unauthorized person, cash may be withdrawn using a counterfeit card made by unauthorized means such as skimming.

  Thus, for example, a device has been proposed that changes the arrangement of numbers displayed on a button image each time a PIN is entered (see, for example, Patent Document 1). According to this apparatus, since the numerical arrangement changes each time one of the button images is selected and operated, it is possible to prevent the personal identification number from being stolen even if it is viewed from behind.

JP 2003-196006 A

  However, as described in Patent Document 1, if the numerical arrangement is changed each time a button image is selected, the time required for the operator to search for a desired button image may increase. There is also a risk that an input error is likely to occur. As a result, there is a concern that smooth ATM usage may be hindered.

The present invention has been made in order to solve the above-described problem. An object of the present invention is to provide a password information input device in which password information such as a password is not easily guessed and the password information input operation is easy. And
Another object of the present invention is to provide a password information input method in which password information is difficult to be guessed and the password information input operation is easy.
Still another object of the present invention is to provide a program for realizing a function as a password information input device and a password information input method in a computer system.

  The personal identification information input device according to claim 1 is capable of displaying information on a display screen and sensing input operation by sensing a touch operation on the display screen; A plurality of predetermined symbols used for inputting the personal identification information are randomly rearranged to determine the symbol arrangement, and the symbol arrangement determined by the arrangement determination means is displayed at a predetermined position on the display screen. Display control means for displaying a symbol in association with the button image to be displayed, and the arrangement determining means maintains the determined symbol arrangement until the input of the personal identification information through the display input means is completed. To do.

In the present invention, information is displayed on the display screen by the display input means. The display input means senses a touch operation on the display screen and inputs information.
The sequence determining means determines a symbol array by randomly rearranging a plurality of predetermined symbols used for inputting the personal identification information when requesting the personal identification information.

Here, the “password information” means a secret symbol registered in advance to prove the identity. The “several symbols” used here are used to input the secret symbols.
For example, as shown in claim 2, the password information may be a password number. At this time, the plurality of symbols may be 10 numbers from “0” to “9”. In this case, the symbol array is an array of 10 numbers “0” to “9”.

  When the symbol arrangement is determined, the display control means displays the symbol in association with the button image displayed at a predetermined position on the display screen. Here, “corresponding” is intended to include not only the case where a symbol is displayed over the button image but also a mode in which the symbol image is displayed at a close position where the correspondence with the button image is known.

  Here, particularly in the present invention, the determined symbol arrangement is maintained by the arrangement determination means until the input of the password information through the display input means is completed. Specifically, in the example of the password, for example, the arrangement of numbers associated with the button image is maintained until all of the 4-digit password is input.

  In this way, unlike the configuration in which the symbol arrangement is changed every time one symbol is input, the time until the operator searches for a desired button image can be shortened. Operation errors can be reduced. Moreover, since the symbol arrangement is changed when the password is requested, for example, when the operator changes, the symbol arrangement becomes different, so even if the movement of the finger or arm is seen from behind, the password information is stolen. Can be prevented.

  Such a password information input device can be applied to an automatic teller machine as shown in claim 3. As described above, the automatic teller machine is called ATM and is now indispensable for our daily life. However, while it is convenient, security enhancement is regarded as important because there is a possibility that secret information may be stolen by seeing the movement of a finger from behind. Therefore, by applying the present invention to an automatic teller machine, a great effect that matches the recent ATM circumstances can be obtained.

Although the invention has been described as the invention of the password information input device, it can also be realized as an invention of the password information input method as shown in claim 4.
That is, in the password information input method according to the fourth aspect, the password information is input via the display input means that can display information on the display screen and can input information by detecting a touch operation on the display screen. This is a method for inputting personal identification information used at the time, and includes the following steps (1) to (3).

In the procedure (1), a plurality of predetermined symbols used for inputting the password information are randomly rearranged to determine the symbol arrangement.
In step (2), symbols are displayed in association with the button image displayed at a predetermined position on the display screen with the determined symbol arrangement.
In the procedure (3), the determined symbol arrangement is maintained until the input of the personal identification information through the display input means is completed.

  Also by such a password information input method, the same effect as the above-described password information input device can be obtained. Further, as in the case of the above-described password information input device, as shown in claim 5, a password number may be used as the password information, and numbers “0” to “9” may be used. Furthermore, as shown in claim 6, it is conceivable to apply to ATM.

  By the way, the function of the password information input device and the password information input method are realized by a computer system. Therefore, the present invention can be realized as a program invention as shown in claim 7. This program causes a computer to function as an arrangement determination unit and a display control unit of the password information input device or as the password information input method.

It is a block diagram which shows schematic structure of ATM of one Embodiment. It is a flowchart which shows the input process in ATM of one Embodiment. It is explanatory drawing which illustrates the display screen of ATM of one Embodiment. It is explanatory drawing for showing the random change of a number arrangement | sequence. It is explanatory drawing for showing the conventional problem.

Hereinafter, an embodiment in which the present invention is applied to an ATM will be described with reference to the drawings.
As shown in FIG. 1, the ATM 1 includes a control unit 10, a display unit 20, a touch panel 30, a card reading unit 40, and a printing unit 50.

The control unit 10 is a so-called computer system that controls the entire ATM 1, and includes a CPU, a ROM, a RAM, an I / O, a bus line that connects them, and the like.
The display unit 20 is a color liquid crystal monitor on which instructions for operation and the like are displayed. The display screen of the display unit 20 has a structure that emits light in a direction near the vertical from the display screen. As a result, even if a person behind him looks into the display screen, the video on the display screen cannot be seen when the display screen is viewed from an oblique direction.

  The touch panel 30 is a transparent plate configured using a pressure sensitive element or the like. The touch panel 30 is configured integrally with the display unit 20. Thus, the operator can perform an input operation via the touch panel 30 by touching the button image displayed on the display unit 20.

The card reading unit 40 is configured by, for example, a card reader for reading a cash card. Thereby, the magnetically recorded information is read from the card.
The printing unit 50 is a part that records a history of transactions such as depositing, withdrawal, and transfer of cash. Specifically, it has a printing function and issues a receipt.

  Next, input processing that is a characteristic part of the present embodiment will be described with reference to FIG. This input process is executed by the control unit 10 when there is a transaction start request by an operator such as when the screen is touched.

  In the first step (hereinafter, “step” is simply indicated by the symbol S) 100, button display is performed. In this process, images of selection buttons corresponding to various transactions are displayed on the display unit 20. For example, selection buttons such as “deposit”, “payout”, and “transfer” are displayed.

  In subsequent S110, the card is read. This process is executed when an operator inserts a card into the card reading slot in response to a request. Information on the inserted card is read from the card reading unit 40.

  In the next S120, it is determined whether or not a password is requested. An affirmative determination is made when identity verification is required for the transaction selected in S100. If a password is requested (S120: YES), the process proceeds to S130. On the other hand, when the personal identification number is not requested (S120: NO), the process of S130 to S150 is not executed and the process proceeds to S160.

  In S130, 10 numbers “0” to “9” are rearranged randomly. In this process, ten numbers used for input of a personal identification number are randomly rearranged to determine a numerical arrangement.

  In S140, the rearranged numbers “0” to “9” are displayed together with the button image. For example, as shown in FIG. In FIG. 3, ten button images 22 are displayed on the display screen 21. The ten button images 22 are arranged in three columns and four rows, and the fourth row is arranged only in the center. In FIG. 3, a digit number confirmation column 23 and an OK button 24 are displayed at the bottom of the display screen 21.

  When a number is displayed together with the button image, the operator inputs a password. At this time, by touching the button image 22 displayed on the display unit 20, numbers are input via the touch panel 30. In the digit number confirmation column 23, “*” (asterisk) is displayed so that the number of digits of the entered number can be confirmed. The operator touches the OK button 24 and ends the password input.

  In S150 following S140, it is determined whether or not the input of the PIN code of the expected number of digits has been completed. If it is determined that the input has been completed (S150: YES), the process proceeds to S160. On the other hand, as long as the input is not completed (S150: NO), this determination process is repeated. As a result, the numbers are not rearranged until the input is completed.

  In S160, which is shifted when the negative determination is made in S120 and the positive determination is made in S150, various processes are executed. This process is a process corresponding to the transaction content selected in S100. Note that this processing includes processing such as receipt issuance by the printing unit 50 shown in FIG. After the process of S160 ends, this input process ends.

  Thereafter, when this input process is executed again, such as when the operator changes, when the password is requested (S120: YES), the numbers “0” to “9” are randomly rearranged ( S130) and displayed (S140).

  As described above, in the present embodiment, for the basic pattern as shown on the left side in FIG. 4, each time a password is input, a pattern of numbers A,..., Pattern N,. Are randomly determined (S130 and S140 in FIG. 2). On the other hand, as long as the input of the password is not completed (S150: NO), the determined number arrangement is maintained.

  In this way, unlike the configuration in which the numerical arrangement is changed every time a single number is input, the time required for the operator to search for a desired button image 22 (see FIG. 3) can be shortened. In addition, it is possible to reduce errors in the input operation by the operator. Moreover, since the numerical arrangement differs when the password is requested, the numerical arrangement is different when the operator changes, for example, even if the finger or arm movement is seen from behind, the password is stolen. Can be suppressed.

  In the present embodiment, the invention is applied to the input of an ATM PIN. ATMs are now an integral part of our lives. However, while it is convenient, security enhancement is regarded as important because there is a possibility that the password may be stolen by seeing the movement of the finger from behind. Therefore, according to this embodiment, the big effect corresponding to the recent ATM situation is produced.

  In the present embodiment, the ATM 1 constitutes a “password information input device”, the display unit 20 and the touch panel 30 constitute “display input means”, and the control unit 10 designates “sequence determination means” and “display control means”. Constitute.

Further, the processing of S120, S130, and S150 in FIG. 2 corresponds to the processing as “array determining means”, and the processing of S140 corresponds to the processing as “display control means”.
Furthermore, the input process shown in FIG. 2 is a process that embodies the “password input method”, the process of S130 corresponds to “procedure (1)”, and the process of S140 is “procedure (2)”. Correspondingly, the process of S150 corresponds to “procedure (3)”.

  As mentioned above, this invention is not limited to the said embodiment at all, In the range which does not deviate from the meaning, it can implement with a various form.

  1: ATM, 2: operator, 3: matrix, 10: control unit, 20: display unit, 21: display screen, 22: button image, 23: digit number confirmation column, 24: OK button, 30: touch panel, 40 : Card reading section, 50: Printing section

Claims (7)

Display input means capable of displaying information on a display screen and capable of inputting information by sensing a touch operation on the display screen;
A sequence determining means for determining a symbol array by randomly rearranging a plurality of predetermined symbols used for input of the password information when requesting the input of the password information;
Display control means for displaying the symbol in association with a button image displayed at a predetermined position on the display screen in the symbol arrangement determined by the arrangement determination means,
The personal identification information input device, wherein the arrangement determination unit maintains the determined symbol arrangement until the input of the personal identification information is completed through the display input unit. The personal identification information input device according to claim 1,
The password information is a password number;
The plurality of symbols are 10 characters from “0” to “9”. In the personal identification information input device according to claim 1 or 2,
A secret information input device characterized by being applied to an automated teller machine. A password information input method used when inputting password information via a display input means capable of displaying information on a display screen and sensing information input by sensing a touch operation on the display screen. A password information input method comprising the steps (1) to (3).
(1) A symbol arrangement is determined by randomly rearranging a plurality of predetermined symbols used for inputting password information.
(2) A symbol is displayed in association with a button image displayed at a predetermined position on the display screen with the determined symbol arrangement.
(3) The determined symbol arrangement is maintained until the input of the password information is completed through the display input means. In the password information input method according to claim 4,
The password information is a password number;
The plurality of symbols are ten numbers from “0” to “9”. In the personal identification information input method according to claim 4 or 5,
A security information input method characterized by being applied to an automated teller machine.   The computer is caused to function as the security information input method according to any one of claims 4 to 6, as an arrangement determination unit and a display control unit of the security information input device according to any one of claims 1 to 3. program.

Images