JP2012138775A - Password information input system and password information input method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a password information input system and a password information input method capable of making the correspondence between input information to input means and information after conversion be less likely comprehended by a third party.SOLUTION: A password information input system has a password information input device 10 connectable to a password device, and an output device 20 communicable with the password information input device 10. The password information input device 10 has: operation means 11; input conversion information generation means 12 for generating input conversion information indicating the correspondence between input information and an input value; input conversion information transmission means 13 encrypting the input conversion information and transmitting the encrypted input conversion information to the output device 20; input information conversion means 14 for converting the input information input to the operation means 11 by a user into the input value based on the input conversion information; and output means 15 for outputting the input value to the password device. The output device 20 has information output means 21 for decrypting the encrypted input conversion information received from the password information input device 10, and outputting the decrypted input conversion information.

Description

  The present invention relates to a password information input system and a password information input method.

  There are systems that allow users to enter password information, such as access to a building admission device, ATM (Automatic Teller Machine), and computer access, and to determine whether or not the user can use or access based on the contents of the password information. .

  The password information is generally input through an input device such as a keypad as shown in FIG. The input device shown in FIG. 1 includes twelve buttons. Each button is associated with a numerical value from 0 to 9, and input values of two symbols “*” and “#”. The method of entering a PIN number into the input device can prevent unauthorized use by others as long as the user does not leak his / her own secret information, so it is widely used in systems that require identification and limitation of users. in use. However, in the case of using a method of inputting a personal identification number in the input device, there is a possibility that the personal information is leaked when another user peeks when the personal information is input. For example, when the input device shown in FIG. 1 is used, it is possible for the other person to know the password information input by the user by observing the location and order of the user's button presses.

  As a method for avoiding leakage of personal identification information, for example, as a personal identification information input device, there is a method of dynamically changing the association between input buttons and input values using a touch panel (for example, Patent Document 1). reference.). According to the method described in Patent Document 1, it is possible to prevent the user from seeing the button pressed position by a third party and knowing the input value.

  When a user wears a glasses-type display device equipped with a transmissive display unit and looks at the keyboard, a keyboard pattern image is displayed on the transmissive display unit, and the user inputs input corresponding to each key from the pattern image. By recognizing the value, there is a method in which it is impossible to determine what input each key corresponds to other than the user (see, for example, Patent Document 2). There is also a method in which a user wears a glasses-type display and performs an input operation on a user interface displayed superimposed on a reflecting member (see, for example, Patent Document 3).

  Further, the user replaces the password with a hiragana string based on the correspondence table displayed on the terminal device, inputs the hiragana string in the hiragana table of the input display unit of the main device, and the main device is input based on the correspondence table. There is a method of converting a hiragana string into a password (for example, see Patent Document 4). According to the method described in Patent Document 4, even if a user sneaks a screen or gesture for inputting a password, the password is not decrypted or guessed.

JP 2000-099801 A JP 2009-212447 A JP 2009-129021 A JP 2008-234440 A

  However, the method described in Patent Document 1 allows the third party to know the password information input by the user by seeing the association between the input button and the input value displayed on the input device by the third party. there is a possibility. Further, the method described in Patent Document 4 may cause the password to be decrypted or guessed when the information in the correspondence table is known to a third party.

  Accordingly, an object of the present invention is to provide a password information input system and a password information input method that can make it difficult for a third party to grasp the correspondence between the input information to the input means and the converted information. .

  A password information input system according to the present invention is a password information input system for inputting password information to a password device, and includes a password information input device connectable to the password device and an output device capable of communicating with the password information input device. The password information input device includes an operation unit for a user of the password device to input information, an input conversion information generation unit that generates input conversion information indicating a correspondence relationship between the input information and the input value, and input conversion information. The input conversion information transmitting means for encrypting and transmitting the input information to the output device, the input information converting means for converting the input information input to the operation means by the user into the input value based on the input conversion information, and the input value to the personal identification device Output means for outputting, wherein the output device includes information output means for decrypting the encrypted input conversion information received from the password information input device and outputting the decrypted input conversion information To.

  A password information input method according to the present invention is a password information input method for inputting password information to a password device, wherein the password information input device generates input conversion information indicating a correspondence relationship between input information and an input value, The conversion information is encrypted and transmitted to the output device, the output device decrypts the encrypted input conversion information received from the password information input device, outputs the decrypted input conversion information, and the password information input device The input information input to the operation means by the user of the device is converted into an input value based on the input conversion information, and the input value is output to the personal identification device.

  According to the present invention, it is difficult for a third party to grasp the correspondence between the input information to the input unit and the converted information.

It is explanatory drawing which shows an example of the keypad comprised from 12 buttons. It is a block diagram which shows the structure of 1st Embodiment of the PIN information input system by this invention. 3 is a flowchart illustrating an operation of the output device 200 in the first embodiment. 4 is a flowchart illustrating an operation of the personal identification information input device 100 in the first embodiment. It is explanatory drawing which shows an example of the keypad in which the input value is not printed. It is explanatory drawing which showed the order which assigns the input value enumerated by the input conversion information to a keypad. It is explanatory drawing which shows an example of input conversion information. FIG. 8 is an explanatory diagram illustrating an example of image data representing a keypad to which input values of the input conversion information illustrated in FIG. 7 are assigned in the order illustrated in FIG. 6. It is explanatory drawing which shows an example of input conversion information. It is explanatory drawing which shows an example of the image data which shows a response | compatibility with the area | region on a touchscreen based on the input conversion information shown by FIG. 9, and an input value. It is a block diagram which shows the principal part of this invention.

Embodiment 1. FIG.
A first embodiment of the present invention will be described below with reference to the drawings.

  FIG. 2 is a block diagram showing the configuration of the first embodiment of the password information input system according to the present invention.

  The password information input system shown in FIG. 2 includes a password information input device 100 and an output device 200, and the password information input device 100 and the output device 200 are communicably connected. The password information input system is connected to the password device 300 so as to be communicable. Each connection method may be in any form such as wireless communication or wireless LAN.

  The password information input device 100 performs password information input processing based on input from the user. The personal identification information input device 100 includes a key input unit 110, a key information conversion unit 120, a key output unit 130, an input conversion information generation unit 140, an input conversion information storage unit 150, an input conversion information transmission unit 160, And an encryption unit 170. In addition, each unit other than the key input unit 110 of the password information input device 100 is realized by a processor that operates according to a program such as a CPU provided in the password information input device 100.

  The key input unit 110 inputs a key operation from the user. The input key operation is output to the key information exchanging unit 120 as input information. The key input unit 110 is, for example, a keypad, a keyboard, a touch panel, a mouse, a microphone, or the like.

  The key information exchanging unit 120 converts the input information input by the key input unit 110 into an input value, and outputs the input value to the key output unit 130.

  The key output unit 130 outputs the input value input by the key information exchange unit 120 to the personal identification device 300.

  The input conversion information generation unit 140 generates input conversion information indicating a correspondence relationship between input information and input values.

  The input conversion information storage unit 150 stores input conversion information.

  The encryption unit 170 encrypts the input conversion information.

  The input conversion information transmission unit 160 transmits the encrypted input conversion information to the output device 200.

  The output device 200 outputs information such as input conversion information to the user as a video. The output device 200 includes an output unit 210, an input conversion information receiving unit 220, and a decoding unit 230. The input conversion information receiving unit 220 and the decoding unit 230 are realized by a processor that operates according to a program such as a CPU provided in the output device 200. The output device 200 is a display device having a mobile terminal and a communication function, and has a mechanism that allows a user to refer to information output from the output unit 210 without being seen by a third party. The output device 200 is, for example, a display device having a glasses-type configuration, a portable display device having a mechanism in which the contents of the screen cannot be visually recognized except from the front angle.

  The output unit 210 is a display, for example, and outputs information such as input conversion information. However, it is not limited to a display.

  The input conversion information receiving unit 220 receives input conversion information from the password information input device 100.

  The decryption unit 230 decrypts the encrypted input conversion information.

  The password device 300 inputs password information. The personal identification device 300 is, for example, a building entrance determination device, an ATM, or a computer.

  Next, the operation of this embodiment will be described.

  FIG. 3 is a flowchart showing the operation of the output device 200 in the first embodiment.

  In the output device 200, the input conversion information receiving unit 220 receives the input conversion information from the input conversion information transmitting unit 160 of the personal identification information input device 100 (step S301). The input conversion information is encrypted.

  The decoding unit 230 decodes the input conversion information received in step S301 (step S302).

  The input conversion information receiving unit 220 outputs the input conversion information decoded by the decoding unit 230 to the output unit 210 (step S303). The output unit 210 displays the input conversion information as a video. When output to the output unit 210, the input conversion information may be converted into a form that is easy for the user to understand. For example, when the input conversion information is the information shown in FIG. 7, the image data assigned with values on the keypad is output as shown in FIG. 8, or when the input conversion information is the information shown in FIG. As shown, image data indicating the correspondence between the area on the touch panel and the input value may be output.

  FIG. 4 is a flowchart showing the operation of the personal identification information input device 100 in the first embodiment.

  When the user inputs the password information to the password device 300, first, the input conversion information generation unit 140 generates the input conversion information, and stores the input conversion information in the input conversion information storage unit 150 (step S401). At this time, the input conversion information generation unit 140 randomly generates input conversion information so that a third party cannot guess the generated input conversion information. For example, input conversion information is generated using random numbers.

  The encryption unit 170 encrypts the input conversion information generated by the input conversion information generation unit 140 in step S401 and outputs the encrypted input conversion information to the input conversion information transmission unit 160. The input conversion information transmission unit 160 transmits the encrypted input conversion information to the output device 200 (step S402). The encryption method may be any encryption method. The communication method with the output device 200 may be any communication method. For example, there are a method in which the output device 200 receives data broadcast by the personal identification information input device 100 wirelessly, a method in which data is transmitted after the personal identification information input device 100 and the output device 200 establish a wireless communication connection, and the like. .

  Upon receiving the input conversion information transmitted in the process of step S402, the output device 200 executes the processes of step S301 to step S303.

  Based on the input conversion information indicated by the video displayed on the output unit 210 of the output device 200, the user corresponds to the value of the password information that the user wants to input to the key input unit 110 of the password information input device 100. Execute key operation. Upon receiving a key operation from the user, the key input unit 110 outputs input information to the key information conversion unit 120 (step S403).

  The key information conversion unit 120 acquires the input conversion information from the input conversion information storage unit 150, converts the input information input from the key input unit 110 into an input value based on the input conversion information, and outputs the input value to the key output unit 130. (Step S404). For example, the key input unit 110 is a keypad having 12 buttons as shown in FIG. 5, the input conversion information is information as shown in FIG. 7, and the user's key operation is “upper left of the keypad” If it is “pressed”, the key information conversion unit 120 converts this to the input value “6”.

  The key output unit 130 outputs the input value that has been input to the personal identification device 300 (step S405).

  As described above, according to the present embodiment, the user can input the password information to the password device 300 via the password information input device 100. Further, since the input conversion information can be referred only to the user, even if a third party looks at the input operation of the user and the key input unit 110, the input value intended by the user cannot be known.

  When the encryption unit 170 encrypts the input conversion information, user identification information may be used. The user identification information is, for example, identification information manually input by the user, password information included in a cash card, a credit card, or the like. In order to realize such a form, the password information input device 100 may be provided with a mechanism for inputting user identification information. According to such a configuration, the encryption unit 170 encrypts the input conversion information using the identification information of the user as a public key, so that the encrypted input conversion information cannot be decrypted by anyone other than the user. Therefore, leakage of input conversion information can be avoided.

  Further, the processing from step S401 to step S405 in FIG. 4 is performed every time the user performs an input operation. However, when the user continuously inputs the password information, the input operation is performed for the second time and thereafter. In step S401 and step S402, only the processing from step S403 to step S405 may be repeated without executing steps S401 and S402. According to such a configuration, for example, when the password information is a multi-digit numerical value, the user can perform an input operation using the same input conversion information for all the digits. Thus, the trouble of continuous input on the user side is reduced.

  Further, although the input conversion information is provided to the user as a video, it may be provided by a method other than the video. For example, the input conversion information may be provided as voice to the user using the output device 200 including the output unit 210 that outputs voice.

  FIG. 11 is a block diagram showing a main part of the password information input system according to the present invention. As shown in FIG. 11, the personal identification information input system is a personal identification information input system that inputs personal identification information to a personal identification device (in the embodiment, realized by the personal identification device 300), and is a personal identification information that can be connected to the personal identification device. An information input device 10 (in the embodiment, realized by the password information input device 100) and an output device 20 (in the embodiment, realized by the output device 200) capable of communicating with the password information input device 10. The password information input device 10 is provided with a correspondence relationship between the operation means 11 (in the embodiment, realized by the key input unit 110) for the user of the password device to input information, and the input information and the input value. Input conversion information generating means 12 (in the embodiment, realized by the input conversion information generation unit 140), and input conversion for encrypting the input conversion information and transmitting it to the output device 20 The information transmission means 13 (implemented by the input conversion information transmission section 160 and the encryption section 170 in the embodiment) and the input information input by the user to the operation means 11 are converted into input values based on the input conversion information. Input information conversion means 14 (implemented by the key information conversion section 120 in the embodiment) and output means 15 (implemented by the key output section 130 in the embodiment) for outputting an input value to the personal identification device. The output device 20 decrypts the encrypted input conversion information received from the personal identification information input device and outputs the decrypted input conversion information (in the embodiment, the output unit 210 and the input conversion information). It is realized by the receiving unit 220 and the decoding unit 230).

  In the above embodiment, the following password information input system is also disclosed.

(1) The input conversion information transmission means 13 is a password information input system that encrypts the input conversion information using identification information that can identify the user of the password device as a key.

(2) The input conversion information generation means 12 is a password information input system that generates input conversion information using random numbers.

(3) The password information input system in which the output device 20 is a portable terminal used by a user of the password device.

(4) The password information input system in which the output device 20 is a glasses-type display.

DESCRIPTION OF SYMBOLS 10,100 PIN information input device 11 Operation means 12 Input conversion information generation means 13 Input conversion information transmission means 14 Input information conversion means 15 Output means 20, 200 Output device 21 Information output means 110 Key input part 120 Key information conversion part 130 Key Output unit 140 Input conversion information generation unit 150 Input conversion information storage unit 160 Input conversion information transmission unit 170 Encryption unit 210 Output unit 220 Input conversion information reception unit 230 Decryption unit 300 Security device

Claims (6)

A password information input system for inputting password information to a password device,
A password information input device connectable to the password device;
An output device capable of communicating with the password information input device;
The password information input device includes:
Operation means for the user of the personal identification device to input information;
Input conversion information generating means for generating input conversion information indicating the correspondence between the input information and the input value;
Input conversion information transmitting means for encrypting the input conversion information and transmitting it to the output device;
Input information conversion means for converting the input information input to the operation means by the user into an input value based on the input conversion information;
Output means for outputting the input value to the personal identification device,
The password information input system, wherein the output device includes information output means for decrypting the encrypted input conversion information received from the password information input device and outputting the decrypted input conversion information. The password conversion information input system according to claim 1, wherein the input conversion information transmission unit encrypts the input conversion information using identification information that can identify a user of the password as a key. The personal identification information input system according to claim 1, wherein the input conversion information generation unit generates the input conversion information using a random number. The password information input system according to any one of claims 1 to 3, wherein the output device is a portable terminal used by a user of the password device. The password information input system according to any one of claims 1 to 4, wherein the output device is a glasses-type display. A password information input method for inputting password information to a password device, comprising:
PIN information input device
Generating input conversion information indicating a correspondence relationship between the input information and the input value, encrypting the input conversion information and transmitting it to the output device;
The output device is
Decrypting the encrypted input conversion information received from the password information input device, and outputting the decrypted input conversion information;
The password information input device is
A password information input method, comprising: converting input information input by a user of a password device into an operation unit into an input value based on the input conversion information; and outputting the input value to the password device.

Images