JP4833712B2 - Information terminal device, secret information management method, and secret information management program - Google Patents

Description

  The present invention relates to an information terminal device such as a mobile phone that can register and use confidential information, a confidential information management method, and a confidential information management program.

  In order to reuse a previously input character string when inputting characters in an information terminal device such as a mobile phone, a portable information terminal or a mobile computer, the input character string is stored in a storage means in the device, When inputting later, the stored character string is called. However, a character string including important information to be kept secret may be illegally used by a third party simply by storing it. In particular, it is convenient if personal information such as a user ID and a personal identification number is stored and read and used, but unauthorized use by a third party must not be allowed. Conventionally, in order to prevent unauthorized use by a third party, information to be concealed is encrypted and stored. However, a code number is required for encryption and decryption. Regarding the code number, a number that is easy for a person to remember is easy to leak to a third party, and a number that is difficult for a third party to forget There's a problem.

  As for the input of a password for accessing a website, one using biometric authentication such as fingerprint authentication for identity verification is known (see Patent Documents 1 and 2). According to the technology described in Patent Document 1, fingerprint authentication is performed when accessing a website, URL, password, etc. are selected from a password data memory to access the web, and a URL, password, etc. input by a user Is stored and registered in the password data memory. According to the technique described in Patent Document 2, the user ID, password, and user fingerprint information are stored together with the URL of the specific site, and then the fingerprint is input from the fingerprint authentication device on the user authentication screen of the specific site. By confirming the identity, the user ID and password can be displayed and input.

Each of the techniques described in Patent Documents 1 and 2 uses biometric authentication and password storage for web connection for the purpose of easily performing web connection, and information to be kept secret when inputting a general character string. It was not something that could be registered and read later for reuse.
JP 2001-188755 A JP 2002-169779 A

  In view of the above problems, the present invention, for example, when inputting information consisting of character strings, registers and manages information to be concealed if there is information to be concealed, and later reads out the registered information. It is an object to provide an information terminal device, a secret information management method, and a secret information management program.

In order to achieve the above object, an information terminal device according to an aspect of the present invention includes an input unit that inputs information, a display unit that displays information input by the input unit, and a storage unit that stores information. The biometric authentication means for performing biometric authentication of the user, and the biometric authentication of the user by the biometric authentication means activated by accepting the user input after the information is input by the input means and displayed on the display means. If it is, the display means the control to store in the storage means according to the input of said information to be concealed displayed user, after said confidential information to be is stored, accepts user input when activated by the biometric the user's biometric authentication by the authentication means are valid, Preparations and control means for controlling to read the information the storage in accordance with an instruction from the user, a That.

  The registration process may be performed via a registration information editing screen in which at least a part of the information displayed on the display unit is displayed as information to be registered.

  Furthermore, the information displayed in the display unit in the lowercase can be displayed in plain text on the registered information editing screen.

The secret information management method according to another aspect of the present invention includes an input means for inputting information, a display means for displaying information, a storage means for storing information, a biometric authentication means for performing biometric authentication of a user, and control. A secret information management method in an information terminal device comprising: means for displaying information input by the input means on the display means; and accepting a user input after the information is displayed on the display means start the biometric authentication unit Te, the said display information to be concealed displayed on the unit when the biometric authentication the user executed is valid by the activated the biometric authentication means in accordance with input of the user stored in the storage unit, wherein after the confidential information to be is stored, if the by the biometric authentication means that is activated by receiving a user input user's biometric authentication is valid, Yu Reading the information the storage according to the instructions.

According to another aspect of the present invention, there is provided a program comprising an information terminal device including an input unit for inputting information, a display unit for displaying information, a storage unit for storing information, a biometric authentication unit, and a control unit. A program to be operated, the procedure for displaying information input by the input means on the control unit by the display means, and after the information is displayed on the display means, a user's input is received and the living body is received. the storage and procedures for starting the authentication means, the display information to be concealed displayed on the unit when the biometric authentication the user executed is valid by the activated the biometric authentication means in accordance with input of the user stored in means, after said confidential information to be is stored, the field wherein by the biometric authentication means that is activated by receiving a user input user's biometric authentication is valid To execute a procedure for reading the stored information in accordance with an instruction of the user.

  According to the present invention, when it is desired to register as confidential information at the time of information input, registration processing can be performed on the spot, and biometric authentication is performed for registration and calling, so that confidentiality can be improved. Also, since registration is performed with a title, it is convenient to call up and use registration information.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings. First, an outline of the present embodiment will be described.

  FIG. 1 is a diagram for explaining an outline of an information terminal device according to an embodiment of the present invention. The information terminal device according to this embodiment includes an operation unit 2 including various input keys, a display unit 3 that displays various types of information, for example, a liquid crystal display device, and a control unit that performs various controls in response to input from the operation unit 2. 1, a storage means 4 such as a semiconductor memory or hard disk device for storing various data, programs, applications, etc., an extraction function for extracting fingerprint information by a fingerprint sensor, and a fingerprint information and fingerprint sensor stored in the storage means Fingerprint authentication means 5 having a verification function for verifying input fingerprint information is provided.

  In the present embodiment, the control means 1 further includes a password registration function 11 and a password reading function. In the present specification, the password does not indicate only a personal identification number but general information that the user wants to keep secret. When a user is inputting a character string and wants to register and manage a character string as confidential information, the character string is registered in the storage means 4 after performing fingerprint authentication and is read out from the storage means. Also, fingerprint authentication is executed and read from the storage means 4.

  In this embodiment, whenever a password registration function or a read function is to be activated, the user is prompted to perform fingerprint authentication, and the password registration or read function is activated only when the fingerprint authentication is valid. Therefore, only the user himself can surely register and use the password.

  FIG. 2 is a diagram showing a mobile phone 10 according to a specific embodiment of the present invention. The mobile phone 10 includes a main body 11 and a lid body 12 that can be folded with respect to the main body 11 and has a display unit 15. The main body 11 is provided with operation keys 13 on its surface for inputting numbers or characters or inputting various processing signals, and further includes a fingerprint sensor 14. Of the keys 13, a key provided near a hinge portion that supports the lid 12 in a foldable manner is a key used for various operations. For example, the center key 13-1 is normally selected or determined. The key 13-2 is used as a key for calling a menu. In addition, the annular portion around the key 13-1 is also a four-way switch, and various functions are assigned. The fingerprint sensor 14 of this example inputs a fingerprint by sliding the finger on the sensor portion. The main body 11 includes an information processing unit, a control unit, a storage unit, a fingerprint collation unit, and the like.

  The operation key 13, the display unit 15, the storage unit (not shown), the fingerprint sensor 14 and the fingerprint collation unit (not shown) of the mobile phone 10 shown in FIG. , Corresponding to the storage means 4 and the fingerprint authentication means 5. The password registration function or password read function in the mobile phone 10 is realized by a password manager that is software.

  3 and 4 are diagrams for explaining basic functions of the password manager. 3A to 3C show screens of the display unit 15 of the mobile phone 10. The password manager is arranged, for example, under “Security / Lock” under “Settings” in the menu. When the password manager is started up, if the fingerprint authentication function of the mobile phone 10 is valid, a screen 21 for prompting fingerprint authentication as shown in FIG. In accordance with this, the user performs fingerprint authentication using the fingerprint sensor 14. If the fingerprint authentication function of the mobile phone 10 is not enabled, “Fingerprint authentication is not enabled. Password manager cannot be used” is displayed and the screen returns to the menu.

  When the fingerprint authentication function of the mobile phone 10 is valid and the identity verification is performed by the fingerprint authentication performed by the user, a password manager title list screen 22 shown in FIG. 3B is displayed. In FIG. 3B, since no password is registered, no password is displayed on the screen 22. Keys that can be operated in the title list are displayed at the bottom of the screen 22. In the following figures, similarly, operable keys are displayed at the bottom of the screen. In this example, the password manager has a specification that allows registration of up to 50 passwords. However, this is merely an example, and the maximum number of passwords is not limited to 50, and the maximum number may not be set.

  In order to register a password on the screen 22 in FIG. 3B, an operation key (for example, key 13-3 in FIG. 1) corresponding to “new” displayed at the bottom of the screen is pressed. As a result, the password editing screen 23 shown in FIG. 3C is displayed, and an arbitrary password can be entered and registered. On the password editing screen 23, a title box 23-1 and a password box 23-2 are displayed. When registering a password, it is necessary to register it with a title that is an index of the password. In order to input an arbitrary character string for password registration, the user selects and focuses on the password box 23-2 (presses a key corresponding to “select” displayed at the bottom of the screen, for example, the key 13-1). As a result, the screen shifts to a full-screen character string input screen and can be input.

  This character string input screen is a full-screen editor screen for character string input of the mobile phone 10. The same applies to the input of a title. The title box 23-1 is selected, and a character string input screen is displayed to input an arbitrary character string. In the present embodiment, character input is performed via a character string input screen, but a character string may be directly input into an input box of a password edit screen.

  FIG. 4 shows an example of transition between the password editing screen 26 in which the title and password are input and the title list screen 27. By pressing an operation key (for example, key 13-2 in FIG. 1) corresponding to “registration” displayed in the lower part of the screen 26 from the password editing screen 26 in which the input of the title and password is completed, the registration process is performed. Starts. Specifically, “Password has been registered” is displayed on the screen, and after 2 seconds have elapsed, or any key is operated, the screen returns to the title list screen 27. On the title list screen 27, the registered titles 27-1 and 27-2 are displayed with a shortcut number for selecting by inputting with a numeric key. In the registration process, the user can select a registration location. In this case, when the key corresponding to “registration” is pressed, the screen shifts to the title list screen, and “determine the location to be registered” is displayed to determine the location to be registered. If the determined location is not registered, it is registered as it is. If there is a registered title at the determined location, it will be registered after confirming overwriting.

  When the key corresponding to “Select” is pressed on the title list screen 27, the screen moves to the password editing screen 26, and the selected title and its password are displayed. When changing or correcting the title or password, the user can move to the full-screen character input screen 28 by pressing the “select” key and edit the title or password. The character input screen 28 of FIG. 4 shows an example of selecting a title and editing the title.

  Further, by pressing a key corresponding to “MENU” on the title list screen 27, a pull-down menu 28 as shown in the figure is displayed, and “new registration”, “delete one”, “delete multiple”, “ “Delete All”, “Move Up One”, and “Move Down One” can be executed. Note that new registration can also be performed by pressing the “new” key displayed at the bottom of the title list screen. As for deletion, a confirmation message may be displayed when multiple deletions and all deletions are deleted. The title “Move Up One” or “Move Down One” title is used when frequently used titles are moved up or when related titles are grouped.

  If you want to immediately register a character string entered on the character string input screen as a password, you can use the password manager as shown below, and you can easily register the password.

  With reference to FIGS. 5 to 7, an operation for registering the input character string as confidential information when the mobile phone 10 performs input necessary for entering the web of the financial institution will be described. Here, description will be given by taking the input of a personal identification number as an example, but the character string can be registered in either case of entering a store number or an account name. In addition, as described above, it is possible to register an arbitrary character string inputted not only on the web but also when using a mobile phone function or other application such as mail.

  Each of FIGS. 5 and 6 (a) to 6 (c) shows the transition of the screen of the mobile phone 10. FIG. In the web screen 31 of the financial institution as shown in FIG. 5A, it is required to input the store number, the account, and the password in the store number box 31-1, the account box 31-2, and the password number box 31-3. . When the store number and the account are input in the boxes 31-1 and 31-2, when the password number box 31-3 is selected by focusing on the password number box 31-3, the terminal screen 5 is as shown in FIG. In addition, the character input screen 32 can be entered to input the character string “1234567abcdefg” as a personal identification number. At the bottom of the character input screen 32, operation keys that can be used on the screen 32 are shown. That is, a key for inputting symbols, characters, and pictograms can be operated together with a key for selection and a key “MENU” for displaying a submenu.

  When the password entered on the character input screen 32 is to be registered, a submenu (not shown) is displayed by pressing a key corresponding to “MENU” and password registration is selected. Here, if the maximum number of registrations is set, the number of registrations is checked. If the number of registrations has reached the maximum number, new registration cannot be performed, so a warning message as shown in FIG. 6A is displayed. When the user presses the OK button, the screen returns to the character input screen 32. Similarly, the presence / absence of fingerprint setting is checked. Since fingerprint authentication cannot be performed unless the fingerprint is set, a warning message as shown in FIG. 6B is displayed on the terminal screen. When the user presses the OK button, the screen returns to the character input screen 32.

  If the fingerprint is set by the user and the number of registrations has not reached the maximum number, a display prompting the user to specify the start position is displayed on the character input screen 32 as shown in FIG. Accordingly, in FIG. 5C, when the start position of the character string to be registered is determined, the process is executed by pressing the main body key corresponding to the “start point” displayed at the bottom of the screen. Further, when registering all the character strings displayed on the character input screen, a button corresponding to all selections may be pressed.

  When the start position of the character string to be registered is designated in FIG. 5C, the character input screen 32 is displayed so as to prompt the designation of the end position, as shown in FIG. 7A. By depressing a key corresponding to “end point”, the end point of the character string to be registered can be designated. When specifying the end of the sentence, a key corresponding to “end of sentence” displayed at the bottom of the screen 5 may be pressed. When the end position is determined in this way and the character string to be recorded is determined, the process proceeds to the screen 33 in FIG. 7B to prompt the user to perform fingerprint authentication. Therefore, the user performs fingerprint authentication by bringing the finger set with the fingerprint into contact with the fingerprint sensor 14. The fingerprint authentication of the user may be performed at the stage where the designation of the character string to be registered is completed as in this example, but instead, immediately before the designation of the character string, that is, in FIG. 5B. The fingerprint authentication may be performed when the fingerprint is set by the user and the registered number has not reached the maximum number.

  If it is determined that the user's fingerprint authentication is valid, the password manager editing screen 34 shown in FIG. On the password manager editing screen, the password to be registered designated on the character input screen 32 is displayed in the password box 34-2. If the password displayed in the password box 34-2 is acceptable, the title is input in the title box 34-1. When the password displayed in the password box 34-2 is to be changed / corrected, the character string shown in FIG. 4 is displayed by focusing on the password box 34-2 and pressing a key corresponding to “select” on the screen. The screen shifts to a character string input screen similar to the input screen 28, where editing can be performed. When editing is completed, “select” can return to the password manager editing screen. In that case, the password after editing is displayed in the password field. In order to input a title in the title box 34-1, similarly, the title box is focused, and “select” is performed to move to a character string input screen, and the title is input on the character string input screen.

  When the input of the password and title is completed, the registration process is started by pressing the key corresponding to “registration” displayed at the lower right of the screen. If at least one of the password and title is not input and the “Register” key is pressed, a warning is displayed indicating that the password or title has not been input, and registration processing is not performed. When the registration process including specifying the registration location is completed, the message “Password has been registered” is displayed on the screen, and the screen immediately before the start of the password registration process is displayed by any key operation or two seconds. Return to screen 32 of b). Further, by pressing the “select” key on the screen 32 of FIG. 5B, a desired password is input to the screen 32 of FIG. When registering a password, the password can be encrypted and registered. Since the encryption process is performed as a registration process, there is no burden on the user. Of course, when reading, the cipher is decrypted and read in plain text.

  FIGS. 8A to 8C show a registration operation in the case where the password can only be entered in the case of inputting the personal identification number on the web screen shown in FIG. 5A. FIG. 8A shows a character input screen 41 for inputting a password corresponding to FIG. As shown in the figure, all the characters entered are prone. In this state, a key corresponding to “MENU” on the screen 41 in FIG. 8A is pressed to display a submenu, and password registration is selected. Here, as described with reference to FIG. 5B, the maximum number of registrations and the presence / absence of fingerprint setting are checked. That is, when the number of registered items reaches the maximum number of registered items or when the fingerprint is not set, the warning shown in FIG. 6A or 6B is displayed and the registration process is not started.

  If the fingerprint setting has been made and the number of registrations has not reached the maximum number, the screen shifts to the fingerprint authentication screen 42 shown in FIG. If it is determined that the user's fingerprint authentication is valid, the password manager editing screen 43 shown in FIG. On the password manager editing screen 43, the password entered in the lowercase letters on the character input screen of FIG. 8A is displayed in the password box in a state where the lowercase letters are restored, that is, in plain text. Thereby, the entered password can be confirmed and registered. Since fingerprint authentication is performed to confirm that the user is the person himself / herself, there is no possibility of unauthorized use even if the password in plain text is displayed in plain text. After that, if this password is acceptable, it is registered with a title. The registration process and the editing process for further editing are as described with reference to FIG.

  Next, an operation for calling and using a registered character string on the character input screen will be described. FIG. 9A shows a screen 51 on the web of a certain financial institution. When the personal identification number registered as the password is input to the personal identification number box 51-1, the box 51-1 is selected to enter the personal identification number, and the process proceeds to the character input screen 52 shown in FIG. 9B. To do. Next, in order to call up the recorded registration number, a key corresponding to “MENU” at the bottom of the screen is pressed to display a submenu (not shown), and a password call is selected. If none is registered, the submenu password call is grayed out.

  As a result, as shown in FIG. 9C, the fingerprint authentication screen is launched to prompt fingerprint authentication. Therefore, the user performs fingerprint authentication by bringing the fingerprint set finger into contact with the fingerprint sensor 4. If fingerprint authentication is valid, a list of password manager titles as shown in FIG. 10A is displayed. Therefore, after focusing on the title to be selected, a “select” key is pressed to select an object requiring a personal identification number. In order to focus on the title to be selected, a movement key may be used, but a shortcut number assigned to the head of the title may be designated with a numeric key.

  When the shortcut number 2 is designated and focused, and the “reference” key is pressed, the password reference screen 55 is displayed and the security code of the second securities company is referred to the password as shown in FIG. 10B. Is displayed on the screen 55. If this is correct, press “Select”. Then, as shown in FIG. 10C, the screen shifts to a character input screen 56 in which the desired password is input. By pressing the key corresponding to “Select” on the character input screen 56, the password is entered in the password number box 51-3 in FIG. When the number 2 is designated on the title list screen shown in FIG. 10A and the key corresponding to “Select” is pressed, the screen shown in FIG. 10C is directly displayed without going through the password reference screen shown in FIG. ) Moves to the character input screen.

  In this example, the registered password is called through the character input screens 52 and 56 so that not only the input of the web screen but also the character input of e-mail can be supported. However, in the case of the input of the web screen, it is possible to immediately shift from the web screen 51 of FIG. 9A to the fingerprint authentication screen without using the character input screens 52 and 56, and further to FIG. By selecting a title from the password manager title list screen 54, a password registered as a password may be input to the web screen 51 of FIG. 9A.

  Here, the password has been described, but if the store number and the account number are registered in the same manner by the password manager, they can be read out and entered. Furthermore, the store number, account number, and password can be registered in a lump and entered in a lump.

  In the embodiment described above, identity verification is performed using fingerprint authentication, but biometric authentication other than fingerprint authentication may be used. That is, biometric authentication using the iris of the pupil, retina, handwriting, face shape, palm shape, auricle, voiceprint, vein, etc. can be used.

  Furthermore, the information to be registered has been described as a character string such as a character, a symbol, and a pictogram. However, not only text data but also image data can be registered. In addition, on a screen in which only alphanumeric characters can be input, it is possible to make it impossible to select a character string including double-byte characters.

  As described above, according to the present embodiment, when information is input, fingerprint authentication can be executed and the information can be registered as confidential information. Since this is done, unauthorized use by a third party can be surely prevented.

The aspects of the present invention described above are as follows.
(Appendix 1)
Display means for displaying information;
Information storage means for storing information to which a title is assigned;
A registration process for assigning a title to at least a part of the information displayed on the display means and registering the information in the information storage means; an information control means for controlling a calling process for calling information from the information storage means;
Biometric authentication means for biometric authentication of the user,
When the registration process or the call process is started by the information control unit, the user's biometric authentication is executed, and the registration process or the call process is started when the biometric authentication of the user is valid. Information terminal device.
(Appendix 2)
The information terminal apparatus according to appendix 1, wherein the registration process is performed via a registration information editing screen in which at least a part of the information displayed on the display unit is displayed as information to be registered.
(Appendix 3)
The information terminal device according to appendix 3, wherein the information control unit is activated by selecting at least a part of the information displayed on the display unit.
(Appendix 4)
The information terminal device according to appendix 2 or 3, wherein a title is given to the information to be registered on the registration information editing screen.
(Appendix 5)
5. The information terminal device according to any one of appendices 2 to 4, wherein the information displayed in the display means is displayed in plain text on the registration information editing screen.
(Appendix 6)
6. The information terminal device according to appendix 5, wherein the title list screen is displayed on the display unit during the calling process.
(Appendix 7)
The information terminal device according to any one of appendices 1 to 5, wherein the information is a character string.
(Appendix 8)
The information terminal device according to any one of appendices 1 to 6, wherein the biometric authentication is fingerprint authentication.
(Appendix 9)
A step in which a user assigns a title to at least part of the information displayed on the display means;
A registration step of registering the information with the title;
A calling step for calling the registered information;
Allowing the user to perform biometric authentication before proceeding to the registration step or the calling step;
When the biometric authentication of the user is valid, proceed to the registration step or the calling step.
The secret information management method characterized by the above-mentioned.
(Appendix 10)
A title assigning function for giving a user a title to at least a part of the information displayed on the display means;
A registration function for registering the information with the title;
A call function for calling the registered information;
A function for causing a user to perform biometric authentication when the registration function or the calling function is activated;
When the biometric authentication of the user is valid, the function to activate the registration function or the call function,
A secret information management program characterized by having a computer realize the above.

It is a figure explaining the outline | summary of embodiment of this invention. It is a figure which shows the mobile telephone which implements this invention. (A)-(c) is a figure (the 1) explaining the basic operation | movement of the password manager of embodiment of this invention. (A)-(c) is a figure (the 2) explaining the basic operation | movement of a password manager. (A)-(c) is a figure (the 1) explaining the password registration operation | movement of a password manager. (A)-(b) is a figure which shows the warning text when not starting a password manager. (A)-(c) is a figure (the 2) explaining the password registration operation | movement of a password manager. (A)-(c) is a figure explaining the registration operation | movement of the password password of a password manager. (A)-(c) is a figure (the 1) explaining the password read-out operation | movement of a password manager. (A)-(c) is a figure (the 2) explaining the password read-out operation | movement of a password manager.

Explanation of symbols

DESCRIPTION OF SYMBOLS 10 Mobile phone 11 Main body 12 Lid 13-1-3 Key 14 Fingerprint sensor 15 Display part

Claims (5)

An input means for inputting information;
Display means for displaying information input by the input means;
Storage means for storing information;
Biometric authentication means for performing biometric authentication of the user;
After the information is input by the input unit and displayed on the display unit, when the biometric authentication of the user by the biometric authentication unit activated by accepting the user input is valid, the confidentiality displayed on the display unit controlled to be stored in said storage means should do information in accordance with an input of the user, after said confidential information to be is stored, the user's biometric by the biometric authentication means that is activated by receiving an input of a user Control means for controlling to read out the stored information in accordance with a user instruction when the authentication is valid ;
An information terminal device comprising:   The information terminal apparatus according to claim 1, wherein the registration process is performed via a registration information editing screen in which at least a part of the information displayed on the display unit is displayed as information to be registered.   The information terminal device according to claim 2, wherein the information displayed in the display means in plain characters is displayed in plain text on the registration information editing screen. A secret information management method in an information terminal device comprising: input means for inputting information; display means for displaying information; storage means for storing information; biometric authentication means for performing biometric authentication of a user; and control means. There,
Displaying the information input by the input means on the display means;
After the information is displayed on the display means, the biometric authentication means is activated by accepting a user input,
The activated the information to be concealed to the biometric authentication the user executed is displayed on the display means when it is enabled by the biometric authentication means stored in said storage means in accordance with input of the user, to the concealment A secret information management method for reading the stored information in accordance with a user instruction when the biometric authentication of the user by the biometric authentication unit activated by receiving a user input after the information to be stored is valid . A program for operating an information terminal device comprising an input means for inputting information, a display means for displaying information, a storage means for storing information, a biometric authentication means, and a control unit,
In the control unit,
Displaying the information input by the input means by the display means;
After the information is displayed on the display means, a procedure for accepting a user input and activating the biometric authentication means;
The activated the information to be concealed to the biometric authentication the user executed is displayed on the display means when it is enabled by the biometric authentication means stored in said storage means in accordance with input of the user, to the concealment A procedure for reading the stored information in accordance with a user instruction when the biometric authentication of the user by the biometric authentication unit activated by receiving a user input after the information to be stored is valid ;
A program that executes

Images