JP5440194B2 - Terminal authentication method, program, and terminal device - Google Patents

Description

  The present invention relates to a terminal authentication method, a program, and a terminal device. More specifically, the present invention relates to a terminal authentication method, a program, and a terminal device that authenticate whether or not a user is an authorized user when using a terminal.

  Terminal devices such as mobile phones are widespread. Since various kinds of personal information are stored in the terminal device, there are scenes that require attention in handling. In order to improve security, the terminal device can often set a terminal password. Usually, the terminal code number is a four-digit number combining any of ten numbers from “0” to “9”. The terminal device collates the four-digit number input by the user with the four-digit number set in advance as the terminal password, and determines that the user is a legitimate user if they match. The terminal device allows access to information in the terminal device only for users who have correctly input the terminal security code set in advance, or allows the terminal device to change the settings of the terminal device. Security can be ensured.

  Although the terminal code number is originally a number that only the user can know, it is also conceivable that the number is leaked to other than the legitimate user for some reason. If the terminal security code is leaked, the terminal device may be abused, which is a security problem. Therefore, the terminal device is required to have a mechanism in which the personal identification number is difficult to leak when the terminal personal identification number is input.

  Patent Document 1 is a document in which a mobile phone having a password input device is described. FIG. 10 shows a mobile phone described in Patent Document 1. The cellular phone 501 has a numeric keypad 502 in which ten numbers “0” to “9” are arranged. When inputting a personal identification number, the cellular phone 501 displays a number layout image 504 having a key layout similar to that of the numeric keypad 502 on the screen display unit 503 and numbers corresponding to the keys are randomly rearranged. The user inputs the password by sequentially pressing the keys of the numeric keypad 502 corresponding to the numerical value of the password according to the key arrangement displayed on the numerical arrangement image 504.

JP 2009-199581 A JP 2007-156601 A

  In Patent Document 1, when inputting a password, the role of the numbers of each key of the numeric keypad 502 (input numbers when each key is pressed) is randomly switched. Even if it is, there is an effect that the personal identification number is not easily identified. However, in Japanese Patent Application Laid-Open No. 2004-151867, since the personal identification number itself does not change, the personal identification number can be determined if both the numerical arrangement image 504 and the order of the keys pressed by the user are known. If the personal identification number is known, a malicious person can input the personal identification number with reference to the displayed numerical arrangement image 504 and can impersonate the user.

  Here, Patent Document 2 is a document in which a mobile phone having a password authentication device is described. FIG. 11 shows a mobile phone described in Patent Document 2. The mobile phone 511 displays a 6-digit authentication code (password) input field 513 on the screen display unit 512 when the password is authenticated. At that time, the mobile phone 511 randomly generates input unnecessary digits (mask digits M1, M2) and clearly indicates them to the user. The user operates the numeric keypad 514 to input a 4-digit number string excluding the mask digits M1 and M2 out of the 6-digit authentication code. In Patent Document 2, by setting the position of the mask digit at each authentication, the number string to be input can be changed to a different number string every time the authentication code is input.

  In Patent Document 2, since the authentication code can be changed for each authentication, even if someone knows the authentication code, the authentication code cannot be used for authentication at the next authentication. However, in Patent Document 2, only 4 digits are used for authentication, compared with 6 digits of the authentication code. Therefore, in Patent Document 2, a user must remember a 6-digit authentication code even though the user actually performs authentication with a 4-digit authentication code. There is also a problem that the safety is lowered by the amount of digits.

  So far, several methods have been proposed as one-time passwords that change the password for each authentication. However, many of them exchange data between a server on a network and a terminal device used by a user who performs authentication. Some terminal devices such as mobile phones are out of service area and cannot use the network. In such a case, the problem is that the one-time password cannot be generated by the terminal device and cannot be used.

  The present invention solves the above-described problems, a terminal authentication method, a program, and a terminal capable of authenticating a user who uses a terminal device using a one-time password even in an environment where the terminal device cannot be connected to a network An object is to provide an apparatus.

  In order to achieve the above object, the present invention provides a random table generating unit that generates a random table in which characters are randomly arranged at each position of a table having a predetermined shape, and a character string of N digits (N is an integer of 2 or more). It is specified that the character of the digit set as the mask digit in the N-digit password information is used for authentication among the characters constituting the random table. Provided is a terminal device including a one-time password generation unit that generates a one-time password replaced with a character at a position, and an authentication unit that performs authentication using the one-time password.

  The present invention includes a step of generating a random table in which characters are randomly arranged at each position of a table having a predetermined shape, and reading password information including an N-digit character string from the password information storage unit. Of these, the step of generating a one-time password by replacing the character of the digit set as the mask digit with the character at the position designated to be used for authentication among the characters constituting the random table; There is provided a terminal authentication method including a step of performing authentication using a time password.

  According to the present invention, a process of generating a random table in which characters are randomly arranged at each position of a table having a predetermined shape, and password information including an N-digit character string is read from the password information storage unit, and the N-digit password information Among them, a process for generating a one-time password by replacing a character of a digit set as a mask digit with a character at a position designated to be used for authentication among characters constituting the random table, and the generated Provided is a program that causes a terminal device to execute a process of performing authentication using a one-time password.

  The terminal authentication method, program, and terminal device of the present invention can authenticate a user who uses a terminal device using a one-time password even in an environment where the terminal device cannot connect to the network.

The block diagram which shows schematic structure of the terminal device of this invention. The front view which shows the terminal device of one Embodiment of this invention. The block diagram which shows the structure of a terminal device. The block diagram which shows the example of the information which a memory | storage part memorize | stores. The flowchart which shows the process sequence at the time of information setting. The figure which shows the example of a display screen at the time of mask digit setting. The figure which shows the example of a display screen at the time of designation | designated of the position in the random table corresponding to a mask digit. The flowchart which shows the process sequence at the time of authentication. The image figure which shows the mode at the time of one time password production | generation. The front view which shows the mobile telephone of patent document 1. FIG. The front view which shows the mobile telephone of patent document 2. FIG.

  Prior to the description of the embodiments of the present invention, an outline of the present invention will be described. FIG. 1 shows a schematic configuration of a terminal device of the present invention. The terminal device 10 includes a random table generation unit 11, a one-time password generation unit 12, and an authentication unit 13. The personal identification information storage unit 14 stores personal identification information composed of a character string of N digits (N is an integer of 2 or more). Arbitrary characters such as numbers, symbols, and English characters can be used as characters constituting the password information. When the password information is composed only of numbers, the character string (number string) may be handled as a numerical value. The password information storage unit 14 may be outside or inside the terminal device 10.

  The random table generation unit 11 generates a random table in which characters are randomly arranged at each position of a table having a predetermined shape. The one-time password generation unit 12 is given a mask digit setting and a designation of a position used for authentication in the random table. The one-time password generation unit 12 reads the password information from the password information storage unit 14, and authenticates the characters of the digits set as the mask digits in the read N-digit password information among the characters constituting the random table. Generate a one-time password that is replaced with the character at the position specified to be used for. The authentication unit 13 performs authentication using a one-time password.

  In the present invention, the one-time password generation unit 12 replaces the character in the digit corresponding to the mask digit in the password information with the character at the designated position in the random table generated by the random table generation unit 11. (PIN information) is generated. Since the terminal device 10 of the present invention has a function of generating a random table and a function of generating a one-time password using the random table, the one-time password can be generated by the terminal device alone without depending on the network. Can be generated. In the present invention, since a one-time password can be used for authentication of the terminal device 10, the possibility of misuse of the terminal device 10 is reduced even when pre-set password information is leaked to a person other than the user. Can be made. Further, in the present invention, since an N-digit one-time password is generated for N-digit password information, it is possible to avoid a decrease in safety that is a problem in Patent Document 2.

  Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings. FIG. 2 shows a terminal device according to an embodiment of the present invention. The terminal device 100 includes a screen display unit 101 and a key input unit 102. The terminal device 100 is a mobile phone, for example. The screen display unit 101 includes a device that performs screen display such as a liquid crystal display device. The key input unit 102 includes a direction key 103 that is used when the user moves the cursor on the display screen, and a determination key 104 that is used when selection / determination is performed. The key input unit 102 includes a ten key 105 including keys corresponding to ten numbers “0” to “9”.

  FIG. 3 shows the configuration of the terminal device 100. The terminal device 100 includes a control unit 106 and a storage unit 107 in addition to the elements shown in FIG. The control unit 106 includes a personal identification number registration unit 161, a mask digit setting unit 162, a position designation unit 163, a random table generation unit 164, a one-time password generation unit 165, an authentication unit 166, and a mode setting unit 167. The storage unit 107 stores a personal identification number 171, mask digit setting information 172, position setting information 173, and mode setting information 174. The function of each unit in the control unit 106 can be realized by a processor or the like operating according to a predetermined program.

  The screen display unit 101 displays information required when the user operates the terminal device 100 according to the control from the control unit 106. The key input unit 102 receives key input from the user and transmits key input information to the control unit 106. The control unit 106 executes various processes according to the input information from the key input unit 102 and outputs the results to the screen display unit 101. In addition, the control unit 106 saves data necessary for the process in the storage unit 107 or reads out data from the storage unit 107 to perform processing.

  The personal identification number registration unit 161 registers a personal identification number (terminal personal identification number). The personal identification number registration unit 161 prompts the user to input a personal identification number, and stores the personal identification number input by the user in the personal identification number 171. The mask digit setting unit 162 sets at least one digit of the N-digit password 171 as a mask digit that is not used as it is in the one-time password. The mask digit setting unit 162 prompts the user to set a mask digit. The user operates the key input unit 102 to input, to the control unit 106, information indicating which digit of the N-digit password is set as the mask digit. The mask digit setting unit 162 stores information specifying a digit set as a mask digit by the user in the mask digit setting information 172.

  The random table generation unit 164 generates a random table in which characters are randomly arranged at each position of a table having a predetermined shape. The random table generation unit 164 is, for example, a random table in which numbers 0 to 9 are randomly arranged in a table having the same shape as the key array corresponding to the numbers “0” to “9” in the numeric keypad 105 (FIG. 2). Is generated. The position designation unit 163 designates a position used for authentication among the positions of the random table. The position designation unit 163 prompts the user to designate a position in the random table. The user designates positions in the random table by the number of set mask digits. The position specifying unit 163 stores the mask digit and the position in the random table in association with each other in the position setting information 173.

  The one-time password generation unit 165 refers to the mask digit setting information 172 and identifies which digit of the N-digit password is set as the mask digit. Further, the one-time password generation unit 165 refers to the position setting information 173 and checks the position in the random table corresponding to each mask digit. The one-time password generation unit 165 reads the password 171 from the storage unit 107. The one-time password generation unit 165 converts the number of digits set as the mask digit out of the read N-digit password into the character at the position designated to be used for authentication among the characters constituting the random table. Generate a replacement one-time password.

  The mode setting unit 167 sets use / non-use of the one-time password function. The mode setting unit 167 prompts the user to input a setting as to whether or not to use the one-time password function. When the user inputs that the one-time password function is used, the mode setting unit 167 stores information indicating the one-time password function ON in the mode setting information 174. When the user inputs that the one-time password function is not used, the mode setting unit 167 stores information indicating the one-time password function OFF in the mode setting information 174.

  The authentication unit 166 authenticates the terminal device 100. For example, the authentication unit 166 performs authentication when the terminal device 100 is used, when a specific function of the terminal device 100 is used, or when a specific setting is changed. At the time of authentication, the authentication unit 166 refers to the mode setting information 174 and determines whether the one-time password function is used. When the mode setting information 174 indicates that the one-time password function is used, the authentication unit 166 performs authentication using the one-time password generated by the one-time password generation unit 165. The authentication unit 166 performs authentication using the personal identification number 171 when the mode setting information 174 indicates that the one-time password function is not used.

  FIG. 4 shows an example of information stored in the storage unit 107. Here, it is assumed that the personal identification number 171 is a 4-digit number string, and the random table is a table of an array simulating keys corresponding to the numbers “0” to “9” in the numeric keypad 105 (FIG. 2). The personal identification number 171 stores a 4-digit number string “4925”. The mask digit setting information 172 stores information indicating that the second digit and the fourth digit from the head side (left side as viewed in the drawing) are mask digits among the four-digit password. The second digit of the password is the first mask digit and the fourth digit is the second mask digit.

  The position setting information 173 stores information specifying a position corresponding to the first mask digit and a position corresponding to the second mask digit in the random table. In FIG. 4, the part in which the numerical value in the array shape of the random table is written is the position corresponding to the mask digit, and the numerical value represents the order of the mask digit. By referring to the position setting information 173, the position corresponding to the first mask digit is the position corresponding to the “6” key of the numeric keypad 105, and the position corresponding to the second mask digit is the numeric keypad. It can be seen that the position corresponds to the key “1” of 105. The mode setting information 174 stores ON / OFF of one-time password use.

  FIG. 5 shows a processing procedure when various types of information are set. It is assumed that the user has registered the personal identification number 171 using the personal identification number registration unit 161 in advance. The password registration unit 161 displays, for example, an N-digit number input field on the screen display unit 101 and prompts the user to input an N-digit number string. The user operates a key corresponding to the number on the numeric keypad 105 to input an arbitrary N-digit number string, and presses the enter key 104 to confirm the password. The personal identification number registration unit 161 receives the personal identification number (N-digit number string) determined by the user from the key input unit 102 and stores it in the personal identification number 171.

  The mode setting unit 167 displays on the screen display unit 101 a message prompting the user to set the one-time password function (ON or OFF), and prompts the user to select ON or OFF. The user operates the direction key 103 to select ON / OFF of the one-time password function from the display screen. The user confirms ON / OFF of the one-time password function by moving the cursor to ON or OFF and pressing the enter key 104. When the user determines ON or OFF of the one-time password function, the mode setting unit 167 stores information indicating ON or OFF of the one-time password function in the mode setting information 174 (step A1).

  The control unit 106 refers to the mode setting information 174 and determines whether or not the one-time password function is set to ON (step A2). The control unit 106 ends the setting process when the one-time password function is set to OFF. When the one-time password function is ON, the mask digit setting unit 162 displays on the screen display unit 101 a prompt to set the mask digit and prompts the user to set the mask digit. The user sets the mask digit while referring to the display screen. The mask digit setting unit 162 stores, in the mask digit setting information 172, information indicating which digit of the N-digit password is set as the mask digit (step A3).

  Subsequent to the setting of the mask digit, the position specifying unit 163 displays on the screen display unit 101 a message that prompts the user to specify the position in the random table corresponding to the mask digit, and prompts the user to specify the position. The user designates a position in the random table corresponding to the mask digit while referring to the display screen. When there are a plurality of mask digits, the user designates a position in the random table for each of the plurality of mask digits. The position specifying unit 163 stores, in the position setting information 173, information indicating which position in the random table is the position corresponding to the mask digit according to the user's specification (step A4).

  FIG. 6 shows an example of a display screen when setting a mask digit. The mask digit setting unit 162 displays, for example, N boxes (mask digit setting screen 201) corresponding to the number of digits of the password on the screen display unit 101, and prompts the user to set a mask digit. The user uses the direction key 103 to move the cursor to the box corresponding to the digit to be set as the mask digit. When the user presses the enter key 104, the digit corresponding to the box where the cursor is located is determined as the mask digit. The user can determine an arbitrary position and number of digits as a mask digit. If the user sets all N digits as mask digits, the original password is not used for the one-time password. Therefore, the number of mask digits is 1 or more with respect to the N-digit password. The following is preferable. The mask digit setting screen 202 in FIG. 6 shows a state in which the second digit and the fourth digit of the password are determined as mask digits. The mask digit setting unit 162 stores information indicating that the second digit and the fourth digit of the password are mask digits in the mask digit setting information 172.

  FIG. 7 shows an example of a display screen when designating a position in the random table corresponding to the mask digit. The position designation unit 163 displays, for example, a table 301 simulating a numeric keypad key layout on the screen display unit 101 and prompts the user to designate a position corresponding to the mask digit. The user designates the position in the random table corresponding to each mask digit using the numeric keypad 105. For example, the user presses the keys in the order of the key corresponding to the numeral “6” of the numeric keypad 105 and the key corresponding to “1”. When the user presses the keys in the order of “6” and “1”, the position specifying unit 163 displays the table 302 in FIG. Table 302 shows the position in the random table corresponding to the first mask digit (the second digit of the password) corresponding to the key “6”, and the second mask digit (the password 4). This indicates that the position in the random table corresponding to the (digit) is the position corresponding to the key “1”. When the user presses the enter key 104, the position in the random table corresponding to each mask digit is determined, and the position specifying unit 163 stores the information on the determined position in the position setting information 173.

  FIG. 8 shows a processing procedure when inputting a personal identification number. The control unit 106 uses the authentication unit 166 when, for example, the user turns on the terminal device 100 or when the user operates the terminal device 100 after leaving the terminal device 100 unattended for a long time. To authenticate. Alternatively, when the user performs an operation of referring to specific data stored in the terminal device 100, or when the user performs an operation of changing a specific setting on the terminal device 100, the control unit 106 The authentication unit 166 may be used for authentication.

  The one-time password generation unit 165 refers to the mode setting information 174 and determines whether or not the one-time password function is ON (step B1). When the one-time password function is ON, the one-time password generation unit 165 instructs the random table generation unit 164 to generate a random table. The random table generation unit 164 rearranges the numbers 0 to 9 randomly, and generates a random table in which the rearranged numbers correspond to the positions of the “0” to “9” keys of the numeric keypad 105 (step B2). The random table generation unit 164 passes the generated random table to the one-time password generation unit 165. The one-time password generation unit 165 refers to the position setting information 173 and checks the position in the random table corresponding to the mask digit. The one-time password generation unit 165 reads the number at the position corresponding to the mask digit from the random table (step B3).

  The one-time password generation unit 165 reads the password number 171 from the storage unit 107 (step B4). In addition, the one-time password generation unit 165 reads the mask digit setting information 172 and specifies which digit is set as the mask digit (step B5). The one-time password generation unit 165 generates, as a one-time password, a number string obtained by replacing the number corresponding to the mask digit among the N-digit password 171 with the numerical value read in step B4 (step B6). The one-time password generation unit 165 passes the generated one-time password to the authentication unit 166.

  The authentication unit 166 displays a password entry field on the screen display unit 101 and prompts the user to enter a password (step B9). At that time, the authentication unit 166 displays the random table used for generating the one-time password together with the password input field on the screen display unit 101. The user inputs an N-digit password using the numeric keypad 105 while referring to the random table, and presses the enter key 104 to determine the password. When the user determines the password, the authentication unit 166 checks the input password and the one-time password (step B10). The authentication unit 166 performs processing according to the authentication result (step B11). The authentication unit 166 determines that the authentication is successful when the two match, and performs processing according to the authentication OK. Further, the authentication unit 166 sets authentication NG when the two do not match as a result of collation, and performs processing according to the authentication NG.

  When the one-time password generation unit 165 determines in step B1 that the one-time password function is OFF, the one-time password generation unit 165 reads the password number 171 from the storage unit 107 (step B7), and uses the read password number 171 as it is as a one-time password. Set (step B8). The one-time password in this case is not the number string that changes for each authentication but the password registered in advance by the user. The one-time password generation unit 165 passes the password to the authentication unit 166. Thereafter, the process proceeds to step B9, where the authentication unit 166 prompts the user to input a personal identification number. When the one-time password function is OFF, the authentication unit 166 does not need to display a random table on the screen display unit 101. The authentication unit 166 collates the password in step B10, and performs processing for the authentication result in step B11.

  FIG. 9 shows an image of one-time password generation. Here, the password is a 4-digit number string, and any number from 0 to 9 is used for each digit of the password. The personal identification number 401 is the personal identification number 171 stored in the storage unit 107 (FIG. 3). The mask digit setting information 402 is mask digit setting information 172 stored in the storage unit 107. The mask digit setting information 402 indicates that the second digit and the fourth digit from the top of the four-digit password are mask digits.

  The position setting information 403 is position setting information 173 stored in the storage unit 107. The position setting information 403 indicates that among the positions of the random table, the key position “6” corresponds to the first mask digit, and the key position “1” corresponds to the second mask digit. Is shown. The random table 404 is a random table generated by the random table generation unit 164. The random table generation unit 164 generates a number string “5368127403” in which the numbers 0 to 9 are rearranged randomly, and randomly assigns each digit of the number string to each of the keys “0” to “9”. A table 404 is generated.

  The one-time password generation unit 165 generates a one-time password based on the personal identification number 401, mask digit setting information 402, position setting information 403, and random table 404. First, the one-time password generation unit 165, based on the personal identification number 401 and the mask digit setting information 402, the digit of the digit number of the personal identification number 401 that is not set as a mask digit as it is. Move to a one-time password. In the example of FIG. 9, since the personal identification number 401 is “4925” and the second digit and the fourth digit of the personal identification number are mask digits, the one-time password generation unit 165 displays the first digit of the one-time password. Is set to the first digit (“4”) of the password 401, and the third digit is set to the third digit (“2”) of the password 401.

  Next, the one-time password generation unit 165 determines two mask digits based on the position setting information 403 and the random table 404. In FIG. 9, the position in the random table corresponding to the first mask digit is the position corresponding to the key “6”. With reference to the random table 404, the number in the position corresponding to the key “6” is “7”. Further, the position in the random table corresponding to the second mask digit is the position corresponding to the key “1”, and referring to the random table 404, the number in the position corresponding to the key “1” is “3”. It has become. The one-time password generation unit 165 sets these numbers “7” and “3” as the second and fourth digits of the one-time password, respectively.

  The one-time password generation unit 165 combines the digit transferred from the personal identification number 401 with the digit generated from the position setting information 403 and the random table 404, and generates a one-time password 405 including a four-digit number string “4723”. Generate. Since the arrangement of numbers in the random table is randomly different for each authentication, the mask digits in the one-time password 405 are different for each authentication. Of the 4-digit number string in the one-time password 405, the first and third digits that are not mask digits are invariant parts that use the number of the PIN 401 as they are, and the second and fourth digits that correspond to the mask digits. The eyes correspond to variable parts whose numbers change each time authentication is performed.

  The user remembers the personal identification number set by the user, which digit the digit set as the mask digit is, and which position in the random table corresponds to which mask digit. At the time of authentication, the user inputs “4” because the first digit of the password is not a mask digit, and the second digit is a mask digit, so refer to the random table 404 displayed on the screen display unit 101. , The number “7” corresponding to the key position “6” is input. In addition, the user inputs “2” because the third digit of the password is not a mask digit, and the fourth digit is a mask digit, so refer to the random table 404 displayed on the screen display unit 101. Enter the number “3” corresponding to the key position “1”. The authentication unit 166 determines that the authentication is OK when the user inputs “4723” to the password “4925” set in advance.

  In the present embodiment, the random table generation unit 164 generates a random table in which numbers in the table are randomly replaced. The one-time password generation unit 165 replaces at least some digits of the personal identification number with digits at positions designated in advance in the random table. The authentication unit 166 performs authentication using the numeric string replaced by the one-time password generation unit 165 as a one-time password. In this embodiment, since the terminal device 100 includes the random table generation unit 164 and the one-time password generation unit 165, the terminal device 100 can generate a one-time password independently of the network. . In the present embodiment, since the one-time password can be used when inputting the terminal password of the terminal device 100, the terminal device 100 can be used even if the password set in advance is leaked to a person other than the user. The risk of misuse can be kept low.

  In the present embodiment, the mode setting unit 167 sets ON / OFF of the one-time password function. The authentication unit 166 performs authentication using the one-time password generated by the one-time password generation unit 165 when the one-time password function is ON. On the other hand, when the one-time password function is OFF, the authentication unit 166 performs authentication using the personal identification number 171 without using the one-time password. The user can set ON / OFF of the one-time password function according to his / her wish. By doing in this way, it is possible to avoid impairing convenience for a user who does not wish to use a one-time password.

  In the above embodiment, the password information is an N-digit password, but the password information is not limited to an N-digit number string. The personal identification information may be an N-digit character string consisting only of characters and symbols, or a character string in which characters, symbols and numbers are mixed. In the above-described embodiment, an example in which a table simulating the key layout of the numeric keypad 105 is used as a random table assuming that the terminal device 100 is a mobile phone, but the shape of the random table is The shape is not limited to the shape described in the above embodiment. The random table does not need to be a single table, and may be a plurality of tables arranged in the vertical direction or the horizontal direction. There may be duplicated numbers and characters at each position in the random table.

  As mentioned above, although this invention was demonstrated based on the suitable embodiment, the terminal device of this invention, a terminal authentication method, and a program are not limited only to the said embodiment, From the structure of the said embodiment. Various modifications and changes are also included in the scope of the present invention.

(Appendix 1)
A step of generating a random table in which a terminal device randomly arranges characters at each position of a table of a predetermined shape;
The terminal device reads the password information consisting of a character string of N digits (N is an integer of 2 or more) from the password information storage unit, and among the N digits of password information, the character of the digit set as the mask digit is Generating a one-time password that is replaced with a character at a position designated to be used for authentication among characters constituting the random table;
A terminal authentication method comprising: a terminal device performing authentication using the generated one-time password.

(Appendix 2)
A terminal device prompting the user to specify the mask digit, and setting at least one digit of the personal identification information as the mask digit according to a user input;
The terminal device further includes a step of prompting a user to specify a position in the random table, and specifying a character position to be used for authentication instead of the mask digit character according to a user input. The terminal authentication method described in 1.

(Appendix 3)
The terminal authentication method according to supplementary note 2, wherein in the step of setting the mask digit, a number of digits from 1 to N-1 is set as a mask digit.

(Appendix 4)
The random table is a table corresponding to a numeric keypad including keys corresponding to numbers from 0 to 9, and in the step of specifying the position, the terminal device corresponds to a numeric keypad pressed by a user. The terminal authentication method according to appendix 2 or 3, wherein a position to be used is set as a position of a character to be used for authentication instead of the character of the mask digit.

(Appendix 5)
In the step of performing the authentication, the terminal device displays the random table on a display screen, clarifies the mask digit, prompts the user to input N digit password information, and enters the password information entered by the user. The terminal authentication method according to any one of appendices 1 to 4, wherein authentication is performed by comparing the one-time password with the one-time password.

(Appendix 6)
The terminal device further includes a step of setting use / non-use of the one-time password;
In the step of performing authentication, when the terminal device is set to use a one-time password, when it is set to use the one-time password and not to use a one-time password The terminal authentication method according to any one of appendices 1 to 5, wherein authentication is performed using the personal identification information.

(Appendix 7)
A process of generating a random table in which characters are randomly arranged at each position of a table of a predetermined shape;
The password information consisting of a character string of N digits (N is an integer of 2 or more) is read from the password information storage unit, and the random table is configured with the characters of the digits set as mask digits in the N digits of password information. A process for generating a one-time password that is replaced with a character at a position designated to be used for authentication,
A program for causing a terminal device to execute a process of performing authentication using the generated one-time password.

(Appendix 8)
Prompting the user to specify the mask digit, and according to user input, setting at least one digit of the personal identification information as the mask digit;
The program according to appendix 7, wherein the program prompts the user to specify a position in the random table, and further executes a process of specifying a character position to be used for authentication in place of the mask digit character according to a user input. .

(Appendix 9)
The program according to appendix 8, wherein in the process of setting the mask digit, a number of digits from 1 to N-1 is set as a mask digit.

(Appendix 10)
The random table is a table corresponding to a numeric keypad including keys corresponding to numbers from 0 to 9, and in the process of specifying the position, the position corresponding to the key of the numeric key pressed by the user is The program according to appendix 8 or 9, which is set as a character position to be used for authentication instead of a mask digit character.

(Appendix 11)
In the process of performing the authentication, the random table is displayed on a display screen, and the mask digit is clearly specified and the user is prompted to input N digit password information. The password information entered by the user and the one-time The program according to any one of appendices 7 to 10, wherein authentication is performed by checking a password.

(Appendix 12)
Causing the terminal device to further execute processing for setting use / non-use of the one-time password;
In the process of performing authentication, when it is set to use the one-time password, authentication is performed using the one-time password, and when it is set not to use the one-time password, The terminal device according to any one of appendices 7 to 11, wherein authentication is performed using personal identification information.

10: Terminal device 11: Random table generation unit 12: One-time password generation unit 13: Authentication unit 14: Password information storage unit 100: Terminal device 101: Screen display unit 102: Key input unit 103: Direction key 104: Determination key 105 : Numeric keypad 106: Control unit 107: Storage unit 161: Password registration unit 162: Mask digit setting unit 163: Position specifying unit 164: Random table generating unit 165: One-time password generating unit 166: Authentication unit 167: Mode setting unit 171 : PIN number 172: Mask digit setting information 173: Position setting information 174: Mode setting information

Claims (10)

A random table generating unit that generates a random table in which characters are randomly arranged at each position of a table of a predetermined shape;
The password information consisting of a character string of N digits (N is an integer of 2 or more) is read from the password information storage unit, and the random table is configured with the characters of the digits set as mask digits in the N digits of password information. A one-time password generation unit that generates a one-time password that is replaced with a character at a position designated to be used for authentication,
A terminal device comprising: an authentication unit that performs authentication using the one-time password. A mask digit setting unit for setting at least one digit of the password information as the mask digit for the password information;
The terminal device according to claim 1, further comprising: a position specifying unit that specifies a position of a character to be used for authentication instead of the character of the mask digit with respect to the random table.   The terminal device according to claim 2, wherein the mask digit setting unit sets a number of digits between 1 and N−1 as mask digits.   The random table is a table having a shape corresponding to a numeric keypad including keys corresponding to numbers from 0 to 9, and the position specifying unit displays the position corresponding to the key of the numeric keypad pressed by the user as the mask digit. The terminal device according to claim 2, wherein the terminal device is set as a character position to be used for authentication instead of the character.   The authentication unit displays the random table generated by the random table generation unit on a display screen, clearly indicates the mask digit and prompts the user to input N-digit password information, and the password information input by the user The terminal device according to any one of claims 1 to 4, wherein authentication is performed by comparing the password and the one-time password. A mode setting unit for setting use / non-use of the one-time password;
The authentication unit performs authentication using the one-time password when the mode setting unit sets to use a one-time password, and sets that the mode setting unit does not use a one-time password, The terminal device according to claim 1, wherein authentication is performed using the personal identification information. A step of generating a random table in which a terminal device randomly arranges characters at each position of a table of a predetermined shape;
The terminal device reads out the password information composed of an N-digit character string from the password information storage unit, and among the N-digit password information, the character of the digit set as the mask digit is the character constituting the random table. Generating a one-time password that is replaced with the character at the position designated for use in the authentication,
A terminal authentication method comprising: a terminal device performing authentication using the generated one-time password. A terminal device prompting the user to specify the mask digit, and setting at least one digit of the personal identification information as the mask digit according to a user input;
The terminal device further prompts the user to specify a position in the random table, and further specifies a character position to be used for authentication instead of the mask digit character according to a user input. 8. The terminal authentication method according to 7. A process of generating a random table in which characters are randomly arranged at each position of a table of a predetermined shape;
The password information composed of an N-digit character string is read from the password information storage unit, and the character of the digit set as the mask digit in the N-digit password information is used for authentication among the characters constituting the random table. Processing to generate a one-time password that is replaced with the character at the specified position,
A program for causing a terminal device to execute a process of performing authentication using the generated one-time password. Prompting the user to specify the mask digit, and according to user input, setting at least one digit of the personal identification information as the mask digit;
The user is further prompted to specify a position in the random table, and further executes a process of specifying a position of a character to be used for authentication instead of the character of the mask digit in accordance with a user input. program.

Images