JP5705167B2 - INPUT INFORMATION AUTHENTICATION DEVICE, SERVER DEVICE, INPUT INFORMATION AUTHENTICATION SYSTEM, AND DEVICE PROGRAM - Google Patents

Description

  The present invention relates to an input information authentication apparatus, a server apparatus, an input information authentication system, and an apparatus program for receiving an input operation for authentication and performing authentication based on the input operation content and information stored in advance.

  As a technique to prevent the authentication information from being stolen when inputting, narrowing the viewing angle of the display screen or displaying the input number with "*" mark etc. to indicate only the number of input digits Has been done.

  In addition, as a PIN code input device that allows a user to input a PIN code using a numeric keypad from a terminal such as a financial automatic machine (ATM), an input numeric keypad screen and a fake input numeric keypad screen are displayed. In some cases, the password is prevented from being stolen even when the movement of the input hand is seen by being inserted (see, for example, Patent Document 1).

  In addition, by performing authentication based on the movement trajectory traced by a plurality of convex portions provided on the mobile terminal, the user can easily input with the fingertip while improving the operability while miniaturizing the device. (For example, refer to Patent Document 2).

Japanese Patent No. 2985888 JP 2010-26604 A

  However, the above-described conventional technology for preventing snooping such as Patent Document 1 assumes that a third party is located at some distance away, such as a financial automatic machine (ATM), for example. It wasn't even taken into account even when it was seen from a distance by a third party. That is, information indicating whether the user wants to input dummy input or authentication information is presented on a fake input numeric keypad or the like. For this reason, for example, when the input screen itself is viewed as well as the movement of the input user's hand, such as over the shoulder of the input user or a hidden camera, which input is dummy As a result, the authentication information may be known.

  In addition, the technique of Patent Document 2 described above has not taken into consideration the security when the user's hand or input screen is being viewed.

  The present invention has been made in view of such a situation, and it is possible to make it difficult to guess the authentication information even when the hand and the input screen are viewed from a third party during the input operation of the authentication information. An object of the present invention is to provide an input information authentication device, a server device, an input information authentication system, and a program for the device.

In order to achieve such an object, an input information authentication apparatus according to the present invention includes:
An input information authentication device for performing authentication for determining whether information corresponding to an operated key of an input unit having a plurality of keys matches authentication information stored in advance,
Authentication auxiliary information used to indicate information corresponding to the number of operations in a predetermined number of key operations to the input means for performing authentication and authentication information are input to the input means. Stored in advance as definition information that corresponds to key operations,
Of the predetermined number of key operations, an order relationship between the number of operation orders indicating the order of input operations for inputting authentication auxiliary information and the number of operation orders indicating the order of input operations for inputting authentication information is stored in advance. ,
Collating the information corresponding to the key operation to the input means with the authentication auxiliary information stored as the definition information;
Collating the information corresponding to the key operation on the input means with the authentication information stored as the definition information,
An order relationship between the number of operation orders of the input operation in which the authentication auxiliary information is input by the key operation to the input means and the number of operation orders of the input operation in which the authentication information is input by the key operation to the input means is stored in advance. Authentication is performed by collating whether or not the ordered relation is matched.

Moreover, the server device according to the present invention provides:
A server device used by being connected to an input information authentication device by wire, wireless, or a combination thereof,
The input information authentication device includes an input unit having a plurality of keys, and a communication unit that communicates with the server device,
Server device
Performing authentication, which is a determination as to whether or not the information corresponding to the operated key of the input means matches the authentication information stored in advance,
Authentication auxiliary information used to indicate information corresponding to the number of operations in a predetermined number of key operations to the input means for performing authentication, and authentication information are input to the input means. Store in advance as definition information that is information corresponding to the key operation,
An order relationship between the number of operation orders indicating the order of input operations for inputting authentication auxiliary information and the number of operation orders indicating the order of input operations for inputting authentication information among a predetermined number of key operations is stored in advance. ,
Authentication auxiliary information collating means for collating the information corresponding to the key operation to the input means and the authentication auxiliary information stored as the definition information;
Authentication information collating means for collating information corresponding to key operations on the input means and authentication information stored as definition information;
An order relationship between the number of operation orders of the input operation in which the authentication auxiliary information is input by the key operation to the input means and the number of operation orders of the input operation in which the authentication information is input by the key operation to the input means is stored in advance. And order relation collating means for collating whether or not the order relation is matched.

Moreover, the input information authentication system according to the present invention includes:
An input information authentication system configured by connecting an input information authentication device and a server device by wire, wireless, or a combination thereof,
The input information authentication device includes an input unit having a plurality of keys, and a communication unit that communicates with the server device,
Server device
Performing authentication, which is a determination as to whether or not the information corresponding to the operated key of the input means matches the authentication information stored in advance,
Authentication auxiliary information used to indicate information corresponding to the number of operations in a predetermined number of key operations to the input means for performing authentication, and authentication information are input to the input means. Store in advance as definition information that is information corresponding to the key operation,
An order relationship between the number of operation orders indicating the order of input operations for inputting authentication auxiliary information and the number of operation orders indicating the order of input operations for inputting authentication information among a predetermined number of key operations is stored in advance. ,
Authentication auxiliary information collating means for collating the information corresponding to the key operation to the input means and the authentication auxiliary information stored as the definition information;
Authentication information collating means for collating information corresponding to key operations on the input means and authentication information stored as definition information;
An order relationship between the number of operation orders of the input operation in which the authentication auxiliary information is input by the key operation to the input means and the number of operation orders of the input operation in which the authentication information is input by the key operation to the input means is stored in advance. And order relation collating means for collating whether or not the order relation is matched.

Moreover, the program of the input information authentication device according to the present invention is:
A program of an input information authentication device for performing authentication, which is a determination as to whether or not information corresponding to an operated key of an input means having a plurality of keys matches prestored authentication information,
Authentication auxiliary information used to indicate information corresponding to the number of operations in a predetermined number of key operations to the input means for performing authentication and authentication information are input to the input means. It is stored in advance in the input information authentication device as definition information that is information corresponding to the key operation,
Of the predetermined number of key operations, the order relationship between the operation order number indicating the order of the input operation in which authentication auxiliary information is input and the operation order number indicating the order of the input operation in which authentication information is input is input information in advance. Stored in the authentication device,
On the computer,
An authentication auxiliary information verification procedure for verifying information corresponding to key operations on the input means and authentication auxiliary information stored as definition information;
An authentication information verification procedure for verifying information corresponding to key operations on the input means and authentication information stored as definition information;
An order relationship between the number of operation orders of the input operation in which the authentication auxiliary information is input by the key operation to the input means and the number of operation orders of the input operation in which the authentication information is input by the key operation to the input means is stored in advance. And an order relation collating procedure for collating whether or not the order relation is coincident.

  As described above, according to the present invention, it is possible to make it difficult to guess the authentication information even when the hand and the input screen are viewed by a third party during the authentication information input operation.

It is a block diagram which shows the structural example of the input information authentication apparatus 100 as the 1st Embodiment of this invention. It is a figure explaining the example of a change of a display pattern, and the security to a replay attack. It is a figure which shows the example of a definition pattern of the start point and end point of a stroke. It is a flowchart which shows the operation example of the input information authentication apparatus 100 as 1st Embodiment. It is a block diagram which shows the structural example of the input information authentication system as 2nd Embodiment. It is a flowchart which shows the operation example of the input information authentication system as 2nd Embodiment. It is a block diagram which shows the structural example of the input information authentication apparatus 100 as 3rd Embodiment. It is a flowchart which shows the operation example of the input information authentication apparatus 100 as 3rd Embodiment.

  Next, an embodiment to which an input information authentication apparatus, a server apparatus, an input information authentication system, and an apparatus program according to the present invention are applied will be described in detail with reference to the drawings. First, as an embodiment, an example in which numbers are used as key top information of a touch keyboard will be described.

[First Embodiment]
A first embodiment of the present invention will be described.
As shown in FIG. 1, the input information authentication apparatus 100 according to the first embodiment recognizes an input as a stroke by a display input unit 110 such as a touch panel display, a display input control unit 121, a display pattern generation unit 122. A stroke recognition unit 123, a key information collation unit 124, a recognition information collation unit 125, an order relation collation unit 126, and a storage unit 130 that stores registered key information, authentication information, and the like. The

  The display input unit 110 displays a plurality of keys as a touch keyboard on the screen, detects a touch position on the front screen, and determines which of the displayed keys is input based on the position information of the touch position. Is determined.

  The display input control unit 121 performs display control of input keys displayed on the display input unit 110 and control to receive an operation input to the display input unit 110 as an input signal.

  The display pattern generation unit 122 randomly generates a key arrangement pattern to be displayed as a touch keyboard of the display input unit 110 using a random number at a predetermined timing. The random generation of the display pattern by the display pattern generation unit 122 is to start the input operation for authentication next after the authentication input operation is performed by the touch keyboard of the display input unit 110 and the authentication is OK. This is done every time the input screen is displayed.

  The stroke recognizing unit 123 recognizes stroke configuration information such as the start point and the end point of the input stroke from the trajectory of the contact position on the touch keyboard of the display input unit 110.

  With this configuration, the input information authentication device 100 according to the present embodiment receives a stroke input as a locus of a contact position with respect to the touch keyboard of the display input unit 110, and collates key information and authentication information by the stroke. Do.

FIG. 2A shows a display pattern example on the touch keyboard of the display input unit 110 and a stroke input example in the case of authentication OK.
In each embodiment of the present invention, an example in which numbers 1 to 9 for inputting numbers are assigned as key top information of input keys displayed on the display input unit 110 will be described.

  In the present embodiment, the user registers in advance key information, authentication information, and the order relationship between the key information and authentication information. In order to make authentication OK with an input operation for authentication, the user inputs a predetermined number of strokes including the key information and authentication information.

The key information is used to indicate how many times the input content in a predetermined number of key input operations for authentication is adopted for verification with the authentication information based on the order relationship with the authentication information.
For example, the example of FIG. 2A shows a registration example in which, when key information is input, authentication information is collated with respect to the next input stroke. The order relationship when the next input operation of key information is handled as the authentication information input operation by the user is shown as “n = + 1” in FIG.

  In the example of the order relationship shown in FIG. 2A, for example, the authentication information is collated with the next input operation after the key information, that is, the operation order number two times after the key information operation order number. The order relationship is “n = + 2”. Further, when the authentication information is collated with the previous input operation of the key information input, that is, the operation order number one time before the key information operation order number, the order relation is “n = −1”.

  Further, when key information is not input, verification information may be collated with the first input stroke.

  In this way, the order relationship between the key information and the authentication information is registered in advance, so that input strokes other than the key information and authentication information to be verified are treated as dummy inputs. In the example of FIG. 2, an example in which the stroke input is performed three times by adding a dummy input once to the input operation of the key information and the authentication information is shown. The number of times of adding the dummy input may be arbitrary as long as it is a predetermined number of times, but the security strength can be improved as the number of times of addition is increased.

Key information and authentication information are registered with a stroke as a locus of movement of the input key.
As shown in FIG. 3, the start point and end point constituting this stroke are defined by any one of key top information, key location, and direction, and are registered in advance.

First, a case where the start point and end point of a stroke are defined with the key top information shown in FIG.
In the configuration example in which any one of key top information 1 to 9 is arranged on 9 keys of 3 rows × 3 columns on the touch keyboard displayed on the display input unit 110, the key top information is any one of 1 to 9 It becomes a number. For this reason, when the start point and end point of a stroke are defined by key top information, the start point and end point are defined as any number from 1 to 9.

  Note that the display pattern of the key top information displayed as the touch keyboard changes every time the display pattern generation unit 122 randomly generates. For this reason, the location of the key, which is the defined key top information, often changes each time a display pattern is randomly generated.

  When the start point and end point of a stroke are defined at the key locations shown in FIG. 3B, if the touch keyboard is 9 keys of 3 rows × 3 columns, “1st row 1st column” to “3rd row” A start point and an end point are defined as any place up to "3 columns".

  Next, a case where the start point and end point of the stroke are defined in the direction shown in FIG. For convenience of explanation, FIG. 3C shows a case where the key top information is the display pattern example of FIG.

  As the definition patterns when defining the start point and end point of the stroke according to the direction, the example of FIG. 3 shows four patterns of the horizontal direction, the vertical direction, the slash direction, and the reverse slash direction.

FIG. 3C-1 shows an example of a stroke when the end point is in the horizontal direction. As described above, when the end point is defined as the horizontal direction, all of the strokes that move in the same direction from the key defined as the start point in the horizontal direction, that is, left or right, are included as registered strokes.
If the starting point is in the horizontal direction, all the strokes that move from the left or right within the same line in the key defined as the end point are included as registered strokes.

FIG. 3C-2 shows an example of a stroke when the end point is in the vertical direction. Thus, when the end point is defined as the vertical direction, all of the strokes that move in the same direction from the key defined as the start point in the vertical direction, that is, up or down, are included as registered strokes.
If the start point is in the vertical direction, all the strokes that move from the top or bottom in the same column in the key defined as the end point are included as registered strokes.

  FIG. 3C-3 shows an example of a stroke when the end point is in the slash direction. As described above, when the end point is defined as the slash direction, all the strokes moving diagonally right upward or diagonally left downward from the key defined as the start point are included as registered strokes.

  For example, as shown in FIG. 3 (c-3), when the start point is a key located at an upper right position, all the strokes moving from the key to the lower left key are included. As a specific example of the display pattern example shown in FIG. 3C-3, if the key top information at the start point is “3”, the end points are “4”, “5”, “7”, “8”. Includes all strokes that are either. If the key top information at the start point is “2”, all the strokes whose end points are either “4” or “7” are included.

  In addition, when the start point is a key located at a diagonally lower left position, all strokes that move from that key to a key that is diagonally upward to the right are included. As a specific example of the display pattern example shown in FIG. 3C-3, if the key top information at the start point is “7”, the end points are “2”, “3”, “5”, “6”. Includes all strokes that are either. If the key top information at the start point is “8”, all strokes whose end points are either “3” or “6” are included.

  FIG. 3C-4 shows an example of a stroke when the end point is the reverse slash direction. As described above, when the end point is defined as the reverse slash direction, all the strokes moving diagonally right or diagonally upward from the key defined as the start point are included as registered strokes.

  For example, as shown in FIG. 3 (c-4), when the start point is a key located at an upper left corner, all the strokes moving from the key to the lower right key are included. As a specific example of the display pattern example shown in FIG. 3C-4, if the key top information at the start point is “1”, the end points are “5”, “6”, “8”, “9”. Includes all strokes that are either. If the key top information at the start point is “2”, all the strokes whose end points are either “6” or “9” are included.

  In addition, when the start point is a key located at a diagonally lower right position, all strokes that move from that key to a diagonally upper left key are included. As a specific example of the display pattern example shown in FIG. 3C-4, if the key top information at the start point is “9”, the end points are “1”, “2”, “4”, “5”. Includes all strokes that are either. If the key top information at the start point is “8”, all strokes whose end point is either “1” or “4” are included.

  The start point and the end point constituting the stroke of the key information and the authentication information are defined as described above. However, it is preferable not to use the direction in the definition of the start point from the viewpoint of easy understanding by the user in memory and input. That is, it is preferable that the start point is defined by any one of the key top information and the key location, and the end point is defined by any one of the key top information, the key location, and the direction.

  In the key information registration example shown in FIG. 2A, the start point is defined as “key location: lower left” and the end point is defined as “key top information: 9”. Therefore, in the display pattern example of FIG. 2A, the stroke from “7” to “9” is the key information.

  2A, the start point is defined as “key top information: 2” and the end point is defined as “direction: horizontal direction”. Therefore, in the display pattern example of FIG. 2A, the stroke from “2” to “1” or “3” is authentication information.

  Further, in the example of FIG. 2A, since the order relationship between the key information and the authentication information is registered as “n = + 1” and the key information is input for the first time, the verification information is collated for the second time. It will be done with a stroke. For this reason, the third input stroke is treated as a dummy input.

  Next, the security to the replay attack by the input information authentication apparatus 100 of the present embodiment will be described with reference to the specific examples of FIGS.

  As shown in the example of FIG. 2A described above, when a user inputs three strokes for authentication according to key information, authentication information, and order relation registered in advance, the user's shoulder Suppose that a third party has seen the movement and input screen of the hand inputting the stroke from a close distance such as. Furthermore, after that, it is assumed that the input information authentication device 100 of this embodiment has been obtained by the third party.

  In this way, an example in which the third party inputs a stroke to the input information authentication apparatus 100 of the present embodiment by the same movement as the hand of the stroke input, that is, the movement of the hand of the stroke input as shown in FIG. Shown in b).

  Here, as described above, the display pattern generation unit 122 performs an input operation for authentication using the touch keyboard of the display input unit 110, and after the authentication is OK, starts the input operation for authentication next. Each time an input screen for displaying is displayed, a display pattern is randomly generated. For this reason, when a third party tries to input authentication information in FIG. 2B, the display pattern is different from that shown in FIG. 2A.

  For this reason, even if the third party inputs a stroke as the same key location where the start point and the end point were stolen earlier, the key top information displayed on the start point and end point keys is the same as in FIG. This is different from the input at a).

In the example of FIG. 2B, none of the first to third input strokes matches the start point “key location: lower left” and the end point “key top information: 9” which are strokes registered as key information. . In addition, none of the first to third input strokes coincides with the start point “key top information: 2” and the end point “direction: horizontal direction”, which are strokes registered as authentication information.
For this reason, as a case where key information is not input, authentication information is collated with the first input stroke, and authentication NG is obtained.

  FIG. 2C shows an example of a case where a third party who has obtained the input information authentication apparatus 100 of the present embodiment inputs a stroke using the same key top information that he / she saw.

  In the case of FIG. 2 (c), even if a third party inputs a stroke as the same key top information that he / she saw the start point and the end point of before, the location of the key where the key top information is displayed is This is different from the input shown in FIG.

In the example of FIG. 2C, neither the stroke registered as the key information described above nor the stroke registered as authentication information matches any of the first to third input strokes.
For this reason, as a case where key information is not input, authentication information is collated with the first input stroke, and authentication NG is obtained.

  Even if the third party repeats such a replay attack, the display pattern generation unit 122 does not randomly generate a display pattern unless an authentication OK is input. For this reason, as long as the authentication is NG, the touch keyboard with the same display pattern continues to be displayed. Therefore, there is no possibility that the same display pattern that a third party steals earlier is accidentally displayed.

  As described above, a third party who steals an input operation of a stroke that is an authentication OK at a close distance obtains the input information authentication device 100 and performs a replay attack based on the same key location or a replay attack based on the same key top information. Even if an attempt is made, it is not possible to authenticate with the input content that has been stolen. In this way, even when the operation and input screen of the hand inputting the stroke for authentication are viewed, it is possible to realize high security without being authenticated.

  Further, when a predetermined number of strokes are input for authentication and the authentication is NG, the wait time for input may be doubled at the next stroke input. In this way, the wait time is doubled every time the authentication by the stroke input becomes NG, so that it is possible to further improve the security against repeated replay attacks. Alternatively, the wait time may be increased exponentially every time the authentication becomes NG.

  Next, an operation example of the input information authentication apparatus 100 as the first embodiment will be described with reference to the flowchart of FIG. In the operation of the present embodiment described below, it is assumed that each of the key information, the authentication information, and the order relationship is defined as described above and registered in advance in the input information authentication apparatus 100.

First, the display pattern generation unit 122 generates a display pattern on the touch keyboard displayed on the touch panel display as the display input unit 110 (step S1).
The touch keyboard displayed in this display pattern receives a stroke input by the user up to a predetermined number of times (steps S2 and S3). As described above, the predetermined number of times is a predetermined number of times of dummy input in addition to the key information and the authentication information twice. The stroke recognizing unit 123 refers to the display pattern information generated by the display pattern generating unit 122, and extracts the key location and key top information for the start point and end point of each input stroke.

  When a predetermined number of strokes are input and the start point and end point are extracted, the key information collating unit 124 collates with a stroke as key information registered in advance based on the input start point and end point of each stroke ( Step S4). In this collation, based on the key location and key top information for the start point and end point in each input stroke, each input stroke is the key top for the start point and end point registered in advance as key information. It is verified whether or not the stroke is defined by definition information based on information, key location, or direction.

  Moreover, the authentication information collation part 125 collates with the stroke as authentication information registered beforehand based on the input start point and end point of each stroke (step S5). In this collation, based on the key location and key top information for the start point and end point in each input stroke, each input stroke is the key top for the start point and end point registered in advance as authentication information. It is verified whether or not the stroke is defined by definition information based on information, key location, or direction.

  In this way, the key information and the authentication information are collated to determine whether or not there is a matching stroke. If there is a matching stroke, the order relation collating unit 126 determines the order of the operation order number in which each matching stroke is input. It is checked whether or not the relationship matches the pre-registered order relationship. If they match, the authentication is OK, and the other cases are authentication NG.

  When there is no input stroke that matches the key information, the order relation collating unit 126 determines that the authentication is OK if the number of operation orders of the input stroke that matches the authentication information is the first time, and authentication NG otherwise. Step S6).

As described above, in the first embodiment described above, the display pattern of the touch keyboard at the time of authentication changes randomly each time authentication is OK. Even if the person again inputs a stroke with the same key top information and key location, the authentication is not OK.
In this way, even with the same key information and authentication information, the input stroke for making the authentication OK changes with every input, and thus functions substantially like a one-time password. For this reason, sufficiently high security can be ensured as a countermeasure against a case where the input hand movement and the display screen are stolen from a third party.

  Further, the display pattern of the touch keyboard is randomly generated at the next input when the authentication is OK, and in the case of authentication NG, the same display pattern is displayed at the next stroke input. For this reason, the probability that the display patterns coincide by chance can be made zero, and higher security can be realized.

In the present embodiment, the start point and the end point for each of the key information and the authentication information are defined and registered in advance as described above. Authentication is further performed by further using the order relationship between the number of operation orders in which key information is input and the number of operation orders in which authentication information is input.
For this reason, in the input information authentication apparatus 100 of the present embodiment, the user can perform highly secure authentication input including dummy input only by storing the key information, the authentication information, and their order relationship.

Further, there is no feature that an input operation with a specific operation order number corresponds to key information or authentication information. For this reason, even if a hand and an input screen are seen at the time of input from a third party, it is extremely difficult for the third party to infer key information and authentication information.
Furthermore, it is possible to have sufficient security against replay attacks such as repeated retries.

  In addition, since inputs other than the registered key information and authentication information are automatically set as dummy inputs, even if the number of dummy inputs is increased to two or more, the load of storage by the user The input information authentication device 100 according to the above-described embodiment can be realized by the same processing. Of course, if the number of dummy inputs is further increased, the security strength can be further improved.

As described above, in the embodiment of the present invention, it is not determined whether the input is dummy input or authentication information or key information depending on how many times the input is made. Therefore, it is possible to prevent a third party who does not know the key information or the authentication information from identifying which input is a dummy.
Further, since the key layout of the touch keyboard at the time of authentication changes randomly every time the authentication is OK, it is possible to provide sufficient security against the replay attack depending on the key top information and the key location. .
For this reason, even if it is a case where the hand and display screen at the time of input are seen from the third party, the input method used as authentication OK can be made difficult to guess.

  In particular, when the input information authentication device 100 of the present embodiment is a touch panel type portable information terminal, it is conceivable to input authentication information in a train or in a crowded area. The display screen may be seen by a third party from a close distance, such as over the shoulder. In this way, even when the hand and the display screen for performing a series of stroke inputs for authentication are viewed, the input method is an authentication OK based on the key information or the authentication information from the viewed information. Therefore, it is possible to provide an input information authenticating apparatus excellent in security that is difficult to guess.

Further, particularly for beginners and elderly people, it is conceivable that the speed of hand movement is very slow even during stroke input. Accordingly, when viewed by a third party, hand movements and display screens may be easily stored.
According to the above-described embodiment, even in such a case, sufficiently high security can be ensured as described above.

In the first embodiment described above, after all the predetermined number of stroke inputs for authentication have been completed, verification with the key information is performed at step S4 described above, and verification with the authentication information is performed at step S5. Although described as a thing, it is not limited to this structure, The structure which collates whenever a stroke is input once may be sufficient.
In this case, each time the stroke is input once, the input stroke and the key information are collated. Then, when the operation order number indicating how many times the key information is input is determined, the order relationship between the key information and the authentication information determines the number of times the input is authentication information. The input stroke is verified against the authentication information. If the input stroke that matches the key information is not included in the predetermined number of stroke inputs, the first input stroke is compared with the authentication information. Thus, authentication based on pre-registered key information and authentication information can be realized in the same manner as in the first embodiment described above.

[Second Embodiment]
Next, a second embodiment of the present invention will be described.
In the second embodiment, functions such as display pattern generation, key information, and authentication information storage and verification in the above-described first embodiment are realized using a server device.
Description of the same components as those in the first embodiment described above will be omitted.

  As shown in FIG. 5, the input information authentication system as the second embodiment is configured by connecting an input information authentication device 100 and a server device 200 via a network.

  The input information authentication device 100 includes a display input unit 110, a display input control unit 121, and a communication unit 150.

  The communication unit 150 is connected to the communication unit 250 of the server device 200 via a network by wire, wireless, or a combination thereof, and performs communication with the server device 200.

  The display input control unit 121 controls the display of the input keys displayed on the display input unit 110 and the operation input to the display input unit 110 as an input signal based on the transmission / reception contents of the communication unit 150 with the server device 200. I do.

  The server apparatus 200 includes a communication unit 250, a display pattern generation unit 122 similar to the first embodiment described above, a stroke recognition unit 123, a key information collation unit 124, a recognition information collation unit 125, and an order relation collation. Unit 126 and a storage unit 130 that stores registered key information, authentication information, and the like.

  The communication unit 250 is connected to the communication unit 150 of the input information authentication device 100 via a network by wire, wireless, or a combination thereof, and performs communication with the input information authentication device 100. Through this communication, the server apparatus 200 performs display control of an input key displayed on the display input unit 110 of the input information authentication apparatus 100 and the like.

  Next, an operation example of the input information authentication system as the second embodiment will be described with reference to the flowchart of FIG. In the operation of the present embodiment described below, each of key information, authentication information, and order relation used for authentication in the input information authentication apparatus 100 is defined as described above and registered in advance in the storage unit 130 of the server apparatus 200. Suppose that it is done.

  First, the display pattern generation unit 122 of the server device 200 generates a display pattern on the touch keyboard of the display input unit 110 as in the above-described first embodiment (step S11). The communication unit 250 transmits the generated display pattern data to the input information authentication apparatus 100 (step S12).

  The display input control unit 121 of the input information authentication device 100 displays the touch keyboard with the display pattern received from the server device 200 by the communication unit 150 (step S13). Then, the touch keyboard with this display pattern receives a stroke input by the user up to a predetermined number of times as in the first embodiment (steps S14 and S15).

  When the key input operation is performed a predetermined number of times in this manner, the display input control unit 121 associates the stroke information input operation each time with the operation order number of the input operation, and the communication unit 150 The associated operation order number and input stroke data are transmitted to the server device 200 (step S16).

  When the communication unit 250 receives the operation sequence number and the input stroke from the input information authentication device 100, the stroke recognition unit 123 of the server device 200 refers to the display pattern data generated in step S11, and the first described above. As in the first embodiment, the key location and key top information are extracted for the start point and end point of the stroke input each time (step S17).

  The key information collating unit 124 collates with the stroke as the key information registered in advance based on the extracted start point and end point information regarding the stroke input each time (step S17). In this collation, based on the key location and key top information for the start point and end point in each input stroke, each input stroke is the key top for the start point and end point registered in advance as key information. It is verified whether or not the stroke is defined by definition information based on information, key location, or direction.

  Moreover, the authentication information collation part 125 collates with the stroke as authentication information registered previously based on the extracted start point and end point information about the stroke input each time (step S18). In this collation, based on the key location and key top information for the start point and end point in each input stroke, each input stroke is the key top for the start point and end point registered in advance as authentication information. It is verified whether or not the stroke is defined by definition information based on information, key location, or direction.

  In this way, the key information and the authentication information are collated to determine whether or not there is a matching stroke. If there is a matching stroke, the order relation collating unit 126 determines the order of the operation order number in which each matching stroke is input. It is checked whether or not the relationship matches the pre-registered order relationship. If they match, the authentication is OK, and the other cases are authentication NG.

  When there is no input stroke that matches the key information, the order relation collating unit 126 determines that the authentication is OK if the number of operation orders of the input stroke that matches the authentication information is the first time, and authentication NG otherwise. Step S19).

  As described above, according to the above-described second embodiment, the same effects as those of the above-described first embodiment can be obtained, and protection is performed with stronger security than the input information authentication device 100 that is a terminal. Since the server apparatus 200 can store key information, authentication information, and order relation information as registration information, security can be further improved.

  In addition, the server device 200 generates a display pattern to be displayed on the touch keyboard, and the server device 200 receives the input stroke information for each display from the input information authentication device 100 and performs processing. An authentication effect such as a response can be obtained, and a defense effect against spoofing of the terminal itself (including program spoofing on the terminal) can be obtained.

[Third Embodiment]
Next, a third embodiment of the present invention will be described.
In the third embodiment, key information, authentication information, and order relation information as registration information are encrypted after being encrypted with a one-way function such as a hash function, and input strokes can be verified by the user in that state. It is what you want to do.
Description of the same components as those in the first embodiment described above will be omitted.

  As shown in FIG. 7, the input information authentication device 100 according to the third embodiment includes a display input unit 110, a display input control unit 121, a display pattern generation unit 122, and the like that are the same as those in the first embodiment described above. In addition to the stroke recognition unit 123 and the storage unit 130, an encryption registration unit 160, an encryption key information verification unit 161, an encryption authentication information verification unit 162, and an encryption order relation verification unit 163 are provided. Prepare.

  The encryption registration unit 160 encrypts key information, authentication information, and order relationship information as registration information by a one-way function such as a hash function, and stores the information in the storage unit 130.

The encryption key information collating unit 161 collates the input stroke with the encrypted key information.
The encrypted authentication information collating unit 162 collates the input stroke with the encrypted authentication information.
The encryption order relation collating unit 163 performs collation between the order relation between the key information and the authentication information and the encrypted order relation information.

Next, an operation example of the input information authentication apparatus 100 as the present embodiment will be described with reference to the flowchart of FIG.
The following operation example shows a case where md5 is used as a hash function, and a hash code obtained by hashing the numerical value x is shown as md5 (x).

In the operation of this embodiment described below, it is assumed that the key information, the authentication information, and the order relationship described above are registered in advance in the input information authentication apparatus 100. Further, the key information and the authentication information are defined such that the start point is defined by either the key top information or the key location, and the end point is defined by any of the key top information, the key location, or the direction.
The encryption registration unit 160 hashes the key information, the authentication information, and the order relation information as registration information registered in this way, and stores them in the storage unit 130.

  The generation of the display pattern by the input information authentication apparatus 100 of the present embodiment and the operation of receiving the stroke input by the touch keyboard are the same as in the first embodiment described above. That is, the operations of steps S1 to S3 in the flowchart of FIG. 4 are similarly performed as steps S21 to S23 of FIG.

  When a predetermined number of strokes are input for authentication in this way, the encryption key information collating unit 161 hashes each of the input strokes with all possible patterns, is encrypted, and is stored in the storage unit 130. The key information is collated (step S24).

  Here, the collation method of the input stroke and the encrypted key information by the encryption key information collation unit 161 in step S24 will be described.

The encryption key information collating unit 161 first sets the input start point of the stroke to be subject to hashing as two possible patterns: key top information and key location. The end point is subject to hashing as three possible patterns: key top information, key location, and direction.
For this reason, there can be two start points and three end points for one input stroke, and 2 × 3 = 6 hashed values are calculated.

  As a specific example of the first input stroke in FIG. 2A, there may be two patterns of “key top information: 7” and “key location: lower left” as the start point. Further, the end point may have three patterns of “key top information: 9”, “key location: lower right”, and “direction: horizontal direction”.

For this reason, for the start point and the end point in the first input stroke in FIG. 2A, the calculated values in the hashing of all possible patterns are the following six.
md5 (7, 9)
md5 (7, lower right)
md5 (7, horizontal direction)
md5 (lower left, 9)
md5 (lower left, lower right)
md5 (bottom left, horizontal direction)

  The encryption key information collating unit 161 collates the hash values of all possible patterns calculated in this way with key information registered in advance, encrypted, and stored in the storage unit 130.

  In the specific example of FIG. 2A, the key information encrypted and stored in the storage unit 130 is md5 (lower left, 9). For this reason, when the six hash values calculated as described above and the key information encrypted and stored in the storage unit 130 are collated, the matching values are included in the six hash values. . Therefore, the encryption key information matching unit 161 determines that the first input stroke in FIG. 2A is key information.

  In the verification in step S24 described above, the encryption key information verification unit 161 calculates the hash values of all possible patterns as described above for each input stroke, and is encrypted and stored in the storage unit 130. Check against stored key information. If there is a hash value that matches by collation, the stroke of the operation order number that is the source of the matching hash value is determined as key information.

  As in the case of FIG. 2A, when the number of input operations for authentication is 3, the encryption key information matching unit 161 calculates a hash value of 6 × 3 = 18 patterns, The key information encrypted and stored in the storage unit 130 is verified. Then, among the six hash values calculated as possible patterns for the first input stroke in FIG. 2A, there is a value that matches the key information encrypted and stored in the storage unit 130. Therefore, the encryption key information matching unit 161 determines that the first input stroke in FIG. 2A is key information.

  Next, the encrypted authentication information matching unit 162 calculates the hash values in all possible patterns for each input stroke, calculated as described above, and is encrypted and stored in the storage unit 130. It collates with authentication information (step S25). The collation method is performed in the same manner as in the case of the collation by the encryption key information collation unit 161 described above between the hash values in all the calculated patterns and the authentication information encrypted and stored in the storage unit 130. .

  Thus, when there is a matching stroke for each of the key information and the authentication information and the operation order number indicating the number of times of input operation is determined, the encryption order relation collating unit 163 operates the key information and the authentication information. The order relation between the order numbers is hashed and collated with the order relation encrypted and stored in the storage unit 130 (step S26).

  In the specific example of FIG. 2A, the key information input operation is the first operation and the authentication information input operation is the second operation. Therefore, the order relationship between the operation order numbers for the key information and the authentication information is “n = +1 ”. For this reason, the hash value for the order relationship is md5 (+1). Further, since the order relationship encrypted and stored in the storage unit 130 is also md5 (+1), the authentication is OK.

  If there is no input stroke that matches the key information, the encryption order relation collating unit 163 refers to the collation result by the encrypted authentication information collating unit 162 in step S25, and the first input stroke is the authentication information. If it is determined, the authentication is OK, and the other cases are authentication NG.

  As described above, according to the above-described third embodiment, the same effect as that of the above-described first embodiment can be obtained, and key information, authentication information, and order relation information as registration information can be converted into a hash function. Since it is stored after being encrypted with a one-way function such as, even when the input information authentication apparatus 100 is obtained by a third party, it is possible to protect against analysis of stored information in the memory. . Nevertheless, even with stroke input including dummy input similar to that in the first embodiment described above, verification with key information and authentication information can be reliably performed. For this reason, higher security can be realized.

  Further, in the collation method of the third embodiment described above, collation can be performed with a much smaller amount of computation than when using an advanced calculation technique in which computation for collation is performed in an encrypted state. Therefore, even a computer having a relatively low processing capability such as a mobile terminal can be easily realized.

[About each embodiment]
Each of the above-described embodiments is a preferred embodiment of the present invention, and the present invention is not limited to this, and various modifications can be made based on the technical idea of the present invention.

  For example, in each of the above-described embodiments, the touch keyboard is described as having 9 keys of 3 rows × 3 columns. However, the number of keys constituting the touch keyboard is not limited to this number, and depends on the performance of the device. It may be determined arbitrarily. If the number of keys constituting the touch keyboard is increased, the number of patterns that can be input strokes is increased, and the security strength can be further improved.

  Further, in each of the above-described embodiments, the key top information has been described as numbers. However, any information may be used as long as the information can identify each key. For example, characters such as alphabets, images, colors, and the like may be used. It may be. In this case, by assigning a number or the like that can specify the key top information to each of the key top information, it can be realized in the same manner as the above-described embodiment.

  In each of the above-described embodiments, the touch keyboard displayed on the display input unit 110 may have a predetermined number of buttons having the same shape without key top information. In this case, as the definition pattern of the start point and the end point when registering the key information and the authentication information, information other than the key top information is used. That is, the start point is defined by the key location, and the end point is defined by either the key location or direction.

Further, in each of the above-described embodiments, from the viewpoint of easy understanding by the user in the storage and input operation, the description has been made as a configuration in which the direction is not used for the definition of the start point. The present invention can be similarly realized even in a configuration in which the direction can be used in addition to the place.
In this case, for example, assuming that the start point is defined as “direction: horizontal direction” and the end point is defined as “key top information: 8”, all strokes moving from the horizontal direction to the key “8” are included. In addition, when both the start point and the end point are defined by directions, the stroke recognition unit 123 can define different directions for the start point and the end point by extracting the passing points in addition to the start point and the end point. In other words, the present invention can be realized in the same manner even when the stroke is defined as a character shape stroke.

  Further, in each of the above-described embodiments, the definition information of the key information and the authentication information has been described as a stroke as a movement trajectory. However, the present invention is not limited to this, and is one key top information or a key location. However, the present invention can be similarly realized. In this case, the input operation for authentication is also a key operation for each key, and the input operation of the key information is performed by comparing the input key with the registered information for each of the key information and the authentication information. This is realized in the same manner as in each of the above-described embodiments by checking whether or not the order relationship between the order number and the operation order number for which the authentication information input operation has been performed matches the pre-stored order relationship. can do.

  Moreover, about 2nd Embodiment mentioned above, it is good also as a structure which hash-stores the definition information of key information and authentication information similarly to 3rd Embodiment mentioned above, and memorize | stores in the server apparatus 200. FIG. In this case, each input stroke by a predetermined number of input operations for authentication is encrypted by the input information authentication device 100 or the server device 200 in the same manner as in the third embodiment described above, and collated with the stored hash value. This can be realized in the same manner.

Further, each of the above-described embodiments is not limited to the configuration in which the input unit and the display unit are integrated, and the present invention can be similarly realized even if the input unit and the display unit are separate bodies or separate devices. Can do.
When the input unit and the display unit are separate, a keyboard is displayed on the display unit, and a stroke is input by an input unit (for example, a tablet device) that can input a movement locus, and the locus of input coordinates is displayed by the display unit. By configuring so that can be confirmed, processing can be performed in the same manner as in the above-described embodiment. Also with such a configuration, the above-described embodiments can be similarly realized, and the same effect can be obtained.

  Moreover, the input information authentication device 100 of each embodiment described above is not limited to a portable information terminal, and can be similarly applied to a stationary device such as a desktop PC.

  In addition, each functional unit of each of the above-described embodiments may have any configuration that realizes the above-described function. For example, one CPU executes a processing procedure of a program recorded on a recording medium. It may be realized by a plurality of function modules.

In addition, by recording the processing procedure for realizing the input information authentication device 100 or the server device 200 as each embodiment described above on a recording medium as a program, the above-described functions according to each embodiment of the present invention can be obtained. A program supplied from a recording medium can be realized by causing a CPU of a computer constituting the system to perform processing.
In this case, the present invention can be applied even when an information group including a program is supplied to the output device from the above recording medium or from an external recording medium via a network.
That is, the program code itself read from the recording medium realizes the novel function of the present invention, and the recording medium storing the program code and the signal read from the recording medium constitute the present invention. It will be.
As this recording medium, for example, a hard disk, an optical disk, a magneto-optical disk, a floppy (registered trademark) disk, a magnetic tape, a nonvolatile memory card, a ROM, or the like may be used.

  According to the program according to the present invention, each function in each of the above-described embodiments can be realized by a computer controlled by the program.

DESCRIPTION OF SYMBOLS 100 Input information authentication apparatus 110 Display input part 121 Display input control part 122 Display pattern generation part 123 Stroke recognition part 124 Key information collation part 125 Authentication information collation part 126 Order relation collation part 130 Storage part 150 Communication part 160 Encryption registration part 161 Encryption key information verification unit 162 Encryption authentication information verification unit 163 Encryption order relation verification unit 200 Server device

Claims (12)

An input information authentication device for performing authentication for determining whether information corresponding to an operated key of an input unit having a plurality of keys matches authentication information stored in advance,
Authentication auxiliary information used to indicate information corresponding to what number of operations in a predetermined number of key operations to the input means for performing the authentication, and the authentication information, Stored in advance as definition information that is information corresponding to a key operation to the input means,
Of the predetermined number of key operations, there is an order relationship between an operation order number indicating the order of input operations in which the authentication auxiliary information is input and an operation order number indicating the order of input operations in which the authentication information is input. Pre-stored,
Collating the information corresponding to the key operation to the input means and the authentication auxiliary information stored as the definition information;
Collation of the information corresponding to the key operation to the input means and the authentication information stored as the definition information;
Order relation between the number of operation orders of the input operation in which the authentication auxiliary information is input by the key operation to the input means and the number of operation orders of the input operation in which the authentication information is input by the key operation to the input means Performs the authentication by collating whether or not it matches the pre-stored order relation.   The input information authentication apparatus according to claim 1, wherein the key operation on the input means is a stroke which is a locus of the plurality of keys. Authentication auxiliary information collating means for collating whether or not the stroke input to the input means is a stroke stored as definition information of the authentication auxiliary information;
Authentication information collating means for collating whether or not the stroke input to the input means is a stroke stored as definition information of the authentication information;
It is checked whether or not the operation order number in which the authentication auxiliary information stroke is input and the order relationship between the authentication information stroke and the operation order number is in agreement with a pre-stored order relationship. The input information authentication apparatus according to claim 2, further comprising: an order relation collating unit. Definition information constituting the authentication auxiliary information, definition information constituting the authentication information, order relation information between the operation order number of strokes of the authentication auxiliary information and the operation order number of strokes of the authentication information, An encryption means for encrypting with a one-way function;
The authentication auxiliary information collating means includes the encrypted character string by the one-way function of the definition information defining the stroke input by the input means, and the encryption means for the definition information constituting the authentication auxiliary information. Against the encrypted encrypted string,
The authentication information collating means encrypts the encrypted character string by the one-way function of the definition information defining the stroke input by the input means and the encryption means for the definition information constituting the authentication information. Against the encrypted string
The order relation collating unit encrypts the order relation between the operation order number in which the stroke of the authentication auxiliary information is input and the operation order number in which the stroke of the authentication information is input using the one-way function. 4. The input information authenticating device according to claim 3, wherein the encrypted character string is collated with an encrypted character string having an order relation that is encrypted and stored in advance by the encryption means. The plurality of keys included in the input means are provided with changeable key top information that enables each key to be identified,
5. A random generation unit that randomly generates a pattern of key top information to be assigned to each of the plurality of keys when a predetermined number of key input operations for performing the authentication are performed. The input information authentication device described.   The authentication auxiliary information and the authentication information are defined by defining any one of the definition patterns of the key top information of the key included in the input means, the arrangement position of the key, and the direction with respect to the key for the start point and the end point of the stroke. 6. The input information authentication apparatus according to claim 5, wherein a stroke is defined. The authentication auxiliary information collating unit is an encrypted character string encrypted by the one-way function with all definition patterns that can be used as the authentication auxiliary information for the start point and the end point of the stroke input by the input unit, The encrypted character string encrypted by the encryption means for the definition information constituting the authentication auxiliary information is collated,
The authentication information collating means includes an encrypted character string encrypted by the one-way function with all definition patterns that can be used as the authentication information for a start point and an end point of a stroke input to the input means, and the authentication information. The input information authentication apparatus according to claim 6, wherein the encrypted character string encrypted by the encryption unit with respect to the definition information constituting the information is collated. A communication means for communicating with the server device;
Display control means for performing display control under the control of the server device,
The server device
Authentication auxiliary information collating means for collating whether or not the stroke input to the input means is a stroke stored as definition information of the authentication auxiliary information;
Authentication information collating means for collating whether or not the stroke input to the input means is a stroke stored as definition information of the authentication information;
It is checked whether or not the operation order number in which the authentication auxiliary information stroke is input and the order relationship between the authentication information stroke and the operation order number is in agreement with a pre-stored order relationship. The input information authentication apparatus according to claim 2, further comprising: an order relation collating unit. Wherein the input means is configured to display a plurality of keys on a display screen, detecting a contact position of the said surface shows a screen, determine whether the input operation to any of the plurality of keys based on the position information of the contact position The input information authentication device according to claim 1, wherein the input information authentication device is a touch panel display. A server device used by being connected to an input information authentication device by wire, wireless, or a combination thereof,
The input information authentication device includes an input unit having a plurality of keys, and a communication unit that communicates with the server device,
The server device
Performing authentication which is a determination as to whether or not the information corresponding to the operated key of the input means matches the authentication information stored in advance,
Authentication auxiliary information used to indicate information corresponding to what number of operations in a predetermined number of key operations to the input means for performing the authentication, and the authentication information. Pre-stored as definition information which is information corresponding to the key operation to the input means,
An order relationship between an operation order number indicating the order of input operations in which the authentication auxiliary information is input among the predetermined number of key operations and an operation order number indicating the order of input operations in which the authentication information is input. Remember in advance,
Authentication auxiliary information collating means for collating the information corresponding to the key operation to the input means and the authentication auxiliary information stored as the definition information;
Authentication information collating means for collating information corresponding to a key operation to the input means and the authentication information stored as the definition information;
Order relation between the number of operation orders of the input operation in which the authentication auxiliary information is input by the key operation to the input means and the number of operation orders of the input operation in which the authentication information is input by the key operation to the input means A server apparatus comprising: an order relation collating unit for collating whether or not the order relation matches a pre-stored order relation. An input information authentication system configured by connecting an input information authentication device and a server device by wire, wireless, or a combination thereof,
The input information authentication device includes an input unit having a plurality of keys, and a communication unit that communicates with the server device,
The server device
Performing authentication which is a determination as to whether or not the information corresponding to the operated key of the input means matches the authentication information stored in advance,
Authentication auxiliary information used to indicate information corresponding to what number of operations in a predetermined number of key operations to the input means for performing the authentication, and the authentication information. Pre-stored as definition information which is information corresponding to the key operation to the input means,
An order relationship between an operation order number indicating the order of input operations in which the authentication auxiliary information is input among the predetermined number of key operations and an operation order number indicating the order of input operations in which the authentication information is input. Remember in advance,
Authentication auxiliary information collating means for collating the information corresponding to the key operation to the input means and the authentication auxiliary information stored as the definition information;
Authentication information collating means for collating information corresponding to a key operation to the input means and the authentication information stored as the definition information;
Order relation between the number of operation orders of the input operation in which the authentication auxiliary information is input by the key operation to the input means and the number of operation orders of the input operation in which the authentication information is input by the key operation to the input means And an order relation collating means for collating whether or not the order relation is stored in advance. A program of an input information authentication device for performing authentication, which is a determination as to whether or not information corresponding to an operated key of an input means having a plurality of keys matches prestored authentication information,
Authentication auxiliary information used to indicate information corresponding to what number of operations in a predetermined number of key operations to the input means for performing the authentication, and the authentication information, Stored in advance in the input information authentication device as definition information that is information corresponding to a key operation to the input means,
Of the predetermined number of key operations, there is an order relationship between an operation order number indicating the order of input operations in which the authentication auxiliary information is input and an operation order number indicating the order of input operations in which the authentication information is input. Pre-stored in the input information authentication device,
On the computer,
An auxiliary authentication information verification procedure for verifying information corresponding to a key operation to the input means and the auxiliary authentication information stored as the definition information;
An authentication information matching procedure for matching information corresponding to a key operation on the input means and the authentication information stored as the definition information;
Order relation between the number of operation orders of the input operation in which the authentication auxiliary information is input by the key operation to the input means and the number of operation orders of the input operation in which the authentication information is input by the key operation to the input means And executing an order relation collating procedure for collating whether or not the order relation matches a previously stored order relation.

Images