WO2011078056A1

WO2011078056A1 - Authentication device and authentication method

Info

Publication number: WO2011078056A1
Application number: PCT/JP2010/072683
Authority: WO
Inventors: 正木　賢治
Original assignee: コニカミノルタホールディングス株式会社
Priority date: 2009-12-25
Filing date: 2010-12-16
Publication date: 2011-06-30
Also published as: JP2013047859A

Abstract

Upon input of information partitioning a region to an input device in a state in which a correction-use image (950) is displayed, a line (800) representing a trace is displayed on a display unit, and the correction-use image (950) is partitioned with the line (800) as a boundary. When one region (801) is selected as a cut-out region, a sun (911) which is displayed in entirety over a region (801) is deleted from the correction-use image (950). On the display unit, a correction-use image after updating (951) is displayed. According to further instructions, updated images (correction-use image (952) and correction-use image (953)) are displayed in sequence. The correction-use image (953) matches an authentication-use image, and therefore, at the point when the correction-use image (953) is displayed, the authentication-use processing completes.

Description

Authentication apparatus and authentication method

The present invention relates to an authentication device and an authentication method, and more particularly, to an authentication device and an authentication method for performing authentication based on information input from the outside.

Conventionally, various techniques for performing personal authentication by an electronic method in an information communication system have been disclosed.

For example, Document 1 (Japanese Patent Laid-Open No. 2005-072102) discloses a method of displaying a plurality of images on a screen and selecting a specific image from the plurality of images during user authentication.

Japanese Patent Laying-Open No. 2005-072022

However, the user's act of touching a specific position on the screen has a problem that the third party who sees the act easily estimates the content of the act (that is, the touch position) and is vulnerable to “spoofing”. It was.

Here, in order to make it difficult for a third party to estimate the selected image, it is possible to increase the number of images displayed on the screen as candidates.

However, if the number of images displayed on the screen is increased, the size of each image on the screen is reduced due to the relationship with the size of the screen, making it difficult for the user to view. Arise.

On the other hand, in recent years, it is required to input a combination of 4 to 8 digits as a personal identification number in a mobile phone. In other words, personal identification number is composed of one combination from among at least 10 ⁴ combinations. Therefore, if an attempt is made to secure an equivalent security strength in a system that performs authentication by displaying a plurality of images on a display device and selecting one of the images, it is necessary to display 10,000 images. It becomes.

In order to display about 10,000 images in a size that allows the user to recognize each image, a very large display screen is required, and it is considered difficult to put into practical use.

Depending on the above, in the conventional authentication system that touches a specific position on the screen, it is difficult to achieve both user convenience and security strength.

The present invention has been conceived in view of such circumstances, and an object thereof is to achieve both user convenience and security strength in the authentication device.

An authentication apparatus according to the present invention includes a storage unit that stores an image for authentication, a display control unit that causes the display device to display an image, and an input unit that inputs information to the image displayed on the display device And a generation unit for generating information for designating a partial region of the image displayed on the display device based on the information input to the input unit, and a display based on the information generated by the generation unit An update unit for updating an image displayed on the apparatus, and a determination unit that determines whether or not the image updated by the update unit matches the authentication image.

Further, in the authentication device of the present invention, it is preferable that the input unit inputs information for drawing a trajectory to the display device.

In the authentication apparatus of the present invention, it is preferable that the generation unit generates continuous line segment information by interpolating information input to the input unit.

In the authentication device of the present invention, the display control unit causes the display device to display an image including a plurality of objects, and the generation unit generates information for specifying the object included in the image displayed on the display device. It is preferable.

In the authentication device of the present invention, it is preferable that the generation unit generates information specifying an object that includes all of the specified area as information specifying the object.

In the authentication device of the present invention, it is preferable that the update unit updates the image by changing an image of a partial area in the image displayed on the display device.

In the authentication device of the present invention, the storage unit further stores a replacement image, and the update unit replaces a part of the region with the replacement image, thereby displaying the image displayed on the display device. It is preferable to update.

In the authentication device of the present invention, it is preferable that the replacement image stored in the storage unit includes a moving image.

An authentication method according to the present invention is an authentication method executed in an authentication apparatus that displays an image on a display device, the step of storing an image for authentication, the step of displaying an image on the display device, and the display device Receiving information input for the image displayed on the screen, generating information specifying a partial area of the image displayed on the display device based on the received information, and the generated information And updating the image displayed on the display device and determining whether or not the updated image matches the authentication image.

In the authentication method of the present invention, it is preferable that the step of accepting input accepts input of information that describes a trajectory to the display device.

In the authentication method of the present invention, it is preferable that the step of generating information generates continuous line segment information by interpolating information that has received an input.

In the authentication method of the present invention, the step of displaying an image causes the display device to display an image including a plurality of objects, and the step of generating information specifies an object included in the image displayed on the display device. Preferably, the information to be generated is generated.

In the authentication method of the present invention, it is preferable that the step of generating information generates information specifying an object that includes all of the information in the specified area as information specifying the object.

In the authentication method of the present invention, it is preferable that the updating step updates the image by changing an image of a partial area in the image displayed on the display device.

The authentication method of the present invention further includes a step of storing a replacement image, and the updating step replaces a part of the region with a replacement image, thereby converting the image displayed on the display device. It is preferable to update.

In the authentication method of the present invention, it is preferable that the authentication image includes a moving image.

According to the present invention, it is possible to achieve both user convenience and security strength in the authentication device.

It is a figure which shows the external appearance of the information terminal which is 1st Embodiment of the authentication apparatus of this invention. It is a figure which shows the hardware constitutions of the information terminal of FIG. It is a control block diagram of the information terminal of FIG. It is a flowchart of the main routine performed in the information terminal of FIG. It is a figure which shows an example of the image for authentication utilized in the user authentication process of the information terminal of FIG. 5 is a flowchart of a user authentication processing subroutine of FIG. 4. It is a figure which shows an example of the image displayed on the display part of FIG. It is a figure which shows an example of the image displayed on the display part of FIG. It is a figure which shows an example of the image displayed on the display part of FIG. It is a figure which shows an example of the image displayed on the display part of FIG. It is a figure which shows an example of the image displayed on the display part of FIG. It is a figure for demonstrating the interpolation of the data performed in the information terminal of FIG. It is a figure for demonstrating the interpolation of the data performed in the information terminal of FIG. It is a figure for demonstrating the interpolation of the data performed in the information terminal of FIG. It is a figure for demonstrating the interpolation of the data performed in the information terminal of FIG. It is a control block diagram of the information terminal which is 2nd Embodiment of the authentication apparatus of this invention. It is a flowchart of the user authentication process performed in the information terminal of FIG. It is a figure for demonstrating the change of the display mode of the display part in the user authentication process of FIG. It is a figure for demonstrating the change of the display mode of the display part in the user authentication process of FIG.

Hereinafter, embodiments of the present invention will be described with reference to the drawings. In each figure, elements having the same function are denoted by the same reference numerals, and description thereof will not be repeated.

[1. First Embodiment]
[1-1. Schematic configuration of information terminal]
FIG. 1 shows an appearance of an information terminal 100 that is the first embodiment of the authentication apparatus of the present invention.

The information terminal 100 has a display unit 110 on its main surface. The display unit 110 is configured by a general display device such as an LCD (liquid crystal display).

Four operation keys 112 to 115 are provided below the display unit 110 on the main surface of the information terminal 100. The function assigned to each of the operation keys 112 to 115 can be changed according to the type of application being executed on the information terminal 100 and the state in which the application is being executed.

On the right side surface of the information terminal 100, a power key 111 for switching ON / OFF of power-on of the information terminal 100 is provided. A card slot 120 for inserting a recording medium such as a memory card into the main body of the information terminal 100 is provided on the lower surface of the information terminal 100.

Further, the information terminal 100 is provided with a touch pen 190.
[1-2. Information terminal hardware configuration]
FIG. 2 is a control block diagram of the information terminal 100 of FIG.

Referring to FIG. 2, the information terminal 100 stores a CPU (Central Processing Unit) 101 that controls the entire terminal, a RAM (Random Access Memory) 102 that temporarily stores data, and programs and constants. ROM (Read Only Memory) 103, a hard disk drive (HDD) 104 for storing image data, and a communication interface (I / F) 105 for connecting to a network for communication with other devices , An input unit 106 for the operation keys 112 to 115 and the power key 111, a touch panel 107 provided in contact with the display unit 110, and a media drive 108.

The media drive 108 reads and / or writes information with respect to the recording medium 108A inserted into the card slot 120.

As the recording medium 108A, CD-ROM (Compact Disc-Read Only Memory), DVD-ROM (Digital Versatile Disk-Read Only Memory), USB (Universal Serial Bus) memory, memory card, FD (Flexible Disk), hard disk, Magnetic tape, cassette tape, MO (Magnetic Optical Disc), MD (Mini Disc), IC (Integrated Circuit) card (excluding memory card), optical card, mask ROM, EPROM, EEPROM (Electronically Erasable Programmable Read-Only Memory) For example, a medium for storing the program in a nonvolatile manner.

[1-3. Block configuration of authentication device]
FIG. 3 is a control block diagram of the information terminal 100.

Referring to FIG. 3, in information terminal 100, when operation is performed on touch panel 107 and / or operation keys 112-115, input determination unit 151 detects that the operation has been performed and the content thereof. In the information terminal 100, the information input unit 150 is configured by the touch panel 107, the operation keys 112 to 115, and the input determination unit 151.

The display control unit 155 controls the display content of the display unit 110 via the drawing control unit 156, and stores the screen data displayed on the display unit 110 in the second storage unit 153.

The authentication information generation unit 152 generates a correct image (hereinafter, referred to as “authentication image” as appropriate) used when authenticating the user, and stores the image in the third storage unit 157.

Further, in the information terminal 100, when user authentication is performed, an image different from the authentication image is displayed on the display unit 110, and information for correcting the image is input to the user to generate an authentication image. User authentication is performed. In this specification, an image displayed on the display unit 110 at the time of user authentication is referred to as a correction image. The authentication information generation unit 152 generates an image to be displayed first as a correction image and stores it in the first storage unit 158.

The authentication information generating unit 152 can generate an authentication image and a correction image using parts stored in advance in the first storage unit 158, for example.

The authentication determination unit 154 determines whether the image displayed on the display unit 110 (the image stored in the second storage unit 153) matches the image stored in the third storage unit 157.

In the information terminal 100, when both images match, it is determined that the user authentication is successful.
In the information terminal 100, the first storage unit 158, the second storage unit 153, and the third storage unit 157 are configured by the recording medium 108A, the HDD 104, and / or the RAM 102.

In the information terminal 100, the image update unit 150B, the input determination unit 151, the authentication determination unit 154, the display control unit 155, the drawing control unit 156, the authentication information generation unit 152, and the input information generation unit 159 are included in the CPU 101 by the HDD 104. This is realized by executing a program stored in the above. Each unit may be realized by a dedicated hardware component such as a dedicated LSI (Large-Scale Integration) having an equivalent function.

As a general tendency, various program modules are prepared as a part of a computer operating system, and an application program is called to advance the processing by calling these modules in a predetermined arrangement when necessary. . In such a case, the software itself for realizing the authentication apparatus according to the present invention does not include such a module, and the authentication apparatus is realized only when the computer cooperates with the operating system. However, as long as a general platform is used, it is not necessary to distribute the software including such modules, and the software itself not including these modules and the recording medium recording the software (and the software distributes on the network). Data signal) can be considered to constitute the embodiment.

[1-4. Main routine]
The contents of the main routine executed in the information terminal 100 will be described with reference to FIG. The main routine is started, for example, by operating the power key 111 of the information terminal 100 that is in a power-off state.

First, in step S1, the CPU 101 determines whether another key (any one of the operation keys 112 to 115) has been operated when the power key 111, which is a condition for starting the main routine, is operated. To do. That is, it is determined whether or not the power key 111 has been operated while other keys are being operated. If it is determined that it has been operated, the process proceeds to step S2, and if it is determined that it has not been operated, the process proceeds to step S3.

In step S2, for example, based on information input to the operation keys 112 to 115 and the touch panel 107, image information is generated by a combination of parts stored in the first storage unit 158, and the generated image information is used as an authentication image. Is stored in the third storage unit 157. When a plurality of images are stored in advance in the first storage unit 158 (or another storage device in the information terminal 100) as authentication image candidates, in step S2, from the plurality of images, 1 Information for selecting the authentication image may be received. In this case, in step S 2, an authentication image based on the received information is stored in the third storage unit 157.

In step S3, the CPU 101 executes a user authentication process and advances the process to step S4. Details of the user authentication process will be described later with reference to FIG.

In step S4, the CPU 101 determines whether or not the power key 111 has been operated. If it is determined that the power key 111 has not been operated, the CPU 101 executes processing corresponding to the operation on the touch panel 107 and the operation keys 112 to 115 in step S5. . On the other hand, if it is determined in step S4 that the power key 111 has been operated, the main routine is terminated.

[1-5. Example of authentication image]
FIG. 5 shows an example of the authentication image.

The authentication image 900 includes an image of a house 920 and a crescent moon 910, and two regions of a region 901 and a region 902 as a background. House 920 includes a roof 921, a main body 925, a window 923, a door 924, and a chimney 922.

Table 1 shows an example of authentication image information stored in the third storage unit 157.

The authentication image information is information for each part (object) constituting the authentication image. Each object is stored in the first storage unit 158. Table 1 includes a serial number (No.) in the authentication image, a serial number (object number) in the first storage unit 158, and a block number indicating a display position on the display unit 110 for each object.

The display unit 110 is configured by, for example, a 6-inch (800 × 600 pixel), 8-gradation display device. In the display unit 110, a block is defined for each predetermined number of adjacent pixels. That is, all the pixels constituting the display unit 110 belong to any block. And in Table 1, the position where each object is displayed is shown by listing the blocks of the display unit 110 as the block numbers described above.

[1-6. User authentication process]
FIG. 6 is a flowchart of a subroutine of user authentication processing (step S3 in FIG. 4).

Referring to FIG. 6, in the user authentication process, CPU 101 first generates a correction image in step S300 and advances the process to step S302.

The correction image is, for example, an image that is not the same as the image stored in the third storage unit 157, and the type or display position of one or more objects of the authentication image is exchanged, or the object Generated by adding or deleting.

Table 2 shows an example of data indicating the correction image generated in step S300.

The correction image shown in Table 2 is obtained by deleting the image of the chimney indicated by the object number 2 from the authentication image shown in Table 1, and the image of the crescent moon of the object number 3 is the object number. It is generated by being replaced with 21 sun images.

The CPU 101 stores the generated correction image in the first storage unit 158.
FIG. 7 shows a correction image 950 corresponding to the data shown in Table 2.

The correction image 950 includes the sun 911 and the house 920A. The house 920A does not include the chimney 922 as compared to the house 920 illustrated in FIG. This corresponds to the fact that the object number 2 is not included in Table 2.

Further, in the correction image 950 in FIG. 7, the sun 911 is displayed instead of the crescent moon 910 as compared with the authentication image 900 in FIG. This corresponds to the fact that in Table 2, object number 21 (sun) is included instead of object number 3 (month (crescent moon)) in Table 1.

Returning to FIG. 6, in step S 302, the CPU 101 displays the correction image generated in step S 300 on the display unit 110 and advances the process to step S 304.

In step S304, the CPU 101 activates the input device (touch panel 107 and operation keys 112 to 115), and advances the process to step S306.

In step S306, the CPU 101 causes the information terminal 100 to wait for input to the input device. When there is an input to the input device, the process proceeds to step S308.

In step S308, if the CPU 101 determines that the information input to the input device is information that divides the display area of the display unit 110, the CPU 101 proceeds to step S310, and designates addition / deletion / change of the object. If it is determined that there is, the process proceeds to step S314.

Here, for example, if the CPU 101 determines that information has been input to the touch panel 107, the CPU 101 proceeds to step S310 on the assumption that information regarding area division has been input, and operates any of the operation keys 112 to 115. If it is determined that there has been, information regarding addition of an object or the like may be input, and the process may proceed to step S314.

In step S310, the CPU 101 generates a plurality of divided areas by dividing the display area of the display unit 110 based on the input information, and further confirms the cut area by receiving input from the input device. Then, the process proceeds to step S312.

Here, the cut-out area refers to an area cut out among a plurality of divided areas generated from the correction image. In the information terminal 100, the correction image is corrected so as to delete the object included in the cutout area, and becomes a new correction image.

The process of step S310 will be described in more detail with reference to FIGS.
FIG. 8 shows the correction image 950 shown in FIG. 7 with the line 800 added. A line 800 divides the display area of the display unit 110 input to the touch panel 107.

When the information specifying the line 800 is input, the CPU 101 divides the display area of the display unit 110 into an area 801 and an area 802 by the line 800. In FIG. 8, it is assumed that the correction image 950 is displayed in the entire display area of the display unit 110.

Then, the CPU 101 accepts input of information for selecting one of the area 801 and the area 802 in order to delete the object displayed in the area. By accepting the input of the information, the CPU 101 determines the cut area.

When receiving information specifying the cut-out area, the CPU 101 can execute control for allowing the user to clearly recognize the contents of each area, for example, blinking the display of the area 801 and the area 802 alternately.

The user inputs information for selecting one of the

areas

801 or 802 by touching one of the

areas

801 or 802 with the touch pen 190, for example.

CPU101 will update the image for correction displayed on the display part 110 so that the object currently displayed on the said cutting area may be deleted, if a cutting area is fixed.

8, for example, when an area 801 is selected as a cut-out area, the CPU 101 updates an image to be displayed on the display unit 110 as a correction image 951 in FIG. 9.

Compared with the correction image 950 shown in FIG. 7, the correction image 951 in FIG. 9 includes the

regions

901 and 902 and the house 901 A, but does not include the sun 911. This is because all of the sun 911 was displayed in the region 801 selected as described above.

Returning to FIG. 6, in step S 310, after the generation of the divided area, the determination of the cut area, and the cutting of the image, in step S 312, the CPU 101 displays the image after cutting the image in step S 310. The content is stored in the second storage unit 153, and the display content of the display unit 110 is updated so that the image is displayed, and the process proceeds to step S318.

In step S314, the CPU 101 receives input of information specifying specific contents regarding addition / deletion / change of the object to the operation keys 112 to 115 and / or the touch panel 107, and configures an image based on the information. The type and position of the object are changed, and the process proceeds to step S316.

For example, when the correction image 951 in FIG. 9 is displayed on the display unit 110 and an operation for adding an object is performed and the process proceeds from step S308 to step S314, step S314 is performed. Then, when information for adding a crescent moon object is input to the upper left of the screen, the updated image (an image with the crescent moon added to the upper left of the screen) is stored in the second storage unit 153 and displayed. The correction image 952 shown in FIG. The correction image 952 includes a crescent moon 910 in the upper left area.

Returning to FIG. 6, in step S316, the CPU 101 causes the second storage unit 153 to store the image changed based on the input content to the input device in step S314, and displays the image on the display unit 110 so as to display the image. The content is updated, and the process proceeds to step S318.

In step S318, the CPU 101 compares the image stored in the second storage unit 153 with the image (authentication image) stored in the third storage unit 157, and advances the process to step S320.

In step S320, it is determined whether the two images match as a result of the comparison in step S318. If it is determined that the images match, the process proceeds to step S322, and if it does not match, the process returns to step S306.

In step S322, the CPU 101 deactivates the input device and returns the process to FIG.

Here, whether or not the two images match is determined by, for example, displaying the same object over the same block number in the third storage unit 157 and the second storage unit 153 as the authentication image and the correction image. It is determined by whether or not it is a thing. As for the block number, as long as it is about several blocks on the left and right, it may be determined that both images match even if the display position is shifted.

In the user authentication process described above, the correction image is changed based on the input to the input device and compared with the authentication image stored in the third storage unit 157. When it is determined that the two images match, the user authentication process is terminated, and the processes after step S4 are executed in the main routine (FIG. 4).

That is, in the information terminal 100, even if the image displayed on the display unit 110 is changed, the user authentication process does not end until it matches the authentication image stored in the third storage unit 157.

[1-7. Overview of user authentication processing]
An overview of the user authentication process will be described with reference to FIG.

When the correction image 950 is displayed as shown in FIG. 11A, when information for dividing the area is input to the input device, as shown in FIG. Displays a line 800 that is information for dividing the area together with the correction image.

Thereby, the display area of the display unit 110 is divided into two with the line 800 as a boundary. As a result, two divided regions, region 801 and region 802, are generated.

Then, when the area 801 is selected as the cut-out area, the correction image displayed on the display unit 110 is updated so that the sun 911 displayed entirely in the area 801 is deleted. The updated image is shown as a correction image 951 in FIG.

11C does not match the correction image 951 in FIG. 11C and the authentication image 900 in FIG. Therefore, in the state where the correction image 951 in FIG. 11C is displayed, the process returns from step S320 to step S306 (see FIG. 6).

In the user authentication process, it is possible to accept not only area division information but also information input for object addition / deletion / change.

When information for adding a crescent moon object is input to the upper left of the correction image 951 in FIG. 11C, the correction image 952 in FIG. 11D is displayed on the display unit 110. The correction image 952 is obtained by adding a crescent moon 910 to the correction image 951 in FIG.

Further, when information for adding a chimney object is input to the right side of the roof of the house 920A, a correction image 953 in FIG. 11 (E) is displayed on the display unit 110. The correction image 953 is obtained by adding a chimney 922 to the correction image 952 in FIG.

When the correction image 953 and the authentication image 900 (FIG. 5) are compared, they match.
Therefore, when the correction image 953 is displayed on the display unit 110, the processing in FIG. 6 proceeds from step S320 to step S322, and returns to FIG. Thereby, the process after step S4 is performed.

In the present embodiment, when the cut area is confirmed in step S310, the image displayed on the display unit 110 is updated so that the object that includes the entirety of the cut area is deleted. Information indicating that the operation on the touch panel 107 has been performed, which is indicated by a line 800 in FIG. 8, corresponds to information for dividing the region input to the input unit.

And based on such information, the input information generation unit 159 generates information that the display area of the display unit 110 is divided into two areas according to the line 800.

Then, the image update unit 150B divides the correction image 950 into the region 801 and the region 802 along the line 800, and displays it on the display unit 110 so as to delete the object included in the selected region. Update the image to be played.

The image updated in this way is stored in the second storage unit 153, and the authentication determination unit 154 includes the authentication image stored in the third storage unit 157 and the image stored in the second storage unit 153 ( It is determined whether or not the correction images match.

[1-8. Interpolation of input data]
In the present embodiment, as described above, when information that draws a trajectory is input to the touch panel 107, the input information generation unit 159 displays information for dividing the display area of the display unit 110 based on the information. Generate. If the input trajectory is not enough to divide the display area, that is, depending on the input trajectory, the display unit 110 cannot be divided into a plurality of closed areas. And interpolate to generate multiple closed regions.

For example, as shown in FIG. 12A, there is a case where an input is made on the touch panel 107 with a locus as indicated by a locus 810 while the correction image 950 is displayed. The upper end of the locus 810 is in contact with the upper end of the display unit 110 (the upper end of the correction image 950 in FIG. 12A), but the lower end thereof is not in contact with any end of the display unit 110. In addition, a closed region is not formed by the locus 810 itself. Therefore, depending on the locus 810, the display unit 110 cannot be divided into a plurality of closed regions.

In the present embodiment, when the trajectory 810 is a straight line, it is extended to the end of the display unit 110, and when the trajectory 810 is a curve, by an existing interpolation method such as Lagrange interpolation, It extends so as to reach the end of the display unit 110 (or so that a closed region can be configured only by the trajectory 810).

Also, as shown as a trajectory 820 in FIG. 12B, when the input trajectories are not continuous, portions close to each other can be interpolated by Lagrange interpolation or the like to obtain a continuous trajectory. In FIG. 12B, lines connecting the fragmented trajectories 820 generated by the separation are indicated by broken lines 821 to 824.

In addition, when a plurality of points are input as information for dividing an area on the touch panel 107, the input information generation unit 159 generates a line connecting the plurality of points, thereby displaying the display area of the display unit 110. Can be generated.

For example, as shown in FIG. 13A, a case where two

points

831 and 832 are input to the touch panel 107 can be cited.

In this case, the input information generation unit 159 generates a straight line 830 that is a straight line connecting them and whose both ends are in contact with the end of the display area of the display unit 110, and the display area of the display unit 110 is generated by the straight line 830. Split.

Further, as shown in FIG. 13B, there may be a case where three points of a point 841, a point 842, and a point 843 are input to the touch panel 107.

In such a case, a line 840 that passes through these three points and whose both ends are in contact with the end of the display unit 110 is generated by performing interpolation using an existing interpolation method (for example, spline interpolation ). With the line 840, the display area of the display unit 110 can be divided into a plurality of closed areas.

[2. Second Embodiment]
[2-1. Block configuration of information terminal]
The information terminal according to the second embodiment of the authentication apparatus of the present invention can have the same appearance and hardware configuration as the information terminal 100 in the first embodiment.

FIG. 14 is a control block diagram of information terminal 100 according to the present embodiment.
The information terminal 100 according to the present embodiment has a key input detection unit 154A in addition to the information terminal 100 according to the first embodiment.

In the present embodiment, as shown in steps S318 and S320 in the first embodiment, whether or not the authentication image matches the correction image (authentication determination) is determined using the operation keys 112 to 115. This is performed on condition that any one of the keys has been operated. When the key input detection unit 154A detects that the key has been operated, the key input detection unit 154A outputs a command to the authentication determination unit 154 to execute the authentication determination. The authentication determination unit 154 performs the authentication determination on the condition that the instruction is received.

[2-2. User authentication process]
FIG. 15 is a flowchart of a user authentication processing subroutine executed in the information terminal 100 according to the present embodiment.

Referring to FIG. 15, in the user authentication process executed in the present embodiment, as described with reference to FIG. 6, after the processes of steps S300 to S306 are executed, in step S330, the input device is processed. It is determined whether or not the input made with respect to specifies the coordinates of the display unit 110 or the authentication key has been operated. The authentication key is a key operated to cause the authentication determination unit 154 to execute the authentication determination, and is any one of the operation keys 112 to 115.

The CPU 101 proceeds to step S332 when determining that the information is information for designating coordinates, and proceeds to step S340 when determining that the authentication key has been operated.

In step S332, the CPU 101 determines the coordinates designated by the information input to the input device, and advances the process to step S334.

In step S334, the CPU 101 identifies an object including the coordinates determined to be specified in step S332 among the objects displayed on the display unit 110, and advances the process to step S336. In step S334, the CPU 101 identifies an object based on information about an image displayed on the display unit 110 as shown in Table 2. Specifically, the block number including the coordinates acquired in step S332 is acquired, and the object associated with the block number is specified by referring to Table 2.

In step S336, information for updating the display mode and the like of the object specified in step S334 is acquired, and the process proceeds to step S338. In the present embodiment, after information specifying coordinates is input to the input device, a display mode such as deleting the object or changing the display color is displayed for an object including the specified coordinates. It is assumed that an operation for inputting information for changing is performed. In step S336, information input to the input device by the operation is acquired.

In step S338, the CPU 101 updates the display mode for the object identified in step S334 based on the information acquired in step S336, and registers information about the updated image in the second storage unit 153. The process returns to step S306.

For example, in the state where the correction image 952 shown in FIG. 10 is displayed, when an operation for designating coordinates belonging to the area 901 is performed, the area 901 is identified as the designated object. When information for changing the display color of the area 901 is input, the correction image 954 of FIG. 16 updated to change the display color of the area 901 is displayed on the display unit 110. .

Further, when the information specifying the coordinates included in the roof 921 is input in the state where the correction image 952 of FIG. 10 is displayed, the roof 921 is specified as an object including the specified coordinates. And when the information which changes the display color of the said roof 921 is input as update information, the image for correction of FIG. 17 updated so that the display color of the roof 921 may be changed on the display part 110 according to this. 955 is displayed.

Returning to FIG. 15, in step S 340, the CPU 101 determines whether the image in the second storage unit 153 and the image in the third storage unit 157 are the same as in step S 320 (see FIG. 6). If it is determined that they do not match, the process returns to step S306, and if it is determined that they match, the process proceeds to step S342.

In step S342, as in step S322 (see FIG. 6), the CPU 101 deactivates the input device and returns the process to FIG.

[3. Other modifications]
In each of the embodiments described above, the authentication image, the correction image, and the object used for updating the correction image are selected from those stored in the first storage unit 158. However, the storage location of the object used in the information terminal 100 is not limited to this. The CPU 101 may use an object acquired from another device via the communication I / F 105 as an authentication image.

In each embodiment described above, the authentication image is generated in the information terminal 100 based on the information input to the input device. However, the authentication image used in the authentication device is not limited to this. In the information terminal 100, an image received from another device via the communication I / F 105 may be used as an authentication image.

Also, an object used as a component such as an authentication image is not limited to a still image. By using a moving image such as an animation as a component such as an authentication image, it is possible to provide diversity to an image used for user authentication.

According to the present embodiment described above, if the user inputs information specifying a partial area of the displayed image, the displayed image is updated based on the information, and after the update It is determined whether or not these images match the authentication image. That is, the displayed image is updated to determine whether or not it matches the authentication image.

The image is updated based on information input by the user. As a result, if the user inputs information until the displayed image matches the authentication image, the user can determine whether the image matches the authentication image. The displayed image can be updated.

Therefore, it is possible to avoid a situation in which the display of each image becomes smaller due to the display of many images, and it is possible to secure a certain level of security without degrading the convenience for the user.

Furthermore, it is not necessary for the user to show an image that matches the authentication image from the beginning (before the user performs an operation). For this reason, a plurality of images including images that match the authentication image are presented to the user, that is, in contrast to the conventional technique in which the image matching the authentication image is shown to the user from the beginning. However, the technique described in the present embodiment can improve the security strength.

The embodiment disclosed this time should be considered as illustrative in all points and not restrictive. The scope of the present invention is defined by the terms of the claims, rather than the description above, and is intended to include any modifications within the scope and meaning equivalent to the terms of the claims.

100 information terminal, 101 CPU, 102 RAM, 103 ROM, 104 HDD, 105 communication I / F, 106 input unit, 107 touch panel, 108 media drive, 110 display unit, 150 information input unit, 151 input determination unit, 152 for authentication Information generation unit, 153 Second storage unit, 154 Authentication determination unit, 155 Display control unit, 156 Drawing control unit, 157 Third storage unit, 158 First storage unit, 159 Input information generation unit, 900 Authentication image, 950- 955 Image for correction.

Claims

A storage unit (103, 104, 108A) for storing an authentication image;
A display control unit (155) for displaying an image on the display device;
An input unit (106) for inputting information to the image displayed on the display device;
A generating unit (159) for generating information for designating a partial region of the image displayed on the display device based on the information input to the input unit;
An update unit (150B) for updating an image displayed on the display device based on the information generated by the generation unit;
An authentication apparatus comprising: a determination unit (154) that determines whether or not the image updated by the update unit matches the authentication image.
The authentication device according to claim 1, wherein the input unit inputs information for drawing a trajectory to the display device.
The authentication device according to claim 2, wherein the generation unit generates continuous line segment information by interpolating information input to the input unit.
The display control unit displays an image including a plurality of objects on the display device,
The authentication device according to any one of claims 1 to 3, wherein the generation unit generates information specifying an object included in an image displayed on the display device.
The authentication device according to claim 4, wherein the generation unit generates information specifying an object that includes all of the specified area as information specifying the object.
6. The authentication device according to claim 1, wherein the update unit updates the image by changing an image of the partial area in the image displayed on the display device.
The storage unit further stores a replacement image,
The authentication device according to claim 6, wherein the update unit updates the image displayed on the display device by replacing the partial area with the replacement image.
The authentication device according to claim 7, wherein the replacement image stored in the storage unit includes a moving image.
An authentication method executed in an authentication device for displaying an image on a display device,
Storing an authentication image;
Displaying an image on the display device;
Receiving input of information for an image displayed on the display device;
Generating information for designating a partial region of an image displayed on the display device based on the received information;
Updating an image displayed on the display device based on the generated information;
And a step of determining whether or not the updated image matches the authentication image.
10. The authentication method according to claim 9, wherein the step of receiving the input receives an input of information for drawing a trajectory to the display device.
11. The authentication method according to claim 10, wherein the step of generating the information generates information of continuous line segments by interpolating the information that has received the input.
The step of displaying the image causes the display device to display an image including a plurality of objects,
The authentication method according to any one of claims 9 to 11, wherein the step of generating information generates information specifying an object included in an image displayed on the display device.
13. The authentication method according to claim 12, wherein the step of generating the information generates information specifying an object that includes all of the specified area as information specifying the object.
14. The authentication method according to claim 9, wherein the updating step updates the image by changing an image of the partial area in the image displayed on the display device.
Further comprising storing a replacement image;
The authentication method according to claim 14, wherein the updating step updates the image displayed on the display device by replacing the partial area with the replacement image.
The authentication method according to claim 15, wherein the replacement image includes a moving image.