JP2000259273A - Portable information terminal, user authenticating method and power feeding device - Google Patents

Abstract

PROBLEM TO BE SOLVED: To obtain a portable information terminal, a user authenticating method, a recording medium and a power feeding device capable of enhancing security and operability. SOLUTION: Battery ID data, authentication system data and data for authentication are stored in this power feeding device 100. A battery ID list, a sub-system and a battery ID management program are stored in a first internal storage device 300 of this portable information terminal. A password of a user is inputted from an input/output processing part 500. When the battery ID data of the power feeding device 100 is included in the battery ID list, the authentication system data and the data for authentication are read in the data processing part 400, the password of the user is collated with the data for authentication according to an authentication system and the authentication processing is executed by the sub-system read in and started by the data processing part 400.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a portable information terminal equipped with a detachable power supply device, and more particularly to a portable information terminal for executing user authentication, a user authentication method and a recording medium, and a power supply device. About.

[0002]

2. Description of the Related Art As portable information terminals have become smaller and lighter,
Opportunities to use mobile information terminals when traveling or on the go are increasing. The greater the opportunity to carry, the greater the risk of loss or theft, and measures to prevent unauthorized use of the portable information terminal are required to prevent unauthorized (malicious) users from illegally using the portable information terminal.

In order to prevent the portable information terminal from being illegally used by an unauthorized third party, the user should be authenticated before using the portable information terminal.

The user authentication includes a user authentication using a password by a system on a portable information terminal.
However, user authentication using passwords is becoming meaningless due to the improvement in the computing power of computers and the limitation on the length of passwords that can be remembered by humans.

In such a situation, as a new means of user authentication, user authentication information is stored in an external storage device such as an ID card, and when the external storage device is not attached (inserted) to the portable information terminal. A method has been used in which portable information terminals cannot be used.

[0006]

As described above, in the above conventional user authentication method, an external storage device is attached (electrically connected) to a portable information terminal, and the user (user) authenticates a password or the like. By inputting information, the user is authenticated as a valid user.

[0007] Since it is often assumed that an external device such as an IC card is always carried, the fact that a user possesses an external device such as an IC card is a large percentage of user authentication. Occupy. Therefore, IC
If an external storage device such as a card is left in the vicinity of the portable information terminal, there is a possibility that an unauthorized user may use the external storage device and illegally access the portable information terminal. There is a problem that the security against unauthorized use of the device is significantly reduced.

Further, since an authentication device such as an external storage device is not included in the components of the portable information terminal, if the user is not accustomed to handling the authentication device, there is a possibility that the method of using the authentication device may be erroneous. It may not be possible to use a portable information terminal.

SUMMARY OF THE INVENTION It is an object of the present invention to provide a portable information terminal, a user authentication method and a recording medium, and a power supply, which can improve safety and operability.

[0010]

In order to achieve the above object, a portable information terminal according to a first aspect of the present invention comprises a detachable power supply device, and a power supply voltage supplied by mounting the power supply device. In a portable information terminal that performs predetermined information processing, the power supply device includes:
A second memory storing information indicating an authentication method for authenticating that a user who uses the apparatus main body is an appropriate person and authentication data for authentication including user information indicating a predetermined user. An input unit for inputting user information indicating a user who uses the self-device unit at the time of authentication, and a second unit for storing the user information input by the input unit. Executing an authentication process for the user based on the storage contents of the first storage means and the storage contents of the second storage means of the power supply device mounted on the main body of the self apparatus; Authentication means for performing the authentication.

In the portable information terminal, information indicating an authentication method and authentication data including user information (for example, a password) registered in advance are stored in the first storage means of the detachable power supply device. . Then, the power supply device is attached to the device main body, and at the time of user authentication, the authentication means performs, based on the user information (for example, a password) from the user and the authentication data, according to the authentication method.
The authentication process for the user who actually uses the apparatus body (that is, the portable information terminal) is executed.

Therefore, according to the portable information terminal, only when the detachable power supply device is attached to the device main body, based on the information indicating the authentication method stored in the power supply device and the authentication data, The authentication process is executed, and there is no need to always carry an external storage device such as an IC card as in the related art. After the power supply device is once attached to the device main body, the authentication process for the user is executed. be able to.

In order to achieve the above object, a portable information terminal according to a second aspect of the present invention includes a detachable power supply device and a device main body to which the power supply device is mounted and to which a power supply voltage is supplied. In the portable information terminal having predetermined information processing, the power supply device includes first storage means for storing identification information for identifying its own device, and a user who uses the device main body has an appropriate A second storage means for storing information indicating an authentication method for authenticating that the user is a user, and authentication data for authentication including user information indicating a predetermined user, A third storage unit for storing in advance identification information for identifying the power supply device; an input unit for inputting user information indicating a user who uses the own device main body at the time of authentication; Input by means A fourth storage unit for storing user information, identification information stored in the first storage unit of the power supply device mounted on the self apparatus main body, and a fourth storage unit stored in the third storage unit. Determining means for determining whether the identification information matches the identification information, and when the determination means determines that the identification information matches, the second storage means in the power supply device mounted on the self apparatus main body. And an authentication unit that executes an authentication process for the user based on the storage content of the fourth storage unit and the storage content of the fourth storage unit.

In the portable information terminal, when the identification information of the power supply device matches the identification information stored in the third storage device in a state where the power supply device is mounted on the main body of the device, the authentication means is activated. According to the authentication method based on the information indicating the authentication method, the user information (for example, a password) input by the input unit is compared with the authentication data including the user information (for example, the password) indicating the predetermined user. Then, authentication processing is performed for a user who actually uses the apparatus body (that is, the portable information terminal).

Therefore, according to the portable information terminal, even when the power supply device possessed by the unauthorized person is mounted on the apparatus main body, the identification information of the power supply apparatus and the identification information stored in the apparatus main body in advance. Unless the information matches, authentication processing for the user is not executed, so that security against unauthorized use of the portable information terminal can be improved.

Further, an unauthorized user removes the power supply device from the device main body of the first portable information terminal, and
When the device is attached to the device body of the portable information terminal, the identification information of the power supply device does not match the identification information stored in the device body of the second portable information terminal. Is not executed, and security against unauthorized use of the portable information terminal can be improved.

In the portable information terminal according to the second aspect, the third storage means includes a storage area for storing identification information for identifying a plurality of power supply devices, and the authentication means includes The identification information stored in the first storage means of the power supply device mounted on the device body is
Means for judging whether or not the information is included in the storage contents of the storage area, and when the judgment means judges that the identification information is included, the storage contents of the second and fourth storage means A means for executing an authentication process for the user based on the

In this case, if the identification information of the power supply device is included in a plurality of pieces of identification information stored in the third storage means in advance, the authentication means actually performs the operation of the apparatus body (that is, the portable information). Authentication process for the user who uses the terminal).

Therefore, according to the portable information terminal, when a plurality of users each owning a power supply device share one apparatus main body, the power supply actually mounted on the apparatus main body is used. If it is determined that the supply device belongs to an appropriate user, authentication processing for that user is executed, and security against unauthorized use of the portable information terminal can be improved.

Further, even when an unauthorized user attaches a power supply device detached from another portable information terminal to the above-mentioned shared portable information terminal, the identification information of the power supply device remains the same. Since the identification information is not included in the plurality of pieces of identification information stored in the main body of the information terminal, the authentication process for the user is not performed, and the security against unauthorized use of the portable information terminal can be improved.

[0021] In the portable information terminal according to the second aspect, the authentication means may store the user information stored in the fourth storage means in accordance with an authentication method based on the contents stored in the second storage means. Checking means for checking the authentication data stored in the second storage means; and, when the user information is included in the authentication data, authenticating that the user is an appropriate person. And means for performing the operation.

In this case, the authentication means is arranged such that user information (for example, a password) of a user who actually uses the apparatus main body (that is, a portable information terminal) indicates a predetermined user in accordance with an authentication method (for example, password authentication). If it is included in the authentication data including the user information (for example, a password), the user is authenticated as an appropriate person.

Therefore, even when the power supply device possessed by the proper user uses the portable information terminal mounted on the main body of the device, the unauthorized user loots and uses the portable information terminal. Unless the user information of the proper user is known, the authentication process is not performed, and the security against unauthorized use of the portable information terminal can be improved.

Further, even if an unauthorized user knows that password authentication is used, for example, four-digit password authentication, eight-digit password authentication, or authentication combining a user ID and a password, Unless it is possible to know which authentication method is used, the user is not authenticated as an appropriate user, and the security against unauthorized use of the portable information terminal can be improved.

[0025] In the portable information terminal according to the second aspect, the apparatus main body includes information indicating a plurality of authentication methods for authenticating that a user who uses the self apparatus main body is an appropriate person; A fifth storage unit that stores authentication data for authentication including user information indicating a predetermined user for each of the plurality of authentication methods; and a fifth storage unit that, when the authentication by the authentication unit is successful, Presenting means for presenting a plurality of authentication methods stored in the storage means, designating means for designating a desired authentication method from among the plurality of authentication methods presented by the presenting means, and designating means designated by the designating means. Means for reading information indicating the authentication method and authentication data corresponding to the authentication method from the fifth storage means, and writing the information in the second storage means of the power supply device. There.

In this case, the second storage means of the power supply device stores the authentication method designated by the designation means (for example, 4-digit password authentication, 8-digit password authentication, or user ID and password). Information indicating combined authentication or authentication using a fingerprint) and authentication data corresponding to the authentication method are stored. Then, the authentication unit actually executes the device main body (that is, the portable information terminal) based on the storage content of the second storage unit of the power supply device and the user information stored in the fourth storage unit. Execute the authentication process for the user using.

According to the portable information terminal, the authentication process can be performed by designating the authentication method according to the place of use. For example, depending on the place of use that requires strict authentication, for example, when using a mobile information terminal at a presentation at an out-of-office company, when using a mobile information terminal, authentication using a fingerprint, or using a mobile information terminal at home with family members When performing the authentication process, the authentication method is specified, such as authentication using a combination of a user ID and a password, or when only one user uses a portable information terminal at home, such as 4-digit password authentication. be able to.

In the portable information terminal according to the second aspect, the identification information stored in the first storage unit of the power supply device is included in the storage content of the third storage unit of the main unit. If not, a non-permission means for prohibiting use of the self apparatus main body may be further provided.

In this case, prior to the authentication processing for the user who actually uses the apparatus main body (that is, the portable information terminal), the non-permission means determines whether or not the identification information of the power supply apparatus is appropriate. That is, it is determined whether or not the power supply device is possessed by an appropriate user. If the identification information is not included in the storage content of the third storage means, the device body (that is, the portable information terminal) Do not allow (disallow) the use of.

In order to achieve the above object, a power supply device according to a third aspect of the present invention supplies a power supply voltage to a portable information terminal that performs predetermined information processing after authenticating that the user is an appropriate user. In the power supply device, information indicating an authentication method for authenticating that a user using the portable information terminal is an appropriate person, and authentication for authentication including user information indicating a predetermined user. Means for storing data for use in the portable information terminal, and providing the contents stored in the storage means to the portable information terminal in order to authenticate whether a user who uses the portable information terminal is an appropriate person at the time of authentication. Means.

According to the power supply device described above, information for authenticating that the user who uses the portable information terminal is an appropriate person is stored. Since this power supply device can be considered as a battery, any user who knows how to handle a battery can easily identify himself / herself as an appropriate person even if the user is unfamiliar with the handling of a portable information terminal. Processing can be executed.

In the power supply device according to the third aspect, the power supply device further includes identification information storage means for storing identification information for identifying the self apparatus, and the providing means includes:
The contents stored in the storage means and the identification information storage means may be provided to the portable information terminal.

In this case, the portable information terminal can determine whether or not the power supply is possessed by an appropriate user based on the identification information.

[0034] To achieve the above object, a user authentication method according to a fourth aspect of the present invention comprises a detachable power supply device, a device main body to which the power supply device is attached, and to which a power supply voltage is supplied. In the user authentication method in a portable information terminal that performs predetermined information processing, information indicating an authentication method for authenticating that a user who uses the device body is a proper user, and A first storage step of storing authentication data for authentication including user information indicating a predetermined user by the power supply device;
An input step of inputting user information indicating a user who uses the apparatus main body at the time of authentication by the apparatus main body, and a second storage step of storing the user information input by the input step by the apparatus main body, Based on the storage contents stored in the first storage step and the storage contents stored in the second storage step of the power supply device mounted on the apparatus main body, And an authentication step of executing an authentication process.

To achieve the above object, a computer-readable recording medium according to a fifth aspect of the present invention uses a portable information terminal with a detachable power supply device mounted on the portable information terminal. From the power supply device storing information indicating an authentication method for authenticating that the user to be performed is an appropriate person, and authentication data for authentication including user information indicating a predetermined user, A reading step of reading the information indicating the authentication method and the authentication data; a storage step of storing user information of the user input from a user who uses the apparatus main body at the time of authentication; and a reading step of reading by the reading step. Performing an authentication step of executing an authentication process for the user based on the issued information and the user information stored in the storage step. Characterized by recording a program for.

[0036]

Embodiments of the present invention will be described below with reference to the accompanying drawings.

FIG. 1 is a block diagram showing a configuration of a power supply device according to an embodiment of the present invention.

As shown in FIG.
Is attached to the portable information terminal and has a detachable structure, and has a read-only data storage unit 110,
Read / write data storage unit 120 and power supply unit 130
And

The read-only data storage unit 110 stores identification information (battery I) for identifying the power supply device 100.
A storage area 111 for storing D) is provided. The read-only data storage unit 110 is, for example, a ROM (Re
ad Only Memory).

The readable / writable data storage unit 120 is used for storing data indicating an authentication method for authenticating a user (hereinafter, referred to as authentication method data), and for authenticating the user. And a storage area 122 for storing authentication data. The readable / writable data storage unit 120 is, for example, a RAM (Random Acc
ess Memory).

The authentication method includes, for example, a PIN (Personal)
Identification Number (PIN)
Authentication, fingerprint authentication by fingerprint, user I by user ID
D authentication, password authentication using a password (about 4 digits, about 8 digits, etc.), and the like are included.

Accordingly, in the storage area 121, one or an arbitrary plurality of authentication method data of the above-described plurality of authentication methods is stored in an encrypted form (for example, a DES method using a secret key). .

The authentication data includes, for example, personal identification number information registered in advance for PIN (personal identification number) authentication,
The information includes fingerprint information of a user registered in advance for fingerprint authentication, user ID information registered in advance for user ID authentication, password information registered in advance for password authentication, and the like.

Therefore, the storage area 122 has the storage area 1
The authentication data is encoded (for example, the processing result of a function such as MD5 for which there is no inverse function) corresponding to the authentication method data stored in 21, and stored in a format in which the contents cannot be estimated. .

Power supply unit 130 supplies a predetermined power supply voltage to a portable information terminal when power supply device 100 is attached to the terminal.

Next, FIG. 2 is a configuration diagram showing a configuration of a portable information terminal to which the power supply device 100 is mounted.

As shown in the figure, the portable information terminal 10
The power supply device 100 described above, the power control unit 200,
A first internal storage device 300 and a second internal storage device 310
, A data processing unit 400, and an input / output processing unit 500. These components are connected to each other via a bus BUS.

The power supply device 100 is a portable information terminal 10
Is supplied with a predetermined power supply voltage.

Power supply control section 200 controls the power supply of portable information terminal 10. The power supply control unit 200 includes, for example, a CP
It is composed of U (Central Processing Unit).

The first internal storage device 300 has a storage area 3
01 to 303 are provided. The first internal storage device 300 is configured by a recording medium such as a ROM (Read Only Memory). In the storage area 301, a list of identification information (battery ID) indicating a plurality of power supply devices including identification information (battery ID) for identifying the power supply device 100 is encrypted and stored in advance.

In the storage area 302, the data processing unit 400
Read only data storage unit 110 and read / write data storage unit 120 of power supply device 100 according to the control of
A subsystem having a function of accessing the.

This subsystem includes a data processing unit 400
The authentication method data and the authentication data stored in the readable / writable data storage unit 120 and the battery I stored in the storage area 301
The data of the D list is encrypted and decrypted.

The storage area 303 stores a battery ID management program for executing the operation management of the battery ID list.

This battery ID management program executes an authentication method (one or more authentication methods) based on authentication method data stored in the storage area 121 in the power supply device 100.
And a function of storing authentication data (one or a plurality of authentication data) required for the authentication method.

Therefore, the battery ID management program has the right to register and delete the battery ID in the battery ID list, and the authentication method data stored in the readable / writable data storage unit 120 of the power supply device 100. And the right to change the authentication data.

That is, only the battery ID management program can change the battery ID list, the authentication method data, and the authentication data. In addition, the battery ID management program receives its own data and input from the user. The above data cannot be changed unless the user is successfully authenticated by checking the password.

The data in the battery ID management program is a character string obtained by processing a password using a function that does not have a certain inverse function. By passing the password input by the user (user) through the function, the character string is compared with the password from the user, and it is determined whether or not they match.

The second internal storage device 310 is provided with a storage area 311 for storing a system to be activated when the user is successfully authenticated. The second internal storage device 310 is configured by a recording medium such as a ROM (Read Only Memory).

This system performs a function by being read out and activated by the data processing unit 400, and responds to a processing request from a user, for example, by a predetermined processing such as e-mail or schedule management. Executes information processing.

The data processing section 400 reads out and activates the subsystem, the battery ID management program and the system stored in each of the storage areas as needed.
The data processing unit 400 includes, for example, a CPU (Central Pr
Ocessing Unit).

The subsystem, the battery ID management program, and the system are read out and activated by the data processing unit 400 to perform the functions of the respective constituent elements. This is realized by the CPU executing a program for performing the function of the element.

The input / output processing unit 500 includes a fingerprint reading device, selection or designation of a type of authentication method, input of user information (ie, identification information) indicating a user such as a password, and the type of information processing (for example, electronic An input unit that performs input operations such as instructions for e-mail, schedule management, and the like, and an output unit that outputs the type of authentication method, the type of predetermined information processing, the processing result, and the like.

When specifying the authentication method, the user operates the input / output processing unit 500 to specify one or a plurality of registered authentication methods.

Next, a user authentication process performed by the portable information terminal will be described with reference to a flowchart shown in FIG.

To use the portable information terminal 10, the user turns on the power (step S601) and operates the input / output processing unit 500 to specify a desired authentication method, for example, user ID authentication or password. Authentication or user I
One of the combinations of the D authentication and the password authentication is specified (step S602), and further, input information (user information) for authentication, such as a user ID and a password, is input (step S603).

When the data processing unit 400 reads out and starts the subsystem stored in the storage area 302 of the first internal storage device 300, this subsystem is stored in the storage area 111 in the power supply device 100. The read battery ID is read out to the data processing unit 400 (step S6).
04).

The subsystem determines that the read battery ID is
It is determined whether it is registered in the battery ID list stored in the storage area 301 of the first internal storage device 300 (Step S605).

If the battery ID is registered in the battery ID list in step S605, the subsystem stores the authentication method data and the authentication data stored in the readable / writable data storage unit 120 in the power supply device 100. Is read out to the data processing unit 400 (step S60).
6) According to the authentication method that can be identified by the authentication method data, user information (for example, a password or the like) from the user input through the input / output device 500 is processed based on the authentication data, and The user is authenticated (step S607).

That is, the user information and the authentication data are collated in accordance with the authentication method, and if the user information is included in the authentication data, the user is authenticated as an appropriate user. Is done. That is, the authentication is successful.

The subsystem determines whether or not the user authentication has succeeded (step S608). If the authentication has failed, the subsystem stores the system stored in the second internal storage device 310 into the data processing unit 400. Therefore, if the authentication is successful, the system is read out to the data processing unit 400 and activated (step S609). This booted system is
In response to a processing request from a user, predetermined information processing such as e-mail and spreadsheet is executed.

In step S605, the battery ID
If is not registered in the battery ID list, the subsystem reads the battery ID management program stored in the storage area 303 into the data processing unit 400 and activates it (Step S610).

The activated battery ID management program prompts the user to enter a password, collates the password from the user with data in the program, and executes user authentication ( In step S611, it is determined whether the authentication has succeeded, that is, whether the passwords match (step S612).

If the passwords match in step S612, the battery ID management program registers the battery ID in the battery ID list (step S613). After the step S613 ends, the process advances to the step S607.

If the passwords do not match in step S612, this process ends.

Next, the process of changing the authentication method by the portable information terminal 10 will be described with reference to the flowchart shown in FIG.

The user turns on the power to use the portable information terminal 10 (step S701), and operates the input / output processing unit 500 to instruct the change of the authentication method (step S702). , For example, a combination of user ID authentication and password authentication is specified (step S703), and user information for authentication required when the authentication method is changed, for example, a password is input (step S704). ).

When the data processing unit 400 reads out and starts the subsystem stored in the storage area 302 of the first internal storage device 300, this subsystem is stored in the storage area 111 in the power supply device 100. The read battery ID is read out to the data processing unit 400 (step S7).
05).

The subsystem determines that the read battery ID is
It is determined whether or not it is registered in the battery ID list stored in the storage area 301 of the first internal storage device 300 (Step S706).

When the battery ID is registered in the battery ID list, the subsystem executes the battery ID management program stored in the storage area 303 to the data processing unit 40.
0 is read and activated (step S707).

The activated battery ID management program prompts the user to input a password, collates the password from the user with data in the program, and executes user authentication ( In step S708, it is determined whether the authentication is successful, that is, whether the passwords match (step S709).

If the authentication is successful in step S 709, the battery ID management program responds to the user's request for specifying the authentication method based on the authentication data stored in the battery ID management program. The storage contents of the readable / writable data storage unit 120 are updated (step S
710) Then, the process ends.

In this embodiment, in step S 710, the authentication data corresponding to the user ID authentication method and the authentication data corresponding to the password authentication method are stored in the readable / writable data storage unit 120. The data indicating the authentication method based on the combination of the user ID authentication and the password authentication is written into the storage area 121 of the readable / writable data storage unit 120 while being written into the area 122.

If the authentication fails in step S709, the battery ID management program determines that the authentication method cannot be changed (step S711), and does nothing.
The process ends.

In step S706, the battery ID
If is not registered in the battery ID list, the battery ID management program performs a battery ID list update process (step S712). That is, the processing of steps S610 to S613 shown in FIG. 3 is performed.

Next, a specific example of the place of use and the authentication method (authentication method) when the authentication method is changed and the portable information terminal is used will be described.

For example, in a case where a portable information terminal is used for a presentation or the like in an out-of-office company, there is a possibility that an employee of the out-of-office company can steal the key input. Therefore, when strict authentication is required, the following authentication method is adopted. In other words, location: the company on the go. Authentication method: Fingerprint authentication in conjunction with a fingerprint reader.

When the portable information terminal is taken home and operated at home, if there is no need for strict authentication from the viewpoint of trusting the family, the following authentication method is adopted. That is, location: home (if you have a family). Authentication method: Authentication by user ID and password (about 8 digits). Or Location: Home (if you live alone). Authentication method: Authentication by user ID, PIN (personal identification number) and password (about 4 digits).

As described above, according to the portable information terminal of this embodiment, battery ID data, authentication method data,
In addition, authentication data is stored, and authentication processing for the user can be executed based on these data and user information (for example, a password) for authentication input by the user.

Further, by changing the authentication method data and the authentication data, the user can be authenticated by one authentication method at the time of authentication, and the user authentication can be performed by combining a plurality of authentication methods. Since authentication can be performed, an authentication method can be selected according to the place of use and purpose. That is, it is possible to change the authentication method (authentication method) according to the strictness and importance of the authentication of the user and execute the authentication process for the user.

Further, since the user can be authenticated by combining a plurality of authentication methods, security against unauthorized use of the portable information terminal can be improved.

Furthermore, since the power supply device can be imitated as a battery, even a person who is unfamiliar with the handling of the portable information terminal can attach (insert) the power supply device (simulated as a battery) to the portable information terminal. Only by doing so, it becomes possible to perform user authentication, and the operability of the portable information terminal can be improved.

In the above embodiment, the battery ID program stores the authentication data for each of the plurality of authentication methods. However, this may be performed as follows. That is, the readable / writable data storage unit 1 of the power supply device 100
A plurality of authentication method data is stored in the storage area 121 of the storage unit 20, and a plurality of authentication data is stored in the storage area 122.

The subsystem includes the input / output processing unit 5
The authentication method data and the authentication data specified by the battery ID program in response to the user's selection information from 00 are read from the readable / writable data storage unit 120 to the data processing unit 400, and the authentication process is executed. May be.

In the above embodiment, when the user operates the input / output processing unit 500 to specify an authentication method, it is assumed that the user specifies one or a plurality of registered authentication methods. However, this may be performed as follows.

That is, all registered one or more authentication methods may be specified. In addition, a new authentication method may be additionally registered in addition to one registered authentication method. Further, addition / deletion may be performed for a part of the authentication methods for a plurality of registered authentication methods.

Further, in the above-described embodiment, the user information for authentication required when the authentication method is changed is, for example, a password, but this may be information of a combination of a password and a user ID.

In this embodiment, the portable information terminal 1
0 may be stored in a computer-readable recording medium such as a CD-ROM and distributed.

[Second Embodiment] A second embodiment of the present invention will be described with reference to FIG. FIG. 5 is a block diagram showing a configuration of the portable information terminal according to the second embodiment of the present invention.

The portable information terminal shown in FIG. 5 has a configuration in which the first internal storage device 300 and the second internal storage device 310 are deleted from the configuration shown in FIG. 2, and an internal storage device 320 is added. Note that, in the same figure, the parts that perform the same functions as the components shown in FIG. 2 are denoted by the same reference numerals.

The basic processing operation is the same as that of the portable information terminal according to the above-described embodiment, but the authentication processing is slightly different.

The internal storage device 320 is provided with a storage area 321 in which a system having a function of executing user authentication processing and a function of executing predetermined information processing is stored. This internal storage device 320 is, for example, RO
It is composed of a recording medium such as M (Read Only Memory).

This system uses an authentication method (one or more authentication methods) based on authentication method data stored in the readable / writable data storage section 120 of the power supply device 100.
And the authentication data (1
One or a plurality of authentication data).

Further, in response to a change instruction from a user who has succeeded in authentication (appropriate user), the system stores the data in the readable / writable data storage unit 120 based on the data stored therein. Change the authentication method data and authentication data that are being used. Further, this system performs processing for encrypting and decrypting authentication method data and authentication data.

The authentication processing of the portable information terminal according to this embodiment will be described.

The user turns on the power of the portable information terminal 10.
In this case, the data processing unit 400
The system stored in is read and activated.

When the user operates the input / output processing unit 500 to input user information (for example, a password) for authentication, the activated system
Reference is made to the authentication method data and the authentication data stored in the 0 readable / writable data storage unit 120, the data is compared with the user information, and an authentication process for the user is performed.

If the user is successfully authenticated as a result of the authentication processing, the system executes predetermined information processing such as e-mail and schedule management in response to a processing request from the user and uses the system. In response to an instruction to change the authentication method from the user, the authentication method data and the authentication data stored in the readable / writable data storage unit 120 are changed.

Thus, by changing the storage contents of the readable / writable data storage section 120 of the power supply device 100 of the portable information terminal 10, it is possible to change the strictness of user authentication without changing the system. it can.

According to this embodiment, the authentication process is executed by changing the authentication method (authentication method) according to the strictness and importance of the user authentication, similarly to the operation and effect of the above-described embodiment. Since the authentication process can be executed by combining a plurality of authentication methods, security against unauthorized use of the portable information terminal can be improved.

Further, since the power supply device may be handled as if it were a battery, the operability of the portable information terminal can be improved.

Also in this embodiment, a program for realizing each function of portable information terminal 10 and executing each procedure of the above processing is stored and distributed on a computer-readable recording medium such as a CD-ROM. You may.

[0112]

As described above, according to the present invention,
The operability of the portable information terminal can be improved, and the security against unauthorized use of the portable information terminal can be improved.

[Brief description of the drawings]

FIG. 1 is a block diagram illustrating a configuration of a power supply device according to an embodiment of the present invention.

FIG. 2 is a block diagram showing a configuration of the portable information terminal according to the embodiment of the present invention.

FIG. 3 is a flowchart showing an authentication processing operation by the portable information terminal shown in FIG. 2;

FIG. 4 is a flowchart showing an authentication system change processing operation by the portable information terminal shown in FIG. 2;

FIG. 5 is a block diagram showing a configuration of a portable information terminal according to a second embodiment of the present invention.

[Explanation of symbols]

 Reference Signs List 10 portable information terminal 100 power supply device 110 read-only data storage unit 120 readable / writable data storage unit 130 power supply unit 200 power supply control unit 300 first internal storage device 310 second internal storage device 320 internal storage device 400 data processing unit 500 input Output processing unit

Claims (10)

[Claims] 1. A portable information terminal having a detachable power supply device and a device main body to which the power supply device is mounted and to which a power supply voltage is supplied, wherein the portable information terminal executes predetermined information processing. Stores information indicating an authentication method for authenticating that a user who uses the apparatus main body is an appropriate person, and authentication data for authentication including user information indicating a predetermined user. An input unit for inputting user information indicating a user who uses the self-apparatus main body at the time of authentication; and a second storage unit for storing the user information input by the input unit. 2 storage means, and the first of the power supply devices mounted on the self-device main body.
A portable information terminal, comprising: an authentication unit that executes an authentication process for the user based on the storage content of the storage unit and the storage content of the second storage unit. 2. A portable information terminal having a detachable power supply device and a device main body to which the power supply device is mounted and to which a power supply voltage is supplied, wherein the portable information terminal executes predetermined information processing. A first storage unit for storing identification information for identifying the device itself; information indicating an authentication method for authenticating that a user who uses the device body is an appropriate person; A second storage unit that stores authentication data for authentication including user information indicating a user, wherein the device main body stores in advance identification information for identifying the power supply device. A third storage unit, an input unit that inputs user information indicating a user who uses the self apparatus main body at the time of authentication, a fourth storage unit that stores the user information input by the input unit, Attached to the device body It said the above power supply device first
Determination means for determining whether or not the identification information stored in the storage means and the identification information stored in the third storage means match; and the determination means determines that the identification information matches. In this case, the authentication processing for the user is executed based on the storage contents of the second storage means and the storage contents of the fourth storage means in the power supply device mounted on the self apparatus main body. A portable information terminal comprising: an authentication unit that performs authentication. 3. The power supply device mounted on its own device main body, wherein the third storage means has a storage area for storing identification information for identifying each of the plurality of power supply devices. Means for determining whether or not the identification information stored in the first storage means is included in the storage content of the storage area; and when the determination means determines that the identification information is included. The portable information terminal according to claim 2, further comprising: means for executing an authentication process for the user based on the contents stored in the second and fourth storage means. 4. The user information stored in the fourth storage means and the user information stored in the second storage means according to an authentication method based on the contents stored in the second storage means. And a means for authenticating that the user is an appropriate person when the user information is included in the authentication data. The portable information terminal according to claim 2 or 3, wherein 5. The apparatus main body includes: information indicating a plurality of authentication methods for authenticating that a user who uses the self apparatus main body is a proper person; and a predetermined use method for each of the plurality of authentication methods. Storage means for storing authentication data including user information indicating a user, and when authentication by the authentication means is successful, a plurality of storage means stored in the fifth storage means. Presenting means for presenting an authentication method; designating means for designating a desired authentication method from among a plurality of authentication methods presented by the presenting means; information indicating the authentication method designated by the designating means; 3. The portable information terminal according to claim 2, further comprising: a unit that reads authentication data corresponding to the first storage unit from the fifth storage unit and writes the authentication data to the second storage unit of the power supply device. 6. When the identification information stored in the first storage means of the power supply device is not included in the storage contents of the third storage means of the self-apparatus main body, use of the self-main body is prohibited. The portable information terminal according to any one of claims 2 to 5, further comprising a non-permission means for non-permission. 7. A power supply device for supplying a power supply voltage to a portable information terminal that performs predetermined information processing after authenticating that the user is a proper user, wherein the user who uses the portable information terminal is a proper person. Storage means for storing information indicating an authentication method for authenticating that there is, and authentication data for authentication including user information indicating a predetermined user; and A power supply device for providing the portable information terminal with the contents stored in the storage means in order to authenticate whether or not the user performing the authentication is an appropriate person. 8. An identification information storage unit for storing identification information for identifying a self apparatus, wherein the providing unit stores the contents of the storage unit and the identification information storage unit at the time of authentication with the portable information terminal. The power supply device according to claim 7, wherein the power supply device is provided to the power supply device. 9. A user authentication method for a portable information terminal having a detachable power supply device and a device main body to which the power supply device is mounted and to which a power supply voltage is supplied, and which executes predetermined information processing. Information indicating an authentication method for authenticating that a user who uses the apparatus body is an appropriate user, and authentication data for authentication including user information indicating a predetermined user, A first storage step of storing by the power supply device, an input step of inputting user information indicating a user who uses the device main body at the time of authentication by the device main body, and a user information input by the input step A second storage step of storing the first and second power supply devices in the power supply device mounted on the device main body.
An authentication step of performing an authentication process for the user based on the storage content stored in the storage step and the storage content stored in the second storage step. User authentication method to use. 10. An information indicating an authentication method for authenticating that a user who uses the portable information terminal is an appropriate person while the detachable power supply device is mounted on the portable information terminal, A step of reading out the information indicating the authentication method and the authentication data from the power supply device that stores authentication data for authentication including user information indicating a predetermined user; A storage step of storing the user information of the user input from the user using the, based on the information read by the reading step and the user information stored by the storage step, An authentication step of executing an authentication process for the user, and a program for executing the authentication step.