JP2001109562A - Information processor and recording medium - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an information processor and a recording medium which make it possible to easily authenticate a user without requiring any troublesome operation. SOLUTION: A computer 1 which functions as the invented information processor is equipped with a keyboard 15 and a mouse 16 as input devices. An operation pattern generated by the operation of those input device by a user is matched with operation patterns stored in an operation DB 101 and when those operation patterns are not similar to each other, the user is not able to use the computer 1 continuously.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an information processing apparatus having a use prohibition function for prohibiting use, and a recording medium on which a computer program for causing a computer to function as the information processing apparatus is recorded.

[0002]

2. Description of the Related Art In recent years, with the spread of information processing apparatuses represented by personal computers and the like, damage caused by unauthorized use of these apparatuses has been increasing.
For example, there is a case where an information processing device storing highly confidential information is illegally used by a person who is not authorized to use the information processing device, so that such information is acquired and misused.

In order to avoid such damages, user authentication using a password, which is a specific character string, is widely performed. 2. Description of the Related Art In a conventional information processing apparatus that performs user authentication using a password, a user first requests a password input before using the information processing apparatus. Then, the entered password is checked against a previously stored password, and only when it is confirmed that the user is authorized to use the information processing apparatus, the password is checked. It was configured to be usable by the user.

[0004]

However, in a conventional information processing apparatus for authenticating a user using a password as described above, the user inputs a password each time the information processing apparatus is started to be used. There must be. Therefore, even in a case of urgent use, even when the user wants to use the information processing device immediately, the user cannot use the information processing device without inputting a password.

[0005] In addition, when the user is authenticated by inputting a password and uses the information processing apparatus, and the user needs to leave the place, the user is required to temporarily use the information processing apparatus. Had to be stopped and then re-entered the password to authenticate when resuming use. As described above, the conventional information processing apparatus having the user authentication function using a password has a problem that the convenience is poor for the user.

Further, the input speed when inputting a character string by operating the keyboard, particularly the input speed when inputting a specific character string with a high input frequency, greatly differs depending on the user. In the case where an instruction is given to the information processing apparatus by operating the mouse, the moving speed of the pointer of the mouse and the locus formed by the pointer also vary greatly depending on the user. Therefore, the user can be specified by the operation pattern formed when the keyboard or the mouse is operated, such as the input speed of input of these character strings, the moving speed of the mouse pointer, and the trajectory formed by the pointer. .

[0007] The present invention has been made in view of such circumstances, and when starting to use, the user is authorized to use the device without performing user authentication. An information processing device that can prohibit use when it is determined that the user is not a person who has authority to use based on an operation pattern formed when operating the input device;
It is another object of the present invention to provide a recording medium in which a computer program for causing a computer to function as an information processing device is recorded.

Another object of the present invention is to provide a special device because an input device used for user authentication is a commonly used input device such as a keyboard and a mouse. An object of the present invention is to provide an information processing apparatus and a recording medium which can be configured at low cost without any problem.

Another object of the present invention is to perform authentication using input information such as a password when authentication using an operation pattern formed when a user operates an input device fails. An information processing apparatus and a recording medium that can be used by a user with valid authority even when an operation pattern different from normal is formed due to a cause such as a user being injured. In the offer.

[0010]

An information processing apparatus according to a first aspect of the present invention has an input unit operated to input information and a storage unit storing an operation pattern when the input unit is operated. When the input unit is operated, the operation pattern at the time of the operation is compared with the operation pattern stored in the storage unit, and based on the result of the comparison, use is prohibited to prohibit use. It is characterized by having.

The information processing apparatus according to a second aspect of the present invention is the information processing apparatus according to the first aspect of the present invention, wherein specific input information is stored in the storage unit, and as a result of the comparison, it is determined that both operation patterns are dissimilar. In this case, the input unit receives an input of arbitrary input information, compares the received input information with the input information stored in the storage unit, and determines that both input information are dissimilar by comparison. At times, it is characterized in that use is prohibited.

[0012] A recording medium according to a third aspect of the present invention has a computer provided with an input unit operated to input information stores an operation pattern when the input unit is operated, and operates the input unit. The stored operation pattern is compared with the stored operation pattern, and a program having program code means for prohibiting use based on the result of the comparison is recorded.

According to the first and third inventions, the information processing apparatus comprises: an input unit operated to input information;
A storage unit that stores an operation pattern when the input unit is operated. Then, the operation pattern formed when the input unit is operated is compared with the operation pattern stored in the storage unit. As a result of the comparison, when it is determined that the operation pattern formed when the input unit is operated and the operation pattern stored in the storage unit are dissimilar, use of the information processing device is prohibited.

The keyboard or mouse is operated, such as the input speed when inputting characters using the keyboard, the speed at which the mouse pointer moves when inputting any instruction using the mouse, and the trajectory formed by the pointer. The operation pattern formed when the operation is performed differs depending on the user, and the user can be authenticated using the operation pattern. Therefore, as described above, the operation pattern formed when the user having the right authority operates the keyboard and the mouse as the input devices is stored in the storage unit in advance, and the information processing device is used. During the operation, the operation pattern to be formed is compared with the operation pattern stored in the storage unit, and it can be used continuously only when these operation patterns match, thereby preventing unauthorized use. can do.

Since such input devices such as a keyboard and a mouse are widely used, an information processing apparatus having these input devices can be configured at low cost.

According to the second aspect of the present invention, there is provided an input unit operated for inputting information, and a storage unit for storing an operation pattern when the input unit is operated and specific input information. . Then, the operation pattern formed when the input unit is operated is compared with the operation pattern stored in the storage unit. As a result of this collation, when it is determined that the operation pattern formed when the input unit is operated and the operation pattern stored in the storage unit are dissimilar, any input information is accepted. Then, the received input information is compared with the input information stored in the storage unit. As a result of the comparison, when it is determined that the input information received by the input unit does not match the input information stored in the storage unit, use of the information processing device is prohibited.

As described above, when the operation pattern formed at the time of operating the input unit is not similar to the operation pattern stored in the storage unit, input information is received from the user. Here, the input information includes a password, a user identifier,
Information that can identify the user, such as an iris, fingerprint, and voiceprint. Then, the input information received from the user is compared with the input information stored in the storage unit. As a result of this comparison, unauthorized use can be prevented by making it possible to continue using only when the input information received by the input unit and the input information stored in the storage unit are similar.

Therefore, if there is a special situation, such as when the user is injured in the hand, an operation pattern different from a normal operation pattern may be formed. In such a case, use is prohibited. Since this is inconvenient for the user, authentication is performed using input information such as a password in such a case. As a result, even if it is determined that the operation pattern formed at the time of operation and the operation pattern stored in the storage unit are dissimilar in the comparison, the user is permitted to use the operation pattern if the user has valid authority. Can be.

[0019]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, the present invention will be described in detail with reference to the drawings showing the embodiments. FIG. 1 is a block diagram showing a configuration of an information processing apparatus according to the present invention. In FIG. 1, reference numeral 1 denotes a computer used as an information processing apparatus according to the present invention. The computer 1 has a CPU 11, and a RAM 12 for storing data generated in the CPU 11, An external storage device 1 such as a CD-ROM drive or a flexible disk drive that reads a program of the information processing apparatus according to the present invention from a portable recording medium 20 such as a CD-ROM or a flexible disk in which the information is recorded.
3. a hard disk 14 for storing the program of the present invention read by the external storage device 13, a keyboard 15,
A mouse 16, a display 17 for displaying an input / output screen,
And a communication interface 18 for communicating with the outside.

The computer 1 has a communication interface 1
8 is connected to the communication line 30. Further, the communication line 30 is connected to an external network line 32 such as the Internet by a connection device 31 such as a router.

The program of the information processing apparatus according to the present invention is connected to an external server computer 33 via an external network line 32 in addition to reading the program from the portable recording medium 20, and executes the program stored in the external server computer 33. The program is downloaded from the recorded recording medium 34 to the computer 1 and stored in the hard disk 14, and the stored program is stored in the hard disk 14.
The computer 1 functions as the information processing apparatus of the present invention by the PU 11 loading the RAM 12.

As described above, the computer 1 functioning as the information processing apparatus according to the present invention can execute the processing procedure in the information processing apparatus according to the present invention described later.

The hard disk 14 provided in the computer 1 has the following two databases.

Operation pattern D as the first database
B101 indicates an input speed when a user who has authority to use the computer 1 operates the keyboard 15 to input a specific character string, and a movement of a pointer of the mouse 16 when the mouse 16 is operated by the user. The speed and the type of trajectory formed by the pointer are stored.

FIG. 2 is a conceptual diagram showing a format of data stored in the operation pattern DB 101. FIG. 2A shows a format of data representing an input speed when a specific character string is input. FIG.
A character string field 201 in FIG. 3A stores a character string frequently input by a user. Here, "AND" and "THE" are shown as examples of the character strings.

In the first time field 202, the time from when the first character in the character string shown in the character string field 201 is input to when the second character is input (hereinafter, referred to as the first character). , Character input intervals) are stored. Similarly, in the second time field 203, the character input interval between the second character and the third character in the character string shown in the character string field 201 is stored. In the present embodiment, the character string field 20
As an example of a character string stored in No. 1, a character string composed of three characters "AND" and "THE" is shown. Therefore, there is only the first time field 202 and the second time field 203, but a third time field is added to a character string composed of four characters. In the same manner, the Nth
A time (N is a natural number) field is added.

In FIG. 2, (b) shows the format of data representing the speed at which the mouse pointer moves and the type of pointer trajectory. The moving speed field 301 in FIG. 2B stores the speed at which the pointer has moved from the time when the user clicks the mouse until the next time. In the trajectory field 302,
The type of trajectory formed by the pointer is stored. Here, an “upper curve” is shown as an example of the locus. Here, “upward curve” indicates that when the mouse pointer is moved from one point on the display 17 to another point, the mouse pointer draws an upward curve. As the types of trajectories formed by the pointer, in addition to the "upper curve", there are a "lower curve" in which the pointer draws a downward curve, a "straight line" in which the pointer draws a substantially straight line, and the like.

The input information DB 102 as a second database stores a password which is set in advance for a user who has authority to use the computer 1. In this embodiment, in order to perform authentication using a password, the password is stored as input information in the input information DB 102, but any information that can identify a user may be used. , A user identifier, a fingerprint, a voiceprint, and the like may be used as input information.

Next, the processing procedure of the user authentication processing in the information processing apparatus according to the present invention will be described. Note that the user authentication process described below is repeatedly executed while the user is using the computer 1.

First, a processing procedure of a user authentication process using an operation pattern formed when the keyboard 15 is operated by the user will be described.

FIG. 3 is a flowchart showing a procedure of a user authentication process performed by the computer 1 when the user operates the keyboard 15.

The computer 1 accepts a character input by the user through the keyboard 1 (S1001). At this time, the received character is stored in the RAM 12. Then, time measurement is started to time the character input interval until the next character input is accepted (S1002).

Next, when a character input is received (S100
3), the timing started in step S1002 ends, and the timing is started again (S1004). Thereby, the character input interval can be timed. This timed character input interval is stored in the RAM 12. Similarly, the characters received in step S1003 are also stored in the RAM 12.

The character strings and character input intervals stored in the RAM 12 in this manner are hereinafter collectively referred to as keyboard operation information.

After step S1004, it is determined whether or not the character string in the keyboard operation information stored in the RAM 12 matches a specific character string stored in the character string field 201 of the operation pattern DB 101 (step S1004). S10
05). If the character string does not match (S
(NO in 1005), the process returns to step S1003, and character input is accepted. Hereinafter, steps S1003 to S1 are performed until a specific character string is matched (YES in S1005).
Repeat 005.

If the character string in the keyboard operation information stored in the RAM 12 matches a specific character string (YES in S1005), the operation pattern is collated (S1006). Here, the operation pattern matching means RA
This means matching the keyboard operation information stored in M12 with the data stored in the operation pattern DB 101.

At step S1006, the keyboard operation information and operation pattern DB 10 stored in RAM 12
1 is determined to be similar, that is, when the collation of the operation pattern is successful (S
(Successful in 1006), the computer 1 determines that the user has valid authority, and returns to step S1003 to continue to accept character input from the user.

On the other hand, when it is determined that the keyboard operation information stored in the RAM 12 and the data stored in the operation pattern DB 101 are not similar, that is, when the collation of the operation pattern fails (failure in S1006), A message such as "Please enter a password" is displayed on the display 17 (S1007), and the user is requested to enter a password.

When the input of the password is received from the user (S1008), the received password and
The password is compared with the password stored in the input information DB 102 (S1009). If it is determined that the two passwords match (match in S1009), the computer 1 determines that the user has valid authority, and proceeds to step S1 in order to continue to accept character input from the user.
Return to 003.

On the other hand, if it is determined that the password received from the user and the password stored in the input information DB 102 do not match (unmatched in S1009),
A message such as "Unavailable" is displayed on the display 17 (S1010), and no further input is accepted to prohibit the user from using the computer 1.

Although the password is accepted only once here, the upper limit of the number of accepted passwords may be set, and the password may be accepted multiple times within the range of the upper limit. Good.

Next, steps S1005 and S1 described above are performed.
006 will be described in detail with reference to a specific example. FIG.
FIG. 4 is a conceptual diagram showing an example of keyboard operation information stored in AM12. The example shown in FIG. 4 is an example in which the keyboard 15 receives three characters of the character string “AND” from the user.

As shown in FIG. 4, the character "A" received first is stored in the storage area (1) in the RAM 12, and the next character "N" is received after the character "A" is received next. The time (45 milliseconds) until the reception is received is stored in the storage area (2). Then, in the storage area (3), the character “N” received after the character “A” is stored. Hereinafter, similarly, the time (85 ms) from the reception of the character “N” to the reception of the next character, and the character “D” received after the character “N” are stored in the storage area (4). And (5) are stored respectively.

When the keyboard 15 receives the character string "AND" from the user in this manner, the character string field 2 of the operation pattern DB 101 as shown in FIG.
Since “AND” is stored in 01, step S
At 1005, the character string in the keyboard operation information stored in RAM 12 matches the specific character string (S100).
(YES at 5), the process proceeds to step S1006.

In step S1006, as described above, the keyboard operation information stored in the RAM 12
Collation with data stored in the operation pattern DB 101 is performed. Here, the keyboard operation information stored in the RAM 12 is “A”, “45 milliseconds”, “N”, “85 milliseconds”, and “D”, as described above. Also, as shown in FIG. 2A, the data stored in the operation pattern DB 101 is such that the values of the first time field 202 and the second time field 203 for the character string “AND” stored in the character string field 201 are "5" each
0 ms ”and“ 80 ms. ”Therefore, the operation pattern is collated by determining whether or not these input character intervals match.

In this operation pattern collation, an allowable value which is an allowable error is set in advance. If the error between the two input character intervals is within the range of the allowable value, it is determined that they are similar. For example, when the allowable value is set to ± 10 ms, the above-mentioned “45 ms” and “50 ms”
, And “85 ms” and “80 ms” are determined to be similar to each other, and as a result, the operation pattern has been successfully collated in step S1006.

Next, a procedure of a user authentication process using an operation pattern formed when the mouse 16 is operated by the user will be described.

FIGS. 5 and 6 are flowcharts showing the procedure of the user authentication process performed by the computer 1 when the user operates the mouse 16.

The computer 1 stores the X and Y coordinates of the pointer when the user clicks the mouse 16 on the RAM.
12 (S2001), and time measurement is started to measure the time until the mouse 16 is clicked next (hereinafter, referred to as a click interval) (S2002). During the timing, the X coordinate and the Y
The coordinates are stored in the RAM 12 (S2003).

Next, when the mouse 16 is clicked, the X and Y coordinates of the pointer at that time are stored in the RAM 1.
2 (S2004), and after ending the timing started in step S2002, the counted click interval is set to R.
It is stored in the AM 12 (S2005).

The X and Y coordinates of the pointer stored in the RAM 12 and the click interval are collectively referred to as mouse operation information. The mouse operation information is an operation pattern of the input information received by the mouse 16 from the user.

From the X and Y coordinates of the pointer stored in step S2001 and the X and Y coordinates of the pointer stored in step S2004, the distance traveled by the pointer is calculated.
The moving speed of the pointer is calculated from the click interval measured in 05 (S2006). Next, step S2
Based on the X coordinate and Y coordinate of the pointer stored in 001, S2003 and step S2004, it is determined whether the locus of the pointer corresponds to an “upper curve”, a “lower curve”, or a “straight line” (S2007). .

FIG. 7 is a conceptual diagram showing an example of mouse operation information stored in the RAM 12. In FIG. 7, (1) indicates a storage area that stores the X coordinate and the Y coordinate of the pointer when the mouse 16 is clicked in step S2001. (2), (3) and (4) indicate storage areas for storing the X and Y coordinates of the pointer stored at predetermined time intervals in step S2003. Further, (5) corresponds to step S200
X of the pointer when the mouse 16 is clicked at 4.
3 shows a storage area that stores coordinates and Y coordinates.

In step S2006, the moving speed of the pointer is calculated based on the X and Y coordinates stored in the storage areas (1) and (5) in FIG.
In step S2007, the type of the path of the pointer is determined based on the X coordinate and the Y coordinate stored in the storage areas (1) to (5) in FIG.

After determining the type of the locus of the pointer in step S1007, the operation pattern is collated (S20).
08). Here, the collation of the operation pattern refers to the mouse operation information stored in the RAM 12 and the operation pattern DB 10
1 means collation with the data stored in 1.

Also in this case, similarly to the above-described collation between the keyboard operation information and the data stored in the operation pattern DB 101, an allowable value is set for the moving speed of the pointer, and the error is set to the allowable value. If they are within the value range, it is determined that they are similar.

In step S2008, when it is determined that the mouse operation information stored in the RAM 12 and the data stored in the operation pattern DB 101 are similar, that is, when the collation of the operation pattern is successful (S2)
(Success in 008), the computer 1 determines that the user has valid authority, and returns to step S2001 to continue to receive input from the user.

On the other hand, if it is determined that the mouse operation information stored in the RAM 12 and the data stored in the operation pattern DB 101 are not similar, that is, if the operation pattern verification fails (failure in S2008), A message such as "Please enter a password" is displayed on the display 17 (S2009), and the user is requested to enter a password.

When the input of the password is received from the user (S2010), the received password and
The password is compared with the password stored in the input information DB 102 (S2011). Here, when it is determined that the two passwords match (match in S2011), the computer 1 determines that the user has valid authority, and proceeds to step S20 in order to continuously receive an input from the user.
Return to 01.

On the other hand, when it is determined that the password received from the user and the password stored in the input information DB 102 do not match (not matched in S2011),
A message such as "Unavailable" is displayed on the display 17 (S2012), and no further input is accepted, so that the user cannot use the computer 1.

Although the input of the password is accepted only once here, the upper limit of the number of accepted passwords may be set, and the password may be accepted plural times within the range of the upper limit. Good.

As described above, the user is authenticated by using the operation pattern formed when the keyboard 15 and the mouse 16 are operated. If the operation pattern verification fails and the password verification fails, the subsequent use of the user is prohibited.

When pattern information such as an iris, fingerprint, and voiceprint is used instead of a password, an allowable value is set in advance as in the case of collation of operation patterns. If the error between the pattern information such as the iris, fingerprint, and voiceprint input by the user and the pattern information stored in the input information DB 102 is within the range of the allowable value, the pattern information is It is determined that they are similar. It goes without saying that a special input device is required to input such pattern information.

The user authentication processing as described above
It is always executed while the user is using the information processing device. Therefore, even if a person who does not have the right to use the information processing apparatus uses the information processing device while the legitimate user leaves his / her seat, it is possible to prevent the unauthorized use of these persons.

[0065]

As described above in detail, according to the information processing apparatus according to the first aspect and the recording medium according to the third aspect, an operation pattern when a user having valid authority inputs input information is determined in advance. An operation pattern stored when the input unit is operated by the user while the user is using the information processing device, and an operation pattern stored in the storage unit. By checking the operation pattern and making it possible to continue using it only when these operation patterns are similar, illegal use can be prevented.

The input device used for user authentication is a commonly used input device such as a keyboard and a mouse. Therefore, there is no need to prepare a special device, and the device can be configured at low cost. Can be.

According to the information processing apparatus of the second aspect, even if an operation pattern different from the normal operation pattern is formed due to a special situation such as the user being injured in his hand, for example. By performing authentication using input information such as a password, the present invention has an excellent effect that a user with valid authority can continue to use it.

[Brief description of the drawings]

FIG. 1 is a block diagram illustrating a configuration of an information processing apparatus according to the present invention.

FIG. 2 is a conceptual diagram showing a format of data stored in an operation pattern DB.

FIG. 3 is a flowchart illustrating a procedure of a user authentication process performed by a computer when a user is inputting a character using a keyboard.

FIG. 4 is a conceptual diagram showing keyboard operation information stored in a RAM.

FIG. 5 is a flowchart illustrating a procedure of a user authentication process performed by a computer when the user is inputting input information using a mouse.

FIG. 6 is a flowchart illustrating a processing procedure of a user authentication process performed by a computer when a user is inputting input information using a mouse.

FIG. 7 is a conceptual diagram showing mouse operation information stored in a RAM.

[Explanation of symbols]

 1 Computer 14 Hard Disk 15 Keyboard 16 Mouse 101 Operation Pattern DB 102 Input Information DB

Claims (3)

[Claims] An input unit operated to input information; and a storage unit storing an operation pattern when the input unit is operated, wherein the input unit is operated when the input unit is operated. An information processing apparatus, wherein an operation pattern at the time of operation is compared with an operation pattern stored in the storage unit, and based on a result of the comparison, use is prohibited. 2. A method according to claim 1, wherein the storage unit stores specific input information, and when it is determined that both operation patterns are dissimilar as a result of the collation, input of arbitrary input information is received by the input unit. 2. The method according to claim 1, wherein the input information is compared with the input information stored in the storage unit, and when the input information is determined to be dissimilar by the comparison, use is prohibited. An information processing apparatus according to claim 1. 3. A computer having an input unit operated for inputting information stores an operation pattern when the input unit is operated, and stores an operation pattern when the input unit is operated and the operation pattern when the input unit is operated. A computer-readable recording medium on which a program having program code means for prohibiting use based on a result of collation with a stored operation pattern is recorded.