JP2002229959A - Password input device - Google Patents

Abstract

PROBLEM TO BE SOLVED: To make it possible that, even when one inputs a password to use a card, others can hardly read the password by watching and an existing device can be used as it is, for the realization of such device at a low cost. SOLUTION: When a card is registered, a unique password is registered and it is also made possible to register a clear character string that neglects an input character string. The password and the clear character string are linked to the card number and are held in a host computer. If the clear character string is a '98' composed of a two-digit number, and the password is registered as a '1234' composed of a four-digit number, a '1583' inputted before the clear character string '98' is totally neglected, and thus a dummy input can be performed. Because it is devised to identify a four-digit character string that is inputted just after the clear character string '98' as the password, '1234' can be identified as the password. A '67' inputted after the password is neglected and treated as a dummy input.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

[0001] 1. Field of the Invention [0002] The present invention relates to a password input device, and more particularly, to a password input device for performing identity verification when a card is used.

[0002]

2. Description of the Related Art Conventionally, cash cards of banks, credit cards of credit companies, debit cards used for shopping, and the like have been widely used and frequently used. These cards are magnetic cards and I
Although it is composed of a C card or the like, the identity of any card is confirmed by inputting a password registered in advance at the time of use. For example, in a conventional card identification operation, first, a card is inserted into a card reader / writer, and data written in the card is read. Next, the card owner inputs a password registered in advance using a keyboard such as a numeric keypad connected to the card reader / writer. If the card contains password data, the card is checked against the entered password to confirm the identity. If there is no password data in the card, the password data is stored in the database on the host computer connected online with the card reader / writer, so the password corresponding to the card is searched for and entered. The password was verified against the password.

[0003]

However, in such a conventional password input device, a password of a cash card or the like is composed of a character string such as a number of about four digits. There is a problem that the password can be easily read by a person behind him due to the movement of his hand. Therefore, it is conceivable to make the password itself more complicated by increasing the number of digits in the password, making it difficult to read.However, if the number of digits in the password increases, the number of input errors increases, There is a problem that it is difficult to accurately remember and that the current system needs to be drastically changed, thereby increasing costs. In addition, passwords contain not only numbers but also meaningful character strings such as alphabetic characters, making them easier to remember, but complicating the password itself makes it difficult to read, but requires hardware changes such as changing the input keyboard. However, there is a problem that the cost is increased similarly to the above. The present invention has been made in view of the above problems, and even if a password for performing identity verification is used at the time of using a card, it cannot be easily read from the external appearance, and the existing device can be used as it is. It is an object of the present invention to provide a password input device that is possible and can be realized at low cost.

[0004]

According to a first aspect of the present invention, there is provided a password input device for performing identity verification when a card is used, comprising: reading means for reading data written on the card; Input means for inputting a character string such as a character string, a character string extracting means for extracting a clear character string ignoring the input character string or the card-specific password from a pre-registered information source, and a character string input from the input means When the same character string as the clear character string extracted by the character string extracting means is input, the previous input character string is ignored, and the input character string having a predetermined number of digits input immediately after the clear character string is input. And a password discriminating means for recognizing and discriminating the password. According to this, the data written on the card is read by the reading means, a character string such as a password of the card is input by the input means, and the input character string is ignored by the character string extracting means from the information source registered in advance. Take out the clear character string and the password unique to the card, and, among the character strings input from the input
When the same character string as the clear character string extracted by the character string extracting means is input, the input character string before that is ignored, and the input character string of a predetermined number of digits input immediately after the clear character string is recognized as a password. Simple password that is easy to remember, even if a random character string is entered when entering the password, it is sufficient to enter the correct password across the clear character string. Even with this password, the password cannot be read from the outside, and the existing device can be used as it is simply by changing the program, so that the password can be realized at low cost.

According to a second aspect of the present invention, in the password input device of the first aspect, the clear character string extracted by the character string extracting means is a character string not included in a password. It is characterized by.
According to this, since the character string not included in the password is used as the clear character string extracted by the character string extracting means, there is no possibility that the password input itself is cleared, and the password can be input reliably. Become. The invention according to claim 3 is the invention according to claim 1 or 2
In the password input device described in the above, the password discriminating means may be any one of a character string input before a clear character string and a character string input after a password having a predetermined number of digits immediately after the clear character string. Is also ignored. According to this, the password discriminating means ignores both the character string input before the clear character string and the character string after the password having the predetermined number of digits input immediately after the clear character string. Because random characters can be entered before and after the clear character string and the password that is entered immediately afterwards, all such random characters are ignored, and only the password part can be easily extracted. Even if the password is composed of a simple character string that is easy to remember, it is more difficult to read the password just by looking at the input operation, and the password can be realized at low cost only by changing the program using an existing device.

[0006] The invention described in claim 4 is the invention according to claims 1 to 3.
The password input device according to any one of the above, further comprising end instruction means for instructing that the password input has been completed, regardless of whether the clear character string is input, the instruction of the end instruction means is If there is, the input character string of the specified number of digits entered immediately before it is recognized as a password,
The determination is performed by the password determination unit. According to this, regardless of the presence or absence of the input of the clear character string, when the end instruction means instructs the end of the password input, the input character string of a predetermined number of digits input immediately before is recognized as the password. Since the password is determined, the password can be input even if the user does not forget to input the clear character string or input the clear character string incorrectly, for example. Also, following the correct clear string,
Even when the password is input and the end is instructed by the end instruction means, the password can be input. The invention according to claim 5 is the password input device according to claim 1, wherein a clear character string is not registered in the information source,
When only the password can be extracted by the character string extracting means, a predetermined number of digits from the beginning of the input character string are recognized as a password, and the password is determined by the password determining means. According to this, when the clear character string is not registered in the information source, for example, at least the password is registered in the host computer or the card itself, but since the registration of the clear character string is optional, the clear character string is cleared. The character string may not be registered. In this case, only the password can be extracted by the character string extracting means, and up to a predetermined number of digits from the beginning of the input character string are recognized as the password, and the password is determined by the password determining means. Password entry is possible regardless of the presence or absence.

[0007]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS An embodiment of the present invention will be described below in detail with reference to the drawings. FIG. 1 is a block diagram showing a schematic configuration of a password input device 10 according to the present embodiment. When a credit card, a debit card, or the like is used, a password is registered using a password registered in advance. Input device. The password input device 10 shown in FIG. 1 includes a card reader 12 as a reading unit and a character string extracting unit, a numeric keypad 14 as an input unit, a communication unit 16 as a character string extracting unit, a control unit 18 as a password determining unit, And a display unit 20. The card reader 12 inserts the card 40 to be used, reads out the card number written on the card 40, or reads out a password or clear character string registered in advance on the card 40 (when the information source is a card). 40) also reads them. Numeric keypad 14
Is used to input a character string such as a password. Here, numeric keys from 0 to 9 are used, but a keyboard capable of inputting other character types may be used. Also,
In the present embodiment, in addition to the numeric keypad, an end instruction button 14a is further provided as end instruction means for indicating that the password input has ended. The end instruction button 14a allows the input character string of a predetermined number of digits (for example, four digits) input immediately before the end instruction button 14a is pressed to be recognized as a password, regardless of whether or not a clear character string is input. Things.

The communication unit 16 is connected to the host computer 30 online, exchanges data with each other to check card numbers, and registers a password and a clear character string of each card in the host computer 30 in advance. Case (when the information source is the host computer 30)
Is to be taken out and received by the password input device 10 side. The control unit 18 controls the password input device 1
0, and when the same character string as the clear character string extracted from the card reader 12 or the communication unit 16 among the character strings input from the numeric keypad 14 is input,
A character string input before that is ignored, and a predetermined number of digits (for example, 4
The input character string of (digit) is recognized as a password, and is compared with a password registered in advance to determine whether or not the input password is correct. Display unit 20
Displays an operation screen of the password input device 10, shows an operation procedure to an operator, and displays a determination result of an input password by the control unit 18.

Next, the operation of this embodiment will be described. First, when registering the card 40, a unique password (personal identification number) known only to the user is registered in order to confirm the user. At the same time, a clear character string that ignores (cancels) the input character string can be registered. These passwords and clear strings are stored on card 4
Although it is possible to have it as data in 0, here, it is made to be linked to the card number in the database of the host computer 30 for security reasons. FIG. 2 is a diagram illustrating a relationship between a password and a clear character string. For example, as shown in FIG.
The password can be registered as “98” consisting of a digit number, and the password can be registered as “1234” consisting of a four-digit number. It should be noted at the time of registration that the clear character string must be a character string that is not included in the password. For example, FIG.
For example, when registering a password such as “1984”, “1298”, and “9834” partially including the character string “98”, the clear character string “98” should be added to the password. You cannot register. That is, when a clear character string which is a feature of the present invention is input, a character string input before that is ignored, and an input character string having a predetermined number of digits input immediately after the clear character string is recognized as a password. Therefore, when the password of “1984” is input immediately after the input of the clear character string “98”, the character string “98” in the password is determined as the clear character string again, and the character string before that is ignored, and “4” is ignored. .. "Will be recognized as a password, and will not be recognized as a password forever. The same applies to the case where a password of “1298” or “9834” is registered.

FIG. 3 is a diagram showing an example of input using a clear character string and a password registered as shown in FIG. As shown in FIG. 3, “1583” input before the clear character string “98” is a dummy input because all characters are ignored, and arbitrary character strings can be randomized regardless of the number of digits. Can be entered. The password input device 10 of the present embodiment recognizes a character string having a predetermined number of digits (here, four digits) input immediately after the clear character string “98” as a password, and thus registers the character string in advance. The entered password "1234" is input. In this case, the dummy input “67” is performed after the password “1234”, but this may or may not be input. As a method of recognizing "67" as a dummy input, a character string input after a predetermined number of digits of a password is positively ignored, or since only a password can be recognized, a character string immediately after a clear character string can be recognized. Only a password having a predetermined number of digits to be input may be recognized. As described above, according to the embodiment of FIG. 3, when the password “1234” is input, “158398123” is input.
Since the input of the character string "467" is performed, there is no possibility that the password can be recognized even when the input state is viewed from the outside.
In addition, since not all of the input character strings are meaningful, there is no need to memorize many character strings. That is,
Since "1583" and "67" are dummy input portions, there is no need to remember them, and other character strings and numbers of digits can be used. In short, it is only necessary to remember that the correct password "1234" is input after the clear character string "98", and the rest of the input may be a random character string. There is an advantage that the burden on the side becomes very light. In the embodiment of FIG. 3, the clear character string is two digits, but may be one digit or three or more digits. In addition, although the number of digits of the password is set to four, it is not necessarily limited to this.

Next, FIGS. 4A to 4C show the ten key 1
4 is a diagram showing an example of inputting a password using an end instruction button 14a provided in FIG. In FIG. 4A, FIG.
In the same manner as in the example, the clear character string and the password are input, and the end instruction button 14a is pressed immediately after the password is input. The end instruction button 14a is used to indicate that the input of the password has been completed. Therefore, the input character string having a predetermined number of digits input immediately before the end instruction button 14a is pressed is recognized as the password. Therefore, in FIG. 4A, the four-digit “1234” immediately after the input of the clear character string in FIG. 3 can be recognized as a password, and the four-digit “1234” is input immediately before the end instruction button 14a is pressed. Even if the four-digit “1234” is recognized as a password, the result is the same. Therefore, any of the methods may be adopted. However, it is conceivable that the result may be different as shown in FIG. 4C described later, and it is necessary to consider the priority in the case of conflict. Here, when the clear character string is input and the end instruction button 14a is pressed, the password is authorized by giving priority to the end instruction button 14a. FIG. 4B shows a case where no clear character string is input and the end instruction button 14a is pressed. In that case, the four-digit character string “1234” is input immediately before the end instruction button 14a is pressed.
Is recognized as a password, and a character string input before the password is regarded as a dummy input. Further, FIG.
In (c), input of clear character string and end instruction button 14
This is the case where “a” is pressed. In this case, in the present embodiment, as described above, the password is authorized by giving priority to the end instruction button 14a, so that even if “98” corresponding to the clear character string is input, "5431" which is a four-digit character string is not recognized as a password. Only the four-digit character string “1234” input immediately before the end instruction button 14a is pressed is recognized as a password. Therefore, character strings other than the password are dummy input.

As described above, according to the embodiment of FIG.
A clear character string can be used. However, even if the clear character string is forgotten, a password is input after a dummy input of an appropriate character string is performed, and the password is input simply by pressing the end instruction button 14a. Can be correctly recognized. In this case, when the password “1234” is input, the character string “1583985431234” is input, so that there is no danger that the password can be understood only by looking at the input state from the outside. Moreover,
Since not all of the input character strings are meaningful, there is no need to memorize many character strings. In this case, as long as the user remembers to press the end instruction button 14a immediately after the password, other dummy characters can be used. Since it is only necessary to input a random character string in the input portion, there is an advantage that the burden on the input side is very light. This is particularly effective when the clear character string is forgotten. In the embodiment shown in FIG. 4, the number of digits of the password is set to four, but the present invention is not limited to this.

FIG. 5 is a view showing an example of inputting a password when a clear character string is not registered in the card 40 or the host computer 30 in advance. In FIG. 5, if the clear character string is not registered in the card 40 or the host computer 30 as the information source, and only the password can be taken out through the card reader 12 or the communication unit 16 as the character string taking out means, the present embodiment is executed. In the embodiment, the password is recognized up to a predetermined number of digits from the beginning of the input character string, and the character string input thereafter ("38" in the case of FIG. 5).
952...) Are dummy inputs. In this way, the password is always registered at the time of card issuance, but the registration of the clear character string is optional, and during the transfer period when permitting the registration of the clear character string, the person who registered the clear character string Such a countermeasure is necessary because some people who are not registered are used together. Thus, FIG.
According to the embodiment, even if the clear character string is not registered, a random character string can be dummy-input after a password of a predetermined number of digits from the beginning of the input character string is input. In addition, the password can be correctly recognized, and there is no danger of knowing the password only by looking at the input state from the outside. In addition, since not all of the input strings are meaningful, there is no need to memorize many strings, and here, if you remember the password, enter random strings in the dummy input part after that This is advantageous in that the burden on the input side is very light. In the embodiment of FIG. 5 as well, the number of digits of the password is four, but is not limited to this.

The password recognized as described above is
In the control unit 18 shown in FIG. 1, the password is checked against the password registered and taken out in advance, and if the password matches, the correct password has been entered. To be displayed. If the registered password and the entered password do not match, there is a possibility that the user has made a mistake in inputting or the user is not the person himself / herself. In the present embodiment,
The case where a credit card or a debit card in which predetermined data is written on a magnetic material is used for the card 40 has been described. However, the present invention is not limited to this. Is also good.
For example, an IC in which necessary data is written in an IC chip and data can be read or written in a contact or non-contact manner.
Even when a card is used, the present invention can be applied in the same manner as described above.

[0015]

As described above, according to the first aspect of the present invention, the data written on the card is read by the reading means, and the character string such as the password of the card is input by the input means. A character string extracting unit extracts a clear character string or a card-specific password that ignores an input character string from a registered information source, and a character string extracting unit extracts a character string input from the input unit by a password determining unit. If the same character string as the clear character string is input, the previous character string is ignored, and the input character string of the specified number of digits that is input immediately after the clear character string is recognized as a password and whether the password is correct or not. Because it is determined, even if a random character string is entered when entering the password, it is sufficient to enter the correct password across the clear character string Even in the password of easy simple string remember, from the appearance on password can not be read, from just by existing equipment can be used as it is changing the program, it can be realized at low cost. According to the second aspect of the present invention, since the character string not included in the password is used as the clear character string extracted by the character string extracting means, there is no possibility that the password input itself is cleared. Reliable password entry becomes possible.

According to the third aspect of the present invention, the character string input before the clear character string and the character string after the predetermined number of digits of the password input immediately after the clear character string are output by the password discriminating means. Was ignored.
It is possible to enter random characters in the front and rear parts other than the clear character string and the password entered immediately after, and all those random input strings are ignored,
Because only the password part can be easily extracted, even if the password consists of a simple character string that is easy to remember, it is more difficult to read the password just by looking at the input operation. It can be realized at low cost. According to the fourth aspect of the present invention, when termination of the password input is instructed by the termination instruction means regardless of whether or not a clear character string has been input, the input character string having a predetermined number of digits entered immediately before the instruction. Is recognized as a password, and the password is determined. For example, even if the clear character string is not forgotten and the clear character string is incorrectly input, the password can be input.
Also, a password can be input even when a password is input following a correct clear character string and termination is instructed by termination instruction means. According to the invention described in claim 5, when the clear character string is not registered in the information source, for example,
At least the password is registered in the host computer or the card itself, but the clear character string may be optionally registered, and thus the clear character string may not be registered. In that case, only the password can be extracted by the character string extracting means, and a predetermined number of digits from the beginning of the input character string are recognized as the password, and the password is determined by the password determining means, so that the clear character string is registered. The password can be entered regardless of the presence or absence of the password.

[Brief description of the drawings]

FIG. 1 is a block diagram showing a schematic configuration of a password input device according to the present embodiment.

FIG. 2 is a diagram illustrating a relationship between a password and a clear character string.

FIG. 3 is a diagram showing one input example using a clear character string and a password registered as shown in FIG. 2;

FIGS. 4A to 4C are diagrams showing examples of inputting a password using an end instruction button provided in a numeric keypad.

FIG. 5 is a diagram illustrating an example of inputting a password when a clear character string is not registered in a card or a host computer in advance.

[Explanation of symbols]

 10 password input device, 12 card reader, 14 numeric keypad, 14a end instruction button, 16 communication unit, 18 control unit, 20 display unit.

Claims (5)

[Claims] 1. A password input device for performing personal identification when using a card, reading means for reading data written on the card, input means for inputting a character string such as a password of the card, and input characters A character string extracting means for extracting a clear character string or a card-specific password from a pre-registered information source, ignoring the sequence; and a clear character string extracted by the character string extracting means among the character strings input from the input means. When a character string identical to the character string is input, a password discriminating means for ignoring an input character string preceding the character string and recognizing and discriminating an input character string having a predetermined number of digits immediately after the clear character string as a password, A password input device comprising: 2. The password input device according to claim 1, wherein the clear character string extracted by the character string extracting means is a character string not included in a password. 3. The password discriminating means ignores any of a character string inputted before a clear character string and a character string inputted after a password having a predetermined number of digits immediately after the clear character string. The password input device according to claim 1, wherein the password input device is configured as described above. 4. An end instruction means for instructing that the password input has been completed, irrespective of whether or not the clear character string has been inputted, when there is an instruction from the end instruction means, the password is immediately input. The password input device according to any one of claims 1 to 3, wherein the input character string having the predetermined number of digits is recognized as a password, and the password is determined by the password determination unit. 5. When a clear character string is not registered in the information source and only a password can be extracted by the character string extracting means, a predetermined number of digits from the beginning of the input character string is recognized as a password, and the password is recognized. The password input device according to claim 1, wherein the determination is performed by a determination unit.