JP2002288137A - Personal identification system in electronic equipment - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a personal identification system in electronic equipment that can increase resistance to unjust identification. SOLUTION: To conduct identification judgment necessary times not less than a definite number for the first identification judgment device 104, the identification judgment by the second identification judgment device 106 is necessary. Accordingly, the equipment becomes more resistant to unjust identification.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a personal authentication system for an electronic device for identifying a valid user by inputting a personal identification number or the like.

[0002]

2. Description of the Related Art For example, in order to confirm whether a user of an electronic device such as a mobile communication terminal is a valid right holder, the user is required to input a password at the time of activation or the like, and to enter a password registered in advance with the password. Authentication is performed by comparing. In this method of password input,
In order to counter a brute force attack in which all the combination numbers are tried from one end by a malicious third party, there is a protection method in which an authentication failure shifts to an unusable state after a certain number of failures.

[0003] There is also a method of providing a so-called time penalty for providing a re-authentication trial prohibition period for a certain period of time for authentication failure, thereby strengthening resistance to a brute force attack.

[0004]

In the above-described method in which an upper limit is set on the number of times of authentication and the authentication is repeated until the number of authentications is reduced, the state shifts to the use prohibition state. There is a drawback that the mobile communication terminal can be easily set to the use prohibition state when repeated.

[0005] On the contrary, if the number of trials is increased or unlimited, there is a disadvantage that the system becomes vulnerable to attack.

[0006] In the method of imposing a time penalty,
It is better to shorten the time penalty in order to improve the serviceability against non-malicious authentication failure, but if it is shortened, there is a problem that it becomes vulnerable to brute force attack.

SUMMARY OF THE INVENTION It is an object of the present invention to provide a personal authentication system for an electronic device that can increase the resistance to authentication violation.

[0008]

According to a first aspect of the present invention, there is provided a personal authentication system for an electronic device, comprising: an authentication input unit for inputting authentication information; and a first reference serving as a reference for determining whether the authentication information is valid. A first authentication determination unit that determines the validity of the authentication information by comparing with the authentication reference information, and manages the first authentication reference information independently and determines whether the authentication information is valid. A second authentication determination unit for determining the validity of the authentication information by comparing the authentication information with a second authentication reference information serving as a reference, and a number of times the authentication information is determined to be invalid by the first authentication determination unit. If the number exceeds a first predetermined value, it is necessary that the determination by the second authentication determining unit is valid as a condition for performing the determination by the first authentication determining unit. Authentication management means It is characterized in that.

According to a second aspect of the present invention, in the personal authentication method for an electronic device according to the first aspect, the authentication management means includes:
The first authentication determination means stores the number of times that the authentication information is determined to be invalid, and when the number of times reaches a second predetermined value larger than the first predetermined value, the first authentication determination means It is characterized in that use is prohibited.

[0010]

DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, the present invention will be described in detail using embodiments.

FIG. 1 shows an embodiment of the personal authentication apparatus according to the embodiment of the present invention. The personal authentication device shown in FIG. 1 is mounted on a mobile communication terminal represented by, for example, a mobile phone, but is not limited to the mobile communication terminal.

In FIG. 1, reference numeral 101 denotes an authentication input unit that receives an authentication input from a user, 102 denotes an authentication management unit that manages an authentication procedure, and 103 denotes a failure count data that records the number of failures of the authentication procedure managed by the authentication management unit. , 1
Reference numeral 04 denotes first authentication determination means for comparing authentication input with secret authentication reference data to determine whether authentication is successful, 105 denotes first authentication reference data used in 104, and 106 denotes 10th authentication reference data.
Second authentication determining means for determining the success or failure of authentication in the same manner as in 4
07 is second authentication reference data used in 106.

The authentication input means 101 receives an authentication input from a user and passes the authentication input to the authentication management means 102. Examples of the authentication input method include a method of inputting a password using a combination of several digits, a method of reading a fingerprint of a finger by an optical reading device, a method of uttering a specific word and inputting its voice waveform, and the like. Conceivable.

Since the type of authentication input does not relate to the essence of the present invention, in the present embodiment, the following description will be made using a method of inputting a password using a combination of several digits as a representative example. I do.

The authentication management means 102 includes the authentication input means 10
When the authentication input is received from the first authentication unit 1, the first authentication determination unit 104 or the second determination unit 106 is instructed to perform the authentication determination. If the authentication determination has failed, the number of failures
To be stored.

The first authentication judging means 104 compares the first authentication reference data 105 held by the first authentication judging means with the authentication input in accordance with an instruction from the authentication managing means to judge whether the authentication is successful or not. . The determination of the authentication may be performed in various ways, such as, for example, a method in which a valid password itself is used as the first authentication reference data and the authentication input is compared with the authentication input as it is, a method in which the authentication input data and not the authentication input itself are processed based on them. There is a way. Depending on the method, the data format may be different between the authentication input passed by the authentication input unit 101 to the authentication management unit 102 and the authentication input passed by the authentication management unit 102 to the authentication determination unit 104. Has no effect.

The second authentication determining means 106 performs the same authentication determination as the first authentication determining means 104 using the second authentication reference data 107.

Hereinafter, the operation of the authentication determining apparatus shown in FIG. 1 will be described step by step with reference to the flowchart shown in FIG.

When the authentication process is started (step 20)
1) First, an operation is selected based on the failure count data 103 managed by the authentication management unit 102. That is,
If the cumulative number of failures does not exceed N, the authentication management means 1
In the step 02, it is determined that the first authentication judging means 104 makes an authentication judgment (step 202).

The authentication input means 101 is, for example, as shown in FIG.
The display as shown in (a) is performed, and the state is entered in which authentication input from the user is accepted. Here, an example such as a screen display of a mobile phone is shown, but the display itself is not essential to the present invention and is not included in the description of the constituent means.

When the user has completed the authentication input, the authentication input means 101 sends the authentication input to the authentication management means 102 (step 203).

Here, the authentication management means 102 sends the authentication input to the first authentication judgment means 104, and the first authentication judgment means 104 compares the authentication input with the first authentication reference data 105 to determine whether the authentication has succeeded. A determination is made (step 204).

When the authentication is accepted by the first authentication judging means 104, the authentication success results in the authentication judgment managing means 1
02 is notified (step 205), and the device is in a state where the authentication is completed (step 206).

Although not an essential part of the present invention, it is conceivable to perform an operation such as permitting use of a specific function of the apparatus or change of setting upon completion of authentication. The authentication management means 102 is, for example, as shown in FIG.
The authentication success screen as shown in is displayed.

On the other hand, if the authentication is not approved by the first authentication judging means 104 (step 205), the authentication failure is notified to the authentication managing means 102 as a result.

The authentication management means 102 stores the failure count data 10
3 is incremented and stored (step 2
07), an authentication failure screen as shown in FIG. 7C is displayed.

The authentication failure is repeated and the failure frequency data 10
When 3 exceeds a specific number N (step 202), the authentication management unit 102 selects the second authentication determination unit 106 as the authentication determination unit. At this time, the authentication management means 102 can display a screen indicating to the user that the determination processing by the second authentication determination means has been started, as shown in FIG. 7D, for example.

The authentication input means 101 is provided for the authentication management means 10.
Recognizing that the determination processing by the second authentication determination unit has been started by an instruction from the user 2, a screen for prompting an authentication input as shown in, for example, FIG. The state is reached (step 208).

When the user has completed the authentication input, the authentication input means 101 sends the authentication input to the authentication management means 102 (step 209).

Here, the authentication management means sends the authentication input to the second authentication judgment means 104 and the second authentication judgment means 106
Compares the authentication input with the second authentication reference data 107 to determine whether authentication is successful (step 210).

When the authentication is approved by the second authentication judging means 107, the authentication success results in the authentication judgment managing means 1.
02 is notified, and an authentication judgment process is performed by the first authentication judgment means (step 203).

On the other hand, when the authentication is not approved by the second authentication judging means 107, the authentication failure is notified to the authentication managing means 102 as a result, and for example, an authentication failure screen as shown in FIG. 7C is displayed. Thereafter, a screen for prompting an authentication input as shown in FIG. 7E is displayed, and the authentication judgment by the second authentication judging means is repeated. In the present embodiment, the number of repetitions is not set in the authentication determination by the second authentication determination unit.

When the authentication is approved by the second authentication judging means 107, the authentication input means 101 displays, for example, as shown in FIG. It is ready to accept input.

When the user has completed the authentication input, the authentication input means 101 sends the authentication input to the authentication management means 102 (step 203).

Here, the authentication managing means sends the authentication input to the first authentication judging means 104 and the first authentication judging means 104
Compares the authentication input with the first authentication reference data 105 (step 204) and determines the success or failure of the authentication (step 20).
5).

When the authentication is approved by the first authentication judging means 104 (Step 205), the authentication success is notified to the authentication judgment managing means 102 as a result, and the apparatus is in a state where the authentication is completed (Step 206). Although not an essential part of the present invention, it is conceivable to perform an operation of permitting use of a specific function of the device or a change of setting upon completion of authentication.

The authentication management means 102 is provided, for example, in FIG.
An authentication success screen as shown in (b) is displayed.

According to the present embodiment, the first authentication determining means 1
In order to perform the authentication determination more than a certain number of times with respect to 04, the authentication determination by the authentication determination unit 106 is necessary.
It is possible to counter the breaking of certification. At this time, for example, if the authentication input necessary for the authentication by the first authentication determining means is simplified and the authentication input required for the authentication by the second authentication determining means is complicated, the authentication input by the first authentication determining means can be simplified. The authentication can be easily performed, and the authentication input required for the authentication by the second authentication determining unit can be complicated but difficult to be broken. As a result, it is possible to achieve both the resistance to breaking the authentication and the daily convenience.

In the first embodiment, when the authentication by the first authentication judging means 104 succeeds, the number of failures 103 managed by the authentication managing means 102 may be cleared. In the case of clearing, if the number of failures by the first authentication determining unit 104 exceeds N times consecutively, the authentication by the second authentication determining unit is necessary. If the number of failures is not cleared, the number of cumulative failures exceeds N times. Similarly, authentication by the second authentication determination unit is required. Any of these may be selected depending on the strength of authentication desired for the system.

Next, a second embodiment will be described in detail with reference to FIG.

In FIG. 3, reference numerals 301 to 307 correspond to reference numerals 101 to 107 in FIG.
Reference numeral 308 denotes authentication failure count data managed by the first authentication determination unit 304, in which the authentication failure has occurred.

The operation of the personal authentication device according to the second embodiment will be described in detail with reference to the flowchart shown in FIG.

Failure count 3 managed by the authentication management means 302
03 is the same as that of the first embodiment in that the judgment by the first and second authentication judgment means is selected. Further, the case where the authentication determination by the first authentication determination unit is successful is the same as in the first embodiment.

If the authentication judgment by the first authentication judging means fails (step 405), the first authentication judging means 30
4 increments the number of failures 308 managed by itself (step 406), and determines whether the number of failures 308 does not exceed M where N <M (step 407).

If the number of failures 308 does not exceed M, the process returns to the authentication start state as in the first embodiment, and the authentication input and the authentication determination are repeated.

On the other hand, when the number of failures 308 exceeds M (step 407), in this embodiment, the first authentication judging means is set to the use prohibited state (step 408).

At this time, the authentication management means 302 can notify the user that the use of the first authentication determination means has been prohibited by, for example, performing a display as shown in FIG. 7 (g).

In the present embodiment, when M failures have occurred, the first
Is set to the use prohibition state and transited to another state. Therefore, in the present embodiment, it is assumed that the first authentication determination unit checks whether or not the use is prohibited before starting the authentication processing, and if the use is prohibited, the authentication processing is not started.

Whether or not the first authentication judging means is in the use prohibited state may be judged in the course of the authentication process, or the judgment by the first authentication judging means may be repeated without making any particular judgment. Absent. Of course, in this case, the first
If the authentication determination means is in the use prohibited state, authentication will fail no matter how many times it is repeated.

In the second embodiment, the number of authentication failures by the first authentication judging unit is limited, thereby preventing unlimited attempts of the first authentication judging unit. This method is effective when a strong strength is required by the authentication determination, and whether to prohibit use may be determined by an individual system.

Further, since the first authentication judging means is prohibited from use when M failures have occurred, the authentication managing means 302 performs the judgment by the first authentication judging means as shown in FIG. A warning screen may be displayed to alert the user to select whether or not to execute authentication determination. Of course, a warning display may be performed. Such a warning display may be displayed when the number of failures reaches M-1 or may be displayed every time when the number of failures exceeds N times.
It may be displayed every time regardless of the number of failures.

Next, a third embodiment will be described with reference to FIG.

FIG. 5 is the same as the second embodiment except that there is no equivalent to the number of failures 303.

When comparing and judging the number of failures and N, the authentication management means 502 checks the cumulative number of failures by inquiring the first authentication judgment means 504. If the authentication fails, the number of failures is incremented as in the first embodiment. Whether or not to clear the number of failures when authentication succeeds is determined as described in the description of the first embodiment.
Either can be selected.

In this embodiment, since the number of failures is managed by 508, for example, the authentication determination means 504, the authentication reference data 505, and the number of failures 508 are integrated into a module structure that can be separated from other parts. It is effective when it is.

As shown in the first embodiment, a method of making a determination by the second authentication determining means after N times, and a first method when M failures are made as shown in the second embodiment. Any of the methods of prohibiting the use of the authentication determination means can be realized by the third embodiment. In particular, in the case where the authentication determination means limits the number of authentication attempts by storing the number of failures as in the second embodiment, it is possible to prevent occurrence of inconsistency in the number of failures by removing the above-described module. Becomes possible.

In the fourth embodiment shown in FIG. 6, third authentication reference data 609 is provided in the first authentication determination means.

In this embodiment, the first authentication determining means 604
Has a reference number L satisfying N <L <M, uses the first authentication determination unit until the number of failures reaches N, and uses the second authentication determination unit until the number of failures exceeds L and reaches L. Authentication is performed, and after the authentication succeeds, a determination process using the first authentication determination unit is performed.

Until the number of failures exceeds L and reaches M, the first authentication determination means 604 makes a determination using the third authentication reference data 609 instead of the first authentication reference data.

If the determination based on the third authentication reference data is successful, the authentication is successful and the number of failures 608 is cleared. The third authentication criterion data 609 is, so to speak, authentication data for restoration, and it may be sufficient to clear the number of failures 607 and 603 without making authentication successful.

As for the judgment based on the third authentication reference data 608, when the judgment fails, the number of failures 608 and 603
May be incremented or may not be incremented. Incrementing the number of failures may be limited to authentication based on the first authentication reference data, or may be incremented in the case of authentication based on the third authentication reference data 609.

[0062]

As described above, according to the present embodiment, it is possible to increase the resistance to authentication breaking.

Further, the complexity of the judgment input of the first authentication judging means and the second authentication judging means is determined by the first authentication judging means <the second authentication judging means.
By using the authentication determination means of (1), the user's convenience is not impaired until the number of failures reaches N.
After the number of times, make sure that the certification cannot be easily broken.
It is possible to satisfy these two requirements.

In addition to malicious authentication breaking, for example, in the case of a device that performs authentication when the power is turned on, a key may be mistakenly pressed in a bag or in a pocket. It is also a measure against. This is effective, for example, in a method in which the use is prohibited due to failures more than a certain number of times.

[Brief description of the drawings]

FIG. 1 is a block diagram of a personal authentication device according to an embodiment of the present invention.

FIG. 2 is an operation sequence of the personal authentication device according to the embodiment of the present invention.

FIG. 3 is a block diagram of a personal authentication device according to the embodiment of the present invention.

FIG. 4 is an operation sequence of the personal authentication device according to the embodiment of the present invention.

FIG. 5 is a block diagram of a personal authentication device according to the embodiment of the present invention.

FIG. 6 is a block diagram of the personal authentication device according to the embodiment of the present invention.

FIG. 7 is a display example of a display unit of an electronic device to which the personal authentication device according to the embodiment of the present invention is applied.

[Explanation of symbols]

101, 301, 501, 601... Authentication input means, 10
2, 302, 502, 602 ... authentication management means, 103,
303, 308, 508, 603, 608...
104, 304, 504, 604... Authentication determination means 1, 1
05, 305, 505, 605 ... authentication reference data 1, 1
06, 306, 506, 606...
7, 307, 507, 607 ... authentication reference data 2,

Continuation of the front page (72) Inventor Hiroaki Sato 3-term Asahigaoka, Hino-shi, Tokyo 1-term F-term in Toshiba Hino Plant (reference) 5B085 AE03 AE23 5J104 AA07 KA01 PA02

Claims (2)

[Claims] An authentication input unit for inputting authentication information; and a first authentication reference information for determining whether the authentication information is valid by comparing the authentication information with first authentication reference information serving as a criterion for determining whether the authentication information is valid. The first authentication reference information is managed independently of the first authentication reference information, and is compared with the second authentication reference information serving as a reference for determining whether the authentication information is valid. Second authentication determining means for determining validity; counting the number of times that the authentication information is determined to be invalid by the first authentication determining means; if the number exceeds a first predetermined value, the first A personal authentication system for an electronic device, comprising: an authentication management unit that requires that the determination by the second authentication determination unit is valid as a condition for performing the determination by the authentication determination unit. 2. The authentication management unit stores the number of times that the first authentication determination unit determines that the authentication information is not valid, and the number of times reaches a second predetermined value that is larger than the first predetermined value. 2. The personal authentication method for an electronic device according to claim 1, wherein in the case, the first authentication judging means is set in a use prohibition state.