JP2004213117A - Authentication system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an authentication system for easily obtaining a one time password which is changed any time by only a user itself, by storing a pattern that can be easily stored, and for preventing the password from being stolen due to peeping of the password. <P>SOLUTION: The system comprises a random number generating means for generating a plurality of different random numbers, by executing random calculations; a matrix table creating means for creating in a matrix table, by enumerating a plurality of different figures; a combining means for associating each random number generated from the generating means with each lateral and longitudinal line of the matrix table, respectively; a display means for listing and displaying the random numbers and the matrix table associated by the combining means; an input means for inputting a user ID and the random numbers of the lines of the matrix table, corresponding to the specific figures associated with the user ID of the matrix table displayed on the display means; and a collating means for collating the random numbers input from the input means with the random numbers, associated with the specific figures corresponding to the user ID by the combining means. <P>COPYRIGHT: (C)2004,JPO&NCIPI

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention relates to an authentication system for authenticating a user.
[0002]
[Prior art]
Conventionally, a password or a password is generally used to authenticate a user. In general, personal identification numbers are unforgettable numbers for individuals, and in many cases, personal identification numbers such as birthdays of themselves and their families, home telephone numbers, home residence numbers, etc. are used as personal identification numbers. It can be easily guessed and misused.
[0003]
In addition, there is a problem that a password in which alphanumeric characters are meaninglessly listed is easy to forget and inconvenient.
[0004]
Therefore, a technique for performing personal authentication using graphic data that is easier to remember than a password has been proposed. For example, the figure shape data is used as identification data used for collating the validity of the operator, and the desired figure shape data in a pattern displayed in a matrix on the CRT screen is pressed to be provided at that location. There is a device in which data is input from a given touch key (for example, see Patent Document 1).
[0005]
There is also a password input screen in which a password is input by dragging and dropping a bitmap icon in which rabbits, cats, and the like are displayed in a matrix into a virtually created room on the screen by, for example, dragging and dropping a mouse (for example, And Patent Document 2.).
[0006]
Further, there is also data using characters, figures, signs, handwriting, and a combination of characters and figures as personal identification data for personal authentication (for example, see Patent Document 3).
[0007]
[Patent Document 1]
JP-A-62-5476 [Patent Document 2]
JP-A-10-289210 [Patent Document 3]
JP-A-7-129512
[Problems to be solved by the invention]
However, in each of the above-described conventional examples, since the graphic data is directly input by some action such as pressing a touch key of the graphic data on the display screen, clicking with a mouse, or performing a drag and drop operation, it is difficult for others to input the graphic data. If the display screen during operation is peeped, there is a problem that the graphic data stored by the user for authentication is easily stolen by another person.
[0009]
The present invention is to solve the above-mentioned problem, and an object of the present invention is to memorize a figure which can be easily memorized and to easily know a one-time password that can be changed only at any time by the user himself. The aim is to provide an authentication system that can prevent plagiarism.
[0010]
[Means for Solving the Problems]
An authentication system according to the present invention for achieving the above object is an authentication system for authenticating a user himself / herself. The random number generation means for calculating a random number to generate a plurality of different random numbers, and a plurality of different graphics. Matrix table creating means for listing and creating a matrix table, and combining means for associating each random number generated by the random number generating means with each vertical and horizontal line of the matrix table created by the matrix table creating means, Display means for displaying a list of the random numbers and the matrix table associated with the synthesizing means, a user ID, and a vertical and horizontal direction of the matrix table corresponding to a specific graphic associated with the user ID in the matrix table displayed on the display means Input means for inputting a random number of a line, a random number input by the input means, And having a matching means for matching the random number associated with a particular figure corresponding to the user ID of.
[0011]
The figure may include a pattern, a symbol, and the like. It is preferable that the positions of the figures created in the matrix table be changed as needed. Further, it is preferable that the number of graphics displayed in the matrix table is large, since the strength of security is high. Also, the number of figures to be stored can be set to one or more. The random number may be composed of alphanumeric characters.
Further, it is preferable that the random numbers associated with the respective vertical and horizontal lines of the matrix table be changed as needed. Further, it is preferable that the random number input by the input means is displayed by a hidden character such as an asterisk. Preferably, the random number input by the input means is encrypted by a hash function or the like.
[0012]
Since the present invention is configured as described above, the random number generating means generates a plurality of different random numbers, and the matrix table creating means generates another different plurality of random numbers including a specific graphic associated with the user ID input by the user. Can be listed in a matrix table, and each of the random numbers can be associated with each of the vertical and horizontal lines of the matrix table and displayed in a list by the display means.
[0013]
The user himself / herself visually recognizes the random numbers located on the vertical and horizontal lines including the figure stored by himself / herself in the matrix table displayed as a list, and inputs the random numbers by the input means. The collating means specifies a graphic associated with the user ID from the user ID input by the user using the input means, and further specifies a random number associated with the graphic.
Then, the identified random number is collated with the random number input by the user through the input means, whereby the user can be authenticated.
[0014]
Further, it has transmission timing determining means for determining the timing of transmitting the random number input by the input means to the collating means, a timing counter is displayed on the display means, and the collating means is provided by the transmission timing determining means When comparing the transmission timing of the random number determined based on the timing counter with a specific timing corresponding to the user ID, the user himself / herself visually recognizes the timing counter display displayed on the display means, The transmission timing determining means determines the timing at which the random number input by the input means is transmitted to the matching means at the timing stored by. The collation unit specifies the transmission timing associated with the user ID from the user ID input by the user using the input unit. Then, it is possible to authenticate the user by comparing the specified transmission timing with the transmission timing executed by the user by the transmission timing determining means.
[0015]
As described above, by using the timing of transmitting the one-time password as the authentication key, the authentication accuracy can be further improved, and the security can be further improved.
[0016]
BEST MODE FOR CARRYING OUT THE INVENTION
An embodiment of the authentication system according to the present invention will be specifically described with reference to the drawings. FIG. 1 is a block diagram showing an example of the configuration of a control system of the authentication system according to the present invention. FIG. 2 is a flowchart showing how a user is authenticated using the authentication system according to the present invention. It is a figure showing an example of.
[0017]
In FIG. 1, a user uses the Internet using various terminals such as a desktop computer 1, a notebook computer 2, a PDA (Personal Digital Assistant), a WEB pad 3, a PHS (Personal Handyphone System), and a mobile phone 4. 5 to the router 7 via the firewall 8, the connection to the authentication server device 9 as the collation means via the firewall 8, and after receiving the connection authentication and the use authentication by the authentication server device 9 referring to the authentication database 10 as the storage means, The user can access a website (homepage) provided by the program server device 15 to receive various services.
[0018]
The control server device 6, the authentication server device 9, the authentication database 10, and the program server device 15 are configured by a computer system equipped with a CPU (Central Processing Unit), a memory, and the like. The control server device 6 calculates random numbers to generate a plurality of different random numbers, generates a plurality of different figures, lists the plurality of figures and creates a matrix table, and generates a random number generated by the random number generating means. It also serves as synthesizing means for associating with each vertical and horizontal line of the matrix table created by the matrix table creating means.
[0019]
Examples of random number generating means include Mersenne Twister, Monte Carlo (using standard normal random numbers and symmetric variate methods used in the Monte Carlo method), Poisson (using random numbers along the Poisson distribution), It can be configured by a computer system equipped with a commercially available random number program such as Bernoulli (using Bernoulli distribution) and facility (using split facility).
[0020]
Also, the display screens of various terminals such as the desktop computer 1, the notebook computer 2, the PDA and the WEB pad 3, the PHS and the mobile phone 4 which are handled by the user are associated by the synthesizing means provided in the control server device 6. A display means for displaying a list of random numbers and a matrix table as well as a timing counter, and the keyboard, mouse and input keys of the various terminals are displayed on the user's own user ID (Identification) and the display means. Input means for inputting the random numbers of the vertical and horizontal lines of the matrix table corresponding to the specific graphic associated with the user ID of the input matrix table, and further transmits the random numbers input by the input means to the matching means described later. The transmission timing determining means for determining the timing is configured.
[0021]
The authentication server device 9 collates the random number input by the input unit with the random number associated with the specific graphic corresponding to the user ID by the synthesizing unit, and checks the transmission timing of the random number determined by the transmission timing unit. , A matching unit for checking a specific transmission timing corresponding to the user ID.
[0022]
Next, referring to FIG. 2, the manner in which a user is authenticated using the authentication system according to the present invention will be described. First, in step S _1, the user, desktop computer 1 shown in FIG. 1, using a laptop computer 2, PDA or WEB pad 3, PHS and various terminals such as the portable telephone 4, the program server 15 To access a website (homepage) provided on the Internet 5 and input a user ID registered in advance on a user ID input screen 11 shown in FIG.
[0023]
In step S _2, control server device 6 creates a plurality of random numbers different to random calculated by a random number generator. As shown in FIG. 3B, the random number is composed of alphanumeric characters that can be easily input by a user using a PDA, a WEB pad 3, a PHS, a mobile phone 4, or the like.
[0024]
Next, in step S _3, Figure 3 wherein the particular graphic associated with the user ID inputted transmitted in step S _1, and enumerated together different dummy shapes other than the shapes by matrix table creating means ( The matrix table 12 shown in b) is created.
[0025]
These graphics are created in various patterns and symbols in various colors and designs and stored in a database serving as a storage means provided in the control server device 6. The user selects a specific graphic at the time of registration. Then, the user himself / herself memorizes the registered specific figure. The user ID of the user registered in advance and a specific graphic are stored in the authentication database 10 as storage means in association with each other.
[0026]
Next, in step S _4, the control server device 6 creates a timing counter program to match the transmission timing of transmitting the one-time password. On the other hand, the user specifies and registers a specific transmission timing at the time of registration, and the registered specific transmission timing is stored by the user himself. In addition, the user ID of the user registered in advance and a specific transmission timing are stored in the authentication database 10 as storage means in association with each other.
[0027]
Next, in step S _5, together with a plurality of different random numbers are synthesized associated with vertical and horizontal lines of s husband matrix table 12 by synthetic means, the timing counter 16 are combined, in step S _6, FIG. 3 (b) As shown in FIG. 6, a matrix table 12 and a timing counter 16 are displayed in a list on a display screen serving as a display means of various terminals handled by the user.
[0028]
The type of each dummy graphic and the position of each graphic including a specific graphic created in the matrix table 12 shown in FIG. 3B are changed as needed at each user access timing. Also, the random numbers associated with the respective vertical and horizontal lines of the matrix table are changed as needed at each access timing of the user.
[0029]
Next, in step S _7, the user recognizes the position of a specific figure itself from the matrix table 12 shown in FIG. 3 (b), which is listed on the display screen of the various terminals is stored, the specific Recognize the random numbers displayed on the vertical and horizontal lines of the matrix table 12 including the figure.
[0030]
For example, in the matrix table 12 shown in FIG. 3B, if a specific figure is a “☆” mark, it is displayed on a vertical line of the matrix table 12 (a vertical line in FIG. 3B). The random number is recognized as “87”, and the random number displayed on the horizontal line (the horizontal line in FIG. 3B) of the matrix table 12 can be recognized as “68”.
[0031]
The user knows the one-time password derived as described above as a password, inputs the random number “87” displayed on the vertical line of the matrix table 12 in the input 1 column of the password input screen 13, and inputs it in the input 2 column. Is input the random number "68" displayed on the horizontal line. At this time, the random number input to the password input screen 13 is displayed by a hidden character such as an asterisk, and there is no possibility that the random number is seen by another person.
[0032]
Thereafter, the user clicks the click button 14 shown in FIG. 3B at a specific timing stored therein while visually checking the timing counter 16 shown in FIG. 3B, and verifies the one-time password at a predetermined timing. This is transmitted to the authentication server device 9 serving as a means.
[0033]
The timing counter 16 shown in FIG. 3B is an image of a clock hand. For example, when the user clicks the click button 14 with a predetermined hand direction, the user can visually recognize the direction of the hand and points in the direction. Is transmitted to the authentication server device 9 serving as matching means.
[0034]
Other timing conditions include, for example, clicking the click button 14 at a timing when the hand points to an odd number of hours, clicking the click button 14 at a timing when the hand points to a range from 6:00 to 9:00, Various timing conditions can be set, such as clicking the click button 14 when the hand points to the 3 o'clock position, or clicking the click button 14 until the hand rotates once. The image of the needle direction is preferable because it is easy to memorize. Further, a timing condition can be set in various forms such as displaying a digital counter (not shown) and clicking the click button 14 at a timing when a predetermined digital value is reached.
[0035]
On the other hand, in the authentication server device 9, the user stored in the authentication database 10 based on the user ID input and transmitted using the user ID input screen 11 shown in FIG. The graphic associated with the user ID and the transmission timing are specified, and the control server device 6 specifies a random number associated with the graphic.
[0036]
Then, in step S _8, the one-time password and the timing counter value to be used from that particular random number, a one-time password and click button 14 consists of a random number entered by using the password input screen 13 by the user himself input means The value of the timing counter corresponding to the clicked timing is compared to determine whether or not they match.
[0037]
In step S _9, if both one-time password and the timing counter value of the match, authenticates that the user himself, the program server device 15 accesses a particular web service provided on the Internet 5 allow (step S _10). If either the one-time password or the timing counter value does not match, the access is denied, and the display returns to the matrix table 12, the timing counter 16, and the password input screen 13 shown in FIG. prompt to re-enter the one-time password (step S _11). At this time, the positions and types of the figures and the random numbers shown in the matrix table 12 shown in FIG. 3B are updated and changed.
[0038]
In the above-described embodiment, a case is shown in which one type of matrix table 12 shown in FIG. 3B is displayed, and random numbers input in the input 1 and input 2 columns of the password input screen 13 are arranged as a one-time password. Although a plurality of different matrix tables 12 are sequentially displayed, input fields of the password input screen 13 are provided for a plurality of other fields, and random numbers input to the plurality of input fields are arranged to form a one-time password. You may.
[0039]
Alternatively, a password obtained by arranging the random numbers may be encrypted and transmitted / received using a hash function, and the authentication server device 9 serving as a verification unit may decrypt and verify the data cryptographically converted using the hash function.
[0040]
Here, the hash function is a function that converts a plaintext of any length into data of a fixed length by thinning out and converting it by a certain method, and there is no inverse function. However, once the data has been compressed by the hash function, it cannot be returned to the original plaintext again, and high security can be ensured.
[0041]
【The invention's effect】
Since the present invention has the above-described configuration and operation, it is possible to memorize a figure that is easy to memorize so that only the user himself / herself can easily know a one-time password that is changed at any time, and the stored figure can be directly read. Since neither input nor click is performed, plagiarism due to eavesdropping can be prevented.
[0042]
Further, by using the timing of transmitting the one-time password as the authentication key, the authentication accuracy can be further improved, and the security can be further improved.
[Brief description of the drawings]
FIG. 1 is a block diagram showing an example of a configuration of a control system of an authentication system according to the present invention.
FIG. 2 is a flowchart showing how a user is authenticated using the authentication system according to the present invention.
FIG. 3 is a diagram illustrating an example of a display screen.
[Explanation of symbols]
DESCRIPTION OF SYMBOLS 1 ... Desktop computer 2 ... Notebook computer 3 ... PDA and WEB pad 4 ... PHS and mobile telephone 5 ... Internet 6 ... Server device 7 ... Router 8 ... Firewall 9 ... Authentication server device
10… Authentication database
11 ... User ID input screen
12 ... Matrix table
13… Password input screen
14 ... Click button
15… Program server device
16 ... Timing counter

Claims (2)

An authentication system for authenticating a user,
Random number generation means for calculating a random number to generate a plurality of different random numbers;
A matrix table creating means for listing a plurality of different figures and creating a matrix table;
Combining means for associating each random number generated by the random number generating means with each vertical and horizontal line of the matrix table created by the matrix table creating means;
Display means for displaying a list of random numbers and a matrix table associated with the synthesizing means,
Input means for inputting a user ID and random numbers of vertical and horizontal lines of the matrix table corresponding to a specific graphic associated with the user ID of the matrix table displayed on the display means;
Collating means for collating a random number input by the input means with a random number associated with a specific graphic corresponding to the user ID by the synthesizing means;
An authentication system comprising: A transmission timing determining unit that determines a timing of transmitting a random number input by the input unit to the matching unit,
A timing counter is displayed on the display means,
2. The method according to claim 1, wherein the comparing unit compares the transmission timing of the random number determined by the transmission timing determining unit based on the timing counter with a specific timing corresponding to the user ID. 3. Authentication system.

Images