JP2005222411A - Authentication system and individual identification method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an authentication system that can ensure strong individual identification based on key input intervals. <P>SOLUTION: At personal registration, input intervals are measured between individual password codes successively input from a keyboard to form a password to be registered, the distributions of the input intervals between the individual password codes are collected from the measurement results, and standard input intervals are calculated between the individual password codes from the distributions. At individual identification, input intervals are measured between individual password codes successively input from the keyboard to form a password to be matched, and the measured input intervals between the individual password codes are evaluated for authentication with reference to the standard input intervals between the individual password codes. If the evaluation ends in successful authentication, the input interval distributions are updated with the measurement results of the input intervals between the password codes matched. In response to the update, the standard input intervals are recalculated. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

  The present invention relates to an authentication system and a user authentication method for performing user authentication using a password on a computer.

  In an information terminal such as a personal computer, user authentication using a password is performed. Security problems due to password leakage have been pointed out in user authentication using passwords. Password verification is performed using a character code string as a target of verification. However, in such password verification, it is difficult to sufficiently protect against fraudulent acts such as impersonation by a leaked password.

  As a countermeasure, there is a method that uses data generated based on timing such as the keyboard tapping time interval for password entry as a verification parameter, as well as targeting character code strings. To do. According to this method, even if a password is leaked, it is stochastically difficult for others to reproduce even the original user's tapping time interval pattern. Can be minimized, and security can be improved (see, for example, Patent Document 1).

Further, in this Patent Document 1, in consideration of the change in the pressing time interval depending on the age, the years of use of the personal computer, etc., the user is requested to input personal biometric information, and registered based on the input personal biometric information. By correcting the punching time interval data, the occurrence of errors in personal authentication is reduced.
JP 2002-304375 A

  However, there is no doubt that age and the age of the computer are factors that affect the input operation speed of a personal keyboard. However, when individual differences are taken into account, the registration data for each user (pattern of tapping time interval) Therefore, it is necessary to secure a large margin considering individual differences. As a result, this leads to a reduction in the protection against impersonation by the person himself / herself.

  The present invention has been made to solve such problems, and an object of the present invention is to provide an authentication system and a user authentication method capable of performing user authentication based on a key input interval with high strength.

  In order to achieve such an object, an authentication system according to the present invention includes a first password that measures an input interval between password codes constituting passwords to be registered, which are sequentially input through a keyboard at the time of personal registration. A distribution of input intervals for each password / code is sampled from the measurement results of the code input interval measuring means and the first password / code input interval measuring means, and based on the distribution of these input intervals, Reference input interval calculation means for calculating the reference input interval for each password / code, storage means for storing the input interval distribution and reference input interval for each password / code, and input sequentially through the keyboard at the time of personal authentication Second, which measures the input interval between each password code constituting the password to be verified With respect to the input interval between each password code measured by the password code input interval measuring means and the second password code input interval measuring means, the reference input interval stored in the storage means is used as a reference. When the authentication success is determined by the password / code input interval evaluation unit for performing the evaluation for authentication and the password / code input interval evaluation unit, the measurement result of the second password / code input interval measurement unit is A distribution updating unit that updates a distribution of input intervals for each of the password codes in the storage unit and causes the reference input interval calculation unit to recalculate the reference input interval. Is.

  According to the present invention, in the personal authentication based on the characteristics of the individual user appearing in the password code input interval, the reference input interval for each password code is a password value measured at each password input at the time of personal authentication. Since it is automatically updated based on the code input interval, it is automatically updated to the appropriate reference input interval according to the tendency that the input operation speed gradually increases as the user repeats the same password input operation, The input interval is gradually narrowed to a narrow range. As a result, the strength of personal authentication based on the characteristics of the individual user appearing in the password code input interval is gradually increased, and security can be improved by the combined use with personal authentication by general password verification.

  In addition, another authentication system according to the present invention displays a random type character on the screen of the display device at the time of personal registration, and in accordance with this, the input interval between each random code sequentially input through the keyboard is displayed. First random code input interval measuring means for measuring, and a distribution of input intervals between random codes are collected from the measurement results of the first random code input interval measuring means, and based on this distribution, random Reference input interval calculation means for calculating a reference input interval between codes, storage means for storing the input interval distribution and the reference input interval for each of the random codes, and a random display on the screen of the display device at the time of personal authentication Inputs between each random code entered sequentially through the keyboard along with the display of various characters Second random code input interval measuring means for measuring the interval, and each random code input interval measured by the second random code input interval measuring means is stored in the storage means. Random code input interval evaluation means for performing an evaluation for authentication based on a reference input interval; and when the authentication success is determined by the random code input interval evaluation means, the second random code input interval measurement means Distribution update means for updating the distribution of the input intervals between the random codes of the storage means with the measurement result, and causing the reference input interval calculation means to recalculate the reference input interval. To do.

  According to the present invention, the personal authentication based on the characteristics of the individual user appearing in the input interval of the random code is realized by visually capturing the display character and keying it. Also in this authentication, when the user authentication is successful, the reference input interval between random codes is automatically updated based on the input interval between each random code sequentially input through the keyboard at the time of user authentication. Therefore, the user is automatically updated to an appropriate reference input interval according to the tendency of the user to become skilled in keyboard input operations and gradually increase the input speed, and the reference input interval is gradually narrowed to a narrow range. As a result, the strength of the personal authentication based on the characteristics of the individual user appearing in the random code input interval is gradually increased. For example, by using the personal authentication based on the characteristics of the individual user appearing in the password code input interval. The strength of personal authentication can be further increased.

  According to the authentication system and the personal authentication method of the present invention, it is possible to perform personal authentication based on the key input interval with high strength, and to improve security.

  Embodiments of the present invention will be described below with reference to the drawings.

  FIG. 1 is a block diagram showing a configuration of an authentication system according to an embodiment of the present invention.

  As shown in the figure, this authentication system 100 is an embodiment in the case where it is constructed in one computer system, and a computer main body 1, a monitor 2 and a keyboard 3 which are peripheral devices of the computer main body 1 are essential. As hardware configuration. Programs and parameters necessary for causing the computer system to function as the authentication system 100 are stored in a readable / writable storage device 4 such as a hard disk drive or a ROM (Read Only Memory) 5 of the computer main body 1. An arithmetic control unit 6 such as a CPU (Central Processing Unit) which is a core component in the computer main body 1 executes a program using a main memory 7 such as a RAM (Random Access Memory) as a work area. Perform calculation and control. In the computer main body 1, the ROM 5, the calculation control unit 6, and the main memory 7 are connected through a bus 8. A storage device 4, a monitor 2, and a keyboard 3 are connected to the bus 8 through interfaces (I / F) 9, 10, and 11, respectively.

  A program for causing the computer system to function as the authentication system 100 may be introduced as an application program that operates on an OS (Operating System), for example, or a BIOS (Basic Input Output System) that the computer main body 1 has. It may be incorporated as a program incorporated in the program. In addition, the specific implementation form of the program does not matter.

  FIG. 2 is a block diagram showing a functional configuration of the authentication system 100.

  As shown in the figure, the authentication system 100 includes a registration unit 110, a verification unit 120, and a data storage unit 130.

  The registration unit 110 includes a password / code input interval registration mechanism 111 and a random code input interval registration mechanism 112.

  The password code input interval registration mechanism 111 accepts each character code sequentially input through the keyboard 3 at the time of personal registration as each password code constituting the password to be registered, and the input password is entered by the user. The password / code receiving unit 113 registered in the data storage unit 130 together with the ID, the password / code input interval measuring unit 114 for measuring the password / code input interval sequentially received by the password / code receiving unit 113, and the measurement A password code reference input interval calculation unit 115 that collects a distribution of input intervals for each password code from the results and calculates a reference input interval for each password code based on these distributions.

  The random code input interval registration mechanism 112 sequentially displays a random character display unit 116 that sequentially displays a random number of characters of a specified number one by one at random positions on the screen of the monitor 2, and sequentially on the screen of the monitor 2. An input random code receiving unit 117 that receives, as a random code, a character code sequentially input from the user who visually captures the displayed character through the keyboard 3, and a random code that is sequentially received by the input random code receiving unit 117 Random code input interval measuring unit 118 for measuring the code input interval, and random code input interval distribution measured by random code input interval measuring unit 118 are collected, and random code is extracted based on this distribution. Random code reference input interval calculation to calculate the reference input interval And a section 119.

  In the data storage unit 130, as shown in FIG. 3, the distribution information 201 of the input interval for each password / code and the reference input interval information 202 obtained by the password / code input interval registration mechanism 111, The random code input interval distribution information 203 obtained by the random code input interval registration mechanism 112 and the reference input interval information 204 thereof are stored in association with the user ID 205 and the password 206 input by the user.

  Next, the configuration of the matching unit 120 will be described. The verification unit 120 includes a password / code input interval verification mechanism 122 and a random code input interval verification mechanism 123.

  The password / code input interval verification mechanism 122 includes a password / code receiving unit 124 that receives individual character codes sequentially input through the keyboard 3 at the time of personal authentication as individual password codes constituting a password to be verified, and a password Registered in the password / code input interval measuring unit 125 for measuring the password / code input interval sequentially received by the code receiving unit 124 and the password to be verified and the data storage unit 130 received by the password / code receiving unit 124 Each password code input interval measured by the password code input interval measuring unit 125 and stored in the data storage unit 130 in association with the password when the passwords match with each other.・ Between cords The password / code input interval evaluation unit 127 that performs an evaluation for authentication based on the reference input interval information 202 of the password, and the measurement result of the password / code input interval measurement unit 125 when authentication OK is determined in this evaluation The input interval distribution information 201 for each password / code stored in the data storage unit 130 is updated, and the password / code reference input interval calculation unit 115 is recalculated with the password / code reference input interval calculation unit 115. And a distribution updating unit 128 to be executed.

  The random code input interval matching mechanism 123 is a random character display unit 129 that continuously displays a random number of characters of a predetermined number one by one at random positions on the screen of the monitor 2 in the same manner as when the person is registered. An input random code receiving unit 131 that receives a character code input through the keyboard 3 from a user who visually captures a character displayed on the screen of the monitor 2 as a random code to be verified; and an input random code When the random code input interval measuring unit 132 that measures the input interval of the random code received by the receiving unit 131 matches the display character and the random code received by the input random code receiving unit 131, Each measured by the random code input interval measuring unit 132 Random code input interval evaluation for evaluating the random code input interval based on the random code reference input interval information 204 stored in the data storage unit 130 in association with the input password. The random code input interval distribution information 203 in the data storage unit 130 is updated with the measurement results of the unit 133 and the random code input interval measurement unit 132 when authentication OK is determined in this evaluation, and the random code And a distribution updating unit 134 that causes the reference input interval calculation unit 119 to recalculate the reference input interval of the random code.

  Next, the operation of the authentication system 100 will be described.

  FIG. 4 is a flowchart showing processing steps of personal registration and personal authentication in the authentication system 100.

  First, an operation when the registration unit 110 performs personal registration will be described.

  Upon receiving a registration request from the user in step 401, the authentication system 100 activates the password / code input interval registration mechanism 111 of the registration unit 110.

  The password / code input interval registration mechanism 111 first displays on the monitor 2 a screen for accepting input of a password for registration. Subsequently, the password code receiving unit 113 sequentially receives each character code input by the user using the keyboard 3 as each password code constituting the password to be registered (step 402).

  Next, the password / code input interval registration mechanism 111 measures the password / code input interval sequentially received by the password / code receiving unit 113 by the password / code input interval measuring unit 114 (step 403).

  For example, if "p_4t7" is entered as the password, the input interval between "p" and "4", the input interval between "4" and "_", the input interval between "_" and "t", and Four time data of the input interval between “t” and “7” are obtained.

  The password / code input interval registration mechanism 111 repeats the above-described processing of Step 402 and Step 403 a predetermined number of times (N times) (Step 404), and the password / code input interval registration mechanism 111 determines the password from the input interval of the password code measured each time. The code reference input interval calculation unit 115 collects the distribution of input intervals for each password and code, and records the distribution information 201 in the data storage unit 130 (step 405).

  FIG. 5 to FIG. 8 are diagrams showing examples of input interval distributions between passwords and codes. 5 is an input interval distribution between “p” and “4”, FIG. 6 is an input interval distribution between “4” and “_”, and FIG. 7 is an interval between “_” and “t”. FIG. 8 shows an example of the input interval distribution between “t” and “7”. In either case, the horizontal axis represents time, and the vertical axis represents the count value.

  The password code reference input interval calculation unit 115 calculates a reference input interval for each password and code based on such an input interval distribution for each password and code (step 406).

  As an example of a method for calculating a reference input interval between passwords and codes, there is a method in which a range of frequently occurring input intervals is used as a reference input interval. For example, the input time interval data on the minimum time side and the maximum time side are equally deleted by the count value of a certain ratio with respect to the total count value, and the range of time in which the data remains is defined as the reference input interval. Specifically, as shown in FIG. 9, when the total count value is 10, for example, if the input interval data on the minimum time side and the maximum time side are equally deleted by the count value of 20% of the total, The original distribution shown in FIG. 9A changes to the distribution shown in FIG. In this example, an input interval range of 500 ms to 800 ms is obtained as the reference input interval.

  The password / code input interval registration mechanism 111 registers the information 202 of the reference input interval for each password / code calculated by the password / code reference input interval calculation unit 115 in this manner in the data storage unit 130. The process of the password / code input interval registration mechanism 111 is thus completed.

  Subsequently, the random code input interval registration mechanism 112 is activated. First, the random code input interval registration mechanism 112 continuously displays a random number of characters of a predetermined number one by one at random positions on the screen of the monitor 2 on the random character display unit 116 (step 407). ). The display position of the character on the monitor screen is not limited to being random, and may be displayed at a fixed position at all times.

  The user visually captures the characters sequentially displayed on the screen of the monitor 2, and successively presses the keys of the keyboard 3 corresponding to the respective display characters. As a result, the random code input interval registration mechanism 112 receives the character code input from the user through the keyboard 3 as a random code at the input random code reception unit 117 (step 408).

  Subsequently, the random code input interval registration unit 112 uses the random code input interval measurement unit 118 to determine the random code input interval measurement unit 118 that receives the random code input intervals sequentially received by the input random code reception unit 117. (Step 409). For example, when "w", "t", "5", and "h" are displayed in order as display characters, the input interval between "w" and "t", and "t" and "5" Three time data of the input interval, “5” and “h”, are obtained. At this time, the display characters are displayed one by one at regular time intervals, and each time the user can visually recognize the character, the user continuously presses the corresponding key. Character display switching is performed at regular time intervals regardless of key input. At this time, the displayed character may be displayed until the key input corresponding to the last character is completed, or may be displayed for a certain period of time.

  The random code input interval measurement unit 118 may simply output the result of measuring the random code input interval, but the random code input interval is naturally affected by the character display interval. Therefore, the result of subtracting the character display interval from the measurement result of the random code input interval may be output as the true measurement result.

  Subsequently, the random code reference input interval calculation unit 119 determines whether or not the random code sequence received by the input random code reception unit 117 matches the display character sequence (step 410). In this case, the random code input interval measured by the random code input interval measuring unit 118 this time is regarded as valid. If the random code sequence received by the input random code receiving unit 117 and the display character sequence do not match, the identity registration process ends as NG.

  The processing from step 407 to step 410 is repeated a predetermined number of times (M) (step 411), and the random code input interval measured every time by the random code input interval measuring unit 118 is regarded as valid. If so, the random code reference input interval calculation unit 119 is activated.

  The random code reference input interval calculation unit 119 collects the distribution of random code input intervals measured each time by the random code input interval measurement unit 118 and records the distribution information 203 in the data storage unit 130 ( Step 412). Subsequently, the random code reference input interval calculation unit 119 calculates the reference input interval of the random code based on the distribution information 203 of the input interval of the random code (step 413), and determines the reference input interval of the random code. Information 204 is recorded in the data storage unit 130.

  As an example of a method for calculating the reference input interval between random codes, there is a method in which a range of input time having a high occurrence frequency is used as the reference input interval. For example, the input interval data on the minimum time side and the input interval data on the maximum time side are deleted equally by a certain percentage of the count value with respect to the total count value, and the time range where the data remains is used as the reference input interval. Ask. Specifically, as shown in FIG. 10, when the total count value is 60, the input interval data on the minimum time side and the input interval data on the maximum time side are, for example, up to 12 corresponding to 20% of the total count value. If they are deleted equally, the original distribution shown in FIG. 10A changes to the distribution shown in FIG. In this example, an input time range of 700 ms to 1300 ms is obtained as a random code reference input interval.

  Next, an operation when the verification unit 120 performs personal authentication will be described.

  When the authentication system 100 receives a verification request for user authentication from the user in step 401, the authentication system 100 activates the password / code input interval verification mechanism 122 of the verification unit 120.

  The password / code input interval verification mechanism 122 first displays a screen for accepting input of a verification password on the monitor 2. Subsequently, the password code receiving unit 124 sequentially receives individual character codes input from the user using the keyboard 3 as individual password codes constituting a password to be verified (step 414).

  Subsequently, the password / code input interval collating mechanism 122 measures the password / code input interval sequentially received by the password / code receiving unit 124 at the password / code input interval measuring unit 125 (step 415).

  Next, the password / code input interval collating mechanism 122 collates the password to be collated received by the password / code accepting unit 124 with the password registered in the data storage unit 130 (step 416). If it is determined by this collation that the values match, the measurement result of the password / code input interval measuring unit 125 is regarded as valid and passed to the password / code input interval evaluating unit 127.

  The password code input interval evaluation unit 127 calculates the password code input interval measured by the password code input interval measurement unit 125 between the password codes stored in the data storage unit 130 in association with the password. Evaluation for identity authentication is performed based on the reference input interval information 202 for each (step 417).

For example, if “p_4t7” is entered as the password to be verified, the input interval between “p” and “4”, the input interval between “4” and “_”, and “_” and “t” Four input intervals are measured, including the input interval between “t” and the input interval between “t” and “7”. Here, the input interval between “p” and “4” will be described. When the input interval range of 500 ms to 900 ms is defined as the reference input interval as shown in FIG. If the input interval between “p” and “4” of the target password is in the range of 500 ms to 900 ms, it is determined that the input interval between “p” and “4” is OK, and 500 ms to If it is not in the range of 900 ms, it is determined as NG. In this way, the input interval between "p" and "4", the input interval between "4" and "_", the input interval between "_" and "t", "t" For each of the input intervals between "7" and "7", evaluation for personal authentication is performed based on the reference input interval information 202 for each password code.

  If all the evaluations between the passwords and the codes are determined to be OK, the authentication OK for the verification target password is determined. If it is determined as NG in the evaluation between one or more passwords / codes, the authentication NG for the verification target password is determined, and the verification process ends.

  When it is determined that authentication for the verification target password is OK, each of the password / code input interval distribution updating unit 128 stores the measurement result of password / code input interval measuring unit 125 and stored in data storage unit 130. The information 201 of the input interval distribution for each password / code is updated (step 418).

  For example, as shown in FIG. 11, when the measurement result of the input interval within the range of 500 ms to 600 ms is obtained from the distribution of FIG. 11A, the count value of 500 ms to 600 ms is incremented, Updated to the distribution shown in b). In response to this update, the password / code reference input interval calculation unit 115 updates the reference input interval information 202 for each password / code.

  In the example of FIG. 11, the total count value is 11, and the input interval data on the minimum time side and the input interval data on the maximum time side cannot be equally deleted by the count value of 20% of the total. . In this case, as shown in (c) of FIG. 11, the input interval data on the minimum time side and the input interval data on the maximum time side are deleted equally, with the count value for 20% of the total as the upper limit. . Therefore, in the example of FIG. 11, the password code reference input interval information 202 is not updated.

  In the example of FIG. 12A, the count value for 20% of the total is 3, and it is inevitable to delete the input interval data on the minimum time side and the input interval data on the maximum time side equally. . Even in such a case, as shown in FIG. 5B, the input interval data on the minimum time side and the input interval data on the maximum time side are equally deleted with the count value for 20% of the whole as the upper limit. That's fine.

  If the authentication OK for the verification target password is determined, then the random code input interval verification mechanism 123 is activated. In the random code input interval matching mechanism 123, first, the random character display unit 129 continuously applies a random number of characters of a predetermined number one by one at random positions on the screen of the monitor 2 in the same manner as at the time of registration. It is displayed (step 419). The display position of the character on the monitor screen is not limited to being random, and may be displayed at a fixed position at all times.

  The user visually captures a specified number of characters sequentially displayed on the screen of the monitor 2, and successively presses the keys of the keyboard 3 corresponding to the respective display characters. As a result, the random code input interval matching mechanism 123 sequentially receives a specified number of character codes input from the user through the keyboard 3 by the input random code receiving unit 131 (step 420).

  Subsequently, the random code input interval collating mechanism 123 measures the random code input interval sequentially received by the input random code receiving unit 131 by the random code input interval measuring unit 132 (step 421).

  Next, the random code input interval verification mechanism 123 determines whether the random code input interval evaluation unit 133 matches the random code sequence received by the input random code reception unit 131 with the display character sequence. (Step 422), and in the case of a mismatch, the collation process ends as NG. If they match, the random code input interval evaluation unit 133 associates the input password of each random code measured by the random code input interval measurement unit 132 with the input password in the data storage unit 130. Based on the stored random code reference input interval information 204, an evaluation for personal authentication is performed (step 423). For example, as shown in FIG. 10B, when a time range of 700 ms to 1300 ms is defined as the reference input interval, if all the input intervals of each measured random code are within this range, authentication is performed. If it is determined to be OK and the measured random code input interval is not within the above time range, the authentication is determined to be NG and the verification process is terminated. At this time, if 80% of all the random code input interval measurement results are within the above time range, the authentication OK may be determined. Alternatively, an average value of random code input intervals may be evaluated.

  If the authentication OK is determined for each random code input interval, then the distribution update unit 134 uses the random code input interval measurement unit 132 to store the random number stored in the data storage unit 130. The code input interval distribution information 203 is updated (step 424). In response to this update, the random code reference input interval calculation unit 119 updates the random code reference input interval information 204.

  In addition, when 80% of all random code input interval measurement results are within the above time range, if the authentication OK is determined, only the random code input interval measurement results within the above time range are used. The information may be added to the random code input interval distribution information 203.

  As described above, according to the authentication system 100 of the present embodiment, the following effects can be obtained.

  In the personal authentication based on the individual characteristics of the user appearing in the password code input interval, the reference input interval information 202 for each password code is the password code input interval measured every time the password is input from the user. Automatically updated to the appropriate reference input interval information 202 according to the tendency that the user gradually increases the input speed by repeating the same password input operation, and the reference input interval is gradually increased. It is narrowed down to a narrow area. As a result, the strength of personal authentication based on the characteristics of the individual user appearing in the password code input interval is gradually increased, and security can be improved by the combined use with personal authentication by general password verification.

  In addition to user authentication based on the personal characteristics of the user appearing at the password code input interval, by visually capturing the display character and keying it in, the user's individual appearing at the random code input interval is displayed. Since the personal authentication based on the characteristics is continuously performed, and the personal authentication is OK only after two authentication processes are passed, the strength of the personal authentication is further increased.

  It should be noted that the present invention is not limited to the above-described embodiment, and various modifications can be made without departing from the scope of the present invention.

It is a block diagram which shows the structure of the authentication system concerning one Embodiment of this invention. It is a block diagram which shows the functional structure of the authentication system concerning this invention. It is a figure which shows the memory content of the data storage part of the authentication system of FIG. It is a flowchart which shows each process sequence of identity registration and identity authentication. It is a figure which shows the example of the input space | interval distribution between the first password codes. It is a figure which shows the example of the input interval distribution between the 2nd password codes. It is a figure which shows the example of the input space | interval distribution between the 3rd password codes. It is a figure which shows the example of the input space | interval distribution between the 4th password codes. It is a figure for demonstrating the calculation method of the reference | standard input space | interval between password codes. It is a figure for demonstrating the calculation method of the reference | standard input space | interval between random codes. It is a figure which shows the example of the update of the input interval distribution between passwords, and the calculation of the reference | standard input interval according to this update. It is a figure which shows another example of the update of the input interval distribution between passwords, and the calculation of the reference | standard input interval according to this update.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 1 ... Computer main body, 2 ... Monitor, 3 ... Keyboard, 4 ... Memory | storage device, 6 ... Operation control part, 100 ... Authentication system, 110 ... Registration part, 111 ... Password code input interval registration mechanism, 112 ... Random code input Interval registration mechanism, 113 ... Password code reception unit, 114 ... Password code input interval measurement unit, 115 ... Password code reference input interval calculation unit, 116 ... Random character display unit, 117 ... Input random code reception unit, DESCRIPTION OF SYMBOLS 118 ... Random code input interval measurement part, 119 ... Random code reference | standard input space | interval calculation part, 120 ... Collation part, 122 ... Password code input space collation mechanism, 123 ... Random code input space collation mechanism, 124 ... Password Code receiving unit, 125... Password / code input interval measuring unit, 12 ... password / code input interval evaluation unit, 128 ... distribution update unit, 129 ... random character display unit, 130 ... data storage unit, 131 ... input random code reception unit, 132 ... random code input interval measurement unit, 133 ... Random code input interval evaluation unit, 134... Distribution update unit, 201... Input interval distribution information for each password code, 202... Reference input interval information for each password code, 203. Input interval distribution information, 204... Random code reference input interval information, 206... Password.

Claims (4)

First password code input interval measuring means for measuring an input interval between each password code constituting a password to be registered, which is sequentially input through a keyboard at the time of registration
The distribution of the input interval for each password code is sampled from the measurement result of the first password code input interval measuring means, and the reference for each password code is based on the distribution of these input intervals. A reference input interval calculating means for calculating an input interval;
Storage means for storing a distribution of input intervals for each password code and a reference input interval;
Second password code input interval measuring means for measuring an input interval between each password code constituting a password to be verified, which is sequentially input through a keyboard at the time of personal authentication;
A password for performing an evaluation for authentication based on the reference input interval stored in the storage unit with respect to the input interval between the password codes measured by the second password code input interval measuring unit. -Code input interval evaluation means,
Distribution of the input interval for each password code of the storage means based on the measurement result of the second password code input interval measuring means when the authentication success is determined by the password code input interval evaluating means And a distribution updating unit that updates the reference input interval calculation unit and causes the reference input interval calculation unit to recalculate the reference input interval. First random code input interval measuring means for displaying random types of characters on the screen of the display device at the time of personal registration and measuring the input interval between the random codes sequentially input through the keyboard in accordance with the character. When,
A reference input interval calculating means for collecting a distribution of input intervals between random codes from a measurement result of the first random code input interval measuring means and calculating a reference input interval between random codes based on the distribution. When,
Storage means for storing a distribution of input intervals for each random code and a reference input interval;
Second random code input interval measuring means for displaying a random character on the screen of the display device at the time of personal authentication and measuring the input interval between the random codes sequentially input through the keyboard in response to the character. When,
Random code for performing evaluation for authentication on the basis of the reference input interval stored in the storage unit with respect to the input interval of each random code measured by the second random code input interval measuring unit Input interval evaluation means;
When the successful authentication is determined by the random code input interval evaluation unit, the distribution of the input intervals between the random codes of the storage unit is updated with the measurement result of the second random code input interval measurement unit, A distribution updating unit that causes the reference input interval calculation unit to recalculate the reference input interval; A method for authenticating a user in a computer having a calculation control unit, a data storage unit, and a keyboard, wherein the calculation control unit includes:
Measure the input interval between each password code that constitutes the password to be registered that was sequentially entered through the keyboard at the time of personal registration, and collect the distribution of the input interval between each password code from this measurement result. Record in the data storage unit, calculate a reference input interval for each password code based on the distribution, and record in the data storage unit,
The input interval between each password code constituting the password to be verified that is sequentially input through the keyboard at the time of personal authentication is measured, and the measured input interval between each password code is stored in the data storage unit. Evaluation for authentication is performed based on the reference input interval for each recorded password code, and when the authentication is determined to be successful in this evaluation, each password code constituting the verification target password Updating the distribution of the input intervals for each of the passwords and codes stored in the data storage unit with the measurement result of the input interval between, and recalculating the reference input interval according to this update Characteristic authentication method. A method for authenticating a user in a computer having a calculation control unit, a data storage unit, a display device, and a keyboard, wherein the calculation control unit includes:
A random character is displayed on the screen of the display device at the time of registration, and an input interval between each random code sequentially input through the keyboard is measured in accordance with the random character. And collecting the input interval distribution between and recording in the data storage unit, and calculating the reference input interval between random codes based on this distribution and recording in the data storage unit,
A random character is displayed on the screen of the display device at the time of personal authentication, and an input interval between each random code sequentially input through the keyboard is measured according to the character. The code input interval is evaluated for authentication based on the reference input interval stored in the data storage unit, and when it is determined that the authentication is successful, each is sequentially input through the keyboard during the authentication. Updating the distribution of the input intervals between the random codes stored in the data storage unit with the measurement result of the input interval between the random codes, and recalculating the reference input interval according to the update. Characteristic authentication method.

Images