JP2006079508A - Program, computer, and data processing method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a program capable of enhancing the reliability of authentication more than usual. <P>SOLUTION: In a terminal 12, a time for inputting input data is measured and a time for inputting data INTD to show the result is transmitted to a server 14 via a network 16. Even if loads on a traffic of the network 16 fluctuates, the server 14 can determine the authenticity of collation results of the input data IND on the basis of the time for inputting data INTD to show the time spent by a user in inputting the input data IND precisely. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to a program, a computer, and a data processing method used in a system for performing user authentication.

For example, in a bank or the like, personal data (input data) that only the user himself / herself can know, such as an ID, password, account number, and date of birth, is input to the terminal device, and the terminal device network the input data to a predetermined server device. The server device authenticates the person by collation.
In such a system, if the personal data leaks, security cannot be maintained. For example, the server device measures the interval at which the characters constituting the personal data are input in the terminal device, and the time is predetermined. The above collation is treated as valid on condition that it is below the threshold. That is, when a person other than the user performs input while looking at the paper, the input time exceeds the threshold value, so that it is determined that the user is an unauthorized user.

JP 2002-157536 A

However, in the conventional system described above, the time from when the operation signal of the terminal device is output to when it is input to the server device varies depending on the load state of the network traffic between the terminal device and the server device. The server device cannot accurately measure the interval at which characters constituting personal data are input.
For this reason, in the above-described conventional system, there is a demand for determining the effectiveness of the collation with higher reliability.

  The present invention has been made in view of the above-described prior art, and in the case where collation is performed by another computer based on the input data input to a predetermined computer and the time required to input the input data, An object of the present invention is to provide a program, a computer, and a data processing method thereof that can further increase the reliability compared to the related art.

  In order to solve the above-described problems of the prior art and achieve the above-described object, a program according to a first aspect of the invention is a computer that transmits input data to another computer that collates input data with registered data. The program executed is a first procedure for displaying a screen for allowing the user to input personal data of the user as the input data, and the input data is based on the screen displayed in the first procedure. A second procedure for measuring an input time required for input; the input data input based on the screen; and input time data indicating the input time measured in the second procedure. And causing the computer to execute a third procedure to be transmitted to the computer.

  A computer according to a second aspect of the present invention is a computer that transmits the input data to another computer that collates the input data with the registered data, and includes an operation means, a display means, an interface, and a control means. The control means displays on the display means a screen for allowing the user to input personal data of the user as the input data, and an input time required for the input data to be input based on the screen And the input data input based on the screen and the input time data indicating the measured input time are transmitted to the other computer via the interface.

  A data processing method according to a third aspect of the invention is a data processing method executed by a computer that transmits the input data to another computer that performs collation between the input data and registered data. A first step of displaying a screen for the user to input as input data; and a second step of measuring an input time required for the input data to be input based on the screen displayed in the first step And a third step of transmitting the input data input based on the screen and the input time data indicating the input time measured in the second step to the other computer.

  A program according to a fourth aspect of the invention is a program executed by a computer that collates the input data received from another computer that inputs personal data of the user as input data with registered data held in advance. A first procedure for receiving from the other computer the input data and input time data indicating a time required for the user to input the input data; and the input data received in the first procedure And the second procedure for determining whether or not the registered data stored in advance by the computer matches, and the time indicated by the input time data received in the first procedure is stored in advance by the computer A third procedure for determining whether or not the time indicated by the threshold data is less than or equal to the time indicated by the threshold data, and the input data and the registered data are identical in the second procedure. And a fourth procedure for determining that the user is valid when it is determined in the third procedure that the time indicated by the input time data is less than or equal to the time indicated by the threshold data. Are executed by the computer.

  A computer according to a fifth aspect of the invention is a computer for collating the input data received from another computer that inputs personal data of a user as input data with previously stored registration data, And an input time data indicating a time required for the user to input the input data, an interface from the other computer, a memory, and a control means. The control means is received by the interface. The input data matches the registration data stored in the memory, and the time indicated by the input time data received by the interface is equal to or less than the time indicated by the threshold data stored in the memory. It is determined that the user is valid for the condition.

  A data processing method according to a sixth aspect of the invention is a data processing method performed by a computer that collates the input data received from another computer that inputs the user's personal data as input data with previously stored registration data. In the first step, the input data and the input time data indicating the time required for the user to input the input data are received from the other computer and received in the first step. A second step of determining whether or not the input data matches the registered data held in advance by the computer; and the time indicated by the input time data received in the first step is: A third step for determining whether or not the threshold data stored in advance is equal to or less than the time, and the input data and the registration data in the second step And determining that the user is valid when it is determined that they match and when it is determined in the third step that the time indicated by the input time data is less than or equal to the time indicated by the threshold data. Process.

  According to the present invention, when collation is performed on another computer based on the input data input to a predetermined computer and the time required to input the input data, the reliability of the collation is further improved compared to the conventional case. It is possible to provide a program, a computer, and a data processing method that can be enhanced.

A processing system according to an embodiment of the present invention will be described below with reference to FIGS.
First, the correspondence between the components of the present embodiment and the components of the present invention will be described.
The terminal device 12 of the present embodiment corresponds to the computer of the first to third aspects of the invention and the other computer of the fourth to sixth aspects of the invention.
The server 14 of this embodiment corresponds to another computer of the first to third aspects of the invention and a computer of the fourth to sixth aspects of the invention.
The program PRG1 corresponds to the program of the invention of the first aspect, and the program PRG2 corresponds to the program of the invention of the fourth aspect.
Also, the input data IND of the present embodiment corresponds to the input data of the present invention, and the input time data INTD of the present embodiment corresponds to the input time data of the present invention.

Step ST1 shown in FIG. 5 corresponds to the first procedure of the invention of the first aspect and the first step of the invention of the third aspect.
Step ST2 shown in FIG. 5 corresponds to the second step of the first aspect of the invention and the second step of the third aspect of the invention.
Step ST4 shown in FIG. 5 corresponds to the third procedure of the first aspect of the invention and the third step of the third aspect of the invention.
2 corresponds to the operation means of the invention of the second aspect, the display section 44 corresponds to the display means of the invention of the second aspect, and the interface 41 of the invention of the second aspect. Corresponding to the interface, the CPU 45 corresponds to the control means of the invention of the second aspect.

Step ST11 shown in FIG. 7 corresponds to the first procedure of the invention of the fourth aspect and the first step of the invention of the sixth aspect.
Step ST12 shown in FIG. 7 corresponds to the second procedure of the invention of the fourth aspect and the second step of the invention of the sixth aspect.
Step ST13 shown in FIG. 7 corresponds to the third procedure of the invention of the fourth aspect and the third step of the invention of the sixth aspect.
Steps ST14 and ST15 shown in FIG. 7 correspond to the fourth procedure of the fourth aspect of the invention and the fourth step of the sixth aspect of the invention.
6 corresponds to the memory of the invention of the fifth aspect, the interface 81 corresponds to the interface of the invention of the fifth aspect, and the CPU 85 corresponds to the control means of the invention of the fifth aspect. ing.

FIG. 1 is an overall configuration diagram of a processing system 1 according to an embodiment of the present invention.
The processing system 1 illustrated in FIG. 1 includes, for example, a terminal device 12 and a server 14.
The terminal device 12 displays an input screen, measures the input time of the input data (personal data) input by the user based on the input screen, and inputs the input time data INTD and the input data IND indicating the result into the network 16. To the server 14 via
The server 14 determines that the user is valid on the condition that the input data IND matches the predetermined registration data RG and that the time indicated by the input time data INTD is equal to or shorter than the time indicated by the predetermined threshold data. Certify.
The network 16 is, for example, a network whose data transmission time varies depending on traffic load conditions such as the Internet.

Hereinafter, the terminal device 12 and the server 14 will be described in detail.
[Terminal device 12]
FIG. 2 is a configuration diagram of the terminal device 12 shown in FIG.
As illustrated in FIG. 2, the terminal device 12 includes, for example, an interface 41, an operation unit 42, a memory 43, a display unit 44, and a CPU (Central Processing Unit) 45.
The interface 41 transmits input data IND and input time data INTD described later to the server 14 via the network 16.
The operation unit 42 is input operation means such as a keyboard and a mouse.
When the user operates the operation unit 42, personal data of the user is input.
The memory 43 stores the program PRG1 and various data used for the processing of the CPU 45.
The display unit 44 displays an input screen to be described later under the control of the CPU 45.
The CPU 45 executes the program PRG1 read from the memory 43, and comprehensively controls the operation of the terminal device 12 according to the program PRG1.

The CPU 45 implements the electronic form function shown in FIG. 3 according to the program PRG2.
The electronic form function is a tool (a program that runs on a general-purpose browser) that implements business processes executed in a network environment in place of conventional paper forms. Provides functions such as output and provides a mechanism that is easy to understand and has low input load, such as input navigation function, data error input check function, automatic calculation function, database reference function, etc. It is a function to do.
As shown in FIG. 3, the electronic form function realized by the CPU 45 includes, for example, a GUI (Graphical User Interface) display function 61, a calculation function 62, an error check function 63, a function process control function 64, and a CGI (Common Gateway Interface). There are an interlocking function 65 and an electronic signature function 66.
The GUI display function 61 performs control to display on the display unit 44 a GUI screen for inputting user personal data such as the input screens DISP1, DISP2, and DISP3 shown in FIG.
For example, the GUI display function 61 randomly selects and reads out a question data group stored in the memory 43 using a plurality of electronic forms, and displays an input screen corresponding to the group on the display unit 44.
In FIG. 4, an input screen DISP1 is a screen for inputting the user's address, an input screen DISP2 is a screen for inputting the user's date of birth, and an input screen DISP3 is a screen for inputting the user's office and affiliation. .

The calculation function 62 measures the input time of personal data (input data) input by the user operating the operation unit 42, and generates input time data INTD indicating the result.
The calculation function 62 measures the input time of all items, the input time of each item, or the character input time interval on each of the input screens DISP1 to DISP1.

The error check function 63 determines whether or not there is an error in the input format of the data input on the basis of the input screens DISP1 to DISP1. If it is determined that there is an error, the error check function 63 performs a warning process to that effect. Do.
The functional process control function 64 comprehensively controls processing related to the CPU 45.
The CGI linkage function 65 inputs and outputs requests and data with the program PRG1 executed by the terminal device 12.
The electronic signature function 66 provides a function of signing the terminal device 12 with respect to data input via the input screens DISP1 to DISP1-3.

Hereinafter, an operation example of the terminal device 12 illustrated in FIG. 2 will be described.
FIG. 5 is a flowchart for explaining an operation example of the terminal device 12 shown in FIG.
Each step shown in FIG. 5 is defined in the program PRG1.
Step ST1:
The CPU 45 displays the input screens DISP 1 to 3 on the display unit 44.
Step ST2:
The user operates the operation unit 42 based on the input screens DISP1 to 3 displayed on the display unit 44 in step ST1 and inputs his / her personal data (input data IND).
Based on the operation signal from the operation unit 42, the CPU 45 measures the input time of all items, the input time of each item, or the character input time interval of each of the input screens DISP1 to DISP3 by the user.
The CPU 45 generates input time data INTD indicating the measured time.

Step ST3:
The CPU 45 determines whether or not input of all items on the input screens DISP1 to DISP1 has been completed. If it is determined that the input has been completed, the process proceeds to step ST4. If not, the process returns to step ST2 to input all items. Let me do it.
Step ST4:
The CPU 45 generates XML (eXtensible Markup Language) data including the input data IND and the input time data INTD input in step ST 2 in association with the tag data for identifying each of them, and sends this to the server 14 via the interface 41. Send.

[Server 14]
FIG. 6 is a block diagram of the server 14 shown in FIG.
As shown in FIG. 6, the server 14 includes, for example, an interface 81, a memory 83, and a CPU 85.
The interface 41 receives input data IND and input time data INTD from the terminal device 12 via the network 26.
The memory 43 stores the program PRG2 and various data used for the processing of the CPU 85.
Specifically, the memory 83 stores registration data RG used for collation of the input data IND and threshold data TH used for verification of the input time.
The CPU 85 executes the program PRG2 read from the memory 83, and comprehensively controls the operation of the server 14 according to the program PRG2.
For example, the CPU 85 updates the threshold data TH stored in the memory 83 with the average value of the plurality of input time data INTD input from the terminal device 12 via the interface 81 in a plurality of verifications.
The processing of the CPU 85 will be described in association with an operation example of the server 14 shown below.

Hereinafter, an operation example of the server 14 illustrated in FIG. 6 will be described.
FIG. 7 is a flowchart for explaining an operation example of the server 14 shown in FIG.
Step ST11:
The interface 81 receives, from the terminal device 12, XML data including the input data IND and the input time data INTD that are associated with tag data that identifies the input data IND and the input time data INTD.
Step ST11 corresponds to step ST4 shown in FIG.

Step ST12:
The CPU 85 compares the input data IND received in step ST11 with the corresponding registered data RG stored in the memory 83 to determine whether they match, and when determining that they match, Proceeds to step ST13, otherwise proceeds to step ST15.
Step ST13:
The CPU 85 determines whether or not the time indicated by the input time data INTD received in step ST11 is less than or equal to the time indicated by the threshold data TH stored in the memory 83, and is less than or equal to the threshold data TH. If it judges, it will progress to step ST14, and if that is not right, it will progress to step ST15.

Step ST14:
The CPU 85 authenticates that the user of the terminal device 12 is a valid user.
Thereby, CPU85 provides a predetermined service to the said user via the terminal device 12, for example.
Step ST15:
The CPU 85 authenticates that the user of the terminal device 12 is not a valid user.
CPU85 displays the message which shows that on the display part 44 of the terminal device 12, for example.

As described above, according to the processing system 1, the input time of input data is measured based on the program PRG2 which is an electronic form executed in the terminal device 12, and the input time data INTD indicating the result is stored in the server 14. Transmit via the network 16. Therefore, even if the traffic load on the network 16 fluctuates, the validity of the collation result of the input data IND can be determined based on the input time data INTD that accurately indicates the input time of the input data IND by the user.
Therefore, according to the processing system 1, it is possible to further improve the reliability of user authentication compared to the related art.

  The present invention is applicable to a system that performs user authentication.

FIG. 1 is an overall configuration diagram of a processing system according to an embodiment of the present invention. FIG. 2 is a block diagram of the terminal device shown in FIG. FIG. 3 is a diagram for explaining functions realized by the CPU shown in FIG. FIG. 4 is a diagram for explaining an input screen displayed on the display unit shown in FIG. FIG. 5 is a flowchart for explaining an operation example of the terminal apparatus shown in FIG. FIG. 6 is a block diagram of the server shown in FIG. FIG. 7 is a flowchart for explaining an operation example of the server shown in FIG.

Explanation of symbols

DESCRIPTION OF SYMBOLS 12 ... Terminal device, 14 ... Server, 41 ... Interface, 42 ... Operation part, 43 ... Memory, 44 ... Display part, 45 ... CPU, 81 ... Interface, 83 ... Memory, 85 ... CPU, PRG1, PRG2 ... Program, SG … Registration data, TH… Threshold data

Claims (10)

A program executed by a computer that transmits the input data to another computer that performs collation between input data and registered data,
A first procedure for displaying a screen for allowing the user to input personal data of the user as the input data;
A second procedure for measuring an input time required to input the input data based on the screen displayed in the first procedure;
A program for causing the computer to execute the third procedure for transmitting the input data input based on the screen and the input time data indicating the input time measured in the second procedure to the other computer. The program according to claim 1, wherein each time the collation is performed, the screen is displayed by randomly changing the order in which the user inputs a plurality of the personal data. The program according to claim 1, wherein the third procedure transmits data in a format including the input data and the input time data in association with tag data for identifying the input data and the input time data to the other computer. . The program according to claim 1, wherein the program is an electronic form. A computer that transmits the input data to another computer that collates the input data with the registered data,
Operation means;
Display means;
Interface,
Control means, and
The control means displays on the display means a screen for allowing the user to input the user's personal data as the input data, and measures the input time required for the input data to be input based on the screen. The computer that transmits the input data input based on the screen and the input time data indicating the measured input time to the other computer via the interface. A data processing method executed by a computer that transmits the input data to another computer that collates input data with registered data,
A first step of displaying a screen that allows the user to input personal data of the user as the input data;
A second step of measuring an input time required to input the input data based on the screen displayed in the first step;
And a third step of transmitting the input data input based on the screen and the input time data indicating the input time measured in the second step to the other computer. A program executed by a computer that collates the input data received from another computer that inputs user personal data as input data with previously stored registration data,
A first procedure for receiving from the other computer the input data and input time data indicating a time required for the user to input the input data;
A second procedure for determining whether or not the input data received in the first procedure matches the registration data held in advance by the computer;
A third procedure for determining whether or not a time indicated by the input time data received in the first procedure is equal to or less than a time indicated by threshold data held in advance by the computer;
When it is determined in the second procedure that the input data matches the registered data, and the time indicated by the input time data is determined to be less than or equal to the time indicated by the threshold data in the third procedure And a program for causing the computer to execute a fourth procedure for determining that the user is valid. The program according to claim 7, further causing the computer to further execute a fifth procedure for determining the threshold data based on the time data input in the first procedure in each of a plurality of collations. A computer for collating the input data received from another computer that inputs the user's personal data as input data with registered data held in advance,
An interface from the other computer for the input data and input time data indicating a time required for the user to input the input data;
Memory,
Control means, and
The control means is configured such that the input data received by the interface matches the registration data stored in the memory, and the time indicated by the input time data received by the interface is stored in the memory. A computer that determines that the user is valid on condition that the time indicated by the value data is less than or equal to. A data processing method performed by a computer that collates the input data received from another computer that inputs the user's personal data as input data with registered data held in advance,
Receiving the input data and input time data indicating a time required for the user to input the input data from the other computer;
A second step of determining whether or not the input data received in the first step matches the registration data held in advance by the computer;
A third step of determining whether or not a time indicated by the input time data received in the first step is equal to or less than a time indicated by threshold data held in advance by the computer;
When it is determined in the second step that the input data matches the registered data, and the time indicated by the input time data is determined to be less than or equal to the time indicated by the threshold data in the third step And a fourth step of determining that the user is valid.

Images