JP2006268108A - Authentication device and authentication method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an authentication device and method for inputting personal identification information such as a password without performing any key operation. <P>SOLUTION: An IC card reader for acquiring information from a non-contact IC card is installed in an authentication device, and timing data are prepared from the time of communication connection and communication disconnection of the IC card reader and the IC card, and an authentication pattern as an authentication key is compared with the timing data, and when the authentication pattern is agreed with the timing data, it is authenticated that the user is a normal user. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to an authentication device and an authentication method, and more particularly, to an authentication device and an authentication method capable of performing authentication using a card and personal identification information.

  User authentication using a card such as a magnetic card or an IC card is widely performed. In this authentication method, user identification information for identifying a user is recorded on the card, and the user is authenticated by acquiring the user identification information from the card by an authentication device and performing inquiry / analysis.

  In addition, if the user drops the card or the card is stolen, etc., the card may be used illegally, the password may be used when authenticating the user. Requests are also made.

And when performing authentication using this password, a method for performing authentication by measuring not only a simple character string and key operation but also a rhythm (time interval) at which the key is pressed has been proposed (for example, (See Patent Documents 1 to 3).
JP-A-11-015900 JP 2000-137681 A JP 2001-249731 A

  However, in the method of inputting a password by key operation, it is necessary to provide a keyboard for inputting the password to the authentication device, which increases the cost of the authentication device and secures a space for installing the keyboard. This is a major obstacle to downsizing the authentication device.

  In addition, it takes time to set the card in the authentication device and enter the password, especially for people with disabilities and the elderly, and entering the password is a job, which is a heavy burden. .

  Furthermore, since passwords are often a sequence of letters and numbers, they are difficult to remember and forget, and there is a problem that a third party can easily guess if a phone number or birthday is used.

  Therefore, an object of the present invention is to provide an authentication apparatus and an authentication method that can input password information such as a password without performing a key operation.

  The authentication apparatus according to the present invention creates timing data based on a reader that acquires information from a non-contact type terminal, a timer that measures connection time and disconnection time between the terminal and the reader, and a measurement result of the timer A timing data acquisition unit, an authentication pattern acquisition unit that acquires an authentication pattern that is an authentication key of the terminal, and an authentication determination unit that performs authentication determination using the timing data and the authentication pattern.

  The authentication pattern acquisition unit acquires the authentication pattern from the terminal.

  The authentication pattern database further stores an authentication pattern, and the authentication pattern acquisition unit acquires the authentication pattern from the authentication pattern database.

  The authentication determination unit determines that the authentication is successful if the difference between the timing data and the authentication pattern is within an allowable range.

  Next, an authentication method according to the present invention acquires information from a non-contact type terminal with a reader, measures connection time and disconnection time between the terminal and the reader with a timer, and performs timing based on a measurement result of the timer. Timing data is generated by the data acquisition unit, an authentication pattern that is an authentication key of the terminal is acquired by the authentication pattern acquisition unit, and authentication determination is performed by the authentication determination unit using the timing data and the authentication pattern.

  The authentication pattern is acquired from the terminal.

  The authentication pattern is obtained from an authentication pattern database that stores the authentication pattern.

  The authentication determination determines that the authentication is successful if the difference between the timing data and the authentication pattern is within an allowable range.

  In the present invention, password information can be easily input without performing a key operation during user authentication using a card.

  The best mode for carrying out an authentication apparatus and an authentication method according to the present invention will be described below in detail with reference to the accompanying drawings.

  FIG. 1 is a block diagram showing the configuration of the authentication device in this embodiment. As shown in the figure, the authentication device 1 includes an IC card reader 10, a timer 11, a notification unit 12, a control unit 13, a control program storage unit 14, an authentication pattern acquisition unit 15, and a timing data acquisition unit. 16 and an authentication determination unit 17 are provided.

  The IC card reader 10 communicates with a non-contact type IC card possessed by the user, and reads a card ID that is an identifier of the user and an authentication pattern that is an authentication key.

  The timer 11 measures the time during which the card reader 10 is communicating with the IC card and the time during which communication with the IC card is interrupted.

  The notification unit 12 is a device for notifying the user of information, such as a display device such as an LED (Light Emitting Diode) or an LCD (Liquid Crystal Display) or a speaker that conveys information to the user by voice. For example, connection / disconnection of communication To notify the user of information such as the communication status and the authentication result.

  The control unit 13 performs processing for controlling the operation of the entire authentication apparatus and each unit.

  The control program storage unit 14 stores a control program for the control unit 13 to control the entire control device and the operation of each unit.

  The authentication pattern acquisition unit 15 acquires an authentication pattern (see FIG. 2) from information read from the IC card by the IC card reader 10.

  The timing data acquisition unit 16 measures the time when the IC card and the IC card reader 10 are in the communication state and the time when the IC card reader 10 is disconnected by the timer 11, and the time when the IC card and the IC card reader 10 are in the communication state (“ON”) ) Is obtained as timing data that is a sequence of data in which time is arranged (see FIG. 3).

  The authentication determination unit 17 performs authentication determination by comparing the authentication pattern with the timing data. Here, in the authentication determination, an allowable range is determined in advance for the difference between the authentication pattern and the timing data, and if the difference falls within this allowable range, it is determined that the authentication pattern and the timing data match.

  In FIG. 1, the portions surrounded by dotted lines (the authentication pattern acquisition unit 15, the timing data acquisition unit 16, and the authentication determination unit 17) are realized by software or the like.

  Using the above configuration, the authentication apparatus according to the present embodiment acquires an authentication pattern from the IC card, and creates timing data from the time when the IC card and the IC card reader are in a communication state and the time when the IC card is disconnected. Authentication verification is performed.

  FIG. 4 is a flowchart showing the flow of processing of the authentication apparatus in the present embodiment.

  First, when an IC card is detected by an IC card reader (step 100), a card ID and an authentication pattern are acquired from the IC card (step 101).

  Then, as described in detail later, timing data is created (step 102), a difference between the authentication pattern and the timing data is calculated (step 103), and it is determined whether or not this difference is within an allowable range. (Step 104).

  If it is determined that the difference is within the allowable range (YES in step 104), it is determined that the authentication is successful and predetermined processing is performed (step 105), and it is determined that the difference is not within the allowable range. (NO in step 104), it is determined that the authentication has failed and predetermined processing is performed (step 106).

  FIG. 5 is a flowchart showing the flow of processing when acquiring timing data.

  First, a card ID and an authentication pattern are acquired (step 101), and when communication between the IC card and the card reader is cut off (step 200), creation of timing data is started (step 201).

  When communication between the IC card and the card reader is connected (step 202), time measurement is started as "ON" (step 203).

  When communication between the IC card and the card reader is disconnected (step 204), the time measured as “ON” is stored (step 205), and time measurement is started as “OFF” (step 206).

  Here, when communication between the IC card and the card reader is connected (YES in step 207), the time measured as “OFF” is stored (step 208), and time measurement is started as “ON” (step 203). ).

  On the other hand, if communication between the IC card and the card reader is not connected (NO in step 207) and a certain time has elapsed (YES in step 209), the creation of timing data is terminated (step 210), and the authentication pattern and timing The difference from the data is calculated (step 103).

  In this embodiment, the permissible range of the difference between the authentication pattern and the timing data is determined in advance. However, the permissible range may be widened or narrowed depending on the usage frequency, and the permissible range is determined for each user. May be.

  In this embodiment, the timing data is created with the time of “ON” and “OFF”, but it can be created with the time ratio of “ON” and “OFF”. Regardless of the operation speed of the user at the time of data input (creation), if the ratio of “ON” and “OFF” matches the authentication pattern, it can be determined that the authentication is successful.

  Further, in this embodiment, the user is identified by using a non-contact type IC card possessed by the user. However, the user has an identifier such as a mobile phone equipped with an IC chip, and can perform wireless communication with the card reader. Any terminal can be used instead of a non-contact type IC card as long as it is possible.

  In addition, in this embodiment, the card ID is read from the IC card using a card reader. However, any device capable of acquiring information from an IC card (terminal capable of wireless communication) such as a card reader / writer. For example, it can be used instead of a card reader.

  As described above, in this embodiment, since the user can be authenticated by the card reader without providing a keyboard or the like, the cost of the authentication device can be suppressed.

  In addition, since an allowable range is provided for the difference between the authentication pattern and the timing data, it can be easily used for a user who is not used to the operation.

  Furthermore, this allowable range may be narrowed or widened according to the frequency of use, etc., and the convenience for the user can be enhanced.

  By the way, although the authentication pattern is acquired from the IC card in this embodiment, an authentication information database for storing the authentication pattern may be provided, and the authentication pattern may be acquired from this authentication database. Will be described in detail.

  FIG. 6 is a functional block diagram showing the configuration of the authentication device in the present embodiment. As shown in the figure, the authentication apparatus 1 includes an IC card reader 10, a timer 11, a notification unit 12, a control unit 13, a control program storage unit 14, an authentication pattern acquisition unit 15, and timing data acquisition. 16 and an authentication determination unit 17 are connected to the authentication information database 2 via a network 3 such as a LAN (Local Area Network) or a telephone network.

  The authentication pattern acquisition unit 15 acquires an authentication pattern (see FIG. 2) from the authentication information database 2.

  The authentication information database 2 is an external storage device such as a hard disk or a server, and stores an authentication pattern in association with the card ID.

  Note that the same reference numerals as those used in FIG. 1 are attached to portions that perform the same functions as those in FIG. 1, and detailed descriptions thereof are omitted.

  Using the above configuration, the authentication apparatus in the present embodiment acquires an authentication pattern from the authentication pattern database (DB), and also obtains timing data from the time when the IC card and the IC card reader are in the communication state and the time when the IC card is disconnected. Create and perform user authentication decision.

  FIG. 7 is a flowchart showing the flow of processing of the authentication apparatus in the present embodiment.

  First, when an IC card is detected by an IC card reader (step 300), a card ID is acquired from the IC card (step 301).

  Next, the authentication pattern database is searched using the card ID as a search key (step 302), and the authentication pattern is acquired from the authentication pattern database (step 303).

  Then, timing data is created (step 304), a difference between the authentication pattern and the timing data is calculated (step 305), and it is determined whether or not this difference is within an allowable range (step 306).

  If it is determined that the difference falls within the allowable range (YES in step 306), the authentication is determined to be successful and predetermined processing is performed (step 307), and it is determined that the difference does not fall within the allowable range (step 307). If NO in step 306, it is determined that the authentication has failed, and predetermined processing is performed (step 308).

  In this embodiment, the authentication pattern database is connected via the network. However, the authentication pattern database may be provided in the authentication device using a storage device such as a hard disk.

  Further, a button for inputting timing data may be provided in the authentication device, and input of timing data using this button may be received and compared with an authentication pattern acquired from an IC card or an authentication pattern database.

  As described above, in this embodiment, the authentication pattern is acquired from the authentication pattern database, so that the amount of information recorded on the IC card can be suppressed.

  In addition, the administrator of the authentication apparatus can easily change the authentication pattern by accessing the authentication pattern database.

  As described above, in the present invention, the user can be authenticated by the card reader without providing a keyboard or the like, so that it is possible to reduce the cost of the authentication device, and authentication of a password or the like without using the keyboard. Since the key can be easily input, it can be easily used not only by a healthy person but also by a disabled person, an elderly person, a child, and the like.

  Furthermore, since the authentication key is tempo, it is easier to remember than numbers and character strings, and it is impossible for a third party to guess from personal information such as a birthday or a telephone number.

1 is a block diagram illustrating a configuration of an authentication device according to a first embodiment. Diagram showing an example of an authentication pattern Diagram showing an example of timing data The flowchart which shows the flow of a process of the authentication apparatus in Example 1. Flow chart showing the flow of processing when acquiring timing data Functional block diagram showing the configuration of the authentication device in the second embodiment The flowchart which shows the flow of a process of the authentication apparatus in Example 2.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 ... Authentication apparatus 2 ... Authentication pattern database 3 ... Network 10 ... IC card reader 11 ... Timer 12 ... Notification part 13 ... Control part 14 ... Control program memory | storage part 15 ... Authentication pattern acquisition part 16 ... Timing data acquisition part 17 ... Authentication determination Part

Claims (8)

A reader that obtains information from a non-contact type terminal;
A timer for measuring connection time and disconnection time between the terminal and the reader;
A timing data acquisition unit that creates timing data based on the measurement result of the timer;
An authentication pattern acquisition unit for acquiring an authentication pattern which is an authentication key of the terminal;
An authentication apparatus comprising: an authentication determination unit configured to perform authentication determination using the timing data and the authentication pattern. The authentication apparatus according to claim 1, wherein the authentication pattern acquisition unit acquires the authentication pattern from the terminal. An authentication pattern database for storing the authentication pattern;
The authentication apparatus according to claim 1, wherein the authentication pattern acquisition unit acquires the authentication pattern from the authentication pattern database. 4. The authentication apparatus according to claim 1, wherein the authentication determination unit determines that the authentication is successful if a difference between the timing data and the authentication pattern is within an allowable range. Obtain information with a reader from a non-contact type terminal,
Measure the connection time and disconnection time between the terminal and the reader with a timer,
Create timing data in the timing data acquisition unit based on the measurement result of the timer,
An authentication pattern acquisition unit acquires an authentication pattern that is an authentication key of the terminal,
An authentication method, wherein an authentication determination unit performs authentication determination using the timing data and the authentication pattern. The authentication method according to claim 5, wherein the authentication pattern is acquired from the terminal. 6. The authentication method according to claim 5, wherein the authentication pattern is acquired from an authentication pattern database that stores the authentication pattern. 8. The authentication method according to claim 5, wherein the authentication determination determines that the authentication is successful if a difference between the timing data and the authentication pattern is within an allowable range.

Images