JP2008033924A - Password number input device by fake pointer and password number input method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a password number input device which inputs a password number by a fake pointer which simultaneously designates a plurality of selection input keys to authenticate the password number. <P>SOLUTION: The password number input device has: a display processing means for displaying the fake pointer which simultaneously designates the plurality of selection input keys on a keyboard; a pointer position control means controlled by an input operation of an input means so that an input key input as the password number is included in the plurality of input keys designated by the fake pointer to control a position of the pointer; an input processing means for inputting data determined by secret information of a user from among the plurality of input keys designated by the fake pointer controlled by the pointer position control means; and a data processing means for accepting input of the data by the input processing means, when the data with the predetermined number of characters is accepted, comparing the data with a preliminarily stored password number to authenticate the password number. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to a personal identification number input device and a personal identification number input method for performing authentication of a personal identification number by inputting a personal identification number using a fake pointer that simultaneously selects and designates a plurality of input keys on a keyboard.

  In personal authentication, countermeasures against peeping attacks are urgent. It is desirable that the input operation of the confidential information in the personal authentication is performed in an environment that is not seen by a third party, but it must be said that it is unrealistic. In Japan, from the end of 2005 to the beginning of 2006, voyeurism at bank ATMs occurred, and this threat became widely known. Recently, authentication methods using images (Non-Patent Document 1 and Non-Patent Document 2) have been proposed. In these methods, peeping countermeasures are one of the problems. Until now, physical countermeasures such as attachment of privacy filters and shielding plates have been the mainstream of existing countermeasures. However, it is difficult to take these measures for all authentication terminals.

  Introducing some countermeasures against “peeping attacks” that have been proposed in the field of image authentication. For example, in Non-Patent Document 3, the image processing is performed on an image used for image authentication. It proposes a method that can be used for authentication without knowing what the image is. An authorized user can store the blurred image by observing the process of image processing from the original image to the blurred image, and as a result, it can be accurately determined at the time of authentication. . User evaluation demonstrates that it is possible to distinguish password images from multiple image groups. However, due to the limited number of subjects, the results are not universal, and it must be said that there are still questions from the viewpoint of long-term memory and convenience.

  The technique introduced in Non-Patent Document 4 determines a plurality of specific icons called pass-objects in advance, and three pass-objects are displayed on the screen during authentication. Select the icon inside the triangle as an answer. This is a method in which this is repeated multiple times and if all responses are received, authentication is successful.

  This method is Challenge & Response and is excellent in that it does not select the correct answer directly, but it is assumed that a large number (hundreds to thousands) of objects are displayed on the screen. It is difficult to identify the object, and the authentication time is expected to be longer. Further, although depending on the number of pass-objects and their arrangement, there is a possibility that the possibility of successful authentication increases by continuing to select the center of the screen as an answer (see Non-Patent Document 5).

Patent documents 1 to 5 can be referred to as patent documents related to the technology of this type of password input device. In both cases, the PIN code input method is devised to propose countermeasures against peeping attacks.
JP 2001-147663 A JP 2000-339084 A JP 05-334334 A JP 09-297875 A Japanese Patent Application Laid-Open No. 2002-287871 Rachna Dhamijaand Adrian Perrig: Deja Vu: A User Study Using Images for Authentication, 9th Usenix Security Symposium, Aug (2003) .http: //www.sims.berkeley.edu/%7erachna/dejavu/site accessed at Apr 17, 2006 . Tetsuji Takada, Hideki Koike: Matching picture: Reinforcement of image authentication method using correct candidate selection method using image registration and usage notification, IPSJ Transactions, Vol.44, No.8, pp.2002 {2012, ( 2003). Harada Atsushi, Takeda Takeo, Mizuno Tadanori, Nishigaki Masakatsu: User Authentication System Using Image Memory Schema, IPSJ Transactions, Vol.46, No.8, pp.1997 {2013, (2005). L.Sobrado and J.-C. Birget: Graphical passwords, The Rutgers Scholar, An Electronic Bulletin for Undergraduate Research, Vol. 4, (2002). Http://rutgersscholar.rutgers.edu/volume04/sobrbirg/sobrbirg.htmsite accessed at Apr 17, 2006. S. Man, D. hong and M. Mathews: A shoulder-surfingresistant graphical password scheme-WIW, in proceedings of International Conference on Security and Management, Las Vegas, NV, (2003).

  Conventionally, as seen in these Patent Documents 1 to 5, Non-Patent Documents 1 to 5 and the like, there has been a “peek” with respect to an input device for a password or an input device for password authentication. Various countermeasures against "attack" have been proposed, but there is a problem that they are not sufficient.

  Therefore, in the present invention, for example, a method using a fake pointer is proposed as a method for improving the security against a peeping attack for authentication that performs an input operation of selecting a correct answer from options displayed on the screen. In the method using the fake pointer of the present invention, the correct answer is selected by operating a pointer called a fake pointer, instead of directly selecting the correct answer as a method for the user to select secret information (password). The fake pointer is always in a state of selecting multiple answer candidates, so even if a third party looks into the authentication act, it is possible to avoid the situation where the user's confidential information is specified It becomes.

  Specifically, an object of the present invention is to provide a personal identification number input device and a personal identification number input method for performing identification of a personal identification number by inputting the personal identification number using a fake pointer that simultaneously selects and designates a plurality of input keys on a keyboard. There is.

  In order to achieve the above object, according to the present invention, as a first aspect, the personal identification number input device according to the present invention performs an input operation by indicating a display means for displaying a keyboard and an input key in the keyboard. An information processing apparatus comprising an input means for performing data processing and a data processing means for performing data processing, wherein the personal identification number input apparatus performs input of a personal identification number to authenticate the personal identification number, and simultaneously selects a plurality of input keys on the keyboard. A display processing means for displaying a fake pointer to be displayed on the keyboard, and a pointer controlled by an input operation by the input means so that an input key to be input as a personal identification number is included in a plurality of input keys selected and designated by the fake pointer The pointer position control means for controlling the position of the pointer and the fake pointer controlled by the pointer position control means An input processing means for inputting data determined by the user's secret information from a plurality of instructed input keys, data input by the input processing means is accepted, and data of a predetermined number of characters is received and stored in advance A data processing means for comparing the password with the password and authenticating the password is provided.

  In this case, in the password input device according to the present invention, at the start of password authentication, the display processing means displays a selection screen for selecting the shape of the fake pointer, and based on the input operation of the input means, The shape of the fake pointer is configured to be selected from a plurality of predetermined patterns.

  In the personal identification number input device according to the present invention, the input processing means obtains input key data at a predetermined position in accordance with the shape of the pointer from among a plurality of input keys selected and designated by the pointer controlled by the pointer position control means. Configured to input.

  Further, when the personal identification number input device according to the present invention starts the personal identification number authentication, the display processing means displays a selection screen for selecting the shape of the fake pointer, and the shape of the fake pointer is changed by the input operation of the input means. An input key selected from a plurality of predetermined patterns and an input key at a predetermined position corresponding to the shape of the selected fake pointer may be configured as input key data input by the input processing means.

  In the personal identification number input device of the present invention, when a numeric keypad pattern is selected as a fake pointer, the display processing means displays a selection screen for obtaining answer selection information, and based on the input operation of the input means, Answer selection information acquired by the user is determined, and the input processing means inputs data based on the answer selection information from among a plurality of input keys instructed by the fake pointer moved by the pointer position control means. Composed.

  In this case, the answer selection information is graphic information displayed on the background of each numeric key of the numeric keypad, and the numeric layout of the numeric keypad pattern is moved by the pointer position control means by the position movement operation of the fake pointer. Configured.

  The answer selection information is graphic information displayed on the background of each numeric key on the numeric keypad, and the graphic displayed on the background of each numeric key on the numeric keypad is changed by the pointer position control means by the position movement operation of the fake pointer. It may be configured to be moved.

  According to a second aspect of the present invention, there is provided a personal identification number input method according to the present invention comprising: display means for displaying a keyboard; input means for instructing input keys in the keyboard to perform an input operation; and data processing. A fake pointer for inputting a personal identification number and authenticating the personal identification number, wherein the display processing means simultaneously selects and designates a plurality of input keys on the keyboard. Is displayed on the keyboard, and the pointer position control means is controlled by an input operation by the input means so that an input key to be input as a personal identification number is included in the plurality of input keys selected and instructed by the fake pointer. The position is controlled by the input processing means and the fake pointer controlled by the pointer position control means. When data specified by the user's confidential information is input from a plurality of input keys that are instructed to be selected, the input data is received by the data processing means, and when a predetermined number of characters are received, Comparing with the number and configured to authenticate the PIN.

  In this case, in the password input method according to the present invention, at the start of password authentication, the display processing means displays a selection screen for selecting the shape of the fake pointer, and the fake pointer is input by the input means. The shape is selected from a plurality of predetermined patterns. Further, the input processing means is configured to input data of an input key at a predetermined position according to the shape of the pointer among a plurality of input keys selected and instructed by the pointer controlled by the pointer position control means. .

  Further, in the personal identification number input method according to the present invention, at the start of personal identification number authentication, the display processing means displays a selection screen for selecting the shape of the fake pointer, and by the input operation of the input means, the shape of the fake pointer is displayed. Are selected from a plurality of predetermined patterns, and an input key at a predetermined position corresponding to the shape of the selected fake pointer is used as input key data input by the input processing means.

  In the personal identification number input method of the present invention, when a numeric keypad pattern is selected as the fake pointer, the display processing means displays a selection screen for obtaining answer selection information, and based on the input operation of the input means. The answer selection information acquired by the user is determined, and the input processing means inputs data based on the answer selection information from among a plurality of input keys instructed to select by the fake pointer moved by the pointer position control means. Configured.

  In this case, the answer selection information is graphic information displayed on the background of each numeric key of the numeric keypad, and the numeric layout of the numeric keypad pattern is moved by the pointer position control means by the position movement operation of the fake pointer. Configured.

  The answer selection information is graphic information displayed on the background of each numeric key on the numeric keypad, and the graphic displayed on the background of each numeric key on the numeric keypad is changed by the pointer position control means by the position movement operation of the fake pointer. It may be configured to be moved.

  In another aspect of the present invention, the present invention includes display means for displaying a keyboard, input means for instructing an input key in the keyboard to perform an input operation, and data processing means for performing data processing. In the information processing apparatus, the computer executes a password input process for inputting the password and authenticating the password, and displays a fake pointer on the keyboard for simultaneously selecting and inputting a plurality of input keys on the keyboard. Display processing means, pointer position control means for controlling the position of the pointer so as to include an input key to be input as a personal identification number among a plurality of input keys controlled by an input operation and selected by a fake pointer; A plurality of input keys selected by the fake pointer controlled by the pointer position control means. From the input processing means for inputting the data determined by the user's secret information, and when the input processing means accepts the input of the data, and accepts the data of a predetermined number of characters, it compares with the pre-stored personal identification number, and the personal identification number It is comprised so that it may be a program which functions a computer as a data processing means to authenticate.

  In this case, in the program in which the personal identification number input process for inputting the personal identification number and authenticating the personal identification number is executed by the computer, the shape of the fake pointer is selected by the display processing means at the start of the personal identification number authentication by the program processing. A selection screen is displayed, and the shape of the fake pointer is selected from a plurality of predetermined patterns by an input operation of the input means. Further, the input processing means is configured to input data of an input key at a predetermined position according to the shape of the pointer among a plurality of input keys selected and instructed by the pointer controlled by the pointer position control means. .

  Further, in the program for executing the personal identification number input processing for inputting the personal identification number and authenticating the personal identification number according to the present invention by the computer, the shape of the fake pointer is changed by the display processing means at the start of the personal identification number authentication by the program processing. A selection screen for selecting is displayed, and the shape of the fake pointer is selected from a plurality of predetermined patterns by the input operation of the input means, and an input key at a predetermined position corresponding to the selected shape of the fake pointer is displayed. The input key is input by the input processing means.

  In this case, when the numeric keypad pattern is selected as the fake pointer by the program processing, the display processing means displays a selection screen for obtaining the answer selection information, and the user can select the input screen based on the input operation of the input means. The acquired answer selection information is determined, and the input processing means is configured to input data based on the answer selection information from among a plurality of input keys instructed to select by the fake pointer moved by the pointer position control means. The

  In this case, the answer selection information is graphic information displayed on the background of each numeric key of the numeric keypad, and the numeric layout of the numeric keypad pattern is moved by the pointer position control means by the position movement operation of the fake pointer. Configured.

  The answer selection information is graphic information displayed on the background of each numeric key on the numeric keypad, and the graphic displayed on the background of each numeric key on the numeric keypad is changed by the pointer position control means by the position movement operation of the fake pointer. It may be configured to be moved.

  According to the password input device and password input method configured as described above, when the user selects secret information (password) by using a fake pointer, the correct answer is not directly selected. Use the fake pointer to select the correct answer. The fake pointer always selects multiple answer candidates, so even if a third party looks into the authentication act of entering a personal identification number, the user's confidential information can be identified. Will be avoided, thereby improving safety against peeping attacks.

  That is, the primary cause of the peeping attack is that the correct answer candidate is directly selected at the time of authentication. Therefore, in the personal identification number input device and the personal identification number input method of the present invention, Instead of selecting directly, a specially shaped pointer called a fake pointer is prepared, and authentication (password) is returned using it. Since the fake pointer always selects a plurality of answer candidates, it is difficult to specify the secret information (password) of the authenticator even if a third party looks into the authentication act.

  Hereinafter, embodiments of the present invention will be specifically described with reference to the drawings. A specific example will be described. FIG. 1 is a diagram for explaining a fake pointer used in the present invention. FIG. 2 is a diagram for explaining an example of the secret information of the authorized user used in the present invention. FIG. 3 is a diagram for explaining an example of an input operation for inputting a personal identification number using a fake pointer.

  First, the fake pointer will be described. The keyboard screen for inputting the personal identification number shown in FIG. 1 shows the personal identification number input screen assuming a bank ATM authentication screen. The figure on the left side of the figure is an example in which the number “5” is selected as the password on the keyboard for inputting the password displayed on the existing bank ATM authentication screen. In the actual bank ATM authentication screen, only the numeric keyboard is displayed on the liquid crystal touch panel, and no selection instruction is given by the pointer as shown in the figure, but one input key is directly pressed with a finger on the liquid crystal touch panel. The selection can be considered to be indicated by the pointer as shown and indicated by such a pointer.

  On the other hand, the fake pointer is a pointer that simultaneously indicates a plurality of numbers. Specifically, as shown on the right side of FIG. 1, for example, a selection instruction is performed using a cross-shaped pointer. As a result, when the password number is selected from the number keys on the authentication screen (password input screen), a plurality of answer candidates are selected simultaneously. In other words, in the example shown on the right side of FIG. 1, five answer candidates “2”, “4”, “5”, “6”, and “8” are selected as the numbers of the passwords to be input. ing. Even if a third party peeks at this, it is unclear which of the answers (numbers of the personal identification number) the user has selected, and can counter the peeping attack.

  In this case, as shown in FIG. 2, information regarding the shape of the fake pointer and the position for selecting the correct answer of the fake pointer is previously notified to the authorized user together with the personal identification number as the user's secret information. And This secret information of the user is also registered on the side of the password input device, and is used as information for determining data to be input from among a plurality of input keys. Therefore, the legitimate user selects his / her security code in the specific part of the upper part in the cross-shaped pointer used as the fake pointer according to the secret information known in advance, and the number of the security code You will answer. For example, as shown on the right side of FIG. 1, when the number of the personal identification number is selected using the fake pointer, the number “2” is selected.

  When such a fake pointer is moved by an input operation, a part of the fake pointer deviates from the authentication screen (ten keyboard) due to the movement, but in that case, the deviated portion is folded back as described later. To deal with.

  Therefore, when the user having the secret information as shown in FIG. 2 inputs the personal identification number “1256” using the fake pointer of the cross-shaped pointer, the position of the fake pointer is moved as shown in FIG. input. First, when inputting the code number “1”, as shown in FIG. 3A, the fake pointer is positioned and input, and then when the code number “2” is input. As shown in FIG. 3 (2), when the fake pointer is positioned and input is performed, and then the password “5” is input, the fake pointer is set as shown in FIG. 3 (3). When the password is input after positioning, and finally the password “6” is input, the fake pointer is positioned and input as shown in FIG.

  In this case, when the fake pointer is moved, a part of the fake pointer deviates from the authentication screen (ten keyboard) due to the movement, but a process of turning back the deviated portion is performed. For example, in the screen shown in FIG. 3A, the left portion of the cross-shaped pointer has deviated and the deviated portion is folded to the right. In the screen shown in FIG. 3 (3), the lower part of the cross-shaped pointer is deviated and the deviated part is folded upward. Further, in the screen shown in FIG. 3 (4), the right portion and the lower portion of the cross-shaped pointer are deviated, and the deviated portions are folded to the left side and the upper side, respectively.

  FIG. 4 is a diagram for explaining the fake pointer return processing that deviates from the authentication screen. FIG. 4 shows a fake pointer folding process for an L-shaped pointer. In the upper and middle examples in the figure, a part of the pointer “extrudes” on the right and upper sides of the screen. In these cases, the protruding portion is folded back and the left and lower portions of the authentication screen are selected. In the example in the lower part of the figure, one of the protruding parts protrudes to the lower right, but this also selects “1” at the upper left by performing the two-fold process in the same manner. This makes it possible to select all answer candidates at any part of the fake pointer. Therefore, when the personal identification number “1256”, which is secret information, is input using the fake pointer of the L-shaped pointer, the input operation in which the user answers authentication is as shown in FIG. FIG. 5 is a diagram for explaining another example of an input operation for inputting a personal identification number using a fake pointer of an L-shaped pointer.

  FIG. 6 is a block diagram showing a system configuration of a password input device according to an embodiment of the present invention. In FIG. 1, 11 is an input data storage unit, 12 is a display control unit, 13 is a display unit composed of a liquid crystal display for displaying a keyboard and a fake pointer, 14 is an authentication processing unit, and 15 is an input for performing data input processing. A control unit 16 is an input unit configured to include a key operation unit and a pointer device and receives an input operation, and 17 is a personal identification number data storage unit.

  The input data storage unit 11 stores input key data input from the input unit 16 via the input control unit 15. The display control unit 12 includes subsystems of a pointer position control unit 12a and an authentication screen display control unit 12b. The display control unit 12 controls the display unit 13, and a keyboard and a fake pointer for inputting a personal identification number on the display screen. A display process for displaying user interface components on a display screen is performed, and a graphic user interface function is provided together with a control operation of an input operation by the input control unit 15. The pointer position control unit 12a displays the fake pointer on the display screen on which the keyboard is displayed, and performs display processing for returning the fake pointer according to the display position of the fake pointer. In the display process, for example, a fake pointer is displayed so as to overlap a plurality of input keys of the keyboard, and the position of the fake pointer is controlled based on the input operation and displayed on the display screen.

  For example, the authentication screen display control unit 12b displays the number of characters of the input data input by the input operation by the operation of the fake pointer in a predetermined field of the authentication screen by “*”. The personal identification number data storage unit 17 is a storage unit that stores personal identification number data to be authenticated. The authentication processing unit 14 is activated by the end of data input under the control of the input control unit 15, and compares the input data stored in the input data storage unit 11 with the code number data stored in the code number data storage unit 17. And output the authentication result.

  In the personal identification number input device of this embodiment, an authentication screen is displayed on the display screen by the display unit 13 to display a keyboard, and an input operation for instructing an input key in the keyboard by an input operation of the input unit 16. Is done. In the password input processing here, the input data storage unit 11, the display control unit 12, and the authentication processing unit 14 perform data processing, and receives the password to authenticate the password. The display control unit 12 performs a process of displaying on the keyboard a fake pointer that simultaneously selects and instructs a plurality of input keys on the keyboard of the display screen. In this case, the pointer position control unit 12a is instructed to select by the fake pointer. The position of the pointer is controlled by an input operation by the input unit 16 so that an input key to be input as a password is included in the plurality of input keys. The input control unit 15 inputs data (password) determined by the user's confidential information from a plurality of input keys selected and designated by the fake pointer controlled by the pointer position control unit 12a, and inputs this data. Temporarily stored in the data storage unit 11. When the authentication processing unit 14 receives input of a password number from the input control unit 15 and receives data of a predetermined number of characters, the authentication processing unit 14 compares the password with a password stored in advance in the password number data storage unit 17 and determines the password. Authenticate and output the result.

  FIG. 7 is a flowchart showing a processing flow of a password input process according to the password input device of one embodiment of the present invention, and FIG. 8 exemplifies a fake pointer selection screen displayed on the initial screen of the authentication screen. It is a figure to do. The password input process will be described with reference to the flowchart of FIG. First, in order to be able to input a personal identification number, a keyboard for input operation is first displayed on the authentication screen. When a fake pointer is used, a fake pointer selection screen as shown in FIG. 8 is displayed. (S100). The user gives an instruction to select a fake pointer pattern to be used (S101). When the user performs a selection instruction such as moving the pointer cursor to make a selection and selecting a fake pointer from the selection screen (S101), an ID is assigned to the selected fake pointer (S102). Based on the ID of the fake pointer assigned here, the data of one input key among a plurality of input keys selected at the same time is selected and input as the input data for the password input.

  When the user performs an operation of moving the fake pointer by an input operation such as a cursor key of a mouse or a key operation unit, the position of the fake pointer is moved on the keyboard of the display screen and displayed on the keyboard (S103). ). When the fake pointer is moved so that the predetermined position of the fake pointer is positioned at the position of the data of the password entered by the user and an input operation for determining the position of the fake pointer is performed (S104), the selected fake pointer is Input data corresponding to the position of the pointer is input as a password (S105). This is repeated until the input of the password data is completed (S106). The input password data is stored in the input data storage unit 11.

  Here, when the input of the password number data is completed (S106), the process is terminated by passing the stored character information to the authentication process (authentication processing section 14) for determining whether the password is correct. To do. Whether or not the input of the personal identification number is completed is, for example, a field for displaying whether or not the number of input data matches the number of characters of the personal identification number data and the number of input digits of the personal identification number data.

  In the present invention, it is possible to configure a security code input device with high safety using a fake pointer as described above. However, when using a fake pointer having a pattern in which the number of input keys for selecting and instructing is not large, it is sufficient. Safety may not be ensured. On the other hand, the Example for making safety | security higher further is demonstrated.

  This is an example of a case where even if a fake pointer is used, the number of secret information obtained by an attacker by peeping is small and sufficient security cannot be secured.

  Here, an L-shaped pointer fake pointer is taken as an example. As explained with reference to FIG. 5, according to an example in which a legitimate user inputs a personal identification number “1256”, when an attacker looks into this, the answer corresponding to each selected position of the fake pointer is read. Thus, three secret information candidates “1256”, “4589”, and “5697” can be obtained. With three answer candidates, it is highly likely that even existing bank ATMs will succeed in “spoofing”. In such a case, there is no safety against peeping attacks. Even if the fake pointer has a shape that selects all the answer options on the screen, the authentication screen in FIG. 5 can give only nine password number candidates to the attacker at maximum, with a probability of 1/3. "Spoofing" will be successful. This cannot be said to have improved the security against peeping attacks.

  Therefore, a mechanism is introduced in which an ID is assigned to the fake pointer and the user is “false” using the ID value. More specifically, here, the number of selectable locations for the fake pointer is Pn. The number Pn of selectable places is Pn = 3 when an L-shaped pointer is selected as a fake pointer, and Pn = 5 when a cross-shaped pointer is selected. Under this condition, numbers from 1 to Pn + 1 are prepared as IDs at each selection position of the pointer, and Pn IDs are assigned without duplication. FIG. 9 shows an example.

  FIG. 9 is a diagram for explaining an operation example when an L-shaped pointer with ID is used as a fake pointer. An ID is assigned to each position of the L-shaped pointer, and it is assumed that the authorized user is informed in advance at which ID position the secret information should be selected. In this case, when the user inputs secret information using the fake pointer of the L-shaped pointer, the ID assignment is changed for each input.

The answering method using the fake pointer is classified into the following two types depending on whether the correct answer selection ID value exists in the fake pointer.
(1) When an ID exists, secret information is selected at the position of the corresponding ID.
(2) If no ID exists, any answer candidate may be selected.

  Referring to the example shown in FIG. 9, here, assuming that the ID for correct answer is 4, three answers except “2nd time” have ID = 4 in the fake pointer, so the L-shaped pointer Position the fake pointer of the L-shaped pointer so that the secret information is selected at the position of ID = 4, and input the secret information.

However, in the case of “2nd time”, since there is no ID indicating the correct answer selection position, the user can select anything, which is the correct answer. As a result, the user makes a lie “maybe” answer out of four answers. As a result, the number of secret information candidates that can be given to an attacker who has been peeping at an authentication act increases. The number of confidential information gained by the attackers
"Number of answers including false test" x "Number of possible answers that can be correct instead of false test"
Thus, in the example of FIG. 9, 4 × 9 = 36.

As a result, a certain level of security against peeping attacks can be ensured. But this is still flawed. The reason is that the security against the Brute-Force attack is reduced by the introduction of this method. To be more specific, the secret information that the user can take, if an attacker investigate the "brute force", the number of secret information to be investigated, because the order of magnitude of the personal identification number does not make sense, 9 ⁴ This is because decreases from pieces to 4 × 9 ³ pieces.

  As a countermeasure against the peeping attack, the security against the Brute-force attack cannot be lowered. Therefore, it is necessary to compensate for the decrease, but the simplest method is to increase the number of replies by one. In the case of a password, the number of digits of the password is increased by one. This can be said to be a cost that must be borne by the user in order to improve safety.

  As described above, in the present invention, a high security code number input device is configured using a fake pointer, but the fake pointer is changed every time a code number is input. Thus, a one-time password can be obtained. Further, the shape of the fake pointer can be changed every time a password is entered. This further increases safety.

  The shape of the fake pointer can be basically a free pattern as long as a plurality of answer candidates can be selected. However, for the convenience of ID assignment, the fake pointer needs to have a selection position equal to or greater than (the number of responses in one authentication-1).

  Next, a fake pointer information acquisition / notification method will be described. This method can be used even if the notification method is not strictly confidential. The reason is that even if the information about the fake pointer is known to a third party, it does not immediately lead to “spoofing” unless the secret information of the authentication itself is known to the third party. . This is because the fake pointer is a part of secret information, and it is not a sufficient condition for successful authentication. Taking a bank ATM as an example, unless the password is known to the attacker, the security of authentication is maintained even if the information about the fake pointer is known to the attacker. This method is only a security improvement method against a peeping attack, and security in authentication is ensured by an authentication method that introduces this method. Therefore, with regard to the acquisition / notification method of fake pointer information, even simpler authentication or notification by e-mail does not cause a problem.

  By utilizing the above-described characteristic regarding the confidentiality of the fake pointer information acquisition / notification method, the presentation selection type authentication can be converted into a pseudo one-time password. Here, the term “pseudo” means that it is not a one-time password in a strict sense because it does not guarantee that a fake pointer once issued will never be used again.

  In the personal identification number input device, an authentication system in which a plurality of types of fake pointers are prepared is provided. This authentication system receives a fake pointer issuance request from the user, selects a shape randomly from the request, Assign and issue a value. The issued fake pointer can be used only once.

  The authenticating user must be issued a fake pointer for each authentication, and only one fake pointer is always issued for each user. Even if it is used, it is invalidated when a new fake pointer is issued. By introducing these rules, the fake pointer can randomize the secret information, and as a result, the existing authentication can be converted into a pseudo one-time password.

  This provides two advantages. One is to reduce the memory burden. This framework eliminates the need for the user to store information about the fake pointer. As a result, the security in authentication can be improved without imposing a new memory burden on the user. The other is enhanced safety. Although it pointed out about the fall of the security with respect to a Brute-force attack previously, the fall of the security can be supplemented by making a one-time password. This is because the number of answers increases by one because it becomes necessary to select the shape of the fake pointer at the time of authentication.

  If the number of fake pointer shapes is equal to or greater than the number of answer candidates on subsequent authentication screens, this fake pointer selection can be used as a substitute for invalid answers due to falsification, and as a result, security against brute-force attacks is maintained. It becomes. This measure also improves the security against a brute-force attack for an attacker who cannot peep. This is because an attacker who is not peeping does not know the password but also the shape of the fake pointer.

  By the way, as a fake pointer, the shape of a numeric keypad pattern that does not change in shape even when a moving operation is performed can be used as one pattern of the fake pointer. In this case, the movement operation of the fake pointer is the movement of the numeric arrangement of the numeric keypad. In addition, as will be described later, the answer selection information is used to specify the personal identification number from the numeric keypad whose numeric layout has been moved. This answer selection information can be used as a substitute for the above-mentioned secret information. Such selection of use of the fake pointer is performed, for example, when selecting a fake pointer pattern on the initial screen. In this case, since answer selection information is required, this is also set so that it can be used by performing a selection operation on the initial screen.

  Next, an authentication method using a fake pointer of a ten key pattern will be described in a case where the fake pointer is applied to a bank ATM that performs password authentication consisting of a 4-digit number. FIG. 10 is a diagram illustrating an example of an authentication screen using a fake pointer of a numeric keypad pattern, FIG. 11 is a diagram illustrating an example of answer selection information used for an authentication method using a fake pointer of a numeric keypad pattern, and FIG. It is a figure explaining control of number arrangement by operation of a fake pointer.

  As shown in FIG. 10, the fake pointer of the numeric keypad pattern has an ordinary numeric keypad layout, and has a screen in which various shapes are displayed on the background of each numeric key. Each piece of information displayed on the background of the numeric keys in this screen is called an “answer selection symbol”. In the fake pointer of the numeric keypad pattern, “answer selection symbol” is drawn on the background of all keys. In addition, the arrangement of the answer selection symbols for each key is randomly determined each time an authentication screen is generated.

  When performing authentication using the fake pointer of this numeric keypad pattern, the user needs to obtain “answer selection information” before authentication. In this example, as shown in FIG. 11, the answer selection information has four figures corresponding to the 4-digit number of the password. This answer selection information is information necessary for inputting the user's secret information (password). As shown in FIG. 12, the user controls the number arrangement by operating the fake pointer. In other words, by using the left and right keys, the number assignment in the key arrangement of the numeric keypad pattern is changed, and an operation for inputting the number of each digit of the password is performed. That is, the user uses the left and right keys to change the number arrangement so that the personal identification number overlaps the response selection information acquired before authentication, and presses the confirm key when the personal identification number and the response selection symbol overlap. . As a result, one number is input. This is a mechanism for selecting the first digit password by the first symbol of the answer selection information. Therefore, this is repeated four times to enter a four-digit password. Here, the fake pointer is operated by using the left and right keys to change the arrangement of the numbers, but the arrangement of the numbers is fixed, and the arrangement of the answer selection information figure that overlaps the numbers is changed with the left and right keys. It may be changed by operating the fake pointer.

  On the other hand, even if an attacker looks into the authentic user's authentication action, it is difficult to know the personal identification number unless he / she knows the “answer selection information” in the authentication. Even if an attacker takes a video of the authentication act, the security is maintained. On the other hand, even if the attacker can know the answer selection information, it is information that has nothing to do with the personal identification number, and that alone does not pose a threat to the legitimate user.

  The personal identification number is leaked only when the answer selection information is passed to the attacker and the authentication action using the answer selection information is seen by the attacker.

  FIG. 13 is a flowchart showing an authentication procedure by operating a fake pointer of a numeric keypad pattern. As shown in FIG. 13, in the authentication procedure in this case, first, on the initial screen, the user acquires answer selection information presented based on the user's pre-registered secret information from the system (S201). Next, the numeric operation of the numeric keypad pattern is controlled by the user's operation using the fake pointer, and the password is entered so that the figure corresponding to the answer selection information matches the number of the password entered. Is repeated until the answer input is completed (S202, S203). When the answer input is completed, an authentication process is performed by comparing the password registered in advance with the number input as the answer input, an authentication result is output, and the process ends (S204).

With the fake pointer, “answer selection information” must be acquired before inputting an authentication action, that is, secret information (eg, a password or password) (S201). The answer selection information is indispensable information for inputting secret information, and has the following characteristics.
(1) Disposable (2) Generated randomly on the system side

  The feature of “disposable” here means the following two things. One is that the acquired answer selection information can be used only in one authentication, and the user must acquire the answer selection information every time authentication is performed. However, in consideration of convenience, it may be possible to authenticate with the same answer selection information for a certain period. The other is that the user does not need to keep memorizing the answer selection information.

  The answer selection information is randomly generated each time. This feature is essential for ensuring safety. This is because if the answer selection information is always constant, a password is determined from a plurality of records of authentication actions.

  The answer selection information is not restricted except for the above. FIG. 14 is a diagram illustrating another example of the answer selection information. As shown in FIG. 14, various information such as numbers, letters, symbols, figures, and photographs can be used as answer selection symbols. In the example of the answer selection information shown in FIG. 14, there are a case where the number of symbols of the answer selection information is the same as the number of characters of the secret information (alphabetic characters and numbers in FIG. 14) and a case where it is not (hiragana and figure). This difference makes a difference in the answer input method. Next, the answer input method is described.

(Answer input method)
Next, an answer input method using the fake pointer of the numeric keypad pattern will be described. With the fake pointer of the numeric keypad pattern, the answer is selected by pointing the secret information with the answer selection information. More specifically, an answer is instructed by superimposing secret information and answer selection information on the authentication screen. In each authentication screen, an answer selection symbol is displayed on the background of each numeric key, but only one answer selection information is included in the answer selection symbol group displayed on the authentication screen. The answer selection symbol is “Decoy”. Note that the number of symbols in the answer selection information may be the same as or different from the number of characters in the secret information. In each of these cases, the answering method is slightly different. Hereinafter, the answering method in each case will be described. FIG. 15 is a diagram illustrating an example of an answer method using answer selection information, and FIG. 16 is a diagram illustrating another example of an answer method using answer selection information. FIG. 17 is a diagram for explaining another example of a reply method when presenting reply selection information by position.

(When answer selection information and secret information have the same number of symbols)
A reply method when the number of characters in the secret information and the number of symbols in the reply selection information are the same will be described. The answering method in this case indicates the first secret information by the first answer selection information, and thereafter repeats until the input is completed in the same manner. Referring to FIG. 15 as an example, “7”, which is the first digit password, is indicated by the alphabet “h”, which is the first character of the answer selection information, and then the second digit password. “2” is indicated by “e” which is the second character of the answer selection information. . . That's it.

(When answer selection information and secret information have different number of symbols)
Next, a response method when the number of symbols of the answer selection information is different from the number of symbols of the secret information will be described. In this case, since the number of characters of the secret information and the number of answer selection information are different, they cannot be associated one-on-one. Therefore, in this case, as shown in FIG. 16, instead of assigning individual answer selection symbols for input of individual secret information, the secret information is indicated by one of the symbols in the answer selection information. In this case, the authentication screen is generated so that only one symbol of the answer selection information is included in the displayed answer selection symbol group. Therefore, the user finds a symbol containing his / her answer selection information from the authentication screen, and inputs the answer by pointing the secret information at the answer selection symbol.

  The example of FIG. 16 shows a case where the answer selection information is smaller than the number of secret information. In this example, the first and fourth digit PIN numbers are selected by the first answer selection information, and the second and third digit PIN numbers are indicated and responded by the second answer selection information. Yes. Note that the combination of the answer selection information and the secret information is randomly determined for each authentication.

(Other variations)
It can be said that the role of the answer selection information indicates the “position” indicating the secret information (password). An example in this case will be described with reference to FIG. 17. It can be said that the answer selection information can be in the form of FIG. 17, for example. That is, instead of giving the answer selection information as a symbol, the position and order indicating the answer are directly given to the user.

  FIG. 17 shows an example of answer selection information composed of four symbols and equivalent answer selection information. That is, the PIN code of the first digit is indicated at the middle left position, and the second digit of the PIN number is indicated at the lowermost center position. . . Answer by repeating the procedure (hereinafter abbreviated). When the answer selection information is directly specified in the position and order as described above, the authentication screen does not need to display the answer selection symbol on the background of the number as in the fake pointer authentication screen shown in FIG. Can be the same screen. That is, it is possible to introduce a security improvement measure against a peeping attack without greatly changing the screen display itself. Further, since the position where the answer is instructed becomes clear, it is not necessary for the user to search where the answer selection information is located at the time of authentication. This contributes to a reduction in work load at the time of authentication.

  The main applications targeted by the fake pointer are all applications that require authentication with a personal identification number in an environment where the eyes of a third party are present, such as authentication using a bank ATM, mobile phone, or large screen interface. become. Further, the present invention is not limited to the personal identification number but can be applied to other authentications.

  As described above, according to the personal identification number input device using the fake pointer according to the present invention, as a countermeasure against a peeping attack, “not to be seen” is used instead of “not to be seen”. Safety can be improved by the method of “ensuring safety”. In addition, the present invention is a security improvement method that can be widely applied to presentation selection type authentication, and it can also be applied to existing bank ATM authentication. Also, there is no need to have a random number table or specific hardware to generate a one-time password.

  In the present invention, consideration is given to not increasing the burden imposed on the user while improving safety. Taking a bank ATM as an example, the increase in the memory burden imposed on the user to improve safety is only one digit because it can be operated without storing information about the fake pointer. In addition, the operability is not much different from that of the existing proposed method. In addition, it is possible to change the existing authentication method into a one-time password without greatly changing the framework, thereby enhancing security against a Brute-force attack.

It is a figure explaining the fake pointer used in this invention. It is a figure explaining an example of the secret information of a regular user used in the present invention. It is a figure explaining an example of input operation of PIN code input using a fake pointer. It is a figure explaining the return process of the fake pointer which deviated from the authentication screen. It is a figure explaining another example of input operation of PIN number input using the fake pointer of an L-shaped pointer. It is a block diagram which shows the system configuration | structure of the PIN code input device of one Example of this invention. It is a flowchart which shows the processing flow of the PIN code input process concerning the PIN code input device of one Example of this invention. It is a figure which illustrates the selection screen of the fake pointer displayed on the initial screen of an authentication screen. It is a figure explaining the operation example in the case of using an L-shaped pointer with ID as a fake pointer. It is a figure which shows an example of the authentication screen by the fake pointer of a ten key pattern. It is a figure explaining an example of the answer selection information used for the authentication method by the fake pointer of a ten key pattern. It is a figure explaining control of number arrangement by operation of a fake pointer. It is a flowchart which shows the authentication procedure by operation of the fake pointer of a ten key pattern. It is a figure which shows the other example of reply selection information. It is a figure explaining the example of the reply method using reply selection information. It is a figure explaining another example of the reply method using reply selection information. It is a figure explaining another example of the reply method in the case of presenting reply selection information by position.

Explanation of symbols

11 Input Data Storage Unit 12 Display Control Unit 13 Display Unit 14 Authentication Processing Unit 15 Input Control Unit 16 Input Unit 17 Password Data Storage Unit

Claims (21)

In an information processing apparatus comprising display means for displaying a keyboard, input means for instructing an input key in the keyboard to perform an input operation, and data processing means for performing data processing, the code number is input by entering the code number A password input device for authenticating
Display processing means for displaying on the keyboard a fake pointer for simultaneously selecting and inputting a plurality of input keys on the keyboard;
Pointer position control means for controlling the position of the pointer controlled by an input operation by the input means so that an input key to be input as a personal identification number is included in a plurality of input keys selected and instructed by the fake pointer;
An input processing means for inputting data defined by the user's secret information from a plurality of input keys selected and designated by the fake pointer controlled by the pointer position control means;
A password number, comprising: a data processing means for accepting data input by the input processing means and comparing a password number stored in advance when data of a predetermined number of characters is received and authenticating the password number Input device. The personal identification number input device according to claim 1,
At the start of password authentication, the display processing means displays a selection screen for selecting the shape of the fake pointer, and the shape of the fake pointer is a plurality of predetermined patterns based on the input operation of the input means. A personal identification number input device selected from the above. The personal identification number input device according to claim 1,
The input processing means inputs data of an input key at a predetermined position from a plurality of input keys instructed by the pointer controlled by the pointer position control means according to the shape of the pointer. PIN code input device. The personal identification number input device according to claim 1,
At the start of password authentication, the display processing means displays a selection screen for selecting the shape of the fake pointer, and the shape of the fake pointer is selected from a plurality of predetermined patterns by an input operation of the input means. Selected,
An identification number input device, wherein an input key at a predetermined position corresponding to the shape of the selected fake pointer is input key data input by the input processing means. In the personal identification number input device according to claim 2,
When a numeric keypad pattern is selected as the fake pointer, the display processing means displays a selection screen for obtaining answer selection information, and the answer selection obtained by the user based on the input operation of the input means The information is determined, and the input processing means inputs data based on the answer selection information from among a plurality of input keys instructed to select by the fake pointer moved by the pointer position control means. PIN code input device. In the personal identification number input device according to claim 5,
The answer selection information is graphic information displayed on the background of each numeric key of the numeric keypad,
10. The password input device according to claim 1, wherein the numerical arrangement of the numeric keypad pattern is moved by the pointer position control means by the position movement operation of the fake pointer. In the personal identification number input device according to claim 5,
The answer selection information is graphic information displayed on the background of each numeric key of the numeric keypad,
The personal identification number input device, wherein the figure displayed on the background of each numeric key of the numeric keypad is moved by the pointer position control means by the position movement operation of the fake pointer. In an information processing apparatus comprising display means for displaying a keyboard, input means for instructing an input key in the keyboard to perform an input operation, and data processing means for performing data processing, the code number is input by entering the code number A password input method for authenticating
The display processing means displays on the keyboard a fake pointer that simultaneously selects and instructs a plurality of input keys on the keyboard.
The pointer position control means controls the position of the pointer by being controlled by an input operation by the input means so that an input key to be input as a personal identification number is included in a plurality of input keys selected and instructed by the fake pointer. ,
The input processing means inputs data determined by the user's secret information from a plurality of input keys selected and designated by the fake pointer controlled by the pointer position control means,
A password input method characterized in that when the input data is received by the data processing means and the data of a predetermined number of characters is received, the password is compared with the password stored in advance to authenticate the password. The password input method according to claim 8,
At the start of password authentication, the display processing means displays a selection screen for selecting the shape of the fake pointer, and the fake pointer shape is selected from a plurality of predetermined patterns by the input operation of the input means. PIN code input method characterized by being performed. The password input method according to claim 8,
A code number for inputting input key data at a predetermined position from a plurality of input keys selected and designated by the pointer controlled by the pointer position control means according to the shape of the pointer by the input processing means input method. The password input method according to claim 8,
At the start of password authentication, the display processing means displays a selection screen for selecting the shape of the fake pointer, and the fake pointer shape is selected from a plurality of predetermined patterns by the input operation of the input means. ,
A password input method, wherein an input key at a predetermined position corresponding to the shape of the selected fake pointer is input key data input by the input processing means. The password input method according to claim 9,
When a numeric keypad pattern is selected as the fake pointer, the display processing means displays a selection screen for obtaining answer selection information, and the answer selection obtained by the user based on the input operation of the input means The information is determined, and the input processing means inputs data based on the answer selection information from among a plurality of input keys instructed to select by the fake pointer moved by the pointer position control means. PIN code input method. The password input method according to claim 12,
The answer selection information is graphic information displayed on the background of each numeric key of the numeric keypad,
10. A PIN code input method, wherein the numerical arrangement of a numeric keypad pattern is moved by the pointer position control means by the position movement operation of the fake pointer. The password input method according to claim 12,
The answer selection information is graphic information displayed on the background of each numeric key of the numeric keypad,
A password input method, wherein the figure displayed on the background of each numeric key of the numeric keypad is moved by the pointer position control means by the position movement operation of the fake pointer. In an information processing apparatus comprising display means for displaying a keyboard, input means for instructing an input key in the keyboard to perform an input operation, and data processing means for performing data processing, the code number is input by entering the code number A program for executing a personal identification number input process for performing authentication of
Display processing means for displaying on the keyboard a fake pointer for simultaneously selecting and inputting a plurality of input keys on the keyboard;
Pointer position control means for controlling the position of the pointer controlled by an input operation by the input means so that an input key to be input as a personal identification number is included in a plurality of input keys selected and instructed by the fake pointer;
An input processing means for inputting data defined by the user's secret information from a plurality of input keys selected and designated by the fake pointer controlled by the pointer position control means;
A program for accepting data input by the input processing means and, when accepting data of a predetermined number of characters, compares it with a pre-stored personal identification number and causes the computer to function as data processing means for authenticating the personal identification number. The program according to claim 15, wherein
At the start of password authentication, the display processing means displays a selection screen for selecting the shape of the fake pointer, and the shape of the fake pointer is a plurality of predetermined patterns based on the input operation of the input means. A program characterized by being selected from among. The program according to claim 15, wherein
The input processing means inputs data of an input key at a predetermined position from a plurality of input keys instructed by the pointer controlled by the pointer position control means according to the shape of the pointer. program. The program according to claim 15, wherein
At the start of password authentication, the display processing means displays a selection screen for selecting the shape of the fake pointer, and the shape of the fake pointer is selected from a plurality of predetermined patterns by an input operation of the input means. Selected,
A program characterized in that an input key at a predetermined position corresponding to the shape of the selected fake pointer is input key data input by the input processing means. The program according to claim 16, wherein
When a numeric keypad pattern is selected as the fake pointer, the display processing means displays a selection screen for obtaining answer selection information, and the answer selection obtained by the user based on the input operation of the input means The information is determined, and the input processing means inputs data based on the answer selection information from among a plurality of input keys instructed to select by the fake pointer moved by the pointer position control means. program. The program according to claim 19, wherein
The answer selection information is graphic information displayed on the background of each numeric key of the numeric keypad,
A program characterized in that the numerical arrangement of the numeric keypad pattern is moved by the pointer position control means by the position movement operation of the fake pointer. The program according to claim 19, wherein
The answer selection information is graphic information displayed on the background of each numeric key of the numeric keypad,
A program in which a figure displayed on the background of each numeric key of the numeric keypad is moved by the pointer position control means by the position movement operation of the fake pointer.

Images