JP2009134482A - Electronic equipment, control method for electronic equipment and program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide electronic equipment, a control method for the electronic equipment and a program, which improve security without impairing convenience. <P>SOLUTION: This electronic equipment has: an operation part 16; a restriction part 123 restricting operations corresponding to operation in the operation part 16; and an authentication processing part 124 performing authentication for releasing the restriction. The authentication processing part 124 has a selection part 122 selecting an authentication method from a plurality of authentication methods, and the selection part 122 selects the authentication method having a higher authentication level than the current authentication method when a prescribed condition is satisfied. <P>COPYRIGHT: (C)2009,JPO&INPIT

Description

  The present invention relates to an electronic device such as a mobile phone having a function of restricting key operation and releasing the restriction of key operation according to an authentication result, a method for controlling the electronic device, and a program.

Some recent cellular phones, etc., have a security function to deal with situations such as loss or theft, and have an auto-lock function that restricts key operations by requiring a password depending on the passage of a certain time or other setting conditions. (See Patent Documents 1 to 4). With this auto-lock function, various functions such as calls and e-mails cannot be used unless a correct password is input.
Japanese Patent Laid-Open No. 9-34577 JP 2006-294048 A JP 2000-259568 A Japanese Patent No. 3012599

For example, as in the techniques described in Patent Documents 1 and 2, an auto-lock function is disclosed in which a password is applied after a certain period of time. The password is composed of four digits “0000” to “9999”. One thousand inputs are widely used, and even if 2 seconds are spent for one input, the password may be released in 20,000 seconds, that is, about 5 hours.
Therefore, with the auto-lock function such as the techniques described in Patent Documents 1 and 2, there is a fear that the password may be released only by losing the cellular phone for about 5 hours, which is uneasy for security.
Further, as in the technique described in the cited document 3, a security level is improved by the input content and its timing, and the malfunction prevention method considering the key position as in the technique described in the cited document 4 However, it does not take into consideration the convenience of entering the familiar 4-digit password.

  An object of the present invention is to provide an electronic device, a control method for the electronic device, and a program that can enhance security without impairing convenience.

  An electronic apparatus according to a first aspect of the present invention includes an operation unit, a restriction unit that restricts an operation corresponding to an operation on the operation unit, and an authentication processing unit that performs an authentication process for releasing the restriction. The authentication processing unit includes a selection unit that selects an authentication method of the authentication process from a plurality of authentication methods, and the selection unit is currently selected when a predetermined condition is satisfied. An authentication method having an authentication level higher than that of the authentication method is selected.

  Preferably, the selection unit can select an authentication method having a high authentication level step by step.

  Preferably, the selection unit has a higher authentication level than the authentication method selected before the predetermined time is reached, assuming that the elapsed time after the end of use of the application reaches a predetermined time as the predetermined condition. Select an authentication method.

  Preferably, the selection unit has a higher authentication level than the authentication method selected before the predetermined number of times, with the predetermined condition being a case where the number of incoming calls after the use of the application reaches a predetermined number of times. Select an authentication method.

  Preferably, the selection unit uses the authentication method selected before the predetermined number is reached as the predetermined condition when the number of unread e-mails after use of the application reaches a predetermined number. Select a high-level authentication method.

  Preferably, the previously selected authentication method is a password, and the selection unit selects a password having more digits than the password of the previously selected authentication method when selecting a new authentication method. .

  Preferably, the authentication method includes biometric authentication based on biometric information, and the selection unit selects biometric authentication when selecting a new authentication method.

  Preferably, the biometric authentication includes voice authentication by voice, and the selection unit selects voice authentication when selecting a new authentication method.

  Preferably, the biometric authentication includes fingerprint authentication using a fingerprint, and the selection unit selects fingerprint authentication when selecting a new authentication method.

  An electronic device control method according to a second aspect of the present invention is a method for controlling an electronic device having an operation unit, the first step of restricting an operation corresponding to an operation at the operation unit, and the restriction. A second step of performing an authentication process for canceling, and in the second step, an authentication method for the authentication process is selected from a plurality of authentication methods, and a predetermined condition is satisfied Then, an authentication method having a higher authentication level than the currently selected authentication method is selected.

  A program according to a third aspect of the present invention is a program for performing processing of an electronic device having an operation unit, the first process for restricting an operation corresponding to an operation on the operation unit, and releasing the restriction. A second process for performing an authentication process for selecting an authentication method for the authentication process from a plurality of authentication methods, and when a predetermined condition is satisfied, Select an authentication method whose authentication level is higher than the currently selected authentication method.

  According to the present invention, it is possible to provide an electronic device, an electronic device control method, and a program that can enhance security without impairing convenience.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings.

In the present embodiment, a mobile phone is applied as an example to the portable electronic device according to the present invention.
FIG. 1 is a block diagram illustrating an internal configuration example of a portable electronic device according to the embodiment, and FIG. 2 is a diagram illustrating an example of an external appearance of the portable electronic device according to the internal configuration example of FIG. FIG. 3 is a diagram illustrating a display example of the display unit according to the present embodiment.
As shown in FIG. 1, a mobile phone 10 as a portable electronic device includes a communication unit 11, a control unit (CPU) 12, a storage unit 13, a voice processing unit 14, a display unit 15, a (key) operation unit 16, a timer 17, And a fingerprint sensor unit 18.
The control unit 12 includes a main control unit 121, a selection unit 122 as an authentication processing unit, a restriction unit 123, an authentication processing unit 124, and a release unit 125. The authentication processing unit 124 includes a password authentication unit 1241, voice The authentication unit 1242 and the fingerprint authentication unit 1243 are included. The audio processing unit 14 includes a speaker (SP) 141 and a microphone (MIC) 142, and the fingerprint sensor unit 18 includes a sensor 181 and an image generation unit 182.

The mobile phone 10 has a function of communicating with a base station and performing voice calls performed via a network, creation and transmission / reception of e-mails, browsing of WEB sites and content data (for example, moving images and images), and the like.
The mobile phone 10 has an auto-lock function that restricts (locks) key operations other than the user (for example, the owner of the mobile phone) as a security function. This auto-lock function can switch the security (authentication) level in two steps. When activated, the authentication method is selected so that the security level is increased step by step, and the key operation is restricted. The authentication is performed according to the method, and the restriction of the key operation is released according to the authentication result.
Specifically, the mobile phone 10 uses password authentication with a 4-digit number in the normal security level, which is the first stage (normal security mode), and uses an 8-digit number in the high security level, which is the second stage. Password authentication, voice authentication for identifying a user based on a voice waveform as biometric authentication, or fingerprint authentication using a fingerprint is used (high security mode).
When a predetermined condition (time, number of unread emails, number of incoming calls, etc.) is reached, the mobile phone 10 shifts to a high security mode.

The 8-digit password authentication, voice authentication, and fingerprint authentication have a higher security level than the 4-digit password authentication.
The password may be a character or a symbol, and the presence / absence of encryption and the number of digits are not particularly limited. Also, these authentication methods, security mode switching conditions, and the like are examples, and are not limited to the present embodiment.
Setting whether or not to enable the auto-lock function, if it is enabled, setting the timing to start auto-lock (when the application ends and switches to the standby screen, when the call ends, etc.), and the time until the auto-lock is activated , Setting whether to switch to high security mode when the auto-lock function is enabled, selection of conditions for switching to high security mode (time, number of unread emails, number of incoming calls, etc.) if it is enabled, high security The selection of the authentication method in the mode, the setting of the password, the voice data used for voice authentication, the fingerprint data used for fingerprint authentication, etc. can be suitably set.

  The communication unit 11 performs wireless communication with a base station to which data communication such as voice data such as a call, character information such as an electronic mail, and moving image data is connected. Specifically, the communication unit 11 performs a process such as demodulation on a radio wave signal communicated via an antenna at the time of reception and outputs the signal to the control unit 12, and performs a process such as modulation on the signal output from the control unit 12 at the time of transmission. Send out via antenna.

The control unit 12 comprehensively controls the overall operation of the mobile phone 10. That is, the control unit 12 controls various operations of the mobile phone 10 (control of voice calls, e-mail creation and transmission / reception, WEB site and content data browsing, etc., communicated with the base station via the network). The operation of each component (communication unit 11, storage unit 13, voice processing unit 14, display unit 15, operation unit 16, timer 17, and fingerprint sensor unit 18 is executed so as to be executed in an appropriate procedure according to 16 operations. ) To control.
The control unit 12 includes a computer (microprocessor) that executes processing based on a program (operating system, application program, etc.) stored in the storage unit 13, and performs the various processes described above according to procedures instructed in the program. Execute. That is, the control unit 12 sequentially reads instruction codes from the operation system or application program stored in the storage unit 13 and executes processing.

The main control unit 121 mainly includes a storage unit 13, a voice processing unit 14, a display unit 15, an operation unit 16, a timer 17, a fingerprint sensor unit 18, a selection unit 122, a restriction unit 123, an authentication processing unit 124, and a release unit. 125 is controlled. The main control unit 121 mediates exchange of various data between the constituent elements 122 to 125 and the storage unit 13.
The main control unit 121 reads the setting stored in the storage unit 13, for example, at the timing when the application in use ends, determines whether to enable the auto-lock function according to the setting, and the auto-lock function is If valid, the timer 17 is activated. Note that the timing for determining whether or not to enable the above-described auto-lock function is performed at the end of the call or when the display screen of the display unit 15 is switched to the standby screen (see FIG. 3A). However, the present invention is not limited to the embodiment and can be suitably set.
In addition, the main control unit 121 reads the setting stored in the storage unit 13 and determines whether or not to shift from the normal security mode to the high security mode according to the setting. In accordance with the above, it is determined whether or not the set time has elapsed, the number of unread e-mails, the number of incoming calls, and the like. If the mode does not shift to the high security mode, the normal security level is maintained.

The selection unit 122 selects one from a plurality of authentication methods. Specifically, when the main control unit 121 determines that the auto-lock function is to be enabled, the selection unit 122 selects the password authentication unit 1241 that performs 4-digit password authentication in the normal security mode.
When the main control unit 121 determines to shift to the high security mode, the selection unit 122 reads the setting stored in the storage unit 13, and according to the setting, the password authentication unit 1241, the voice authentication unit 1242, and the fingerprint authentication unit One of 1243 is selected.

The restriction unit 123 requires key operations for authentication input when the set time, the number of unread e-mails, the number of incoming calls, etc. reach the set conditions (for example, enter key 162, numeric key 163, character key 164) Limit to only. In other words, the restriction unit 123 invalidates the input even if a key unnecessary for authentication is pressed and a signal corresponding to the operation is input to the main control unit 121. As a result, various functions such as telephone calls and e-mails cannot be executed until the auto-lock is activated and the key operation restriction is released.
When receiving the release signal from the release unit 125, the restriction unit 123 releases the restriction on the key operation.

  The authentication processing unit 124 authenticates the restriction of the key operation by the restriction unit 123 according to the authentication method selected by the selection unit 122.

  The password authentication unit 1241 determines whether or not the password stored in the storage unit 13 in advance matches the password input by the operation unit 16, and only when the determination result matches, the restriction on the key operation is released. The release signal is output to the release unit 125.

  The voice authentication unit 1242 analyzes the waveform or the like of the voice signal, determines whether or not the user's voice data stored in the storage unit 13 in advance matches the voice data input to the microphone 142, and the determination result is Only when they coincide with each other, a release signal for releasing the restriction of the key operation is output to the release unit 125.

  The fingerprint authentication unit 1243 scans the fingerprint by the sensor 181 of the fingerprint sensor unit 18, analyzes the fingerprint image data generated by the image generation unit 182, and the fingerprint data of the user stored in advance in the storage unit 13 is the fingerprint. It is determined whether or not it matches the fingerprint data input to the sensor unit 18, and only when the determination result matches, a cancel signal for canceling the key operation restriction is output to the cancel unit 125.

  Upon receiving a release signal from the password authentication unit 1241, the voice authentication unit 1242, or the fingerprint authentication unit 1243 of the authentication processing unit 124, the release unit 125 releases the restriction on the key operation performed by the restriction unit 123. As a result, the automatic lock is released.

  The functions of the constituent elements 121 to 125 in the control unit 12 are achieved by the control unit 12 executing each program stored in the storage unit 13. However, it does not indicate only the components that are separated from other components and built in, but is merely a representation of the processing of each part for the sake of simplicity.

The storage unit 13 includes, for example, a nonvolatile storage device (flash memory), a randomly accessible storage device (SRAM, DRAM), and the like, and stores various data used for processing in the control unit 12.
The data stored in the storage unit 13 includes settings for whether or not to enable the auto-lock function, and settings for the timing for starting the auto-lock (when switching to the standby screen, at the end of the call, etc.) Setting the time until lock operation, setting whether to shift to high security mode when the auto lock function is enabled, and conditions for shifting to high security mode if enabled (time, number of unread emails, number of incoming calls, etc.) ) Selection, authentication method selection in high security mode, password setting, voice data used for voice authentication and fingerprint data used for fingerprint authentication, output result of control unit 12, application program executed by control unit 12, Temporary data used in the process of the program is included. In addition to the above, the data includes personal information of the user, the name and phone number of the other party, text information such as e-mail, an address book for managing phone numbers and personal data, ringtones (ringtones), voice Audio data such as messages, image data, and the like are included.

The audio processing unit 14 processes an audio signal output from the speaker 141 and an audio signal input from the microphone 142. That is, the voice processing unit 14 amplifies the voice input from the microphone 142, performs analog / digital conversion, performs further processing such as encoding, and converts the digital voice data into the control unit 12 (main control unit). 121).
The audio processing unit 14 performs signal processing such as encoding, digital / analog conversion, and amplification on the audio data supplied from the control unit 12, converts the audio data into an analog audio signal, and outputs the analog audio signal to the speaker 141.
The speaker 141 emits the audio signal input from the audio processing unit 14.
The microphone 142 is used at the time of voice call or voice authentication, and outputs the input voice signal to the voice processing unit 14.

The display unit 15 is configured by a display device such as a liquid crystal display panel or an organic EL (Electro-Luminescence) panel, for example, and displays various information according to the video signal supplied from the control unit 12. The display unit 15 includes, for example, a standby screen shown in FIG. 3A, a screen during operation of the auto-lock function shown in FIG. 3B, and an authentication suggesting input of a password, voice, fingerprint, etc. shown in FIG. Display the screen.
In addition to the above, the information displayed by the display unit 15 includes, for example, a telephone number of a callee at the time of outgoing (incoming call), character information such as an e-mail, time information such as a WEB site, a still image, a moving image, and a date, The remaining battery level, success / failure of transmission, etc. are included.

As shown in FIG. 2, the operation unit 16 includes a plurality of (allocating various functions such as a power key 161, an enter key 162, a numeric key 163, a character key 164, a direction key 165, a call key 166, and a call key 167. Operation) key. When these keys are operated by the user, the operation unit 16 generates a signal corresponding to the operation content and outputs the signal to the main control unit 121 of the control unit 12 as a user instruction.
Further, even when the operation unit 16 is pressed other than a predetermined key (for example, a numeric key 163) necessary for authentication such as password entry when the automatic lock is activated, until the automatic lock is released by the release unit 125, The restriction unit 123 invalidates the input.

When a predetermined time (for example, 1 minute) is set, the timer 17 includes a counter that counts down to the second in seconds, a reset circuit that resets the count value, and the like. Counting is started, and when the counting ends, the selection unit 122 is notified via the main control unit 121 and the count value is reset.
In the present embodiment, the timer 17 is suitably set by the user and counts down the time until the auto-lock is started and the time until transition to the high security mode. The configuration of the timer 17 is not particularly limited.

The fingerprint sensor unit 18 scans (reads) the difference in capacitance between the fingerprint irregularities, digitizes the difference in capacitance scanned by the sensor 181, and converts the fingerprint image data, etc. An image generation unit 182 to be generated is configured.
Here, the fingerprint sensor unit 18 will be described with reference to FIG. 4A and 4B are diagrams illustrating a configuration example of the fingerprint sensor unit according to the present embodiment. FIG. 4A is a side view of the sensor 181 viewed from the θ direction in FIG. 2, and FIG. It is an enlarged view of the sensor 181 shown to a).
As shown in FIG. 4A, the sensor 181 is arranged so as to have a slight step H with respect to the housing surface 110 of the mobile phone 10, and is connected to the image generation unit 182. Thus, the step (H) is suitably provided so that the finger (fingertip) 183 can easily come into contact with the surface of the sensor 181. The step H may not be provided.
As shown in FIG. 4B, the sensor 181 has a plurality of electrode chambers 1813 (about several tens of thousands) partitioned by a plurality of partitions 1812 under a hard protective film 1811 that contacts the surface of the finger 183 (fingerprint surface). An electrode 1814 is provided in each electrode chamber 1813.
When the surface of the finger 183 is brought into contact with the protective film 1811, a difference occurs in the distance between the surface of the finger 183 and the electrode 1814 due to the unevenness of the fingerprint, and the shorter the distance, the more charge is accumulated in the electrode 1814. The sensor 181 reads out the electric charge accumulated in the electrode 1814 and outputs it to the image generation unit 182.
The image generation unit 182 receives the charge stored in the electrode 1814 from the sensor 181, generates the fingerprint data so that fingerprint authentication can be performed by digitizing the charge amount, and outputs the fingerprint data to the fingerprint authentication unit 1243 via the main control unit 121. To do.
The fingerprint sensor unit 18 may be an optical method, for example, and is not limited to this embodiment.

  Next, the operation of the mobile phone 10 will be described focusing on the auto-lock function with reference to FIGS. FIG. 5 is a flowchart of the portable electronic device according to the embodiment, and FIG. 6 is a flowchart at the time of initial setting in FIG.

(Step ST1)
As shown in FIG. 5, the user makes initial settings. As shown in FIG. 6, the user sets whether or not to activate the auto-lock function (step ST110). If it is valid (YES), the timing for starting the auto-lock (the application is terminated and the screen is switched to the standby screen). At the end of the call, etc.) (step ST120), the time until the auto-lock operation is set (step ST130), and whether or not to shift to the high security mode is set when the auto-lock function is valid (step ST130). ST140) If valid (YES), select conditions for transition to high security mode (set time, number of unread e-mails, number of incoming calls, etc.) (step ST150), and authentication method in high security mode Select (8-digit password authentication, voice authentication, fingerprint authentication) (step ST160) to finish the initial setting. To.
When the user sets the auto lock function to be invalid in step ST110 (NO), the initial setting is terminated, and when the user sets not to shift to the high security mode in step ST140 (NO), the normal security mode is set. (Step ST170), and the initial setting is completed.
These initial settings are input by the operation unit 16 and stored in the storage unit 13 via the main control unit 121.

  In order to simplify the following description, in step ST120, the timing for starting the automatic lock is set when the application ends and the screen is switched to the standby screen in FIG. 3A. In step ST130, the time until the automatic lock is activated. The setting is set after t1 seconds (for example, after 60 seconds), the transition condition to the high security mode is set after t2 seconds (for example, after 120 seconds) in step ST150, and the 8-digit number is set in step ST160. Assume that password authentication is selected.

(Step ST2)
In this step, it is assumed that the user has stopped using the mobile phone 10.
The main control unit 121 reads the setting stored in the storage unit 13 at the timing when the application in use ends, for example, determines whether to enable the auto-lock function according to the setting, and the auto-lock function is enabled In the case of (YES), the timer 17 is operated, and in the case where the auto-lock function is invalid (NO), the process is ended.

(Step ST3)
The timer 17 starts counting time under the control of the main control unit 121. Specifically, the timer 17 counts in seconds from t1 seconds to 0 seconds.

(Step ST4)
When the count is completed (YES), the timer 17 resets the count value after notifying the selection unit 122 via the main control unit 121, and when counting is in progress (NO), the count value is 0 second. Count until

(Step ST5)
Since the main control unit 121 determines that the auto-lock function is valid, the selection unit 122 selects the password authentication unit 1241 that performs 4-digit password authentication in the normal security mode.

(Step ST6)
The limiter 123 has completed the count of the timer 17 and has reached the set time (t1 seconds have passed), so that the key operation is necessary for authentication input (for example, enter key 162, numeric key 163, character key 164) Limit to only. In other words, the restriction unit 123 invalidates the input even if a key unnecessary for authentication is pressed and a signal corresponding to the operation is input to the main control unit 121.
As a result, the automatic lock at the normal security level is activated, and until the shift to the high security mode described later (˜step ST11) or by the user (user), the 4-digit password authentication is performed and the restriction on the key operation is released. (Steps ST14 and ST15).
When a key operation is performed during the operation of the auto lock, the display unit 15 displays a display screen indicating that the auto lock operation is in progress as shown in FIG. Various functions such as e-mail cannot be executed.

(Step ST7)
The main control unit 121 reads the setting stored in the storage unit 13, determines whether to shift to the high security mode according to the setting, and activates the timer 17 when shifting to the high security mode (YES). If the mode does not shift to the high security mode (NO), the normal security mode is maintained, and the user (user) performs 4-digit password authentication (steps ST14 and ST15).

(Step ST8)
The timer 17 starts counting in seconds from t2 seconds to 0 seconds under the control of the main control unit 121 again.

(Step ST9)
When the count is completed (YES), the timer 17 resets the count value after notifying the selection unit 122 via the main control unit 121, and when counting is in progress (NO), the count value is 0 second. Count until
Although not shown in the figure, if the user (user) performs 4-digit password authentication between steps ST6 and ST9, the processes of steps ST14 and ST15 are performed.

(Step ST10)
Since the selection unit 122 determines that the main control unit 121 shifts to the high security mode, the selection unit 122 reads the setting value stored in the storage unit 13 and selects the 8-digit password authentication unit 1241 according to the setting value.

(Step ST11)
The restriction unit 123 continues to restrict key operations to only those necessary for authentication input.
As a result, the auto-lock function at the high security level operates, and is maintained until the 8-digit password authentication is performed by the user (user) and the restriction on the key operation is released (steps ST12 and ST13).

(Step ST12)
In this step, it is assumed that the user (user) releases the automatic lock.
When an arbitrary key is pressed by the user, the display unit 15 displays a screen for prompting a password as shown in FIG. 3C, and the authentication processing unit 124 performs key operation by the restriction unit 123 in the high security mode. The restriction is authenticated according to the authentication method selected by the selection unit 122.
Specifically, the password authentication unit 1241 determines whether or not the 8-digit password stored in the storage unit 13 in advance matches the 8-digit password input by the operation unit 16, and the determination result matches. Only, a release signal for releasing the restriction of the key operation is output to the release unit 125.

(Step ST13)
Upon receiving the release signal from the password authentication unit 1241, the release unit 125 releases the restriction on the key operation performed by the restriction unit 123. Thereby, the auto lock in the high security mode is released, and the display unit 15 displays the standby screen shown in FIG.

(Step ST14)
In this step, it is assumed that the user (user) releases the automatic lock.
When an arbitrary key is pressed by the user, the display unit 15 displays a screen for prompting password input as shown in FIG. 3C, and the password authentication unit 1241 displays a 4-digit number stored in the storage unit 13 in advance. It is determined whether or not the password and the four-digit password input by the operation unit 16 match. Only when the determination result matches, a cancel signal for canceling the key operation restriction is output to the cancel unit 125.

(Step ST13)
Upon receiving the release signal from the password authentication unit 1241, the release unit 125 releases the restriction on the key operation performed by the restriction unit 123. As a result, the automatic lock in the normal security mode is released, and the display unit 15 displays the standby screen shown in FIG.

The operation of the mobile phone 10 has been described based on the initial settings in step ST1.
Next, a case will be described in which the transition to the high security mode and the authentication method by other methods are initially set in the initial setting in step ST1.

In step ST150, when the initial setting is made so that the transition to the high security mode is determined based on the number of unread emails, the main control unit 121 starts determining the number of unread emails in step ST8, and in step ST9. It is determined whether or not the number of unread e-mails is a predetermined number (for example, three) or more, and if it is the predetermined number or more, the process of step ST10 is performed.
In step ST150, when the initial setting is made so that the transition to the high security mode is determined by the number of incoming calls, the main control unit 121 starts to determine the number of incoming calls in step ST8, as described above. In step ST9, it is determined whether or not the number of incoming calls is equal to or greater than a predetermined number (for example, three times). If the number of incoming calls is equal to or greater than the predetermined number, the process of step ST10 is performed.

If the authentication method in the high security mode is initially set to voice authentication in step ST160, the selection unit 122 selects the voice authentication unit 1242 in step ST10, and the voice authentication unit 1242 stores the information in the storage unit 13 in advance in step ST12. It is determined whether or not the voice data of the user who is being matched with the voice data input to the microphone 142, and a cancellation signal for canceling the restriction of the key operation is output to the cancellation unit 125 only when the determination result matches. Like that.
When the authentication method in the high security mode is initially set to fingerprint authentication in step ST160, the selection unit 122 selects the fingerprint authentication unit 1243 in step ST10, and the fingerprint authentication unit 1243 in step ST12 The sensor 181 of the fingerprint sensor unit 18 scans the fingerprint, analyzes the fingerprint image data generated by the image generation unit 182, and the user's fingerprint data stored in advance in the storage unit 13 is input to the fingerprint sensor unit 18. It is determined whether or not the fingerprint data matches, and only when the determination results match, a cancel signal for canceling the restriction of the key operation is output to the cancel unit 125.

As described above, according to the present embodiment, if the setting is made to shift to the high security mode after a lapse of a predetermined time, even if the unused time of the mobile phone becomes longer during the normal auto lock, the security level is further increased. A high security level can be ensured because it is switched to a high 8-digit password authentication, voice authentication or fingerprint authentication.
If you set the system to switch to high security mode based on the number of incoming calls (unread emails), the high security level auto-lock will be activated if you cannot receive incoming calls several times (you cannot read several emails). Therefore, unauthorized use of the mobile phone due to loss or theft can be prevented.
In addition, since the user can set whether or not to shift to the high security mode, when the mobile phone is frequently used, there is an advantage that the automatic lock can be released by inputting a familiar 4-digit password.

In the above-described embodiment, when there are a plurality of users, initial setting can be performed for each user, and operation can be performed with different settings for each user.
For example, in step ST10 of FIG. 5, the selection unit 122 may select an authentication method randomly (randomly).
Although the above-described embodiment has two security levels, three or more security levels may be provided so that the security level increases step by step.
In addition to the above-described method, an authentication method using the retina, face type, iris, blood vessel, ear type, palm type, number of blinks, or the like can be applied to the authentication method according to the present embodiment.
The security level is generally higher for biometric authentication than for a password, but the definition of the level can be determined by the user. Similarly, it is assumed that the security level of different biometric authentication can be determined by the user.

The functions of the constituent elements of the portable electronic device according to the embodiment of the present invention shown in FIG. 1 may be realized entirely by software, or at least a part thereof may be realized by hardware. For example, data processing in each component (main control unit 121, selection unit 122, restriction unit 123, authentication processing unit 124, release unit 125) of the control unit 12 in FIG. 1 is realized on a computer by one or more programs. Alternatively, it may be realized on hardware.
In the above embodiment, a mobile phone is applied to a portable electronic device. However, the present invention is applicable to a PHS (Personal Handy-phone System), a portable personal computer, and a portable mobile device. It can be suitably applied.
The embodiment of the present invention can be applied not only to a portable electronic device but also to a stationary electronic device (for example, a desktop personal computer). Various modifications are possible without departing from the scope of the present invention.
Further, in the above embodiment, the example applied to the key lock for invalidating the input of the key operation has been described. However, the processing for authentication other than the automatic lock, for example, outgoing call, use of e-mail, address book, etc. It is also applicable to a case where a lock for restricting the operation is applied in an operation such as browsing or using electronic money, and a security level for releasing the lock is selected according to a predetermined condition.

The method described in detail above can also be configured as a program corresponding to the above procedure and executed by a computer such as a CPU.
Such a program can be configured to be accessed by a recording medium such as a semiconductor memory, a magnetic disk, an optical disk, a floppy (registered trademark) disk, or the like, and to execute the program by a computer in which the recording medium is set.

It is a block diagram which shows the internal structural example of the portable electronic device which concerns on embodiment. It is a figure of an example which shows the external appearance of the portable electronic device by the internal structural example of FIG. It is a figure which shows the example of a display of the display part which concerns on this embodiment. It is a figure which shows the structural example of the fingerprint sensor part which concerns on this embodiment. It is a flowchart of the portable electronic device which concerns on embodiment. 6 is a flowchart at the time of initial setting in FIG. 5.

Explanation of symbols

DESCRIPTION OF SYMBOLS 10 ... Mobile phone, 11 ... Communication part, 12 ... Control part (CPU), 13 ... Memory | storage part, 14 ... Audio | voice processing part, 141 ... Speaker (SP), 142 ... Microphone (MIC), 15 ... Display part, 16 DESCRIPTION OF SYMBOLS ... Operation part, 17 ... Timer, 18 ... Fingerprint sensor part, 110 ... Case surface, 181 ... Sensor, 182 ... Image generation part, 183 ... Finger, 1811 ... Protective film, 1813 ... Electrode chamber, 1814 ... Electrode, 121 ... Main control unit, 122 ... selection unit, 123 ... restriction unit, 124 ... authentication processing unit, 1241 ... password authentication unit, 1242 ... voice authentication unit, 1243 ... fingerprint authentication unit, 125 ... release unit, H ... step.

Claims (11)

An operation unit;
A limiting unit that limits operations corresponding to operations on the operation unit;
An authentication processing unit for performing an authentication process for releasing the restriction,
The authentication processing unit
A selection unit that selects an authentication method of the authentication process from a plurality of authentication methods;
The selection unit includes:
An electronic device that selects an authentication method with a higher authentication level than the currently selected authentication method when a predetermined condition is satisfied. The selection unit includes:
The electronic device according to claim 1, wherein an authentication method having a high authentication level can be selected step by step. The selection unit includes:
The authentication method having the authentication level higher than the authentication method selected before the predetermined time is selected, with the predetermined condition being a time when the elapsed time after the use of the application reaches a predetermined time. The electronic device described. The selection unit includes:
The authentication method having a higher authentication level than the authentication method selected before the predetermined number of times is selected, with the predetermined condition being a case where the number of incoming calls after the use of the application reaches a predetermined number. The electronic device described. The selection unit includes:
The authentication method having a higher authentication level than the authentication method selected before the predetermined number is reached is selected as the predetermined condition when the number of unread e-mails after use of the application reaches a predetermined number. Item 3. The electronic device according to Item 2. The authentication method selected previously is password,
The selection unit includes:
The electronic device according to any one of claims 1 to 5, wherein when selecting a new authentication method, a password having more digits than the password of the authentication method selected previously is selected. The authentication method includes biometric authentication based on biometric information,
The selection unit includes:
The electronic device according to any one of claims 1 to 6, wherein biometric authentication is selected when a new authentication method is selected. The biometric authentication includes voice authentication by voice,
The selection unit includes:
The electronic device according to claim 7, wherein voice authentication is selected when a new authentication method is selected. The biometric authentication includes fingerprint authentication by fingerprint,
The selection unit includes:
The electronic device according to claim 7, wherein fingerprint authentication is selected when a new authentication method is selected. A method for controlling an electronic device having an operation unit,
A first step of restricting an operation corresponding to an operation on the operation unit;
A second step of performing an authentication process for releasing the restriction,
In the second step,
Electronic device control method for selecting an authentication method for the authentication process from a plurality of authentication methods and selecting an authentication method having an authentication level higher than that of the currently selected authentication method when a predetermined condition is satisfied . A program for processing an electronic device having an operation unit,
A first process for restricting an operation corresponding to an operation on the operation unit;
And a second process for performing an authentication process for releasing the restriction,
In the second process,
The authentication method of the authentication process is selected from a plurality of authentication methods, and when a predetermined condition is satisfied, the computer is selected to select an authentication method having an authentication level higher than that of the currently selected authentication method. Program to make.

Images