JP2010170314A - Portable information device, system and method for authenticating user - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a technique for easily performing user authentication with high accuracy. <P>SOLUTION: A function providing means provides the functions of an application to a user. A use pattern information storage means extracts use pattern information indicating a pattern of use of a legitimate user from a history of use information including functions used in the past and situations during use, and stores this use pattern information in advance. A requested pattern information acquisition means obtains request pattern information including the function requested and the situation at that time. A first authentication means determines whether or not the use of the function requested should be permitted, by collating the request pattern information obtained by the request pattern information acquisition means with the use pattern information stored in advance by the use pattern information storage means. <P>COPYRIGHT: (C)2010,JPO&INPIT

Description

  The present invention relates to user authentication of a portable information device.

  In recent years, portable information processing devices (hereinafter referred to as “portable information devices”) such as portable information terminals, cellular phones, smartphones, portable personal computers, and PDAs (Personal Digital Assistants) have become highly functional. Along with that, the dangers of theft of portable information devices and information leakage from portable information devices are also increasing. Therefore, the importance of technology for ensuring the security of portable information devices is increasing.

  As a general security technology for portable information devices, there is one that locks a function so that it cannot be used if no operation is performed for a certain period of time. User authentication is used to unlock. When a locked portable information device is used, the user is authenticated. If the user authentication is performed normally and it is confirmed that the user who intends to use the portable information device is a legitimate user, the lock is released. This user authentication is performed using a password or biometric information.

  However, it is not very convenient for the user to input a password or perform an operation for reading biometric information every time a portable information device is used. In particular, for users who frequently use portable information devices, it is considerably troublesome to undergo user authentication each time.

  On the other hand, a technique for improving user convenience has been proposed (see Patent Document 1). The technique described in Patent Document 1 determines whether a user is the owner of the portable information device by comparing the behavior of the user who intends to use the portable information device with a past behavior history. It is. As a result, the user does not have to perform an operation for user authentication, and the burden is reduced.

JP 2004-310207 A

  However, with the technique described in Patent Document 1, it is difficult to identify users with similar behavior patterns, and there are cases where sufficient accuracy of authentication cannot be obtained. For example, like a colleague who lives in the same dormitory, people who commute on the same train at the same time have similar behavior patterns. Therefore, it is difficult to identify these persons by the technique of Patent Document 1.

  An object of the present invention is to provide a technique for performing user authentication easily and with high accuracy.

In order to achieve the above object, the portable information device of the present invention provides:
A function providing means for providing the application function to the user;
Usage pattern information storage means for extracting usage pattern information representing a usage pattern of a regular user from a history of usage information including functions used in the past and the situation at the time of usage, and storing the usage pattern information in advance;
Request pattern information acquisition means for acquiring request pattern information including the requested function and the situation at that time;
Whether the requested use of the requested function is permitted by collating the request pattern information acquired by the request pattern information acquisition unit with the usage pattern information stored in advance by the usage pattern information storage unit First authentication means for judging whether or not.

The user authentication method of the present invention includes:
From the history of usage information including the functions used in the past of mobile information devices and usage status, usage pattern information representing usage patterns of authorized users is extracted and stored,
Obtain request pattern information including the requested function and the current status,
By comparing the request pattern information with the usage pattern information, it is determined whether or not the requested use of the function is permitted.

The user authentication program of the present invention is
A procedure for extracting and storing usage pattern information representing a usage pattern of a regular user from a history of usage information including the functions used in the past of the portable information device and the situation at the time of usage,
A procedure for obtaining request pattern information including the requested function and the current situation;
A program for causing a computer to execute a procedure for determining whether to permit use of the requested function by collating the request pattern information with the use pattern information.

  According to the present invention, user authentication can be performed easily and with high accuracy.

It is a block diagram which shows the structure of the portable information device by 1st Embodiment. It is a block diagram which shows the structure of the portable information device of 2nd Embodiment. It is a flowchart which shows the flow of the process of access control by the portable information device of 2nd Embodiment. It is the flowchart which shows the flow of the utilization pattern comparison process by the comparison part 130. FIG. It is a flowchart which shows the flow of a process of preparation of learning data. It is a table | surface which shows an example of usage information. It is a figure which shows the mode of table conversion. It is a flowchart which shows the flow of a process of update of learning data. It is a figure which shows the mode of the record deletion of learning data. It is a block diagram which shows the structure of the communication system by 3rd Embodiment.

  Embodiments for carrying out the present invention will be described in detail with reference to the drawings.

(First embodiment)
FIG. 1 is a block diagram showing the configuration of the portable information device according to the first embodiment. Referring to FIG. 1, the portable information device includes a function providing unit 11, a usage pattern information storage unit 12, a request pattern information acquisition unit 13, a pattern authentication unit 14, and an input data authentication unit 15. The portable information device here is, for example, a mobile phone, a smartphone, a portable personal computer, or a PDA.

  The function providing unit 11 executes various applications and provides the functions of those applications to the user. The function providing unit 11 locks the function of the application if there is no operation for a certain period of time. The locked function cannot be used again without authentication by the pattern authentication unit 14 or the input data authentication unit 15.

  The usage pattern information storage unit 12 extracts usage pattern information representing a usage pattern of a regular user from a history of usage information including functions used in the past and usage statuses, and stores the usage pattern information in advance. At that time, the usage pattern information storage unit 12 may acquire the usage information including the function used in the past and the usage status from the request pattern information acquisition unit 13.

  Here, the situation information includes time and position information, and may further include data obtained from various sensors. The position information is acquired by, for example, GPS (Global Positioning System). Further, if the mobile information device has a wireless communication function like a mobile phone, the location information may be acquired from a base station or an access point. Further, if the portable information device has an electronic money function, the position may be acquired from usage data obtained from the reader device when the electronic money function is used. As the sensor, in addition to GPS, an acceleration sensor may be provided in the portable information device.

  The request pattern information acquisition unit 13 acquires request pattern information including the requested function and the situation at that time. If the requested function is not locked, the function is immediately provided to the user by the function providing unit 11. However, if the requested function is locked, the pattern authentication unit 14 performs authentication. The request pattern information acquisition unit 13 also periodically acquires the current time, the current position of the portable information device, and the function currently being used, and also serves as a function to provide the usage pattern information storage unit 12 as usage information. May be.

  The pattern authentication unit 14 permits use of the requested function by comparing the request pattern information acquired by the request pattern information acquisition unit 13 with the use pattern information stored in advance in the use pattern information storage 12. Judge whether to do. If the function and status included in the request pattern information correspond to the usage pattern of the authorized user included in the usage pattern information, the pattern authentication unit 14 permits the use of the function. When the requested function is permitted by the pattern authentication unit 14, the function is provided to the user by the function providing unit 11.

  As described above, according to the present embodiment, user authentication is performed based on a usage pattern when a user uses a function, so that the user need not be aware of authentication. In addition to the usage situation when the function was used in the past, the usage pattern information considering the used function is extracted, and the usage pattern information and the requested pattern information are collated and requested. Since it is determined whether or not the use of the function is permitted, user authentication can be performed with high accuracy.

  In the present embodiment, for example, the usage pattern information storage unit 12 extracts a route based on a position corresponding to a continuous time in the usage information, and associates the time with the route and the function used. The attached learning data may be stored as usage pattern information. In this case, the pattern authentication unit 14 includes learning data whose time matches the time of the request pattern information, includes the position of the use pattern information in the route, and whose function matches the function of the request pattern information in the use pattern information. If there is, the use of the requested function may be permitted.

  Further, the usage pattern information storage unit 12 may manage the usage pattern information by periodically updating the learning data. For example, the usage pattern information storage unit 12 stores, as learning data, a weight value based on the past usage count in association with the time, route, and used function, and the weight value is smaller than a predetermined value. You may decide to delete learning data regularly. According to this, the usage pattern information is sequentially updated and maintained in a new state, so that the accuracy of user authentication can be maintained high.

  An input data authentication unit 15 may be further added to the configuration described above. When the pattern authentication unit 14 does not determine that the requested function is permitted to be used, the input data authentication unit 15 determines whether or not the user is a regular user through user authentication accompanied by a user operation. User authentication accompanied by user operation uses, for example, a password or biometric information. In that case, when the pattern authenticating unit 14 determines that the requested function is permitted to be used, the function providing unit 11 can use only the function, and the input data authenticating unit 15 allows the user to be a regular user. When it is determined that a plurality of functions are included, a plurality of functions including the requested function may be used. The plurality of functions are, for example, functions of all applications.

  Further, the usage pattern information storage unit 12 may store the day of the week when the function is used in association with the time, the route, and the function used as learning data. Then, the pattern authentication unit 14 uses the learning data in which the time and day of the week match the time and day of the request pattern information, the route includes the position of the request pattern information, and the function matches the function of the request pattern information. If it is in the information, use of the requested function may be permitted. According to this, even when the usage pattern differs depending on the day of the week, user authentication can be performed with high accuracy.

  Further, the pattern authentication unit 12 may determine whether the time coincides with each other based on whether or not the time coincides with a certain time width. As an example, the pattern authentication unit 12 matches the day of the week and the function with the day of the week and the function of the request pattern information if there is no learning data in the usage pattern information that matches the time and the function of the request pattern information. Extract learning data from usage pattern information. Then, if the extracted learning data includes learning data whose time difference from the request pattern information is equal to or smaller than a predetermined value, the pattern authentication unit 12 permits use of the requested function.

(Second Embodiment)
FIG. 2 is a block diagram illustrating a configuration of the portable information device according to the second embodiment. Referring to FIG. 2, the portable information device according to the second embodiment includes a terminal access control unit 100, an authentication unit 300, an application unit 400, and a location information receiving unit 600. The terminal access control unit 100 includes a usage history data collection unit 110, a learning data management unit 120, a comparison unit 130, and a determination unit 150.

  The authentication unit 300 performs authentication by a general method using a password or biometric information. The application unit 400 executes various applications and provides functions of these applications to the user. Examples of the application include a web browser and a music player application. The position information receiving unit 600 receives, for example, a radio wave from a GPS satellite and acquires position information from the received radio wave.

In the portable information device of the present embodiment, the user can always operate the menu, and when the application function of the application unit 400 is used, access control by the terminal access control unit 100 is performed. This access control is a kind of user authentication. Specifically, whether or not to permit use of the requested function by comparing the request pattern requested for accessing the function with the usage pattern extracted from the function and usage status used in the past. The access history data collection unit 110 uses the function used by the application unit 400 and the location information acquired by the location information reception unit 600 together with the time at certain intervals. Store as information.

  The learning data management unit 120 extracts learning data of usage pattern information representing the usage pattern of the regular user from the usage information collected by the usage history data collection unit 110, and stores the learning data. The learning data management unit 120 keeps the learned data stored in the latest state by regularly organizing it.

  The learning data includes usage function learning data and route learning data. In the use function learning data, “day of the week, time, route ID, use function, weight” is associated. In the route learning data, “route ID, time, position information” is associated.

  The route can be extracted from time and position information, and is, for example, a set of data including time and position. The route ID is an identifier for identifying each route. Here, as an example, the route ID is determined based on the date when the route is extracted (during learning). A route ID such as 080806 is assigned to the route extracted from the usage information on August 6, 2008.

  The comparison unit 130 compares the learning data with the requested function use pattern (request pattern) when the learning data is created or when the use of each function of the application unit 400 is requested. To do.

  The determination unit 150 determines whether to permit access to the requested function based on the comparison result by the comparison unit 130. In the comparison by the comparison unit 130, if the request pattern corresponds to any one of the learning patterns, the determination unit 150 determines that access to the requested function is permitted. If the request pattern does not correspond to any learning pattern, the determination unit 150 determines to perform user authentication by the authentication unit 300.

  Next, the operation of the portable information device according to the present embodiment will be described in detail.

  FIG. 3 is a flowchart illustrating a flow of access control processing by the portable information device according to the second embodiment. Referring to FIG. 3, when the user operates the menu of the portable information device and requests execution of a function of a certain application (step A0), the determination unit 150 in the terminal access control unit 100 determines that the portable information device is locked. It is determined whether or not there is (step A1).

  If the portable information device is in the locked state, the comparison unit 130 compares the usage information learning data of the learning data management unit 120 with the request pattern obtained by the usage history data collection unit 110 (step A2). Next, the determination unit 150 determines whether authentication with data input by the user is necessary based on the comparison result between the usage information learning data and the request pattern (step A3).

  If it is determined that authentication with data input by the user is not necessary, the application unit 400 executes an application that provides the requested function and provides the function to the user (step A5). On the other hand, if it is determined that authentication with data input by the user is necessary, the authentication unit 300 performs authentication processing (step A4).

  If the authentication unit 300 determines that the user is an authorized user, the application unit 400 makes all applications accessible (step A5). In this case, similarly to a general lock function, the user can use each function by releasing the lock, and the lock is applied again if no operation is performed for a certain period of time.

  Next, detailed processing in step A2 of FIG. 3 will be described. FIG. 4 is a flowchart showing the flow of usage pattern comparison processing by the comparison unit 130. Referring to FIG. 4, the comparison unit 130 first compares the request pattern with the learning data of the past usage pattern, so that the learning data in which the request pattern and the “day of the week, time, and usage function” all match are included. It is determined whether or not a record exists (step A2-1).

  If there is a record of learning data in which the request pattern and the “day of the week, time, and use function” all match, the comparison unit 130 then indicates that the portable information device is currently located in the matched learning data It is determined whether or not there is learning data for a route that matches the route (step A2-2).

  For example, from the usage information for a certain period from the past to the present, the route where the portable information device is currently located is determined, and it is determined whether the route matches the route of the past learning data. May be. The route comparison may be performed by comparing the route IDs. Further, the comparison unit 130 may determine whether or not the current position is a position included in the learning data path.

  If there is learning data for a route that matches the current route, the comparison unit 130 notifies the determination unit 150 to that effect (step A2-5).

  In step A2-1, if there is no record of learning data in which the request pattern and the “day of the week, time of day, use function” all match, the comparison unit 130 next sets “day of the week, use function”. A record of learning data that matches those of the request pattern and whose “time” is closest to the time of the request pattern is acquired (step A2-3).

  Subsequently, the comparison unit 130 determines whether or not the difference between the time of the learning data acquired in step A2-3 and the current time is equal to or smaller than a predetermined value (error parameter ε) (step A2-4). If the time difference is equal to or less than ε, the comparison unit 130 regards that the learning data matches the request pattern in all of the “day of the week, time, and use function”, and proceeds to step A2-2.

  For example, assume that the error parameter ε is 10 minutes. If the current time is 8:25 and the time of the record with the closest time on the learning data is 8:20, the time difference is 5 minutes. Therefore, since the time difference of 5 minutes is equal to or less than the error parameter of 10 minutes, the comparison unit 130 considers that the learning data matches the requested pattern.

  When there is no learning data that matches the route in step A2-2, and when there is no learning data whose time difference is equal to or smaller than the error parameter ε in step A2-4, the comparison unit 130 has no learning data that matches the request pattern. To the determination unit 150 (step A2-6).

  Next, a process for creating and updating learning data from usage information will be described.

  FIG. 5 is a flowchart showing a flow of processing for creating learning data.

  Note that the usage information is recorded in advance. For example, the usage history data collection unit 110 records a record in which “time, position information, and usage function” are associated with each other at regular time intervals as usage information.

  FIG. 6 is a table showing an example of usage information. In this example, seven records are recorded at intervals of 1 minute between 6:30 and 6:36. In the present embodiment, a period for acquiring data for one day is determined, and the learning process is performed after the period has elapsed. As an example of a period for acquiring data, settings such as 6:30 to 20:00 are conceivable. In the example of FIG. 6, the position information is represented by longitude and latitude.

  Referring to FIG. 5, the usage history data collection unit 110 creates route data based on the time and location information of the usage information (step C1). Subsequently, the usage history data collection unit 110 compares the created route data with each route data of the route learning data held in the learning data management unit 120 (step C2).

  If the comparison shows that the created route data and route data that can be regarded as the same route are in the route learning data, the usage history data collection unit 110 acquires the route ID of the route data in the route learning data. (Step C3). On the other hand, if there is no route data that can be regarded as the same route as the created route data, the usage history data collection unit 110 gives a new route ID to the created route data and learns the route data. It adds to the route learning data of the data management part 120 (step C4). The route ID may be generated based on the date and time of creation as described above, for example.

  Next, the usage history data collection unit 110 decomposes the accumulated usage information records for each “usage function”, and adds attributes such as day of the week, route ID, and weight to each record. By deleting the attribute of the position information, a table of the same type as the learning data composed of “day of the week, time, route ID, use function, weight” is created (step C5). FIG. 7 is a diagram showing a state of table conversion. Referring to FIG. 7, a table as shown in (b) is created from the usage information as shown in (a). The value of the weight when creating the table is “1”.

  Subsequently, the learning data management unit 120 has the learning data managed by the record of the table created by the usage history data collection unit 110 and the record whose “day of the week, time, route ID, and usage function” match. (Step C6). If there is a record of learning data that matches the record of the created table, the learning data management unit 120 adds 1 to the weight of the record of the learning data (step C7). If there is no record of learning data that matches the record of the created table, the learning data management unit 120 adds the record of the table to the learning data (step C8). The learning data management unit 120 ends the process when the processes in steps C6 to C8 described above are repeated for the number of records included in the table.

  FIG. 8 is a flowchart showing the flow of the learning data update process. The learning data is updated every few weeks, for example. For example, the update is started one month after the start of learning, and the update process is performed every week. In this example, the learning data is updated by subtracting 1 from the weight value of each record of the learning data and deleting the record having the weight of 0 from the learning data. As a result, frequently frequently used records remain, and records that are no longer referenced are deleted. As a specific example, a record of learning data belonging to a route that the user can no longer pass is deleted. In addition, only records in a time zone with a high weight (a time zone that is frequently used) remain among records with continuous time.

  Referring to FIG. 8, the learning data management unit 120 first selects one record in the learning data and subtracts 1 from its weight (step B1). Next, the learning data management unit 120 determines whether or not the weight obtained by subtracting 1 is 0 (step B2).

  If the weight is 0, the learning data management unit 120 deletes the record (step B3). FIG. 9 is a diagram showing a state of learning data record deletion. As can be seen from FIG. 9, as a result of subtracting the weight by 1, the record having the weight of 0 is deleted. In this example, only the records in the time zone with a large weight among the records with continuous time are left.

  If the weight is not 0 in the determination in step B2, the learning data management unit 120 leaves the learning data record without deleting it (step B4).

  The learning data management unit 120 repeats the processing of steps B1 to B4 for all the records of learning data. And when the repetition is complete | finished, the learning data management part 120 deletes the path | route which became unnecessary (step B5). For example, the route ID of the route that is valid in the learning data is managed as an effective route list, and the route ID of the route in which all records are deleted by the above-described processing is deleted from the effective route list. Also good.

(Third embodiment)
FIG. 10 is a block diagram showing a configuration of a communication system according to the third embodiment. The portable information device of the present embodiment is a portable terminal that is connected to the communication network 900 via the radio base station 800. The communication network 900 is an information communication network such as the Internet. A user profile server 1000 is connected to the communication network 900 of this embodiment.

  Referring to FIG. 10, the portable information device 10 of this embodiment is different from the portable information device according to the first embodiment shown in FIG. 2 in that it includes a network access unit 700 instead of the location information receiving unit 600. .

  The network access unit 700 can wirelessly connect to the nearest radio base station 800 and acquire position information of the radio base station 800 from the radio base station 800. The portable information device 10 uses the position indicated by the position information of the radio base station 800 instead of the position of the portable information device 10 itself as the position information for determining the user usage pattern and the request pattern.

  In the present embodiment, the learning data of the usage pattern information of each portable information device 10 is stored in the user profile server 1000, and then the learned data is used by the same portable information device 10 or another portable information device 10. can do. Therefore, the network access unit 700 has a function of sending learning data to the user profile server 1000 via the radio base station 800 and the communication network 1000, and acquires the learning data from the user profile server 1000 and deploys it to the learning data management unit 120. It has a function to do.

  The user profile server 1000 has a database for recording learning data of each user together with user information of each user.

  Subsequently, the operation of the portable information device 10 according to the present embodiment will be described.

  In the first embodiment, the portable information device acquires position information, and the position information receiving unit 600 acquires the position information. However, in the portable information device 10 of the present embodiment, the network access unit 700 acquires the position information of the radio base station 800.

  In addition, when learning data is created by the processing shown in FIG. 5, the network access unit 700 sends the learning data to the user profile server 1000. The user profile server 1000 holds learning data received from the network access unit 700 of the portable information device 10.

  Further, the network access unit 700 acquires learning data stored therein from the user profile server 1000 according to a user's instruction and the like, and develops the learning data in the learning data management unit 120. The function is implemented as one function of the application unit 400, and the user can use this function by an operation. Thereby, for example, when the portable information device 10 breaks down, the learning data can be transferred to another portable information device 10.

  Processing when the portable information device 10 acquires learning data from the user profile server 1000 and expands it will be described.

  Learning data is acquired while processing using learning data, such as comparison processing by the comparison unit 130 and determination processing by the determination unit 150, or processing (learning processing) for updating learning data by the learning data management unit 120 is performed. The processing to be expanded is locked so that it cannot be executed.

  If there is a request in an unlocked state, the portable information device 10 connects to the user profile server 1000 via the network access unit 700 and downloads stored learning data. If the connection to the user profile server 1000 cannot be established due to a communication failure or the like, the processing is stopped.

  When the learning data is successfully downloaded, the portable information device 10 locks the comparison process, the determination process, the learning process, etc., erases the learning data in the learning data management unit 120, and uses the downloaded learning data as the learning data management unit. Record to 120. Thereafter, the mobile information device 10 unlocks the locked processing.

  In the third embodiment, it may be possible to store a plurality of learning data in the user profile server 1000. For example, even if the usage status of a function changes during a long vacation, and the learning data deviates from the actual usage request, the current usage status and the learning data can be immediately obtained by developing the learning data before the long vacation. Can be matched.

  In the second and third embodiments, the portable information device uses the position information as the situation information, but instead of or in addition to this, the information acquired by the sensor may be used as the situation information. As the sensor, an accelerometer, a thermometer, a microphone, or the like can be used.

  For example, if acceleration exceeding a certain value is alternately generated from + and − from the acceleration sensor, it can be estimated that the vehicle is walking or running. Further, it can be estimated from the thermometer that the person is outdoors or indoors. If the microphone has an input exceeding a certain level, it can be estimated that the microphone is in the crowd.

  In addition, the portable information device of each embodiment described above can also be realized by causing a computer to execute a software program that defines a processing procedure of each unit constituting the portable information device.

  As mentioned above, although embodiment of this invention was described, this invention is not limited only to these embodiment, In the range of the technical idea of this invention, these embodiment is combined and used. Some of the configurations may be changed.

DESCRIPTION OF SYMBOLS 10 Portable information device 11 Function provision part 12 Usage pattern information storage part 13 Request pattern information acquisition part 14 Pattern authentication part 15 Input data authentication part 100 Terminal access control part 110 Usage history data collection part 120 Learning data management part 130 Comparison part 150 Judgment Unit 300 authentication unit 400 application unit 600 location information receiving unit 700 network access unit 800 wireless base station 900 network 1000 user profile server

Claims (11)

A function providing means for providing the application function to the user;
Usage pattern information storage means for extracting usage pattern information representing a usage pattern of a regular user from a history of usage information including functions used in the past and the situation at the time of usage, and storing the usage pattern information in advance;
Request pattern information acquisition means for acquiring request pattern information including the requested function and the situation at that time;
Whether the requested use of the requested function is permitted by collating the request pattern information acquired by the request pattern information acquisition unit with the usage pattern information stored in advance by the usage pattern information storage unit And a first authentication means for judging whether or not. Each of the situation included in the usage information and the situation included in the request pattern information includes time and position,
The usage pattern information storage unit extracts a route based on a position corresponding to a continuous time in the usage information, and uses learning data in which the time, the route, and the used function are associated with each other as the usage pattern. Remember as information,
The authentication means includes a time in which the time of the request pattern information coincides, the route includes the position of the use pattern information, and learning data whose function matches the function of the request pattern information is in the use pattern information. Allow the requested function to be used,
The portable information device according to claim 1. The usage pattern information storage means stores, as the learning data, a weight value based on the past number of uses in association with the time, the route, and the function used, and the weight value is a predetermined value. Managing the usage pattern information by periodically deleting smaller learning data;
The portable information device according to claim 2. Second authentication for determining whether or not the user is the authorized user by user authentication accompanying a user operation when the first authentication means does not determine that the requested use of the function is permitted. Further comprising means,
When it is determined by the first authentication means that the requested use of the function is permitted, the function providing means allows only the function to be used, and the second authentication means allows the user to use the function. If it is determined that the user is an authorized user, a plurality of functions including the requested function can be used.
The portable information device according to any one of claims 1 to 3. The usage pattern information storage means stores, as the learning data, in association with the time, the route, and the function used, and a day of the week when the function is used,
The authentication unit includes a learning data whose time and day of the week coincide with the time and day of the request pattern information, the route includes the position of the request pattern information, and whose function matches the function of the request pattern information. Allow use of the requested function if within
The portable information device according to claim 2.   If the learning data whose time and function match the time and function of the request pattern information is not included in the usage pattern information, the authentication means learns that the day of the week and the function match the day of the week and the function of the request pattern information. Data is extracted from the usage pattern information, and if there is learning data in which the difference in time with the request pattern information is a predetermined value or less in the extracted learning data, the use of the requested function is permitted. The portable information device according to claim 5. Usage pattern information that represents the usage pattern of authorized users is extracted from the history of usage information including functions used in the past and usage status, and stored, and the request includes the requested function and the status at that time. A portable information device that acquires pattern information and determines whether to permit use of the requested function by comparing the acquired request pattern information with the usage pattern information;
A user profile server that can be connected to the portable information device via a communication line,
Sending the usage pattern information from the portable information device to the user profile server, and holding the usage pattern information in the user profile server;
A user authentication system that sends the stored usage pattern information from the user profile server to the portable information device in response to a request, and uses the usage pattern information in the portable information device. From the history of usage information including the functions used in the past of mobile information devices and usage status, usage pattern information representing usage patterns of authorized users is extracted and stored,
Obtain request pattern information including the requested function and the current status,
A user authentication method for determining whether to permit use of the requested function by comparing the request pattern information with the use pattern information. Each of the situation included in the usage information and the situation included in the request pattern information includes time and position,
A route is extracted based on a position corresponding to successive times in the usage information, and learning data in which the time, the route, and the function used are associated is stored as the usage pattern information.
If the time coincides with the time of the request pattern information, the route includes the position of the use pattern information, and the learning data whose function matches the function of the request pattern information is in the use pattern information, the requested pattern information The user authentication method according to claim 8, wherein use of the function is permitted. A procedure for extracting and storing usage pattern information representing a usage pattern of a regular user from a history of usage information including the functions used in the past of the portable information device and the situation at the time of usage,
A procedure for obtaining request pattern information including the requested function and the current situation;
A user authentication program for causing a computer to execute a procedure for determining whether to permit use of the requested function by comparing the request pattern information with the use pattern information. Each of the situation included in the usage information and the situation included in the request pattern information includes time and position,
A route is extracted based on a position corresponding to successive times in the usage information, and learning data in which the time, the route, and the function used are associated is stored as the usage pattern information.
If the time coincides with the time of the request pattern information, the route includes the position of the use pattern information, and the learning data whose function matches the function of the request pattern information is in the use pattern information, the requested pattern information The user authentication program according to claim 10, wherein the use of the function is permitted.

Images