JP2010238151A - Information processing apparatus - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an information processing apparatus capable of enhancing the strength of security by authentication that uses contents. <P>SOLUTION: The apparatus includes its housing that has internal input devices and can connect to external input devices; a storage section that stores contents data for authentication; a generation means for generating questions for authentication and correct answers to the questions for authentication from additional information contained in the contents data for authentication stored in the storage section; a display means for displaying the questions for authentication on a display device connected to the main part housing; and an authentication means for executing authentication processing by comparing the correct answers to the questions for authentication, with the answers which are input from the internal or the external input devices to the questions for authentication displayed on the display device. <P>COPYRIGHT: (C)2011,JPO&INPIT

Description

The present invention relates to an information processing apparatus, and more particularly to an authentication technique using digital content.

In an information processing apparatus typified by a notebook personal computer, a password input is requested as an authentication method for security. If a character string that is easy for a user to remember for a birthday or the like is set as a password, the security strength is weakened. On the other hand, if a complicated character string is set as a password, the user is more likely to forget the password. In order to solve such a problem, an authentication method is also used in which the information processing apparatus is enabled by answering a question for which a correct answer has been set in advance by a user, instead of entering a password.

In Patent Document 1, based on personal information (address book, user dictionary), an authentication problem information including a user authentication problem for asking the user about the contents of the current personal information and an answer thereof is created.
A technique for determining the legitimacy of a user based on an answer by the user is disclosed.

JP 2006-11959 A

In the case of the above method, a problem is created by combining a plurality of pieces of personal information in the PIM area of the non-volatile memory, but the number of individuals that cause the problem is limited, and the number of questions and correct answers is limited. Yes. On the other hand, it is considered that various problems can be created from content such as music and video instead of personal information, compared to personal information. Further, it is considered that the confidentiality can be improved by appropriately adding or changing the authentication content.

SUMMARY OF THE INVENTION An object of the present invention is to provide an information processing apparatus that can increase the security strength by authentication using content.

In order to achieve the above object, an information processing apparatus according to the present invention has an internal input device, a main body housing to which an external input device can be connected, a storage unit for storing authentication content data, and the storage unit. Generation means for generating an authentication question and a correct answer to the authentication question from additional information included in the stored content data for authentication, and displaying the authentication question on a display device connected to the main body housing For the authentication question displayed on the display means and the display device, an authentication process is performed by comparing an answer input from the internal input device or the external input device with a correct answer to the authentication question. And an authentication unit.

ADVANTAGE OF THE INVENTION According to this invention, the information processing apparatus which can raise security intensity | strength by the authentication using a content can be provided.

1 is an external perspective view showing a computer according to an embodiment of the present invention. The block diagram which shows the structure of the computer which concerns on embodiment of this invention. The flowchart which shows the procedure of the process which concerns on embodiment of this invention. The figure which shows based on embodiment of this invention typically. The figure which concerns on embodiment of this invention. The flowchart which shows the procedure of the process which concerns on embodiment of this invention. The figure which shows based on embodiment of this invention typically. The figure which concerns on embodiment of this invention.

Embodiments of the present invention will be described below with reference to the drawings. In this embodiment, a notebook computer will be described as an example of the information processing apparatus. FIG. 1 is an external perspective view showing a computer according to an embodiment of the present invention.

The computer 1 includes a main body housing 2, and a display housing 3 is attached to the main body housing 2 through a hinge 4 so as to be opened and closed. The display housing 3 can be opened and closed at an open position where the upper surface 2a of the main body housing 2 is exposed and a closed position where the upper surface 2a of the main body housing 2 is covered. There is L in the display housing 3
A display device 3a composed of a CD (Liquid Crystal Display) is incorporated.

  A circuit board (not shown) on which a plurality of electronic components are mounted is accommodated in the main body housing 2.

A touch pad 5 and a keyboard 6 are attached to the upper surface 2a of the main body housing 2 as internal input devices. A power switch 7 for turning on / off the computer 1 is also provided on the upper surface 2 a of the main body housing 2. A mouse can be connected to the main body housing 2 as an external input device.

FIG. 2 is a block diagram showing the configuration of the computer according to the embodiment of the present invention. The computer 1 includes a CPU 20, a north bridge 21, a main memory (RAM) 22, a graphics controller 23, a south bridge 24, a hard disk drive (HDD) 26, B
IOS-ROM27, embedded controller / keyboard controller IC (EC /
KBC) 30, a display device 3a, a touch pad 5, a keyboard 6, a power switch 7, and the like.

The CPU 20 is a processor that controls the operation of each component of the computer 1. The CPU 20 executes an operating system and various application programs / utility programs loaded from the HDD 26 to the main memory (RAM) 22. The main memory (RAM) 22 is also used for storing various data buffers.

In addition, the CPU 20 stores a BIOS (Basic In) stored in the BIOS-ROM 27.
(put Output System) is also executed. The BIOS is a program for hardware control. The BIOS includes a group of BIOS drivers, and each BIOS driver includes a plurality of function execution routine groups corresponding to these functions in order to provide a plurality of functions for hardware control to the operating system and application programs. It is out.

The BIOS 27 also executes processing for expanding the operating system from a storage device such as the HDD 26 to the main memory (RAM) 22 so that the computer 1 can be operated by the user.

The north bridge 21 is a bridge device that connects the local bus of the CPU 20 and the south bridge 24. The north bridge 21 also has a function of executing communication with the graphics controller 23 via a PCI Express bus or the like.

Further, the north bridge 21 includes a memory controller that controls a main memory (RAM) 22.

The graphics controller 23 is a display controller that controls the display device 3 a used as a display monitor of the computer 10. The graphics controller 23 is a video memory (VRAM) 23 by an OS or an application program.
The video signal corresponding to the display data written in 1 is sent to the display device 3a.

South Bridge 24 is PCI (Peripheral Component Int
are connected to an electrical (connect) bus and an LPC (Low Pin Count) bus, respectively, and control PCI devices, LPC devices, and the like. HDD (Hard
(Disc Drive) 26 stores the OS, various application programs / utility programs, and data files. In the HDD 26, contents such as moving images, still images, music, and voices used for authentication are stored as authentication contents.

The HDD 26 also stores an authentication question created from these authentication contents and a correct answer to the authentication question.

The embedded controller / keyboard controller (EC / KBC) 30 is a one-chip microcomputer in which an embedded controller for power management and a keyboard controller for controlling the touch pad 5 and the keyboard 6 are integrated. EC
The / KBC 30 performs a process of powering on / off the computer 1 in response to the operation of the power switch 7 by the user in cooperation with the power controller 31. The power supply controller 31 supplies power to each component in the computer 1 using power from the battery 32 built in the computer 1 or power supplied from the outside via the AC adapter 33.

FIG. 3 is a flowchart showing a procedure for preparing for the authentication processing according to the embodiment of the present invention. FIG. 4 is a diagram schematically showing the configuration of the authentication content folder according to the embodiment of the present invention. First, content to be used for authentication processing is selected and registered as authentication content (step 1-1). Then, the content registered as the authentication content is encrypted (step 1-2). This encryption process is performed in order to securely store the content used for authentication and its metadata. The operation of selecting and registering the authentication content and the encryption processing of the registered content can be executed through a utility program developed on the main memory 22, for example. The encrypted authentication content is stored on the HDD
26 is stored.

Note that the order of processing for registering authentication content and processing for encrypting registered content may be reversed. In other words, a previously encrypted content may be registered as the authentication content.

Give a specific example of the procedure. A user who uses authentication first designates a JPEG file of a photograph on a utility program. The utility program encrypts the entire JPEG file and saves it in an authentication content folder provided in the HDD 26 as authentication content.

As shown in FIG. 4, the authentication content folder stores authentication content such as an encrypted JPEG file. Additional information such as metadata and tags is given to the authentication content, and at the time of authentication, these metadata and tags are read and used to generate questions and correct answers. For example, in the case of JPEG EXIF data of a photograph, a shooting date and time can be read as a tag, and a specific date 2000/12/11 can be read as data. In addition, from the JPEG data photographed by the digital camera with GPS, the photographing location is read as a tag, and latitude X ° and longitude Y ° are read as data. A method for generating questions and correct answers using these metadata and tags will be described later.

  FIG. 5 is a flowchart showing a login authentication procedure according to the embodiment of the present invention.

Since the user uses the computer 1, when the process of powering on the computer 1 in response to the operation of the power switch 7 is started, user authentication at the time of starting the operating system starts (step 2-1). Subsequently, it is determined whether or not the authentication content is registered (step 2-2). For example, the authentication utility accesses the authentication content folder and checks whether there is a file in the folder, thereby determining whether or not the authentication content is registered. Further, a table showing a list of files stored in the authentication content folder is prepared separately, and it is possible to determine whether authentication content is registered by referring to the table. good.
If the authentication content is registered (Yes in Step 2-2), login authentication processing is performed using the authentication content (Step 2-3). If the login authentication process using the authenticated content is successful (Yes in step 2-4), the operating system is continuously started (step 2-7).

The specific contents of the login authentication process using the authentication content will be described later with reference to the flowchart shown in FIG.

On the other hand, when the authentication content is not registered (No in Step 2-2) and when the login authentication process using the authentication content fails (No in Step 2-4), login authentication using a normal password is performed ( Step 2-5). Here, login authentication using a normal password refers to an authentication method that does not require authentication content, such as authentication performed by inputting a password character string using a keyboard.

If the login authentication with the normal password is successful (Yes in step 2-6), the operating system is continuously started (step 2-7). If either the authentication content authentication or the normal password authentication is successful, the operating system continues to be activated, and finally the user can use the computer 1.

When login authentication using a normal password fails (step 2-6), user authentication is repeated again.

FIG. 6 is a flowchart showing a processing procedure of authentication processing using content according to the embodiment of the present invention. FIG. 7 is a diagram showing a concept of processing for generating a question and a correct answer from the authentication content according to the embodiment of the present invention. FIG. 8 is a diagram showing a display example of questions and answer input fields on the content authentication screen according to the embodiment of the present invention.

For example, when the login authentication process as shown in the flowchart of FIG. 5 is started, content to be used for authentication is first selected (step 3-1). The authentication content used for authentication is randomly selected by the system from the content registered and stored in the authentication content folder. Of course, the user may select in advance the content to be used for authentication.

When the authentication content is selected, the selected content is decrypted and reproduced (step 3-2). For example, when the selected content for authentication is a JPEG file of a photograph and the entire content is encrypted and saved, the content is decrypted at this step to return to the original state. If the decrypted content is a photograph, it is displayed as a still image on the screen of the display device. If the decrypted content is a video or music, it is played back by a video playback program or music playback program.

When the selected content is decrypted and reproduced, tags and metadata are read from the content being reproduced (step 3-3). An appropriate question source is selected from the read tag and metadata information, and a question and a correct answer are automatically generated (step 3-4). For example, since the tag has a shooting date and time, a question “when is the date this photo was taken?” Can be generated. For this question, the metadata says "December 11, 2000
The correct answer “day” can be generated.

As another example, since the tag has a shooting location, the question “Where is this photo taken?” Can be generated. For this question, from the metadata,
"Latitude X °-Longitude Y °" or the actual place name indicated by these latitude and longitude
The correct answer “New York” can be generated.

The authentication question may be created on the spot when the content is read, or the user may select the authentication content in advance and prepare the question and the correct answer in pairs. The authentication question and the correct answer are stored in an authentication content folder in the HDD 26. Of course, the authentication question and the correct answer may be stored in different areas.

When generating a question from JPEG data of a single photo, if the question is based on objective facts such as “What is the shooting location?” And “What is the shooting date?”, It is included in the tag and metadata as described above. The correct answer can be automatically generated by referring to the latitude / longitude information to be obtained and the shooting date that can be understood from the date data.

On the other hand, for questions based on personal experiences, such as “How many people were accompanied by at this time?” And “What did you eat after this?” You can use it for authentication by entering it. This is because it is difficult to uniquely determine the correct answer from tags and metadata.

Subsequently, the generated question is displayed on the screen of the display device (step 3-5). An answer input field for the generated question is also displayed on the screen, and an answer input for the question is accepted (step 3-6). While the generated question is displayed on the screen of the display device or while an answer input to the question is accepted, still image display, movie playback, and music playback may be performed.

For the answer to the question, for example, the screen shown in FIG. 8 is displayed on the display device, and the input by the user is accepted. As shown in FIG. 8 (a), with respect to the shooting date and time, a photograph as authentication content is displayed on the screen, and the date is input in the answer input column. As shown in FIG. 8B, the shooting location is displayed on the screen together with the photo as the authentication content and the map for selecting the location, and the pointer is operated to change the shooting location. Let me specify.

The accepted answer is compared with the correct answer stored in the HDD 26 (step 3-7),
When the content of the answer by the user is a correct answer (Yes in step 3-7), the authentication process is processed as a success (step 3-8). If the authentication process is successful, as shown in the flowchart of FIG. 5, the operating system is continuously activated, and finally the user can use the computer 1.

On the other hand, when the content of the answer by the user is an incorrect answer (No in step 3-7), the authentication process is processed as a failure (step 3-9). If the authentication process fails, as shown in the flowchart of FIG. 5, the user authentication is repeated again and the operating system does not start.

Regarding the criteria for determining whether the user's response is correct or incorrect,
You may make it have a fixed width | variety. For example, if you want the user to enter the date and time of the photo,
It may be treated as a correct answer only when the same date is input, or may be treated as a correct answer if it is one day before and after. If the user is required to input a photo shooting location, for example, it may be treated as a correct answer up to ± 3 ° of latitude and longitude.

In this embodiment, the content itself related to creation or acquisition by the user himself / herself is treated as a “secret question” for authenticating the user, and the data portion of the metadata is “correct answer to the question”.
By handling like this, it becomes possible to automate the creation of the authentication question and the correct answer.

By using information that cannot be known to the third party due to the user's memories as an authentication question, it is possible to achieve high-security authentication that is difficult to forget for legitimate users and difficult to reach for third parties. be able to.

Also, unlike conventional password entry, etc., it is easy to increase the number of authentication contents and change the contents for authentication every time at the time of authentication. Will also improve.

As described above, according to the embodiment of the present invention, it is possible to provide an information processing apparatus capable of increasing the security strength by authentication using content.

The present invention is not limited to the above embodiment as long as it does not depart from the gist of the present invention, and various modifications are possible.

DESCRIPTION OF SYMBOLS 1 ... Computer, 2 ... Main body housing, 3 ... Display housing, 5 ... Touchpad, 6 ... Keyboard,
7 ... Power switch, 20 ... CPU, 21 ... North bridge, 22 ... Main memory, 23 ... Graphics controller, 24 ... South bridge, 26 ... HDD, 27 ... BIOS-ROM
30 ... EC / KBC, 31 ... Power controller, 32 ... Battery, 33 ... AC adapter

Claims (4)

A main body housing that has an internal input device and can be connected to an external input device;
A storage unit for storing content data for authentication;
Generating means for generating an authentication question and a correct answer to the authentication question from additional information included in the authentication content data stored in the storage unit;
Display means for displaying the authentication question on a display device connected to the main body housing;
An authentication unit that performs an authentication process by comparing an answer input from the internal input device or the external input device with a correct answer to the authentication question with respect to the authentication question displayed on the display device;
An information processing apparatus comprising: Comprising a selecting means for randomly selecting content data to be generated from the plurality of authentication content data stored in the storage unit, the authentication question being generated;
The information processing apparatus according to claim 1, wherein the generation unit generates an authentication question and a correct answer to the authentication question from additional information included in the randomly selected content data. The information processing apparatus according to claim 2, wherein the storage unit stores an authentication question created in advance for one piece of authentication content data and a correct answer to the authentication question. The first question made by comparing the answer input from the internal input device or the external input device with the correct answer to the authentication question with respect to the authentication question displayed on the display device
2. The information processing apparatus according to claim 1, wherein when the authentication process is an authentication failure, a second authentication process using the internal input device is requested.

Images