JP2010277540A - Motion history verification system, motion history verification method, and motion history verification program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To identify moving trajectory of a position information terminal of an authenticated person with an actual moving trajectory thereof. <P>SOLUTION: In the motion history verification system 1, an action collation unit 12 forms a question to the authenticated person based on identification information of the position information terminal 2 of the authenticated person, motion history information of the terminal 2, and information for an event which has occurred in a position close to the information in time and in actual space. The question is supplied to an input and output unit 11 to be accessed by the authenticated person, and an answer thereto received from the input and output unit 11 is collated with the motion history information, for identification. The action collation unit 12 forms a plurality of questions, provides the questions to the input and output unit 11, and determines the identity based on the rate of incorrect answers received from the input and output unit 11. <P>COPYRIGHT: (C)2011,JPO&INPIT

Description

  The present invention relates to a technique for proving that a movement trajectory obtained from a location information terminal owned by a person to be authenticated and an actual movement trajectory of the person to be authenticated are the same.

  By acquiring information from a terminal (hereinafter referred to as a location information terminal) that acquires location information and transmitting it to the server, the trajectory information of a person (hereinafter referred to as a user) tied to the location information terminal on the database is obtained. Judgment is under consideration.

  A method of authenticating a person's action pattern by carrying a position information terminal using a positioning system such as GPS has been proposed (Patent Document 1, Non-Patent Document 1).

JP 2004-310207 A

Official GPX web site, “GPX: The GPS Exchange Format”, [online], August 9, 2004, Dan Foster, [March 24, 2009 search], Internet <URL: http: // www. topographix. com / gpx. asp>

  In the conventional technique, it is assumed that the user always acts while holding the position information terminal. However, in practice, the user does not always carry the location information terminal. For example, when a malicious user deposits a location information terminal with a collaborator and the collaborator walks on a predetermined course, the user's actual behavior does not match the trajectory of the location information terminal, but the user It is considered that it has moved according to the trajectory.

  For this reason, although it was possible to record the movement trajectory of the user based on the movement trajectory of the position information terminal, it was not possible to prove that the position information terminal and the user really moved along the same trajectory.

  Therefore, the present invention presents a question based on information related to the position of the position information terminal of the person to be authenticated to the terminal, and determines that the terminal and the person to be authenticated are at the same position when the answer is correct.

  That is, an aspect of the movement history certification system of the present invention is a movement history certification system that proves the identity between the movement trajectory of the location information terminal of the authentication subject and the actual movement trajectory of the authentication subject, Create a question to the person to be authenticated based on the identification information of the authenticator's location information terminal, the movement history information of the terminal, and the information of the event that occurred at a position that approximates this in time and real space. And an action collating means for judging the identity by providing the question to an input / output means accessed by the person to be authenticated and collating an answer received from the input / output means with the movement history information.

  Further, as an aspect of the movement history certification method of the present invention, there is provided a movement history certification method for proving the identity between the movement locus of the position information terminal of the person to be authenticated and the actual movement locus of the person to be authenticated, Based on the identification information of the position information terminal of the person to be authenticated, the movement history information of the terminal, and the information of the event that has occurred at a position that approximates this in time and real space, to the person to be authenticated And the question is provided to an input / output unit accessed by the person to be authenticated, and the answer received from the input / output unit is compared with the movement history information to determine the identity.

  Note that the present invention can also be implemented as a movement history certification program that causes a computer to function as behavior verification means according to the movement history certification system or a computer-readable recording medium that records the program.

  Therefore, according to the above invention, it is possible to prove the identity between the movement locus of the position information terminal of the person to be authenticated and the actual movement locus of the person to be authenticated.

1 is a conceptual diagram of a movement history certification system according to the present invention. 1 is a configuration diagram of a movement history certification system according to an embodiment of the present invention. The flowchart explaining the registration process of the movement history of the location information terminal by the movement history certification | authentication system which concerns on embodiment of this invention. The flowchart explaining the process of the user action collation based only on the information of the event (event) of the user action inquiry by the movement history certification system according to the embodiment of the present invention.

  The movement history certification system according to the present invention holds the position and time of a position information terminal as movement information (movement history), and matches information on events (events) that occur in the vicinity of the movement locus. Then, a question sentence based on the information is automatically configured, presented to the user (authenticated person), and collated with the memory of the user.

  More specifically, the action verification unit 12 according to the movement history certification system (hereinafter referred to as a system) 1 according to the embodiment of the present invention shown in FIG. And a question based on “user information” and “event information” is presented to the input / output unit 11 accessed by the user. And the action collation part 12 judges whether the position information terminal 2 and the user exist in the same position by performing "behavior collation" based on the reply input from the input-output part 11 by the said user. . Before using the system 1, information relating to the user as the user information and the location information terminal 2 owned by the user is stored in advance in the storage means in the system 1 (specifically, the user information management unit shown in FIG. 2). 13 user information storage units 131).

  The location information terminal 2 records location information obtained by a positioning system such as GPS together with time information at all times or regularly, and the location information is always or regularly or when communication with the system 1 becomes possible, the location information is stored in the system 1. Send to. The user is expected to move while holding the position information terminal 2.

  The position information of the terminal transmitted from the position information terminal 2 is stored in the system 1 as a movement history (position information and route information). In parallel with this, the system 1 obtains event information. Event information is information on an event that occurred at a certain time at a certain position.

  In the user action verification, the system 1 generates a question sentence for the user from the movement history of the position information terminal 2 tied to the user and the event information generated at a position close to the route. The generated question is presented to the user via the input / output unit 11.

  If the answer from the user to the question is correct, it is determined that the user and the location information terminal 2 have followed the same route, and the user's action is proved. When the answer from the user is not correct, it is determined that there is a high possibility that the user and the location information terminal 2 have not followed the same route.

  As shown in FIG. 2, the system 1 includes an input / output unit 11, a behavior verification unit 12, a user information management unit 13, a movement history management unit 14, and an event information management unit 15.

  The input / output unit 11 transmits / receives information to / from the behavior verification unit 12 based on access (input / output operation) by the user. As an aspect of the input / output unit 11, the action collating unit 12 is based on access from another independent terminal (personal computer) operated by the user or the user (other terminal) exemplified by a Web server or the like. And a server function for inputting and outputting information.

  The behavior collation unit 12 receives a collation request from the user via the input / output unit 11 and creates a question sentence based on the movement history of the location information terminal 2 corresponding to the user and the user information or the event information. When an answer to the question is received from the user via the input / output unit 11, the movement locus of the position information terminal 2 of the person to be authenticated and the person to be authenticated are checked by comparing the answer with the movement history. The identity of the actual movement trajectory is determined. When a plurality of the question sentences are created, the behavior collation unit 12 determines the identity based on an incorrect answer rate of answers received from these input / output units 11.

  In addition, the behavior verification unit 12 also has a function of providing the question sentence as information on the event, using a trap with the acquaintance based on the movement history information obtained from the location information terminal 2 of another user who is an acquaintance of the user. . In this case, the acquaintance relationship with the other user is stored in the user information management unit 13 in advance.

  Furthermore, the behavior verification unit 12 also has a function of providing positioning information that does not approximate the event information in terms of time and real space to create the question.

  The user information management unit 13 stores the profile of each user in the user information storage unit 131. The profile includes an ID (identification information) of the location information terminal 2 that the user is expected to always have, and a list of acquaintances and related information based on reports from the user.

  The movement history management unit 14 stores the movement history in the route information storage unit 141 for a certain period based on the position information obtained from the position information terminal 2. For the representation of the spatiotemporal information, The GPS Exchange Format (GPX) can be used (Non-Patent Document 1). GPX can express a route (trajectory) that includes time information and GPS information at the same time. By using GPX, the route information of the location information terminal 2 can be stored. The input format of the position information is arbitrary, and when it is stored in the route information storage unit 141, it is appropriately converted to GPX.

  Further, the route information storage unit 141 stores the state of the position information terminal 2 at each predetermined point as additional information to the GPX. The state of the location information terminal 2 represents a staying situation at a certain location (with a granularity of about 10 m in radius). The stay situation is expressed by selection from {pass, pause, stagnation, stay}, for example, according to the stay time at a certain position.

  A specific procedure (S301 to S305) of saving the movement history by the movement history management unit 14 will be described with reference to FIG.

  S301: Position information is input from the position information terminal 2 into the system 1.

  S302: The movement information management unit 14 reads the position information input from the position information terminal 2, and converts it into position information used in the system 1. The converted position information is expressed by a triplet of <terminal ID, time, location>.

  S303: The movement information management unit 14 converts the set of position information converted in S302 into position information with stay time. This location information with stay time is expressed in four sets of <terminal ID, start time, place, stay time>.

  S304: The movement information management unit 14 converts the set of location information with stay time obtained by the conversion in S304 into route information and stores it in the route information storage unit 141. The route information is represented by a list of location information with stay time.

  S305: The route information for one day obtained in the above steps is stored in the route information storage unit 141 as a movement history.

  The event information management unit 15 stores event information input from various event information input terminals or an external server in the event information storage unit 151. This function unit 15 can also store event information by using GPX. The input format of the event information is arbitrary, and when it is stored in the event information storage unit 151, it is appropriately converted into GPX.

  Event information is registered in advance by the event information terminal and various external servers. The event information is expressed in four sets of <time, place, type, content>. The read environment information is converted into a specific format according to the type and stored.

  The event information terminal has a sensor that automatically measures the environment and a wired / wireless communication function, and includes a sensor that transmits sensor information, for example, various sensor nodes constituting a wireless sensor network. The sensor transmits environmental information to a server (event information terminal) at any time, on time, or in response to a request.

  As the various external servers, a server that records and transmits that an event has occurred at a specific place at a specific time is used. For example, an electronic advertisement control system, train operation information, traffic information, department store event information, and the like are included.

  Hereinafter, the process of user action collation by the system 1 will be described with reference to FIG.

  The illustrated steps (S1 to S14) of user behavior verification are procedures of “user behavior verification based only on event information”. The outline will be described.

  First, the user information extracted from the user information management unit 13, the movement history of the location information terminal 2 attached to the user extracted from the movement history management unit 14, and the movement history extracted from the event information management unit 15 On the other hand, a question sentence for the user is constructed based on events occurring at positions close in time and space (S1 to S8). The question text can be answered without any difficulty if the event is experienced, and difficult to answer if the event is not experienced. Then, when the generated question sentence is provided to the user via the input / output unit 11 and an answer is received from the user, the identity of the movement locus of the location information terminal 2 and the actual movement locus of the user is the same. And authentication success or authentication failure information is output to the input / output unit 11 (S9 to S14).

  Hereinafter, each step will be specifically described.

  S1: The user requests the input / output unit 11 for action verification.

  S2: The input / output unit 11 outputs the verification request to the behavior verification unit 12.

  S3: When the behavior verification unit 12 receives the request, it requests the user information management unit 13 for user information.

  S4: Upon receiving the user information request, the user information management unit 13 extracts the terminal ID corresponding to the location information terminal 2 from the user information storage unit 131 and outputs it to the behavior verification unit 12.

  S5: Upon receiving the terminal ID, the behavior verification unit 12 requests the movement history management unit 14 for the movement history of the terminal in order to obtain the movement history that is the movement information of the position information terminal 2.

  S6: Upon receipt of the request for the movement history, the movement history management unit 14 extracts the movement history from the route information storage unit 141 and outputs the movement history to the behavior verification unit 12.

  S7: Upon receiving the movement history, the action matching unit 12 searches the event information storage unit 151 of the event information management unit 15 for event information corresponding to the history, and obtains a list of the event information.

  S8: The action collating unit 12 constitutes a question to the user based on the event information list. The question sentence is generated using a question sentence template. An example of a question sentence template is shown below. If you create multiple question sentences, the authentication performance will increase accordingly.

(Example 1) What was going on at date 2 in place 2?
(1) Event 1.
(2) Event 2.
(3) Event 3.
(4) None of the above events (1) to (3) was performed.
(5) Not going to place 2.

  S9: The action collation unit 12 outputs the question sentence configured in S8 to the input / output unit 11.

  S10: The input / output unit 11 outputs and displays the question sentence to the user.

  S 11: The user inputs an answer to the question sentence to the input / output unit 11.

  S12: The input / output unit 11 inputs an answer from the user to the action verification unit 12.

  S13: The behavior collation unit 12 receives the answer, collates it with the movement history, determines whether the answer is correct, and outputs the result of either authentication success or authentication failure to the input / output unit 11 as a collation result. To do. When there are a plurality of questions, the behavior verification unit 12 determines the identity between the movement locus of the user's location information terminal 2 and the actual movement locus of the user based on the incorrect answer rate of the answer received from the input / output unit 11. Is output, and the result of either authentication success or authentication failure is output.

  The conditions for successful authentication based on whether or not the user answers correctly are determined as follows.

  When a plurality of questions are created, one answer is obtained from k choices for all questions. The number of questions is n. When the user answers at random, the probability of making an error in r questions out of n questions (r = 0 in the case of all correct answers) is expressed by equation (1).

  In addition, the probability of making a mistake in at most r questions among the n questions is expressed by a function D expressed by Expression (2).

  For example, if all the questions are five choices, the function D is as shown in Equation (3).

  Here, a certain threshold value θ is set, and when the value of the function D is equal to or smaller than θ, the authentication is successful, and when it is not, the authentication is failed.

For example, θ = 0.1. There are 4 questions of 5 choices, and the probability that the incorrect answer is 1 question or less is D ₅ (4,1) = 17/625 = 0.0272. Is the probability D ₅ (4,2) = 113/625 = 0.1818. Therefore, under this condition, if the failure is less than one question, the authentication is successful, and if the mistake is further made, the failure occurs.

  S14: The input / output unit 11 outputs the collation result obtained in S13 to the user.

  The steps described above are examples of “user action verification based only on event information”, but in the case of “user action verification not based only on event information”, “acquaintance relationship with other users” is also verified as user information. You may use for. The “acquaintance relationship with other users” is stored in advance in the user information storage unit 131 of the user information management unit 13. If the user's acquaintance is close in time and space as movement information (movement information of the acquaintance's location information terminal), the event information that is not managed by the event information management unit 15 is also included in the event information management unit 15. This is used in the question sentence composition step in S8 of FIG. The example of the question sentence template used for this question sentence structure was shown below.

(Example 2) Who did you meet on the date?
(1) Person name 1.
(2) Person name 2.
(3) Person name 3.
(4) Person name 4.
(5) I have not met any of the above (1) to (4).

  In addition, a query formula can be configured only by movement information that is not linked to event information (such as being in a place at a certain time). In this case, the action collation unit 12 provides positioning information that does not approximate the event information in terms of time and real space to the question sentence composition step in S8 of FIG. For example, a question is extracted by a method such as extracting an image of a point that the user has been made from Google Street View, etc., and selecting an image of the point from a set of photos of the point that the user has not been made. It can also be configured. An example of a question sentence template is shown below.

(Example 3) How long have you been in place 1?
(1) Just passed.
(2) More than ten minutes.
(3) About 1 hour.
(4) More than half a day.
(5) Not going to place 1.

(Example 4) Where did you go first in place 3 or place 4?
(1) I went to the place 3 and then went to the place 4.
(2) I went to the place 4 and then went to the place 3.
(3) I went only to location 3.
(4) Only going to place 4.
(5) Neither place 3 nor place 4

  As is clear from the above description, according to the system 1 according to the present invention, it can be proved that the location information terminal 2 and its user (that is, the person to be authenticated) have correctly followed the same route, so there is really an owner. Prove that you were in the place at the time. At the same time, when a person other than the owner (cooperator) acts on the position information terminal 2 with the position information terminal 2, the owner can take over the locus traced by the cooperator in some way. , I can't take over all the memory of what the collaborators have experienced. When the present invention is used, even if a malicious user tries to authenticate the behavior using a collaborator, the user fails and the malicious user can be prevented.

  The effects of the specific examples of the present invention are listed below.

(1) Improving the accuracy of the recommendation system based on the action history In the human action pattern analysis based on the position information terminal 2, it is guaranteed that the position information terminal 2 has the same movement trajectory as the person. It is possible to improve the quality of services using behavior patterns such as information recommendation based on human behavior history.

(2) Improving the accuracy of health management It can be used to prove that exercise by a user is actually recorded for health management or for confirmation of exercise status by an insurance company. When the user holds the location information terminal 2 and performs jogging or the like, the system 1 can ask a question about an event that has occurred on the route, and the user can answer it to prove that it has actually exercised. Become.

(3) Stamp Rally Service When a user goes around all of a plurality of exhibition booths at an exhibition, etc., if some kind of privilege is given, in order to obtain proof that the user has actually visited all of the exhibition booths, System 1 can be used. The system 1 asks about an event that has occurred on the route taken by the user, and when the user answers the question, the system 1 confirms that the user has moved while holding the location information terminal 2. Since it can be proved, the privilege can be given correctly.

  The functional units 12 to 15 according to the system 1 according to the present invention described above can be configured by computer hardware resources such as a CPU, a memory (RAM), a hard disk device, a communication device, and the like. That is, the function units 12 to 15 can be realized by cooperation between the CPU and the program. The storage unit related to the function units 13 to 15 can be realized by a hard disk device.

  Further, the present invention provides a computer CPU (MPU) that reads out and executes the program as an aspect of a program that causes a computer to realize the function of the action matching unit 12 according to the system 1 described above or a computer-readable recording medium that records the program. This can be achieved. In that case, the program code itself read from the recording medium realizes the functions of the above-described embodiment, and the recording medium storing the program, for example, a CD-ROM, DVD-ROM, CD-R, MO , HDD, etc. constitute the present invention.

1 ... Movement history certification system 11 ... Input / output unit (input / output means)
12 ... Action collation unit (behavior collation means)
13 ... User information management unit 14 ... Movement history management unit 15 ... Event information management unit 131 ... User information storage unit 141 ... Path information storage unit 151 ... Event information storage unit

Claims (9)

A movement history certification system that proves the identity between the movement trajectory of the location information terminal of the person to be authenticated and the actual movement trajectory of the person to be authenticated,
Creates a question to the person to be authenticated based on identification information of the position information terminal of the person to be authenticated, movement history information of the terminal, and information on an event that occurred at a position that approximates this in time and real space And an action collating unit for judging the identity by providing the question to an input / output unit accessed by an authenticated person and collating an answer received from the input / output unit with the movement history information. Moving history certification system. 2. The behavior collating means creates a plurality of the questions, provides the questions to an input / output means, and judges the identity based on an incorrect answer rate of answers received from the input / output means. The travel history certification system described. 3. The movement history according to claim 1, wherein the behavior collating unit uses the movement history information of the authenticated person's acquaintance with the acquaintance as information on the event to create the question. 4. Proof system. The movement history proof according to any one of claims 1 to 3, wherein the behavior collating means provides positioning information that does not approximate the event information in terms of time and real space to create the question. system. A movement history certification method for proving the identity of the movement path of the position information terminal of the person to be authenticated and the actual movement path of the person to be authenticated,
Based on the identification information of the position information terminal of the person to be authenticated, the movement history information of the terminal, and the information of the event that has occurred at a position that approximates this in time and real space, A step of determining the identity by preparing a question for the user and providing the question to an input / output unit accessed by the person to be authenticated and comparing the response received from the input / output unit with the movement history information. A moving history certification method characterized by the above. The behavior verification means further comprises the step of creating a plurality of the questions, providing the questions to the input / output means, and determining the identity based on an incorrect answer rate of answers received from the input / output means. The movement history certification method according to claim 5. 7. The method according to claim 5, further comprising a step in which the behavior collating unit provides the creation of the question as information on the event, using a trap with the acquaintance based on the movement history information of the acquaintance of the person to be authenticated. The travel history certification method described. 8. The method according to claim 5, further comprising a step in which the behavior matching unit provides positioning information that does not approximate the event information in terms of time and real space to create the question. Move history proof method.   The program which makes a computer function as an action collation means which concerns on the movement history proof system of any one of Claim 1 to 4.

Images