JP2011028623A - Information processing apparatus and program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a technology for reducing processing load in authentication. <P>SOLUTION: An acquisition means 105 acquires second feature information (feature information obtained in each operation) indicating features of a user operating an operation element 103 at timing corresponding to user's first feature information and an authentication level indicated by a variable, in timing included in a second data set. A determination means 106 determines the authentication level of the user operating the operation element 103 by using a position and time acquired by the acquisition means 105 and first and second conditions included in the first data set. A rewriting means 109 rewrites the variable stored in a storage means 101 to a variable indicating the authentication level determined by the determination part 106. An authentication means 107 authenticates the operating user according to the second feature information acquired by the acquisition means 105, the authentication level indicated by the variable and the second data set. <P>COPYRIGHT: (C)2011,JPO&INPIT

Description

  The present invention relates to user authentication in an information processing apparatus.

  A technique for authenticating a user in an information processing apparatus such as a mobile phone, a personal computer (hereinafter referred to as “PC”), and an automatic teller machine (hereinafter referred to as “ATM”) is known. User authentication is often performed at a specific timing, such as at the time of login, but a technique for continuously authenticating is known to enhance security. Patent Document 1 discloses a technique for extracting a change in electric resistance of a button and a three-dimensional shape of a palm as feature information when the mouse is clicked, and performing personal authentication using this to prevent impersonation fraud. ing. Patent Document 2 discloses a technique for performing further authentication when there is a request for information inquiry or update, in addition to authentication performed at the start of use, in order to prevent spoofing after a legitimate user stands. is doing.

JP 2002-278938 JP-A-2005-250810

If authentication is performed continuously, the processing load of the information processing apparatus may increase.
In contrast, the present invention provides a technique for reducing the processing load related to authentication.

The present invention relates to an operator that receives an operation for executing processing, a first authentication level indicating a pre-registered authentication level, a first condition relating to a position corresponding to the first authentication level, and the first A first data set including a second condition relating to a time zone corresponding to the authentication level, first feature information indicating the characteristics of a user registered in advance, the first authentication level, and the first Storage means for storing a second data set including timing set for each of the first authentication levels corresponding to the feature information and a variable indicating the authentication level of the user operating the operation element Specifying means for specifying a user who is operating the operation element, first acquisition means for acquiring the position and time, position and time acquired by the first acquisition means, and the first Data set Determination means for determining a second authentication level indicating an authentication level of a user who has operated the operation element using the first condition and the second condition included in a storage device; and Rewriting means for rewriting the stored variable to a value indicating the second authentication level, and the first of the user specified by the specifying means among the timings included in the second data set Second feature information indicating the feature of the user who operates the operator at the timing corresponding to the feature information and the first authentication level that matches the second authentication level indicated by the variable According to the second acquisition means for acquiring the second feature information acquired by the second acquisition means, the second authentication level indicated by the variable, and the second data set. The Authentication means for authenticating the user who has the operation, if the user who has the operation is authenticated, an information processing apparatus having a processing unit that performs processing corresponding to the operation.
According to this information processing apparatus, it is possible to reduce the processing load related to authentication as compared to the case where authentication is performed at a uniform timing that does not change according to the position and time.

In a preferred aspect, the storage means stores an authentication continuation time indicating a time when one user is continuously authenticated by the authentication means, and the first data set corresponds to the first authentication level. And a third condition relating to a duration of authentication, wherein the determination means includes the authentication duration stored in the storage means and the third condition included in the first data set. Accordingly, the second authentication level may be determined.
According to this information processing apparatus, it is possible to reduce the processing load related to authentication as compared with the case where authentication is performed at a uniform timing that does not change according to the duration of authentication.

In another preferred embodiment, the information processing apparatus may include an initialization unit that initializes the authentication duration time when a time when the user does not touch the information processing apparatus exceeds a threshold value. .
According to this information processing apparatus, it is possible to further increase security compared to a case where there is no means for initializing the authentication duration time.

In still another preferred aspect, the storage unit stores information specifying a valid condition among the conditions included in the first data set, and the determination unit is acquired by the first acquisition unit. The second authentication level may be determined using the determined position and time and the condition specified by the information among the conditions included in the first data set.
According to this information processing apparatus, it is possible to reduce the processing load related to authentication as compared to the case where authentication is performed at a uniform timing that does not change according to the position and time.

In still another preferred aspect, the second data set further includes an identifier of an authorized process corresponding to the first feature information, and the processing means is acquired by the second acquisition means. When processing according to the operation is permitted according to the second feature information, the second authentication level indicated by the variable, and the second data set, the processing according to the operation is performed. May be.
According to this information processing apparatus, it is possible to vary the processing allowed depending on the authentication level.

In still another preferred aspect, the second data set further includes an identifier of an authorized user corresponding to the first feature information, and the authenticating unit has authenticated the previous user. In a predetermined time, when authentication is requested for a user indicated by the second data set to be permitted corresponding to the first feature information of the previous user, the user is You may authenticate.
According to this information processing apparatus, not only a user whose feature information is registered, but also a user who is registered corresponding to the user whose feature information is registered can be authenticated.

In still another preferred aspect, the second data set includes a plurality of the first feature information for one user, and uses one first feature information among the plurality of first feature information. When the user who has performed the operation is not authenticated by the authentication unit, the authentication unit has a request unit that requests input of another second feature information, and the second second feature is requested in response to a request from the request unit. When feature information is input, the authentication unit may perform authentication by comparing another first feature information with the other second feature information.
According to this information processing apparatus, even if the user is not authenticated by one feature information, it can be authenticated by using another feature information.

In still another preferred aspect, the storage means has a fourth condition for obtaining an authentication result in comparison between the first feature information and the second feature information, and an authentication corresponding to the fourth condition. A third data set including a result and a flag indicating whether the fourth condition is valid is stored, and the authentication unit includes the fourth condition included in the third data set. You may authenticate the user who performed the said operation using the conditions shown that it is effective with a flag.
According to this information processing apparatus, authentication can be performed under conditions that are set more flexibly than in the case where conditions for obtaining the authentication result are uniformly determined.

In still another preferred aspect, the storage means stores information for identifying a server, and the information processing apparatus uses the information stored in the storage means when the user who performed the operation is not authenticated. You may have a transmission means which transmits the position acquired by the said 1st acquisition means to the server specified.
According to this information processing apparatus, when the user is not authenticated, the server can be notified.

In still another preferred embodiment, the information processing apparatus is configured to invalidate an operation by the operator, turn off the power of the information processing apparatus, output a sound, At least one of the output, vibration, and stimulus injection may be performed.
According to this information processing apparatus, when the user is not authenticated, the user can be notified.

In still another preferred aspect, the operation element has a sensor that acquires characteristic information of the user who is performing the operation, and the second acquisition unit receives the second characteristic via the sensor. Information may be acquired.
According to this information processing apparatus, the feature information can be acquired with the operation of the operator.

In addition, the present invention provides an operation element that receives an operation for executing processing, a first authentication level indicating a pre-registered authentication level, a first condition relating to a position corresponding to the first authentication level, A first data set including a second condition relating to a time zone corresponding to a first authentication level, first feature information indicating a feature of a user registered in advance, the first authentication level, A second data set including a timing set for each first authentication level corresponding to the first feature information, and a variable indicating an authentication level of a user who operates the operation element are stored. A step of identifying a user who is operating the operator, a step of acquiring a position and a time, and the acquired position and time and the first data; Determining a second authentication level indicating an authentication level of a user who has operated the operator using the first condition and the second condition included in a network; and Rewriting the stored variable to the one indicating the second authentication level, the first feature information of the identified user among the timings included in the second data set, and the Obtaining second characteristic information indicating characteristics of a user who is operating the operator at a timing corresponding to the first authentication level corresponding to the second authentication level indicated by a variable; Authenticating the user who performed the operation according to the second feature information, the second authentication level indicated by the variable, and the second data set; If the user is authenticated, it provides a program for executing and performing the processing corresponding to the operation.
According to this program, it is possible to reduce the processing load related to authentication as compared with the case where authentication is performed at a uniform timing that does not change according to the position and time.

It is a figure showing functional composition of information processor 10 concerning one embodiment. 2 is a diagram illustrating a hardware configuration of the information processing apparatus 10. FIG. 3 is a flowchart showing the operation of the information processing apparatus 10. It is a figure which illustrates a level table. It is a figure which illustrates the feature information table. It is a figure which illustrates a judgment condition table. It is a figure which illustrates an authentication history.

1. Configuration FIG. 1 is a diagram showing a functional configuration of an information processing apparatus 10 according to an embodiment of the present invention. The storage means 101 stores a first data set (“level table” in the following example) and a second data set (“feature information table” in the following example). The first data set includes an authentication level, a first condition relating to a position corresponding to the authentication level, and a second condition relating to a time zone corresponding to the authentication level. The second data set is set for each authentication level corresponding to the first feature information (registered feature information) indicating the feature of the user registered in advance, the authentication level, and the first feature information. Timing. The acquisition unit 102 acquires the position and time. The operation element 103 accepts an operation for executing processing. The specifying unit 104 specifies the user who is operating the operator 103 (the user who is operating the information processing apparatus 10). The storage unit 101 further stores a variable indicating the authentication level of the user who is operating the operator 103. The acquisition unit 105 operates the operator 103 at a timing corresponding to the first feature information of the user specified by the specifying unit 104 and the authentication level indicated by the variable among the timings included in the second data set. Second feature information (feature information acquired each time) indicating the feature of the user who is performing the operation is acquired. The determination unit 106 authenticates the user who has operated the operator 103 using the position and time acquired by the acquisition unit 102 and the first condition and the second condition included in the first data set. Determine the level. The rewriting unit 109 rewrites the variable stored in the storage unit 101 to indicate the authentication level determined by the determination unit 106. The authentication unit 107 authenticates the user who performed the operation according to the second feature information acquired by the acquisition unit 105, the authentication level indicated by the variable, and the second data set. The processing means 108 performs processing according to the operation when the user who performed the operation is authenticated.

  In addition, the storage unit 101 stores an authentication continuation time (“authentication history” in the following example) indicating a time during which one user is continuously authenticated by the authentication unit. The first data set further includes a third condition relating to the authentication duration corresponding to the authentication level. The determining unit 106 determines the authentication level of the user who has operated the operator 103 according to the authentication duration time stored in the storage unit 101 and the third condition included in the first data set. .

  Further, the second data set further includes an identifier of an authorized process corresponding to the first feature information. When the user who performed the operation is authenticated, the processing unit 108 is the second feature information acquired by the acquisition unit 105, the authentication level indicated by the variable, and the second feature information stored in the storage unit 101. If processing according to the operation is permitted according to the data set, processing according to the operation is performed.

  In addition, the storage unit 101 includes a fourth condition for obtaining an authentication result in comparison between the first feature information and the second feature information, an authentication result corresponding to the fourth condition, and a fourth condition. A third data set (a “judgment condition table” in the following example) including a flag indicating whether it is valid is stored. In this example, the authentication unit 107 authenticates the user who performed the operation using the condition indicated by the flag among the fourth conditions included in the third data set.

  FIG. 2 is a diagram illustrating a hardware configuration of the information processing apparatus 10. In this example, the information processing apparatus 10 is a mobile phone. A CPU (Central Processing Unit) 110 is a control device that controls components of the information processing apparatus 10. A ROM (Read Only Memory) 120 is a storage device that stores basic programs and data used for the operation of the information processing apparatus 10. A RAM (Random Access Memory) 130 is a storage device that functions as a work area when the CPU 110 executes a program. An IF (Interface) 140 is an interface for exchanging data with an input / output device or the like. The storage unit 150 is a storage device that stores application programs and data, for example, a flash memory or an HDD (Hard Disk Drive). The display unit 160 is a display device that displays information under the control of the CPU 110, such as a liquid crystal display or an organic EL display. The keypad 170 is an operation element that receives a user's operation, for example, a numeric keypad, alphabet keys, cursor keys, an enter key, and a clear key. The communication unit 180 is a device that performs voice communication and data communication via a mobile communication network. The bus 190 is a transmission path through which commands and data are transmitted. The CPU 110, the ROM 120, the RAM 130, and the IF 140 are connected by a bus 190.

  In this example, the keypad 170 is provided with a fingerprint sensor. In particular, the fingerprint sensor is provided on a key (for example, a determination key or a clear key) that is frequently touched by a user. In this example, the storage unit 150 stores a program for causing the information processing apparatus 10 to perform authentication processing (hereinafter referred to as “authentication program”). The function shown in FIG. 1 is implemented in the information processing apparatus 10 when the CPU 110 executes the authentication program. In FIG. 2, a RAM 130 and a storage unit 150 are an example of a storage unit 101. The CPU 110 executing the authentication program is an example of the acquisition unit 102, the identification unit 104, the acquisition unit 105, the determination unit 106, the authentication unit 107, the processing unit 108, and the rewrite unit 109. The keypad 170 is an example of the operation element 103.

2. Operation FIG. 3 is a flowchart showing the operation of the information processing apparatus 10. The flow in FIG. 3 is started when a specific command is input via the keypad 170, for example. The following processing is performed according to the authentication program. Prior to the flow of FIG. 3, the CPU 110 initializes a variable indicating the user authentication level. This variable is stored in the RAM 130. The initial value of this variable corresponds to, for example, the authentication level “medium”. In step S <b> 101, the CPU 110 identifies a user who is using the information processing apparatus 10. This process is performed as follows, for example. CPU 110 causes display unit 160 to display a screen that prompts the user to input an identifier. The user operates the keypad 170 according to the screen and inputs an identifier. CPU110 specifies a user with the input identifier. Or CPU110 may specify a user by using the individual identification number and telephone number of the terminal memorize | stored in ROM120 or UIM (not shown) as a user's identifier.

  In step S <b> 102, the CPU 110 acquires the current time and the current position of the information processing apparatus 10. The information processing apparatus 10 has a timer and a GPS (Global Positioning System) receiver (both not shown), and the CPU 110 acquires the current time from the timer and the current position from the GPS receiver. CPU 110 stores the acquired time and position in RAM 130. In this example, the position and time are acquired at a timing according to the authentication level indicated by the variable stored in the RAM 130. Timing according to the authentication level is set in the feature information table. The CPU 110 reads the timing according to the user and the authentication level from the feature information table, and acquires the feature information according to the read timing.

  In step S103, the CPU 110 determines a user authentication level (a temporary authentication level of the user at that time, an example of a second authentication level). The authentication level is determined based on the current time, current position, authentication history, and level table. The authentication history is information relating to continuity of authentication. Details of the authentication history will be described later. Furthermore, the CPU 110 rewrites the variable stored in the RAM 130 to indicate the authentication level determined here.

  FIG. 4 is a diagram illustrating a level table. The level table includes a plurality of data sets including a pre-registered authentication level (an example of a first authentication level) and a position condition, a time condition, and a history condition corresponding to the authentication level. In the example of FIG. 4, information “other than commuting route” is recorded as a condition of the position corresponding to the authentication level “high”. The information processing apparatus 10 stores information specifying the range of “commuting route” (for example, information defining a boundary line between a commuting route and a portion outside the commuting route) in the storage unit 150. The CPU 110 determines whether or not the position acquired in step S102 satisfies the position condition set in the level table, and stores the result in the RAM 130. The same applies to conditions relating to time and conditions relating to history. The level table may be provided for each user. That is, the storage unit 150 may store a plurality of level tables that are different for each user.

  Of the conditions of position, time, and history, the one used for determining the authentication level depends on the algorithm adopted by the authentication program. In this example, if at least one of the position, time, and history is satisfied, the corresponding authentication level is determined. In the example of FIG. 4, if it is in a position other than the commuting route, the current time is in the range of 0: 00-6: 00, or there is no authentication history, at least one of these three conditions is satisfied. The CPU 110 determines the user authentication level to be “high”.

  Refer to FIG. 3 again. In step S104, the keypad 170 receives a user operation input. Keypad 170 outputs a signal corresponding to the accepted operation to CPU 110.

  In step S <b> 105, the CPU 110 acquires user feature information (second feature information). More specifically, the CPU 110 determines that the keypad has been used when the time specified by the timing corresponding to the authentication level indicated by the user and the variable stored in the RAM 130 has elapsed since the last authentication. A fingerprint image is acquired as feature information from a fingerprint sensor provided at 170. The timing according to the user and the authentication level is set in the feature information table. The CPU 110 reads the timing from the feature information table and acquires the feature information according to the read timing. The CPU 110 stores the acquired feature information in the RAM 130.

  FIG. 5 is a diagram illustrating a feature information table. The feature information table includes a plurality of data sets including user identifiers, feature information (first feature information), timing, processing, and authorized users corresponding to the user identifiers. The feature information includes feature information U (Ua, Ub,...) And feature information V (Va, Vb,...). For example, the feature information U is a thumb fingerprint image, and the feature information V is an index finger fingerprint image. In addition, timing, processing, and authorized users are set for each authentication level. For example, when the user identifier acquired in step S101 is “A001” and the authentication level indicated by the variable stored in the RAM 130 is “high”, the authentication timing is every 10 minutes. Is set. CPU 10 acquires feature information from a fingerprint sensor provided on keypad 170 if 10 minutes have passed since the last authentication. If the previous authentication has not been performed, the CPU 110 immediately acquires the feature information.

  Refer to FIG. 3 again. In step S106, the CPU 110 authenticates the user, that is, determines the legitimacy of the user. Authentication is performed based on a user identifier, feature information, an authentication level indicated by a variable stored in the RAM 130, and a determination condition table.

  FIG. 6 is a diagram illustrating a determination condition table. The determination condition table includes a determination condition number, a determination condition, a corresponding determination result, and a valid / invalid flag. In the example of FIG. 6, the condition of the determination condition number “001” is a condition that the feature information acquired in step S105 matches at least one of the feature information U and the feature information V as the determination condition. The result corresponding to this condition is set to “OK”, which means that the user is authenticated when this condition is met. The condition of the determination condition number “003” is a condition that the feature information acquired in step S105 does not match either the feature information U or the feature information V as the determination condition. The result corresponding to this condition is set to “NG”, which means that the user is not authenticated when this condition is met. Among a plurality of conditions set in the determination condition table, those for which the valid / invalid flag is set to “valid” are used.

  For example, in the case where the condition of the determination condition number “003” is used, when the feature information acquired in step S105 does not match either the feature information U or the feature information V, the CPU 110 again puts on the keypad 170. A fingerprint image may be acquired as feature information from a provided fingerprint sensor, and authentication may be performed using the newly acquired feature information. In this case, the CPU 110 sets the condition number “004” or “005” as a condition when the determination result is negative x times continuously or when the negative determination result is z times in y seconds. If it is obtained, the user may not be authenticated.

Refer to FIG. 3 again. When the user is authenticated (S106: OK), the CPU 110 shifts the processing to step S107. When the user is not authenticated (S106: NG), the CPU 110 shifts the processing to step S110.
In step S107, the CPU 110 records an authentication history.

  FIG. 7 is a diagram illustrating an authentication history. The authentication history includes a user identifier, a previous authentication time, and an authentication duration time. “Previous authentication time” indicates the latest time when a positive authentication result is obtained. “Authentication continuation time” indicates a time during which a positive authentication result is obtained until the previous authentication time. Now, the authentication history recording process will be described by taking as an example a case where a positive authentication result is obtained for the user “A001” at 18:15 on July 20, 2009. In this case, the CPU 110 calculates a difference (in this example, 10 minutes) between the previous authentication time recorded in the authentication history and the time when a new positive authentication result is obtained, and is recorded in the authentication history. The value of “authentication duration” is rewritten by adding to the existing authentication duration (45005 minutes in this example). In this example, the value of “authentication duration” is rewritten to 45015 minutes. Further, the CPU 110 rewrites the value of “previous authentication time” to “2009/7/20 18:15”.

  Refer to FIG. 3 again. In step S108, CPU 110 executes processing instructed by the operation received in step S104. When the process permitted in the feature information table is restricted, the CPU 110 executes the process within the restriction range. For example, when the user identifier is “A001” and the authentication level is “high”, the permitted processing is limited to “start” and “end”. Even if execution of other processing is instructed by the operation accepted in step S104, the processing is not executed. In this case, the CPU 110 may display a message such as “The execution of the process is not permitted” on the display unit 160. When the process of step S108 is completed, the CPU 110 shifts the process to step S109.

  In step S109, CPU 110 determines whether the end condition is satisfied. The end condition is set in advance by the authentication program. The termination condition is, for example, a condition that a command for terminating the authentication program is input via the keypad 170. When the end condition is satisfied (S109: YES), the CPU 110 ends the process of FIG. When the end condition is not satisfied (S109: NO), the CPU 110 shifts the processing to step S102. While the authentication program is being executed, the loop of steps S102 to S109 is repeatedly executed. During this time, the authentication level is dynamically determined according to the current position and the current time of the information processing apparatus 10, which change from moment to moment, and as a result, the authentication timing changes dynamically.

  In step S110, the CPU 110 records the authentication history. Now, the authentication history recording process will be described by taking as an example a case where a negative authentication result is obtained for the user “A001” at 18:15 on July 20, 2009. In this case, the CPU 110 rewrites the value of “authentication duration” to 0 minutes. Further, the CPU 110 rewrites the value of “previous authentication time” to “no authentication”.

  In step S111, the CPU 110 executes emergency processing. The emergency process includes, for example, at least one of the following operations: invalidation of operation by the keypad 170, power-off of the information processing apparatus 10, sound output, light output, vibration, and ejection of stimulus. When the operation is invalidated or the power is turned off, special procedures such as validating the operation with supervisor authority and restarting may be prepared. When the process of step S110 is completed, the CPU 110 ends the flow of FIG.

  As described above, according to the present embodiment, the authentication level in the information processing apparatus 10 dynamically changes depending on the current time and the current position of the information processing apparatus 10. In the present embodiment, the authentication timing changes according to the authentication level. That is, the timing of authentication changes according to the usage status of the information processing apparatus 10. For example, at a place set by a user (a place where use is assumed) such as a home, a school, a workplace, or a friend's house, the authentication level is low, that is, the security is set loosely. However, even in these places, the use of a time zone that the user does not assume, such as midnight, has a high authentication level, that is, security is strictly set. Because of this dynamic change in the authentication level, the authentication interval is lengthened when the security is set loosely, and the processing load related to authentication is reduced compared to the case where authentication is performed under uniform conditions. Can be reduced.

3. Other Embodiments The present invention is not limited to the above-described embodiments, and various modifications can be made. Hereinafter, some modifications will be described. Two or more of the following modifications may be used in combination.

3-1. Modification 1
If the time during which the user has not touched the information processing apparatus 10 between the time when the positive authentication result was obtained and the current time exceeds the threshold value t1, the authentication continuation time may be initialized. . The initialization of the authentication duration includes, for example, a process of resetting the authentication duration included in the authentication history to zero. Whether or not the user is touching the information processing apparatus 10 is detected by, for example, a contact sensor or a human sensor (both not shown). In this case, the information processing apparatus 10 includes means for measuring a time when the user has not touched the information processing apparatus 10 based on a signal from the contact sensor or the human sensor. Specifically, for example, the CPU 110 measures the time when the user does not touch the information processing apparatus 10. The storage unit 150 stores a threshold value t1. When the measured time exceeds the threshold value t1, the CPU 110 initializes the authentication duration time.

This process is based on the idea that if the user has not touched the information processing apparatus 10 for a certain period of time, the continuity of authentication is lost. According to this modification, when the operation is attempted again after the operation is interrupted for a certain period, the information processing apparatus 10 is in a state in which the continuity of authentication is lost (a state where a positive authentication result has not yet been obtained). ) And authentication processing is performed immediately. Even if the authentication duration recorded in the authentication history satisfies the condition, it is possible to improve security (legitimate use) by temporarily suspending the load reduction related to authentication and requesting authentication processing. .
In this modified example, the threshold value t1 may be dynamically changed according to the current time or the current position of the information processing apparatus 10 as with the authentication timing.

3-2. Modification 2
In the above-described embodiment, the description of “permitted users” in the feature information table of FIG. 5 is omitted, but user authentication is based on “permitted users” set in the feature information table. It may be done. Here, “authorized user” refers to a user who is authenticated along with the user when the user is authenticated. In the example of FIG. 5, users with user identifiers “B001” and “B002” are permitted for the user with user identifier “A001”. In this case, if the user with the user identifier “A001” is authenticated within the time limit t2, the authentication unit 107 sets the identifiers “B001” and “B002” of the authorized users. Authenticate users. Specifically, the CPU 110 first uses the feature information acquired in step S105 as the user identified in step S101 among the feature information registered in the feature information table (for example, the user with the identifier “A001”). Contrast with feature information. If it is determined that the feature information does not match, the CPU 110 uses the feature information acquired in step S105 as the authorized user for the user identified in step S101 (in this example, identifiers “B001” and “B002”). This is compared with the feature information of the user. If it matches any of the feature information, the user who inputs the operation in step S104 is authenticated.

According to this modification, for example, if the user with the user identifier “A001” is authenticated when the information processing apparatus 10 is activated, the users with the user identifiers “B001” and “B002” Authentication can be received without acquiring the user identifier in S101 (FIG. 3).
In this modified example, the time limit t2 may be dynamically changed according to the current time or the current position of the information processing apparatus 10 as with the authentication timing.

3-3. Modification 3
A specific method of authentication is not limited to that described in the embodiment. In the case where a plurality of feature information is registered in the feature information table, if a positive authentication result is not obtained even if one feature information is used, authentication may be performed using another feature information. . In this case, the information processing apparatus 10 is a request unit that requests input of another feature information when the user who operates the authentication unit 107 is not authenticated even if one feature information among a plurality of feature information is used. Have When another feature information is input in response to a request from the request unit, the authentication unit 107 performs authentication using the feature information.

3-4. Modification 4
The process when a negative authentication result is obtained is not limited to the process of step S111 (FIG. 3) described in the embodiment. The information processing apparatus 10 may notify the emergency call server that a negative authentication result has been obtained. In this case, the storage unit 101 stores information (URL (Universal Resource Locator) or IP (Internet Protocol) address) for specifying an emergency call server. The information processing apparatus 10 includes a transmission unit that transmits the position acquired by the acquisition unit 105 to the server specified by the information stored in the storage unit 101 when the user who performed the operation is not authenticated.
According to this modification, the server can know the position of the information processing apparatus that may have been illegally used.

3-5. Modification 5
The conditions that are valid in the determination condition table of FIG. 6 may be dynamically changed according to the current time or the current position of the information processing apparatus 10 in the same manner as the authentication timing. Alternatively, in the level table of FIG. 4, the conditions used for determining the authentication level among the position, time, and history change dynamically according to the current time and the current position of the information processing apparatus 10, as with the authentication timing. You may let them. According to this modification, when the information processing apparatus 10 is used in a place or time zone that is not assumed by the user, the determination condition can be tightened or the level can be determined under severe conditions.

3-6. Modification 6
The method for specifying the user in step S101 (FIG. 3) is not limited to that described in the embodiment. A so-called 1: N authentication technique that uses user characteristic information as a user identifier may be used. In this case, the feature information table of FIG. 5 does not have to include information on the user identifier. In step S101, the CPU 110 acquires a fingerprint image from the fingerprint sensor provided on the keypad 170 as feature information. The CPU 110 identifies the user by comparing the acquired feature information with the feature information registered in the feature information table.

3-7. Other Modifications The information processing apparatus 10 is not limited to a mobile phone. The information processing apparatus 10 may be an apparatus used by a large number of users such as an ATM or an Internet cafe PC, or a mobile terminal such as a PDA (Personal Digital Assistant).
The history recording and related functions may be omitted. For example, the processes in steps S107 and S110 in FIG. 3 may be omitted. In this case, the level table of FIG. 4 does not have to include the condition regarding the history.
The feature information is not limited to a fingerprint image. Biometric information other than fingerprints, such as a palm shape, retina, iris, face, vein, and voiceprint, may be used as feature information. When multiple pieces of feature information are used, different types of biological information may be used in particular.
The arrangement of sensors for acquiring feature information is not limited to that described in the embodiment. A sensor may be provided in a part different from the keypad 170.

The subject that performs authentication is not limited to the information processing apparatus 10. A server connected to the network may perform authentication. In this case, the server stores information used for authentication (registered valid feature information) and a program for performing authentication. In step S106 (FIG. 3), the information processing apparatus 10 requests the server for user authentication. This request includes user characteristic information. The server authenticates the user in response to a request from the information processing apparatus 10 and transmits the result to the information processing apparatus 10. The term “authentication process” or “perform authentication” in this paper includes such a mode in which authentication is requested from another device.
The method for acquiring the current time and the current position of the information processing apparatus 10 is not limited to the method described in the embodiment. For example, the information processing apparatus 10 may acquire the current time from a server connected to the network. Further, the information processing apparatus 10 may adopt the position of the communicating base station as the current position. In this case, the information processing apparatus 10 does not need to have a GPS receiver.
The operation flow of the information processing apparatus 10 is not limited to that described with reference to FIG. For example, the authentication level of the user may be determined at a timing different from the acquisition timing of the current time and the current position. Alternatively, the order of history recording and emergency process execution may be interchanged. Further, in the embodiment, the acquisition timing of the current time and the current position is determined based on the feature information table in the same manner as the authentication timing, but independently of the authentication timing, for example, at regular intervals, Alternatively, the current time and the current position may be acquired at a timing defined by an algorithm different from that based on the feature information table.
The initial value of the variable indicating the authentication level is not limited to that described in the embodiment. The storage unit 150 may store the previous authentication level, and the previous authentication level may be used as the initial value of the variable.

  The hardware configuration of the information processing apparatus 10 is not limited to that described in the embodiment. As long as the functional configuration of FIG. 1 can be realized, the information processing apparatus 10 may have any hardware configuration. For example, the operator 103 may be a mouse, a pen tablet, or a touch panel instead of a keypad. Alternatively, a plurality of devices may cooperate to realize the function of FIG. Also, the correspondence between the hardware configuration and the functional configuration is not limited to that described in the embodiment. For example, the feature information table and the level table may be physically stored in separate storage devices.

  In the above-described embodiment, the program executed by the CPU 110 includes a magnetic recording medium (magnetic tape, magnetic disk (HDD, FD (Flexible Disk)), etc.), an optical recording medium (optical disk (CD (Compact Disk)), DVD (Digital Versatile). Disk)), etc.), a magneto-optical recording medium, and a computer-readable recording medium such as a semiconductor memory (flash ROM or the like). The program may be downloaded via a network such as the Internet.

  DESCRIPTION OF SYMBOLS 10 ... Information processing apparatus 101 ... Memory | storage means 102 ... Acquisition means 103 ... Manipulator 104 ... Identification means 105 ... Acquisition means 106 ... Determination means 107 ... Authentication means 108 ... Processing means 109 ... Rewrite means 110 ... CPU, 120 ... ROM, 130 ... RAM, 140 ... IF, 150 ... storage unit, 160 ... display unit, 170 ... keypad, 180 ... communication unit, 190 ... bus

Claims (12)

An operator that accepts an operation to execute the process;
A first authentication level indicating a pre-registered authentication level; a first condition relating to a position corresponding to the first authentication level; and a second condition relating to a time zone corresponding to the first authentication level. A first data set including first feature information indicating user characteristics registered in advance, the first authentication level, and each first authentication level corresponding to the first feature information. Storage means for storing a second data set including a set timing, and a variable indicating an authentication level of a user who operates the operation element;
A specifying means for specifying a user operating the operation element;
First acquisition means for acquiring a position and time;
Authentication of the user who operated the operator using the position and time acquired by the first acquisition means and the first condition and the second condition included in the first data set Determining means for determining a second authentication level indicative of the level;
Rewriting means for rewriting the variable stored in the storage means to indicate the second authentication level;
The first authentication level that matches the second authentication level indicated by the variable and the first feature information of the user specified by the specifying means among the timings included in the second data set; Second acquisition means for acquiring second feature information indicating a feature of a user who is operating the operator at a timing corresponding to
The user who performed the operation is authenticated according to the second feature information acquired by the second acquisition means, the second authentication level indicated by the variable, and the second data set. Authenticating means,
An information processing apparatus comprising: a processing unit that performs processing according to the operation when the user who performed the operation is authenticated. The storage means stores an authentication continuation time indicating a time when one user is continuously authenticated by the authentication means;
The first data set further includes a third condition relating to a duration of authentication corresponding to the first authentication level;
The determination means determines the second authentication level according to the authentication duration time stored in the storage means and the third condition included in the first data set. The information processing apparatus according to claim 1. The information processing apparatus according to claim 2, further comprising an initialization unit that initializes the authentication duration time when a time when the user does not touch the information processing apparatus exceeds a threshold value. The storage means stores information specifying a valid condition among the conditions included in the first data set;
The determination unit uses the position and time acquired by the first acquisition unit and the condition specified by the information among the conditions included in the first data set, and uses the second authentication level. The information processing apparatus according to any one of claims 1 to 3, wherein the information processing apparatus is determined. The second data set further comprises an authorized processing identifier corresponding to the first feature information;
The processing means responds to the operation according to the second feature information acquired by the second acquisition means, the second authentication level indicated by the variable, and the second data set. The processing according to any one of claims 1 to 4, wherein when processing is permitted, processing according to the operation is performed. The second data set further comprises an authorized user identifier corresponding to the first feature information;
It is indicated that the authentication means is permitted by the second data set corresponding to the first feature information of the previous user within a predetermined time after authenticating the previous user. The information processing apparatus according to any one of claims 1 to 5, wherein when authentication is requested for a user, the user is authenticated. The second data set includes a plurality of the first characteristic information for one user;
A request for requesting input of another second feature information when the user who has performed the operation using the first feature information of one of the plurality of first feature information is not authenticated by the authentication unit Having means,
When the other second feature information is input in response to the request by the requesting unit, the authentication unit performs authentication by comparing the other first feature information with the other second feature information. The information processing apparatus according to any one of claims 1 to 6, wherein: The storage means includes a fourth condition for obtaining an authentication result in the comparison between the first feature information and the second feature information; an authentication result corresponding to the fourth condition; Storing a third data set including a flag indicating whether the condition is valid;
The authentication means authenticates a user who performed the operation using a condition indicated by the flag among the fourth conditions included in the third data set. Item 8. The information processing device according to any one of Items 1-7. The storage means stores information for identifying a server;
When the user who performed the operation is not authenticated, the server includes a transmission unit that transmits the position acquired by the first acquisition unit to the server specified by the information stored in the storage unit. The information processing apparatus according to any one of claims 1 to 8. When the user who performed the operation is not authenticated, at least one of invalidation of the operation by the operator, power-off of the information processing apparatus, sound output, light output, vibration, and ejection of stimulus The information processing apparatus according to claim 1, wherein one process is performed. The operation element has a sensor that acquires characteristic information of a user who performs the operation,
The information processing apparatus according to claim 1, wherein the second acquisition unit acquires the second characteristic information via the sensor. An operator for receiving an operation for executing processing, a first authentication level indicating a pre-registered authentication level, a first condition relating to a position corresponding to the first authentication level, and the first authentication level. A first data set including a second condition relating to a corresponding time zone, first feature information indicating a feature of a user registered in advance, the first authentication level, and the first feature information. Correspondingly, information having a second data set including timing set for each of the first authentication levels and storage means for storing a variable indicating the authentication level of the user who operates the operation element In the processing unit,
Identifying a user operating the manipulator;
Obtaining a position and time;
A second level indicating an authentication level of the user who has operated the operator using the acquired position and time and the first condition and the second condition included in the first data set; Determining an authentication level;
Rewriting the variable stored in the storage means to indicate the second authentication level;
Corresponds to the first feature information of the identified user among the timings included in the second data set and the first authentication level that matches the second authentication level indicated by the variable. Obtaining second characteristic information indicating characteristics of a user who is operating the operation element at timing;
Authenticating the user who performed the operation according to the second feature information, the second authentication level indicated by the variable, and the second data set;
When the user who performed the said operation is authenticated, the step for performing the process according to the said operation is performed.

Images