JP2012068752A - Authentication device, authentication method and authentication program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To reduce a risk of authentication of a third party impersonating the authentic user.SOLUTION: A portable telephone terminal (authentication device) 1 comprises: a display unit 2B which displays a symbol string in which plural symbols that are characters or signs are arranged; a touch sensor 2A which detects the operation of selecting any symbol among the plural symbols and the operation of changing the arrangement of the symbol string; and a main control unit 10 which performs authentication based on symbol information on the symbol selected by the touch sensor 2A and arrangement information on the arrangement of the symbol string when selection of the symbol is detected.

Description

  The present invention relates to an authentication device, an authentication method, and an authentication program.

  An electronic device such as a mobile phone terminal is configured to execute an authentication process to confirm that an operator is valid when executing a critical process such as updating of setting information. Generally, the authentication process is realized by inputting a personal identification number and collating the inputted personal identification number with a pre-registered value.

  In order to properly operate such an authentication process using a personal identification number, it is important not to make the personal identification number known to a third party. In Patent Document 1, in order to prevent a third party from knowing a personal identification number from the evidence of an operation when the personal identification number is input, the personal identification number is displayed by moving the symbol and selecting the symbol being moved. A technique for inputting the number has been proposed.

JP 2006-113653 A

  However, even when the technique disclosed in Patent Document 1 is used, only the personal identification number formed by a combination of symbols is collated as the authentication information. Therefore, when the user uses a value that can be easily guessed by a third party such as his / her birthday as a personal identification number, there is a high possibility that the third party can impersonate the person and receive authentication.

  The present invention has been made in view of the above, and an object of the present invention is to provide an authentication device, an authentication method, and an authentication program that can reduce the risk of a third party impersonating the person and receiving authentication.

  In order to solve the above-described problems and achieve the object, the present invention provides an authentication apparatus, a display unit for displaying a symbol string in which a plurality of symbols that are characters or symbols are arranged, and a plurality of the symbols. A detecting unit that detects an operation of selecting any of the symbols and an operation of changing the arrangement of the symbol sequence, symbol information relating to the symbol selected by the detecting unit, and the symbol when selection of the symbol is detected And a control unit that performs authentication based on the arrangement information related to the arrangement of the columns.

  Here, it is preferable that the control unit scrolls the symbol row when an operation of changing the arrangement of the symbol row is detected by the detection unit.

  Further, the control unit has a display area for displaying only a predetermined number of symbols among the plurality of symbols, and scrolls in the symbols from the opposite side of the display area in the order in which the symbols are scrolled out from the display area. It is preferable to scroll in this manner.

  Moreover, it is preferable that the said control part performs the said authentication by using the display position of the said symbol when selection of a symbol is detected by the said detection part as the said arrangement | positioning information.

  In addition, when the plurality of symbols are different numbers, the control unit includes the arrangement information of the total number of the predetermined number of symbols displayed in the display area when the selection of the symbol is detected. It is preferable to perform the authentication.

  The authentication apparatus further includes a storage unit that stores in advance first information that is information related to a symbol position and second information that is information on a symbol string in which a plurality of symbols are arranged, and the control unit includes: It is preferable that authentication is performed by comparing the symbol information and the arrangement information with the first information and the second information.

  Moreover, it is preferable that the said detection part is superimposed on the display area of the said display part.

  Further, in order to solve the above-described problems and achieve the object, the present invention is an authentication method executed by an authentication apparatus, the step of displaying a symbol string in which a plurality of symbols that are characters or symbols are arranged; Detecting an operation of selecting any one of the plurality of symbols and an operation of changing an arrangement of the symbol sequence; and symbol information relating to the selected symbol and when selection of the symbol is detected And performing authentication based on arrangement information relating to the arrangement of the symbol strings.

  Further, in order to solve the above-described problems and achieve the object, the present invention is an authentication program, the authentication apparatus comprising: displaying a symbol string in which a plurality of symbols that are characters or symbols are arranged; A step of detecting an operation of selecting any one of a plurality of symbols and an operation of changing an arrangement of the symbol row; and symbol information relating to the selected symbol and the symbol when selection of the symbol is detected Performing authentication based on arrangement information relating to arrangement of columns.

  The authentication device, the authentication method, and the authentication program according to the present invention have an effect of reducing the possibility that a third party impersonates the person and receives authentication.

FIG. 1 is a front view showing an appearance of a mobile phone terminal. FIG. 2 is a block diagram showing a functional configuration of the mobile phone terminal. FIG. 3 is a diagram illustrating an example of an authentication information registration screen. FIG. 4 is a diagram showing an example of scroll display of the password input field. FIG. 5 is a diagram illustrating an example of authentication data. FIG. 6 is a diagram illustrating an example of the authentication screen. FIG. 7 is a flowchart showing a processing procedure of the mobile phone terminal at the time of registration of authentication information. FIG. 8 is a flowchart showing a processing procedure of the mobile phone terminal during the authentication process. FIG. 9 is a diagram illustrating an example of authentication data when the arrangement of numbers is specified based on the total value of numbers. FIG. 10 is a flowchart showing a modification of the processing procedure of the mobile phone terminal at the time of registration of authentication information. FIG. 11 is a flowchart showing a modification of the processing procedure of the mobile phone terminal during the authentication process.

  Hereinafter, the present invention will be described in detail with reference to the drawings. The present invention is not limited to the following description. In addition, constituent elements in the following description include those that can be easily assumed by those skilled in the art, those that are substantially the same, and those in a so-called equivalent range. In the following, a mobile phone terminal will be described as an example of an authentication device. However, the application target of the present invention is not limited to a mobile phone terminal, and various devices that perform authentication processing, for example, PHS (Personal Handyphone System) The present invention can also be applied to PDAs, portable navigation devices, personal computers, game machines, and the like.

(Embodiment)
First, an external appearance of a mobile phone terminal 1 which is an embodiment of an authentication device according to the present invention will be described with reference to FIG. FIG. 1 is a front view showing the appearance of the mobile phone terminal 1. As shown in FIG. 1, the mobile phone terminal 1 includes a touch panel 2 and an input unit 3 including buttons 3A, 3B, and 3C. The touch panel 2 displays characters, figures, images, and the like, and detects various operations performed on the touch panel 2 using a finger, stylus, pen, or the like (hereinafter simply referred to as “finger”). When any button is pressed, the input unit 3 activates a function corresponding to the pressed button.

  When the mobile phone terminal 1 executes a process having a great influence such as a change in setting information, the mobile phone terminal 1 executes an authentication process to confirm whether the person who requests the process is valid. Specifically, the mobile phone terminal 1 displays a plurality of numbers used for authentication on the touch panel 2 while changing the arrangement, and the arrangement of the numbers selected on the touch panel 2 and the numbers displayed at the time of selection. Based on the above, the authentication process is executed. In this way, by performing authentication in consideration of not only the selected number but also the arrangement of the numbers displayed at the time of selection, it becomes difficult for a third party to impersonate the person and pass authentication. Processing reliability can be improved.

  Next, a functional configuration of the mobile phone terminal 1 will be described with reference to FIG. FIG. 2 is a block diagram showing a functional configuration of the mobile phone terminal 1. As shown in FIG. 2, the mobile phone terminal 1 includes a touch panel 2, an input unit 3, a power supply unit 5, a communication unit 6, a speaker 7, a microphone 8, a storage unit 9, and a main control unit 10. And a RAM (Random Access Memory) 11.

  The touch panel 2 includes a display unit 2B and a touch sensor 2A superimposed on the display unit 2B. The touch sensor 2A detects various operations performed on the touch panel 2 using a finger together with the position on the touch panel 2 where the operation is performed. The operations detected by the touch sensor 2 </ b> A include an operation of bringing a finger into contact with the surface of the touch panel 2, an operation of moving a finger while keeping the surface in contact with the surface of the touch panel 2, and an operation of moving the finger away from the surface of the touch panel 2. It is. The touch sensor 2A may employ any detection method such as a pressure-sensitive method or an electrostatic method. The display unit 2B includes, for example, a liquid crystal display (LCD), an organic EL (Organic Electro-Luminescence) panel, and the like, and displays characters, figures, images, and the like.

  The input unit 3 receives a user operation through a physical button or the like, and transmits a signal corresponding to the received operation to the main control unit 10. The power supply unit 5 supplies power obtained from a storage battery or an external power supply to each functional unit of the mobile phone terminal 1 including the main control unit 10. The communication unit 6 establishes a radio signal line by a CDMA system or the like with a base station via a channel assigned by the base station, and performs telephone communication and information communication with the base station. The speaker 7 outputs the other party's voice, ringtone, and the like in telephone communication. The microphone 8 converts the voice of the user or the like into an electrical signal.

  The storage unit 9 is, for example, a nonvolatile memory or a magnetic storage device, and stores programs and data used for processing in the main control unit 10. Specifically, the storage unit 9 includes a mail program 9A for sending / receiving and browsing mail, a browser program 9B for browsing a WEB page, an authentication program 9C for executing the authentication process described above, Authentication data 9D in which information used for processing is stored is stored. The storage unit 9 also stores an operating system program that realizes basic functions of the mobile phone terminal 1 and other programs and data such as address book data in which names, telephone numbers, mail addresses, and the like are registered.

  The main control unit 10 is, for example, a CPU (Central Processing Unit), and comprehensively controls the operation of the mobile phone terminal 1. Specifically, the main control unit 10 executes the program stored in the storage unit 9 while referring to the data stored in the storage unit 9 as necessary, so that the touch panel 2, the communication unit 6, etc. Various processes are executed by controlling. The main control unit 10 expands the program stored in the storage unit 9 and the data acquired / generated / processed by executing the process to the RAM 11 that provides a temporary storage area as necessary. The program executed by the main control unit 10 and the data to be referred to may be downloaded from the server device by wireless communication by the communication unit 6.

  For example, by executing the browser program 9B, the main control unit 10 realizes functions related to the WEB browser such as display of a WEB page and display of a bookmark list. Further, the main control unit 10 realizes functions related to authentication such as registration of authentication information and execution of authentication processing by executing the authentication program 9C.

  Next, registration of authentication information will be described with reference to FIGS. FIG. 3 is a diagram illustrating an example of an authentication information registration screen. FIG. 4 is a diagram showing an example of scroll display of the password input field 22. FIG. 5 is a diagram illustrating an example of the authentication data 9D.

  When the main control unit 10 requests registration of authentication information from the user, the main control unit 10 displays a registration screen as shown in FIG. When changing the authentication information, the authentication process is executed based on the information registered in the authentication data 9D prior to the display of the registration screen. If the authentication fails, the display of the registration screen is rejected. May be.

  As shown in FIG. 3, the registration screen includes a personal identification number display field 21, a personal identification number input field 22, a cancel button 23, and a registration button 24. The personal identification number display field 21 is an area where the inputted personal identification number is displayed. The main control unit 10 does not display the input security code as it is in the security code display field 21, but replaces it with “* (asterisk)” except for the last value. By controlling the display in this way, it is possible for a third party to look into the touch panel 2 and illegally know the entered password while allowing the user to confirm the last entered value. Can be suppressed.

  Note that the method for displaying the input password in the password display field 21 does not have to be as described above, and all characters of the input password may be displayed as they are, or the password of the input password is displayed. All characters may be replaced with “*”. In addition, characters other than “*” may be used as characters to replace the input password.

  The personal identification number input field 22 is an area used for inputting authentication information. The main control unit 10 displays characters used for authentication in the password input field 22, and when a tap operation on the characters displayed in the password input field 22 is detected, the characters are used for authentication. It is accepted as a character constituting the password. The main control unit 10 does not display the characters in the personal identification number input field 22 in a fixed manner, but displays them while changing the arrangement. Here, the tap operation refers to an operation of releasing the finger from the touch panel 2 immediately after the finger touches the touch panel 2.

  In the present embodiment, as shown in FIG. 4, a number string (symbol string) composed of numbers (symbols) from 0 to 9 is scrolled cyclically, and five numbers are displayed in the personal identification number input field 22. Shall be. For example, when scrolling leftward by one character from the state where five numbers “01234” are displayed in the personal identification number input field 22, “0” is scrolled out, and “12345” 5 Two numbers are displayed in the password input field 22. When scrolling leftward by another character, “1” is scrolled out, and five numbers “23456” are displayed in the personal identification number input field 22.

  After scrolling leftward in this way, when scrolling leftward by one character while five numbers “56789” are displayed in the password input field 22, “5” is displayed. Scrolled out, “0” that was scrolled out first scrolls in from the right direction opposite to the scrolled left side. As a result, five numbers “67890” are displayed in the personal identification number input field 22.

  In this way, the main control unit 10 controls the scroll display so that the numbers scroll in from the opposite side in the order of scrolling out from the personal identification number input field 22 where a predetermined number of numbers are displayed.

  Note that the scroll display may be realized so that the number automatically moves at a constant speed, or may be realized so that the number moves according to the user's sweep operation. Here, the sweep operation refers to an operation of moving the finger so as to slide while touching the touch panel 2. When scroll display is performed according to the user's sweep operation, the main control unit 10 determines the password input field according to the amount of the user placing the finger on the password input field 22 and moving the finger in the scroll direction. The number displayed in 22 is scrolled. When scroll display is performed according to a user's sweep operation, scrolling in both directions may be possible.

  The cancel button 23 is used to cancel the input password. When the tap operation on the cancel button 23 is detected by the touch panel 2, the main control unit 10 deletes one value at the end of the input password.

  The registration button 24 is used to execute registration of the input personal identification number. When the tap operation on the registration button 24 is detected by the touch panel 2, the main control unit 10 determines the validity of the input password. The validity here means, for example, conformity to a predetermined rule concerning the length and complexity of a personal identification number, and when the length of the personal identification number is shorter than the predetermined length or the same value as the personal identification number. Is determined not to be valid if more than a predetermined number are continuously included.

  When it is determined that the password is valid, the main control unit 10 corresponds each number constituting the input password to the arrangement of the numbers in the password input field 22 when the number is selected. Then, it is stored in the authentication data 9D.

  In the authentication data 9D shown as an example in FIG. 5, a personal identification number composed of four numbers “4”, “0”, “2”, and “6” is registered. Then, in the authentication data 9D, as the information indicating the arrangement of the numbers in the PIN number input field 22 when the numbers are selected, the numbers are displayed when the numbers are selected. The position displayed in the input field 22 is registered.

  For example, in the authentication data 9D, a value “5” is registered as a position in association with a number “4”. This is “4” when the number “4” is selected. This means that the number is displayed at the fifth position in the password input field 22. Here, the fact that the number “4” is displayed at the fifth position of the password input field 22 means that the arrangement of the number string displayed in the password input field 22 is “01234”. Is equal to

  In the authentication data 9D, a value “2” is registered as a position in association with the number “0”. This is “0” when the number “0” is selected. This means that the number is displayed at the second position in the password input field 22. Here, the fact that the number “0” is displayed at the second position of the password input field 22 means that the arrangement of the number string displayed in the password input field 22 is “90123”. Is equal to

  In the authentication data 9D, the value “4” is registered as the position in association with the number “2”. This is “2” when the number “2” is selected. This means that the number is displayed at the fourth position of the password input field 22. Here, the fact that the number “2” is displayed at the fourth position of the password input field 22 means that the arrangement of the number string displayed in the password input field 22 is “90123”. Is equal to

  Further, in the authentication data 9D, a value “1” is registered as a position in association with the number “6”. This is “6” when the number “6” is selected. This means that the number is displayed at the first position in the password input field 22. Here, the fact that the number “6” is displayed at the first position of the password input field 22 means that the arrangement of the number string displayed in the password input field 22 is “67890”. Is equal to

  In this way, the main control unit 10 changes the arrangement of the numbers displayed in the code number input field 22 and inputs the numbers selected from the code number input field 22 when the respective numbers are selected. It is registered in the authentication data 9D in association with the arrangement of numbers in the column 22.

  Next, the authentication process will be described with reference to FIG. FIG. 6 is a diagram illustrating an example of the authentication screen. The main control unit 10 causes the touch panel 2 to display an authentication screen as shown in FIG.

  As shown in FIG. 6, the authentication screen includes a personal identification number display field 21, a personal identification number input field 22, a cancel button 23, and an authentication button 25. Since the personal identification number display field 21, the personal identification number input field 22 and the cancel button 23 have already been described, redundant description will be omitted.

  The authentication button 25 is used to request execution of authentication. When the tap operation on the authentication button 25 is detected by the touch panel 2, the main control unit 10 collates the authentication information input from the personal identification number input field 22 with the information registered in the authentication data 9D, and both are the same. Make authentication successful in some cases. Here, whether the authentication information input from the password input field 22 and the information registered in the authentication data 9D are the same or not is determined in addition to the identity of the sequence of numbers constituting the password. The determination is made based on the identity of the number arrangement in the personal identification number input field 22 when each of the numbers constituting the number is selected.

  For example, it is assumed that the contents of the authentication data 9D are as shown in FIG. In this case, the main control unit 10 does not succeed in authentication only if the number sequence selected from the personal identification number input field 22 is “4026”. The main control unit 10 determines that the arrangement of the numbers in the password input field 22 when each number is selected is the authentication data in addition to the arrangement of the numbers selected from the password input field 22 being “4026”. If the arrangement is the same as that shown by 9D, the authentication is successful.

  Specifically, the main control unit 10 makes the authentication successful when a tap operation on the authentication button 25 is detected after a number is selected as follows. First, when the number “4” is displayed at the fifth position of the password input field 22, that is, when the arrangement of the number string displayed in the password input field 22 is “01234”. The number “4” is selected as the first number. Subsequently, when the number “0” is displayed at the second position of the password input field 22, that is, the arrangement of the number string displayed in the password input field 22 is “90123”. In this case, the number “0” is selected as the second number. Subsequently, when the number “2” is displayed at the fourth position in the password input field 22, that is, the arrangement of the number string displayed in the password input field 22 is “90123”. In this case, the number “2” is selected as the third number. Finally, when the number “6” is displayed at the first position of the password input field 22, that is, the arrangement of the number string displayed in the password input field 22 is “67890”. In this case, the number “6” is selected as the fourth number.

  In this way, not only the selected number but also the arrangement of the number when the number is selected is taken into account to determine the identity of the authentication information, so that the third party can impersonate the person and be authenticated. Can be lowered. For example, even if the personal identification number is known to a third party, the third party cannot be authenticated without knowing the arrangement of the numbers when selecting each number. In addition, the third party monitors the movement of the finger when the person is authenticated, and even if an attempt is made to authenticate by reproducing the movement, the third party will not authenticate if the selected numerical values do not match. I can't receive it.

  Next, the operation of the mobile phone terminal 1 will be described with reference to FIGS. FIG. 7 is a flowchart showing a processing procedure of the cellular phone terminal 1 when registering authentication information. FIG. 8 is a flowchart showing the processing procedure of the cellular phone terminal 1 during the authentication processing. 7 is executed when the authentication information registration screen is displayed, and the processing procedure shown in FIG. 8 is executed when the authentication screen is displayed. Here, it is assumed that the display content of the personal identification number input field 22 is scrolled according to the user's operation.

  As shown in FIG. 7, at the time of registration of authentication information, the main control unit 10 first determines whether the touch is detected by the touch sensor 2A as step S11. If no contact is detected (step S11, No), step S11 is repeatedly executed until a contact is detected. When the touch sensor 2A detects a scroll operation, that is, a sweep operation in which a finger placed on the password input field 22 is slid in the scroll direction (step S11, Yes and step S12, Yes), the main control unit 10 Scrolls the number string in the password input field 22 as step S13. Then, the main control unit 10 re-executes step S11 and subsequent steps.

  When the touch sensor 2A detects a number selection, that is, a tap operation for any of the numbers displayed in the password input field 22 is detected (step S12, No and step S14, Yes), the main control unit 10 In step S15, the selected number and the display position of the selected number are associated with each other and recorded in the RAM 11. In step S16, the main control unit 10 updates the personal identification number display column 21 on the registration screen based on the sequence of numbers recorded in the RAM 11, and re-executes step S11 and subsequent steps.

  When the touch sensor 2A detects that the cancel button 23 is pressed, that is, a tap operation on the cancel button 23 is detected (No in Step S14 and Step S17, Yes), the main control unit 10 records the result in Step S18 in the RAM 11. Delete the last combination of numbers and display position. In step S19, the main control unit 10 updates the personal identification number display field 21 on the registration screen based on the sequence of the numbers recorded in the RAM 11, and re-executes step S11 and subsequent steps.

  When the touch sensor 2A detects that the registration button 24 is pressed, that is, a tap operation on the registration button 24 is detected (No in step S17 and step S20, Yes), the main control unit 10 records the result in step S21 in the RAM 11. Check the validity of the combination of the displayed number and the display position. If appropriate (step S22, Yes), the main control unit 10 stores the combination of the number and the display position recorded in the RAM 11 as the authentication data 9D as step S23, and completes registration of the authentication information. Let

  When the operation detected by the touch sensor 2A is not any of the above operations (step S20, No), or when the combination of the number and the display position recorded in the RAM 11 is not valid (step S22, No). The main control unit 10 re-executes step S11 and subsequent steps.

  As shown in FIG. 8, during the authentication process, the main control unit 10 first determines whether the touch sensor 2 </ b> A has detected contact as step S <b> 31. Here, when no contact is detected (step S31, No), step S31 is repeatedly executed until a contact is detected. When the scroll operation is detected by the touch sensor 2A (step S31, Yes and step S32, Yes), the main control unit 10 scrolls the number string in the personal identification number input field 22 as step S33. Then, the main control unit 10 re-executes step S31 and subsequent steps.

  When the number selection is detected by the touch sensor 2A (step S32, No, and step S34, Yes), the main control unit 10 displays the selected number and the display position of the selected number as step S35. Correspondingly, it is recorded in the RAM 11. In step S36, the main control unit 10 updates the personal identification number display field 21 on the authentication screen based on the sequence of numbers recorded in the RAM 11, and re-executes step S31 and subsequent steps.

  When pressing of the cancel button 23 is detected by the touch sensor 2A (step S34, No, and step S37, Yes), the main control unit 10 sets the number recorded in the RAM 11 and the display position as step S38. Delete the last combination. In step S39, the main control unit 10 updates the personal identification number display field 21 of the authentication screen based on the sequence of numbers recorded in the RAM 11, and re-executes step S31 and subsequent steps.

  When pressing of the authentication button 25 is detected by the touch sensor 2A (step S37, No, and step S40, Yes), the main control unit 10 sets the number recorded in the RAM 11 and the display position as step S41. The combination is verified with the authentication data 9D. If the two match (step S42, Yes), the main control unit 10 determines that the authentication is successful and completes the authentication process as step S43. On the other hand, if the two do not match (No in step S42), the main control unit 10 determines that the authentication has failed in step S44 and completes the authentication process.

  When the operation detected by the touch sensor 2A is not any of the above operations (No at Step S40), the main control unit 10 re-executes Step S31 and the subsequent steps.

  As described above, in this embodiment, the numbers used for authentication are displayed while changing the arrangement, and authentication is performed taking into account the arrangement when the numbers are selected. The risk of impersonating the person and receiving authentication can be reduced.

  In addition, the aspect of this invention shown by said embodiment can be arbitrarily changed in the range which does not deviate from the summary of this invention. For example, the authentication program 9C may be divided into a plurality of modules, or may be integrated with other programs.

  In the above embodiment, the mobile phone terminal 1 collates the authentication information. However, the authentication data 9D is stored in an information processing apparatus that can communicate with the mobile phone terminal 1, and the mobile phone terminal 1 Alternatively, the input authentication information may be transmitted to the information processing apparatus to request verification, and the verification result may be received.

  In the above embodiment, the characters used for authentication are numbers, but characters and symbols other than numbers may be used for authentication. In the above embodiment, an example of scrolling in the horizontal direction is shown as an example of changing the arrangement of numbers used for authentication. However, it is also possible to change the arrangement of numbers by other methods such as vertical scrolling. Good.

  In the above embodiment, the touch panel 2 serves as a display unit that displays numbers while changing the arrangement, and a function as a detection unit that detects selection of numbers. You may provide a detection part separately. For example, a display unit in which numbers are displayed while changing the arrangement may be configured with a liquid crystal display or the like, and physical buttons arranged in positions corresponding to the numbers arranged on the display unit may function as detection units. Good.

  In the above embodiment, the number arrangement is specified based on the position where the number is displayed when the number is selected. However, the number arrangement may be specified by another method. Good. For example, it is good also as specifying the arrangement | positioning of a number based on the total value of all the numbers currently displayed on the PIN code input column 22 when the number was selected.

  An example of specifying the number arrangement based on the total number will be described with reference to FIGS. FIG. 9 is a diagram illustrating an example of the authentication data 9D when the arrangement of numbers is specified based on the total value of numbers. FIG. 10 is a flowchart showing a modification of the processing procedure of the mobile phone terminal 1 when registering authentication information. FIG. 11 is a flowchart showing a modification of the processing procedure of the cellular phone terminal 1 during the authentication processing.

  In the authentication data 9D shown in FIG. 9, it is displayed in the personal identification number input field 22 when a number is selected, in association with the selected number, instead of the display position of the number when the number is selected. The total value of all the numbers is stored. If the numbers 1 to 9 are scrolled cyclically and five numbers are displayed in the PIN number input field 22, the total number of all the numbers displayed in the PIN number input field 22 is calculated. The arrangement of the numbers displayed in the password input field 22 can be specified.

  For example, if the total value is “15”, it can be specified that the arrangement of the numeric string displayed in the password input field 22 is “12345”. If the total value is “19”, it can be specified that the arrangement of the number string displayed in the personal identification number input field 22 is “91234”. If the total value is “31”, it can be specified that the arrangement of the numeric string displayed in the personal identification number input field 22 is “67891”.

  As shown in FIG. 10, at the time of registration of authentication information, the main control unit 10 first determines whether touch is detected by the touch sensor 2A as step S51. Here, when a contact is not detected (step S51, No), step S51 is repeatedly executed until a contact is detected. When the scroll operation is detected by the touch sensor 2A (step S51, Yes and step S52, Yes), the main control unit 10 scrolls the number string in the password input field 22 as step S53. Then, the main control unit 10 re-executes step S51 and subsequent steps.

  When the number selection is detected by the touch sensor 2A (step S52, No and step S54, Yes), the main control unit 10 displays the selected number and the code number input field 22 at the time of selection as step S55. The total value of all the numbers that have been recorded is associated and recorded in the RAM 11. In step S56, the main control unit 10 updates the personal identification number display field 21 on the registration screen based on the sequence of numbers recorded in the RAM 11, and re-executes step S51 and subsequent steps.

  When pressing of the cancel button 23 is detected by the touch sensor 2A (step S54, No and step S57, Yes), the main control unit 10 sets the number and total value recorded in the RAM 11 as step S58. Delete the last combination. In step S59, the main control unit 10 updates the personal identification number display column 21 on the registration screen based on the sequence of numbers recorded in the RAM 11, and re-executes step S51 and subsequent steps.

  When pressing of the registration button 24 is detected by the touch sensor 2A (step S57, No, and step S60, Yes), the main control unit 10 sets the number recorded in the RAM 11 and the total value as step S61. Check the validity of the combination. If appropriate (step S62, Yes), the main control unit 10 stores the combination of the number and the total value recorded in the RAM 11 as the authentication data 9D as step S63, and completes registration of the authentication information. Let

  When the operation detected by the touch sensor 2A is not any of the above operations (step S60, No), or when the combination of the number and the total value recorded in the RAM 11 is not valid (step S62, No). The main control unit 10 re-executes step S51 and subsequent steps.

  As shown in FIG. 11, at the time of the authentication process, the main control unit 10 first determines whether or not the touch is detected by the touch sensor 2A as step S71. Here, when a contact is not detected (step S71, No), step S71 is repeatedly executed until a contact is detected. When the scroll operation is detected by the touch sensor 2A (step S71, Yes and step S72, Yes), the main control unit 10 scrolls the number string in the personal identification number input field 22 as step S73. Then, the main control unit 10 re-executes step S71 and subsequent steps.

  When number selection is detected by the touch sensor 2A (step S72, No, and step S74, Yes), the main control unit 10 displays the selected number and the code number input field 22 at the time of selection as step S75. The total value of all the numbers that have been recorded is associated and recorded in the RAM 11. In step S76, the main control unit 10 updates the personal identification number display field 21 on the authentication screen based on the sequence of numbers recorded in the RAM 11, and re-executes step S71 and subsequent steps.

  When pressing of the cancel button 23 is detected by the touch sensor 2A (step S74, No, and step S77, Yes), the main control unit 10 sets the number and the total value recorded in the RAM 11 as step S78. Delete the last combination. In step S79, the main control unit 10 updates the personal identification number display field 21 of the authentication screen based on the sequence of numbers recorded in the RAM 11, and re-executes step S71 and subsequent steps.

  When pressing of the authentication button 25 is detected by the touch sensor 2A (step S77, No, and step S80, Yes), the main control unit 10 sets the number recorded in the RAM 11 and the total value as step S81. The combination is verified with the authentication data 9D. If they match (Yes in step S82), the main control unit 10 determines that the authentication is successful and completes the authentication process in step S83. On the other hand, when the two do not match (step S82, No), the main control unit 10 determines that the authentication has failed in step S84 and completes the authentication process.

  When the operation detected by the touch sensor 2A is not any of the above operations (No at Step S80), the main control unit 10 re-executes Step S71 and the subsequent steps.

  As described above, the authentication apparatus, the authentication method, and the authentication program according to the present invention are particularly suitable when it is necessary to reduce the possibility that a third party impersonates the person and receives authentication.

DESCRIPTION OF SYMBOLS 1 Mobile phone terminal 2 Touch panel 2A Touch sensor 2B Display part 3 Input part 3A, 3B, 3C Button 5 Power supply part 6 Communication part 7 Speaker 8 Microphone 9 Memory | storage part 9A Mail program 9B Browser program 9C Authentication program 9D Authentication data 10 Main control part 11 RAM
21 Security Code Display Field 22 Security Code Input Field 23 Cancel Button 24 Registration Button 25 Authentication Button

Claims (9)

A display unit for displaying a symbol string in which a plurality of symbols which are characters or symbols are arranged;
A detection unit that detects an operation of selecting any one of the plurality of symbols and an operation of changing an arrangement of the symbol sequence;
An authentication apparatus comprising: a control unit that performs authentication based on symbol information related to a symbol selected by the detection unit and arrangement information related to an arrangement of the symbol sequence when selection of the symbol is detected.   The authentication apparatus according to claim 1, wherein the control unit scrolls the symbol sequence when an operation of changing the arrangement of the symbol sequence is detected by the detection unit.   The control unit has a display area for displaying only a predetermined number of symbols among the plurality of symbols, and the symbols are scrolled in from the opposite side of the display area in the order in which the symbols are scrolled out from the display area. The authentication device according to claim 2, wherein the authentication device is scrolled.   The said control part performs the said authentication as the arrangement | positioning information by using the display position of the said symbol when selection of the symbol is detected by the said detection part as described in any one of Claim 1 to 3 characterized by the above-mentioned. Authentication device.   When the plurality of symbols are different numbers, the control unit uses the total value of the predetermined number of symbols displayed in the display area when selection of the symbol is detected as the arrangement information The authentication apparatus according to claim 3, wherein authentication is performed. A storage unit that preliminarily stores first information that is information related to the position of the symbol and second information that is information of a symbol string in which a plurality of symbols are arranged;
The said control part performs authentication by collating the said symbol information and the said arrangement | positioning information with the said 1st information and the said 2nd information, The any one of Claim 1 to 5 characterized by the above-mentioned. The authentication device described.   The authentication device according to claim 1, wherein the detection unit is superimposed on a display area of the display unit. An authentication method executed by an authentication device,
Displaying a symbol string in which a plurality of symbols that are letters or symbols are arranged;
Detecting an operation of selecting any one of the plurality of symbols and an operation of changing an arrangement of the symbol sequence;
And performing authentication based on symbol information relating to the selected symbol and arrangement information relating to the arrangement of the symbol sequence when selection of the symbol is detected. In the authentication device,
Displaying a symbol string in which a plurality of symbols that are letters or symbols are arranged;
Detecting an operation of selecting any one of the plurality of symbols and an operation of changing an arrangement of the symbol sequence;
An authentication program, comprising: performing authentication based on symbol information relating to a selected symbol and arrangement information relating to the arrangement of the symbol sequence when selection of the symbol is detected.

Images