JP2012094031A - Information input method, information input system, information input device and computer program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an information input method, information input system, information input device and computer program in which inputted characters are prevented from being stolen by spyware or the like.SOLUTION: On the basis of information transmitted from a server device 1, a first keyboard screen that is a keyboard screen displaying specific characters on keys is displayed in a mobile phone 3. On the other hand, a second keyboard screen which is a keyboard screen not displaying on keys the characters displayed on the keys of the first keyboard screen is displayed in a client device 2. The client device 2 receives choices of the keys on the second keyboard screen determined based on the displays on the keys of the first keyboard screen being displayed in the mobile phone 3 and transmits input information corresponding to the choices to the server device 1.

Description

  The present invention relates to an information input method for inputting various information, and in particular, an information input method for inputting confidential information such as a password, an information input system, an information input device, and a computer for implementing the method. The present invention relates to a computer program for functioning as the information input device.

  2. Description of the Related Art Conventionally, there is known a character input method for inputting a character by displaying a keyboard screen simulating a keyboard on a display device and selecting each key in the keyboard screen using an input device such as a mouse. This keyboard screen is called a software keyboard and is now widely used.

  As a character input method for inputting confidential information such as a password using such a software keyboard, Patent Document 1 discloses that characters are being input when a character is input by a mouse click operation using the software keyboard. When it is determined that the input character is displayed on the screen, if it is determined that the input character input has been confirmed, or if it is determined that a certain time has elapsed since the input character was displayed, the input character is hidden. A method is disclosed. According to this character input method, since characters that have been displayed for a certain period of time after being displayed are concealed, they can be prevented from being viewed by others, and the confidentiality of the input characters can be ensured.

  In the case of the above character input method, since the character input is performed by clicking the mouse, even if a program for recording keyboard input such as a key logger is set as spyware, the input character is stolen. Can be prevented.

JP 2005-250530 A

  However, if spyware or the like that captures and sends an image is installed, even with the conventional character input method described above, the key layout of the software keyboard and which key was clicked by analyzing the image As a result, the entered characters were stolen. Furthermore, when spyware that records moving images appears, there is a problem that an input character can be more easily stolen.

  The present invention has been made in view of such circumstances, and its main purpose is information input that can prevent the input information from being stolen even when various types of spyware or the like are installed. A method, an information input system, an information input device, and a computer program are provided.

  In order to solve the above-described problem, an information input method according to one aspect of the present invention is such that a client device connected to be able to communicate with a server device receives selection of each key on a keyboard screen simulating a keyboard. In the information input method for transmitting input information corresponding to the server device to the server device, a first keyboard screen which is a keyboard screen on which specific characters are displayed on each key for a terminal device different from the client device A first keyboard screen information transmitting step for transmitting the first keyboard screen information, and a first keyboard screen displaying step for the terminal device to display the first keyboard screen based on the first keyboard screen information; The server device displays characters displayed on the keys of the first keyboard screen to the client device. A second keyboard screen information transmitting step of transmitting second keyboard screen information indicating a second keyboard screen which is a keyboard screen not displayed on the key, and the client device is configured to transmit the second keyboard screen information based on the second keyboard screen information. A second keyboard screen display step for displaying two keyboard screens, and each of the second keyboard screens determined by the client device based on the display of each key of the first keyboard screen displayed on the terminal device. An input information transmission step of receiving a selection of a key and transmitting input information corresponding to the selection to the server device.

  In the input information transmitting step of the aspect, the client device may transmit key position information indicating the position of the selected key to the server device as the input information.

  Further, in the second keyboard information transmitting step of the aspect, the server device transmits second keyboard screen information indicating a second keyboard screen composed of blank keys to the client device. Alternatively, second keyboard screen information indicating a second keyboard screen in which characters having a key arrangement different from that of the first keyboard screen are displayed on each key may be transmitted.

An information input system according to one aspect of the present invention is connected to a server device and the server device so as to be communicable, accepts selection of each key on a keyboard screen simulating a keyboard, and inputs input information according to the selection to the server In an information input system comprising a client device that transmits to a device and a terminal device different from the client device, the server device is a first keyboard that is a keyboard screen on which specific characters are displayed on each key First keyboard screen information transmitting means for transmitting first keyboard screen information indicating a screen to the terminal device, and a keyboard on which characters displayed on each key of the first keyboard screen are not displayed on each key Second keyboard screen information indicating the second keyboard screen, which is a screen, is transmitted to the client device. Second keyboard screen information transmission means, and the terminal device comprises first keyboard screen display means for displaying the first keyboard screen based on the first keyboard screen information, and the client device Second keyboard screen display means for displaying the second keyboard screen based on the second keyboard screen information;
Accepts selection of each key on the second keyboard screen determined based on the display of each key on the first keyboard screen displayed on the terminal device, and transmits input information corresponding to the selection to the server device Input information transmitting means.

  In the above aspect, the input information transmitting unit may be configured to transmit key position information indicating a position of the selected key as the input information to the server device.

  Further, in the above aspect, the second keyboard information transmitting unit may be configured to transmit second keyboard screen information indicating a second keyboard screen composed of blank keys to the client device. Alternatively, the second keyboard screen information indicating the second keyboard screen in which characters having a key layout different from that of the first keyboard screen are displayed on each key may be transmitted.

  An information input device according to an aspect of the present invention is connected to a server device in a communicable manner, accepts selection of each key on a keyboard screen simulating a keyboard, and transmits input information according to the selection to the server device. In the information input device, the second keyboard screen, which is a keyboard screen having a key arrangement different from the first keyboard screen, which is a keyboard screen in which specific characters are displayed on each key displayed on the external terminal device, is shown. Second keyboard screen information receiving means for receiving second keyboard screen information from the server device, and displaying the second keyboard screen based on the second keyboard screen information received by the second keyboard screen information receiving means. A second keyboard screen display means for displaying, and a table of keys of the first keyboard screen displayed on the terminal device Accepting a selection of the keys in the second keyboard screen which is determined based on, characterized in that it comprises an input information transmitting means for transmitting the input information corresponding to the selection to the server device.

  In the above aspect, the input information transmitting unit may be configured to transmit key position information indicating a position of the selected key as the input information to the server device.

  A computer program according to an aspect of the present invention is connected to a server device so as to be communicable, receives selection of each key on a keyboard screen simulating a keyboard, and transmits input information corresponding to the selection to the server device. A second keyboard showing a second keyboard screen that is a keyboard screen having a key layout different from the first keyboard screen that is a keyboard screen in which specific characters are displayed on each key displayed on an external terminal device. A second keyboard screen information receiving means for receiving screen information from the server device; and a second keyboard screen for displaying the second keyboard screen based on the second keyboard screen information received by the second keyboard screen information receiving means. Keyboard screen display means and each key of the first keyboard screen displayed on the terminal device Accepting a selection of the keys in the second keyboard screen which is determined on the basis of the display, to function input information corresponding to the selection as the input information transmitting means for transmitting to the server device. Here, the input information transmitting means may be configured to transmit key position information indicating the position of the selected key to the server device as the input information.

  According to the information input method, information input system, information input apparatus, and computer program according to the present invention, it is possible to prevent information such as characters input by spyware or the like from being stolen.

The block diagram which shows the structure of the information input system which concerns on Embodiment 1 of this invention. The block diagram which shows the structure of the server apparatus with which the information input system which concerns on Embodiment 1 of this invention is provided. The figure which shows an example of the layout of the user information database provided in the server apparatus with which the information input system which concerns on Embodiment 1 of this invention is provided. The figure which shows an example of the layout of the authentication information database provided in the server apparatus with which the information input system which concerns on Embodiment 1 of this invention is provided. The block diagram which shows the structure of the client apparatus with which the information input system which concerns on Embodiment 1 of this invention is provided. 5 is a flowchart illustrating a procedure of information input preparation processing executed by the server device, the client device, and the mobile phone included in the information input system according to the first embodiment of the present invention. The figure which shows the concept of the software keyboard in the information input system which concerns on Embodiment 1 of this invention. The figure which shows an example of the key arrangement | sequence screen displayed on the display of the mobile telephone with which the information input system which concerns on Embodiment 1 of this invention is provided. The figure which shows an example of the password input screen displayed on the display of the client apparatus with which the information input system which concerns on Embodiment 1 of this invention is provided. The flowchart which shows the procedure of the password authentication process performed by the server apparatus with which the information input system which concerns on Embodiment 1 of this invention is provided, and a client apparatus. The figure which shows the procedure of selection of the key in the case of inputting a 2nd password. The block diagram which shows the structure of the information input system which concerns on Embodiment 2 of this invention. The figure which shows an example of the layout of the authentication information database provided in the server apparatus with which the information input system which concerns on Embodiment 2 of this invention is provided. The figure which shows an example of the password input screen displayed on the display of the client apparatus with which the information input system which concerns on Embodiment 2 of this invention is provided. The flowchart which shows the procedure of the password authentication process performed by the server apparatus and client apparatus with which the information input system which concerns on Embodiment 2 of this invention is provided.

  Hereinafter, preferred embodiments of the present invention will be described with reference to the drawings. In addition, each embodiment shown below illustrates the method and apparatus for actualizing the technical idea of this invention, Comprising: The technical idea of this invention is not necessarily limited to the following. Absent. The technical idea of the present invention can be variously modified within the technical scope described in the claims.

  In the following, embodiments of the present invention will be described by taking as an example a case where a user uses various services provided by a financial institution such as a bank, but it goes without saying that the present invention is not limited to this. . The present invention can be applied to various systems for inputting characters (including numbers and symbols) using a computer.

(Embodiment 1)
[Configuration of information input system]
FIG. 1 is a block diagram showing a configuration of an information input system according to Embodiment 1 of the present invention. As shown in FIG. 1, the information input system according to the present embodiment includes a server device 1, a plurality of client devices 2, 2,. The server device 1 is a computer provided on the side of a financial institution such as a bank, and the client devices 2, 2,... Are computers provided on the side of each user having a deposit account of the financial institution. The server device 1 and the client devices 2, 2,... Are communicably connected via a communication network NTW such as the Internet. Are portable terminal devices carried by users who operate the client devices 2, 2,..., And communicate with the server device 1 via the communication network NTW.

[Configuration of server device]
Hereinafter, a detailed configuration of the server device 1 described above will be described.
FIG. 2 is a block diagram showing a configuration of the server device 1 according to Embodiment 1 of the present invention. As shown in FIG. 2, the computer (server device) 1 includes a CPU 10, a ROM 11, a RAM 12, a hard disk 13, and a communication interface (I / F) 14, and these CPU 10, ROM 11, RAM 12, and communication I / F 14. Are connected by a bus 15.

  The CPU 10 executes various computer programs loaded in the RAM 12. As a result, the computer 1 functions as the server device 1 of the present embodiment.

  The ROM 11 is configured by a mask ROM, PROM, EPROM (Erasable PROM), EEPROM (Electrically Erasable PROM), or the like, and stores a computer program executed by the CPU 10 and data used for the execution. Yes.

  The RAM 12 is configured by SRAM, DRAM, or the like. The RAM 12 is used for reading out various computer programs stored in the hard disk 13. Further, it is also used as a work area of the CPU 10 when the CPU 10 executes various computer programs.

  The hard disk 13 is preinstalled with various computer programs to be executed by the CPU 10, such as an operating system and application programs, and data used for executing the computer programs. Further, the hard disk 13 is provided with a user information database (DB) 13A in which user information related to the user is stored, and an authentication information database (DB) 13B in which authentication information used for authenticating the user is stored. It has been. Details of these databases will be described later.

  The hard disk 13 is installed with a multitask operating system such as Windows (registered trademark) manufactured and sold by Microsoft Corporation. In the following description, it is assumed that various computer programs operate on the operating system.

  The communication I / F 14 is an interface device for the server device 1 to communicate with an external device via the communication network NTW. The server device 1 transmits and receives various data to and from the client devices 2, 2,... And the mobile phones 3, 3,.

Hereinafter, details of each database provided in the hard disk 13 will be described.
(A) User information DB 13A
FIG. 3 is a diagram showing an example of the layout of the user information DB 13A provided in the server device 1 according to Embodiment 1 of the present invention. As shown in FIG. 3, the user information DB 13A includes a user ID field 101 in which a user ID for identifying a user is stored, and a first password that is predetermined by the user and used in the login process. 1 password field 102, account number field 103 in which the account number of the user's deposit account is stored, a second password that is predetermined by the user and is necessary for using various services after the login process (in this embodiment, A second password field 104 in which a four-digit number is stored, and an e-mail address field 105 in which an e-mail address that can be used by the mobile phone 3 carried by the user is stored. This user information DB 13A is formed based on the content that the user applied to the financial institution side, and the content is appropriately updated according to the user's application.

(B) Authentication information DB 13B
FIG. 4 is a diagram showing an example of the layout of the authentication information DB 13B provided in the server device 1 according to Embodiment 1 of the present invention. As shown in FIG. 4, the authentication information DB 13B has a user ID field 111 in which the user ID is stored, and the time when the server apparatus 1 generates key layout information and transmits it to the client apparatus 2 as described later. Issuance time field 112 in which issuance time is stored, and position information field 113 is stored in which position information indicating the position of the key selected for inputting the second password is stored. Details of the “key arrangement information” and “position information” will be described later.

[Configuration of client device]
Next, a detailed configuration of the client device 2 described above will be described.
FIG. 5 is a block diagram showing the configuration of the client device 2 according to Embodiment 1 of the present invention. As shown in FIG. 5, the computer (client device) 2 includes a CPU 20, a ROM 21, a RAM 22, a hard disk 23, an input / output interface (I / F) 24, an image output interface (I / F) 25, and a communication interface (I / F). The CPU 20, ROM 21, RAM 22, hard disk 23, input / output I / F 24, image output I / F 25, and communication I / F 26 are connected by a bus 27.

  The CPU 20 executes various computer programs loaded in the RAM 22. As a result, the computer 2 functions as the client device 2 of the present embodiment.

  The ROM 21 is configured by a mask ROM, PROM, EPROM (Erasable PROM), EEPROM (Electrically Erasable PROM), or the like, and stores a computer program executed by the CPU 20 and data used for the execution. Yes.

  The RAM 22 is configured by SRAM, DRAM, or the like. The RAM 22 is used for reading various computer programs stored in the hard disk 23. The CPU 20 is also used as a work area for the CPU 20 when executing various computer programs.

  The hard disk 23 is preinstalled with various computer programs to be executed by the CPU 20, such as an operating system and application programs, and data used for executing the computer programs. The installed computer program includes an information input program 23A for inputting information. The information input program 23A is downloaded from the server device 1 and installed on the hard disk 23 as will be described later.

  The hard disk 23 is installed with a multitask operating system such as Windows (registered trademark) manufactured and sold by Microsoft Corporation. In the following description, it is assumed that various computer programs operate on the operating system.

  The input / output I / F 24 is, for example, a serial interface such as USB, IEEE1394, or RS-232C, a parallel interface such as SCSI, IDE, or IEEE1284, and an analog interface including a D / A converter, an A / D converter, etc. It is composed of The input / output I / F 24 is connected to an input device 2A composed of a keyboard and a mouse. The user can input data to the computer 2 by operating the input device 2A.

  The image output I / F 25 is connected to a display 2B configured by an LCD, a CRT, or the like, and a video signal or the like corresponding to image data is given from the CPU 20 to the display 2B via the image output I / F 25. The display 2B displays an image (screen) according to a video signal or the like input from the CPU 20.

  The communication I / F 26 is an interface device for the client device 2 to communicate with an external device via the communication network NTW. The client device 2 transmits / receives various data to / from the server device 1 via the communication I / F 26.

[Operation of information input system]
Next, the operation of the information input system according to the first embodiment configured as described above will be described with reference to a flowchart and the like. The main processing executed by the information input system according to the present embodiment includes (1) information input preparation processing that is preprocessing for inputting information in the client device 2, and (2) the input password. There is a password authentication process that is executed based on the information. Details of each of these processes will be described below.

(1) Information Input Preparation Process In order to receive various services such as a transfer process provided by a financial institution, a user attempts to access the server apparatus 1 using the client apparatus 2. In this case, the following information input preparation process is executed by the server device 1, the client device 2, and the mobile phone 3.

  FIG. 6 is a flowchart showing a procedure of information input preparation processing executed by the server device 1, the client device 2, and the mobile phone 3 included in the information input system according to the present embodiment. The user operates the client device 2 to input a user ID and a first password necessary for logging in to the server device 1, and transmits login information including the user ID and the first password to the server device 1. The client apparatus 2 is instructed. The client apparatus 2 that has received the instruction transmits login information to the server apparatus 1 as shown in FIG. 6 (S101).

  When the server device 1 receives the login information transmitted from the client device 2 (S111), the server device 1 refers to the user information DB 13A, and the user ID and the first password included in the received login information are stored in the user information DB 13A. The login authentication process is executed by determining whether or not there is (S112). Here, when the login authentication fails, the server apparatus 1 transmits information indicating that the login authentication has failed because the user ID and / or the first password are different to the client apparatus 2. Here, description will be given below assuming that the login authentication is successful.

  Next, the server device 1 generates key arrangement information indicating the key arrangement of the software keyboard (S113). In the present embodiment, the software keyboard is a keyboard screen for inputting information on any number from 0 to 9, and is composed of a total of 10 keys. FIG. 7 is a diagram showing the concept of the software keyboard in the information input system of the present embodiment. In FIG. 7, a plurality of rectangular figures indicate each key, and are displayed on the outside of each key. The numbers assigned in order from 1 to 4 from the bottom to the top indicate the vertical position. Similarly, numbers assigned in order from 1 to 3 in the order from left to right indicate horizontal addresses indicating horizontal positions, respectively. The number displayed at the center of each key indicates the address of the key defined by the vertical address and the horizontal address. In step S113, the server apparatus 1 determines to which key 10 numbers from 0 to 9 are assigned. In this case, ten numbers are randomly assigned to each key by a known method using a random function or a random number table. The server device 1 generates key arrangement information by associating the numbers assigned to the keys in this way with the addresses of the keys.

  Various forms of the above key arrangement information can be considered. For example, the numbers 0 to 9 are addresses “12”, “42”, “33”, “32”, “23”, “43”, “22”, “21”, “41”, “31”. When assigned to each key, an array with 10 elements is prepared, and “12”, “42”, “33”, “32”, “23”, “43”, “22” are prepared in order from the first. , “21”, “41”, “31” may be used to express key layout information. Hereinafter, as in this example, in Step S113, the numbers 0 to 9 are assigned addresses “12”, “42”, “33”, “32”, “23”, “43”, “22”, “21”. The description will be continued assuming that the keys "41", "41", and "31" are assigned.

  After generating the key arrangement information in step S113, the server apparatus 1 generates a key arrangement screen indicating the key arrangement determined according to the key arrangement information, and generates an e-mail including the key arrangement screen (S114). ). Then, the server device 1 transmits the electronic mail to the mobile phone 3 of the logged-in user (S115). In this case, the server device 1 uses the email address for the user stored in the email address field 105 of the user information DB 13A.

  When the cellular phone 3 carried by the logged-in user receives the e-mail transmitted from the server device 1 (S121), the key arrangement screen included in the received e-mail is displayed on the display (S121). S122).

  FIG. 8 is a diagram illustrating an example of a key layout screen displayed on the display of the mobile phone 3 included in the information input system according to the present embodiment. As shown in FIG. 8, the key layout screen 301 has a keyboard 302 composed of a plurality of keys arranged in the same manner as shown in FIG. Any number from 0 to 9 is displayed on each key of the keyboard 302. In FIG. 8, as described above, the numbers 0 to 9 indicate the addresses “12”, “42”, “33”, “32”, “23”, “43”, “22”, “21”, “ An example of a key layout screen when assigned to each of the keys 41 "and" 31 "is illustrated.

  Returning to FIG. 6, after executing step S115, the server apparatus 1 transmits password input screen information including a password input screen for inputting the second password to the client apparatus 2 (S116). The password input screen includes a software keyboard that can accept input of information. This software keyboard is realized by, for example, a computer program (corresponding to the information input program 23A shown in FIG. 5) embedded in an HTML (HyperText Markup Language) document.

  Next, the server device 1 uses the user ID of the logged-in user, the time when the password input screen information is transmitted, and the location information indicating the address of each number constituting the second password of the user to obtain authentication information. The authentication information is generated and stored in the user ID field 111, the issue time field 112, and the position information field 113, respectively, thereby registering the authentication information in the authentication information DB 13B (S117). The position information is information indicating the position of the key selected for inputting the second password as described above, and is specifically information including the address of the key. For example, when the second password is “3210”, the addresses of the numbers “3”, “2”, “1”, “0” are “32”, “33”, “42”, “12”, respectively. Since there is (see FIG. 7 and FIG. 8), “32334212” connecting them is the position information.

  On the other hand, when receiving the password input screen information transmitted from the server device 1 (S102), the client device 2 displays the password input screen included in the received password input screen information on the display 2B (S103). At this time, the information input program 23A is executed in the client device 2.

  FIG. 9 is a diagram illustrating an example of a password input screen displayed on the display 2B of the client device 2 provided in the information input system according to the present embodiment. As shown in FIG. 9, the password input screen 201 includes a software keyboard 202 composed of a plurality of keys arranged in the same manner as shown in FIGS. 7 and 8, and a send button 203 for sending input information. Have. Each key of the software keyboard 202 is blank and does not represent a number. Each key of the software keyboard 202 is selected by the pointer 204 according to the operation of the input device 2A by the user.

  As a result of the information input preparation process, the user can input the second password using the client device 2. Next, password authentication processing will be described.

(2) Password Authentication Processing FIG. 10 is a flowchart showing a procedure for password authentication processing executed by the server device 1 and the client device 2 provided in the information input system according to the first embodiment of the present invention. As shown in FIG. 10, the client device 2 receives an input of the second password from the user (S201). Hereinafter, the input of the second password will be described in detail.

  When inputting the second password, the user first refers to the key layout screen 301 displayed on the display of the mobile phone 3 and corresponds to which key the four-digit number of the user's second password corresponds to. Make sure that Hereinafter, the description is continued assuming that the second password is “3210”. After referring to the key layout screen 301 in this manner, the user refers to the software keyboard 202 in the password input screen 201 displayed on the display 2B of the client device 2 and operates the input device 2A to perform the second operation. The keys corresponding to the password “3210” are selected in this order. Hereinafter, the selection procedure will be described with reference to FIGS. FIG. 11 is a diagram showing a key selection procedure when inputting the second password. FIGS. 11A to 11D are respectively selected by the software keyboard in the password input screen by the pointer 204. It shows how it is being done.

  The user confirms the position of the key of the first number “3” in the second password “3210” on the key layout screen 301. As a result, as shown in FIG. 8, it is confirmed that the key “3” is in the position of the third row from the bottom and the second row from the left. In this case, by operating the input device 2A, the user moves the pointer 204 to the key located at the third row from the bottom and the second row from the left on the software keyboard, and selects (see FIG. 11A). . Next, the user confirms on the key layout screen 301 that the position of the key “2” is the third row from the bottom and the third column from the left, and then operates the input device 2A to operate the software keyboard. In FIG. 11, the pointer 204 is set to the key at the position of the third row from the bottom and the third column from the left to select (see FIG. 11B). Subsequently, the user confirms that the position of the key “1” is the fourth row from the bottom and the second row from the left on the key layout screen 301, and similarly, the fourth row from the bottom and the left on the software keyboard. The pointer 204 is placed on the key in the position of the second column from the menu and selected (see FIG. 11C). Finally, the user confirms on the key layout screen 301 that the position of the “0” key is the first row from the bottom and the second row from the left, and similarly, the first row from the bottom and the left on the software keyboard. The pointer 204 is aligned with the key in the second column position from the menu (see FIG. 11D). With the above procedure, the second password “3210” is input.

  As described above, in the case of the present embodiment, since the second password is input using a software keyboard on which no number is displayed on each key, spyware for capturing and transmitting an image or spyware for recording a moving image. Etc. can be prevented from leaking to the outside even when the client apparatus 2 is set up.

  Returning to FIG. 10, when the client apparatus 2 accepts the input of the second password (S201), the client apparatus 2 generates key position information indicating the address of each key selected at the time of the input (S202). Specifically, in step S202, the client device 2 has “32”, “33” which are the addresses of the keys “3”, “2”, “1”, “0” constituting the second password. , “42”, “12” (see FIGS. 7 and 8), key position information consisting of “32334212” is generated. Thereafter, when the transmission button 203 in the password input screen 201 is pressed by the user, the client apparatus 2 transmits the key position information generated in this way to the server apparatus 1 (S203). Note that the above steps S201 to S203 are processes performed by the client device 2 executing the information input program 23A.

  When the server apparatus 1 receives the key position information transmitted from the client apparatus 2 (S211), the server apparatus 1 displays the time when the key position information is received and the issue time stored in the issue time field 112 of the authentication information DB 13B. By comparing and determining whether or not the difference between the two times is within a predetermined time (for example, within 5 minutes), it is determined whether or not password authentication is performed within the expiration date (S212). If it is determined that the expiration date has passed (NO in S212), the server device 1 transmits expiration information indicating that the expiration date has passed to the client device 2 (S213).

  When the client device 2 receives the expiration information transmitted from the server device 1 (S204), the client device 2 displays an expiration screen on the display 2B indicating that the password authentication expiration date has passed (S205). In this case, when the user wishes to input the second password again, the client device 2 is operated to transmit information indicating that to the server device 1. As a result, the server device 1 newly generates key arrangement information by executing step S113 in the information input preparation process shown in FIG. 6, and thereafter, the server device 1, the client device 2, and the mobile phone 3 The same processing as above is executed.

  If it is determined in step S212 that the password authentication is performed within the expiration date (YES in S212), the server apparatus 1 stores the key position information received in step S211 and the position information field 113 of the authentication information DB 13B. The stored position information is compared to determine whether or not they match (S214). If it is determined that they do not match (NO in S214), the server apparatus 1 transmits authentication failure information indicating that password authentication has failed to the client apparatus 2 (S215).

  When the client apparatus 2 receives the authentication failure information transmitted from the server apparatus 1 (S206), the client apparatus 2 displays an authentication failure screen indicating that password authentication has failed on the display 2B (S207). In this case, the client device 2 may accept the input of the second password again from the user (S201), and thereafter the same processing may be performed, and the process returns to the information input preparation processing as in the case where the expiration date has passed. Key arrangement information may be newly generated, and thereafter the same processing may be performed.

  If it is determined in step S214 that the key position information matches the position information in the authentication information DB 13B (YES in S214), the server apparatus 1 sends authentication success information indicating that password authentication has been successful to the client apparatus 2. It transmits to (S216).

  When the client device 2 receives the authentication success information transmitted from the server device 1 (S208), the client device 2 displays an authentication success screen indicating that the password authentication has been successful on the display 2B (S209). Thereafter, the server device 1 and the client device 2 execute known processes necessary for services provided by the financial institution such as a transfer process, using the user account number and the like stored in the user information DB 13A. become.

  As described above, in the case of the present embodiment, information indicating the second password itself is not transmitted from the client device 2 to the server device 1, but key position information indicating the key position is transmitted instead. For this reason, even if information transmitted from the client device 2 is intercepted during communication, the second password is not found and high security can be ensured.

  In addition, since the mobile phone is often carried at all times, the convenience can be improved by using the mobile phone 3 as an apparatus for presenting a key layout screen to the user as in this embodiment. it can.

(Embodiment 2)
The information input system according to the second embodiment is a system that can detect that confidential information such as a password may be leaked to the outside. The configuration and operation of the information input system according to this embodiment will be described below.

[Configuration of information input system]
The information input system according to the present embodiment also includes a server device, a client device, and a mobile phone as in the case of the first embodiment. Among these, the server apparatus is partially different in configuration. FIG. 12 is a block diagram showing a configuration of a server device included in the information input system according to Embodiment 2 of the present invention. As shown in FIG. 12, the server apparatus 100 according to the present embodiment includes a hard disk 13 as in the case of the server apparatus 1 according to the first embodiment, and the hard disk 13 has a configuration different from that in the first embodiment. Authentication information DB 13C is provided. Other configurations of the server device 100 are the same as those in the first embodiment, and thus the same reference numerals are given and description thereof is omitted. Hereinafter, a detailed configuration of the authentication information DB 13C will be described.

  FIG. 13 is a diagram showing an example of the layout of the authentication information DB 13C provided in the server device 100 provided in the information input system according to Embodiment 2 of the present invention. As shown in FIG. 13, the authentication information DB 13C has a user ID field 111, an issue time field 112, and a position information field 113, as in the case of the authentication information DB 13B in the first embodiment. It has a false position information field 114 in which false position information, which is the position information of, is stored. Details of the false position information will be described later.

[Operation of information input system]
Next, the operation of the information input system according to the second embodiment configured as described above will be described with reference to a flowchart and the like. Also in the present embodiment, as in the case of the first embodiment, (1) information input preparation processing and (2) password authentication processing are executed. Details of each of these processes will be described below.

(1) Information Input Preparation Process The information input system of the present embodiment executes the same process as the information input preparation process described above with reference to FIG. 6, but the process contents of steps S116 and S117 are different. Yes. More specifically, in step S116, the server apparatus 100 according to the present embodiment generates a password input screen including a software keyboard in which a dummy number is represented in each key, and a password input including the password input screen. The screen information is transmitted to the client device 2.

  FIG. 14 is a diagram showing an example of a password input screen displayed on the display 2B of the client device 2 provided in the information input system according to Embodiment 2 of the present invention. As shown in FIG. 14, each key of the software keyboard 202 included in the password input screen 211 is represented by any number from 0 to 9, unlike the case of the first embodiment shown in FIG. In step S116, the server apparatus 100 randomly determines which number is represented by which key.

  Further, in step S117, the server apparatus 100 generates false position information based on the key address on the software keyboard 202 on which the dummy number is represented, and stores this in the false position information field 114 of the authentication information DB 13C. To do. For example, when the second password is “3210”, the addresses of the numbers “3”, “2”, “1”, “0” are “43”, “42”, “23”, “22”, respectively. Therefore (see FIG. 7 and FIG. 14), “43432222” connecting them is generated as false position information.

  As described above, when the second password is “3210”, the false position information generated based on the software keyboard 202 of the password input screen 211 shown in FIG. 14 is “4342322”, while the key layout shown in FIG. The position information generated based on the screen 301 is “32334212”. These position information and false position information are stored in the authentication information DB 13C, and the information input preparation process ends.

  As will be described later, in the password authentication process, the server device 100 confirms whether the key position information transmitted from the client device 2 matches the fake position information. Here, if they match, the second password may be leaked by spyware or the like. If the user operating the client device 2 is authentic, the user inputs the second password based on the key layout on the key layout screen 301 shown in FIG. do not do. On the other hand, when the operator of the client apparatus 2 is an unauthorized person who has obtained the second password, the key layout screen 301 shown in FIG. 8 cannot be seen, and the software keyboard of the password input screen 211 shown in FIG. The second password is input based on the key arrangement of 202. Therefore, in this case, the key position information matches the false position information. Therefore, when the key position information matches the false position information, it means that there is an access from a person who obtained the second password illegally, and it is highly possible that the second password is leaked.

(2) Password Authentication Processing FIG. 15 is a flowchart showing a procedure of password authentication processing executed by the server device 100 and the client device 2 provided in the information input system according to the second embodiment of the present invention. Note that the processes other than steps S221 and S222 in FIG. 15 are the same as those in the first embodiment described above with reference to FIG. Hereinafter, steps S221 and S222 will be described.

  If it is determined in step S214 that the key position information does not match the position information in the authentication information DB 13C (NO in S214), the server apparatus 100 matches the key position information and the false position information in the authentication information DB 13C. It is determined whether or not to perform (S221). If it is determined that they do not match (NO in S221), the server apparatus 100 transmits authentication failure information indicating that password authentication has failed to the client apparatus 2 (S215). On the other hand, if it is determined that they match (YES in S221), the server apparatus 100 sends an email including password leakage information indicating that the second password may be leaked to the email address field of the user information DB 13A. By using the e-mail address stored in 103, the message is transmitted to the mobile phone 3 carried by the authentic user (S222). Thereby, the user can confirm that his / her second password may be leaked.

(Other embodiments)
In each of the above embodiments, an example in which the client device 2 that functions as an information input device is configured by a personal computer or the like is shown. However, the present invention is not limited to this, for example, in a financial institution or the like. It is also conceivable to use an ATM (Automated Teller Machine) provided as the client device 2. In this case, the ATM which is the client apparatus 2 and the server apparatuses 1 and 100 communicate with each other using a dedicated line or the like.

  As described above, when the client device 2 is an ATM, the second password is input by the touch panel instead of the mouse. In each of the above embodiments, the client device 2 is configured to download the information input program 23A from the server devices 1 and 100. If the client device 2 is an ATM, information is input to the client device 2. It is assumed that the program 23A is installed in advance.

  In each of the above embodiments, a software keyboard corresponding to a numeric keypad is used. However, it goes without saying that a software keyboard for inputting other characters such as alphabets may be used. Even in that case, the present invention can be realized in the same manner as in each of the above embodiments by assigning an address to each key.

  The information input method, information input system, information input device, and computer program of the present invention are useful as an information input method, information input system, information input device, computer program, etc. for inputting confidential information such as a password.

1,100 server device 10 CPU
11 ROM
12 RAM
13 Hard disk 13A User information DB
13B, 13C Authentication information DB
14 Communication Interface 15 Bus 2 Client Device 2A Input Device 2B Display 20 CPU
21 ROM
22 RAM
23 Hard Disk 23A Information Input Program 24 Input / Output Interface 25 Image Output Interface 26 Communication Interface 27 Bus 3 Mobile Phone NTW Communication Network

Claims (12)

In the information input method in which the client device communicably connected to the server device accepts selection of each key on a keyboard screen simulating a keyboard and transmits input information corresponding to the selection to the server device.
A first keyboard screen information transmitting step of transmitting first keyboard screen information indicating a first keyboard screen, which is a keyboard screen on which a specific character is displayed on each key, to a terminal device different from the client device;
A first keyboard screen display step in which the terminal device displays the first keyboard screen based on the first keyboard screen information;
The server device receives second keyboard screen information indicating a second keyboard screen, which is a keyboard screen in which characters displayed on each key of the first keyboard screen are not displayed on each key, with respect to the client device. A second keyboard screen information transmitting step for transmitting;
A second keyboard screen display step in which the client device displays the second keyboard screen based on the second keyboard screen information;
The client device accepts selection of each key on the second keyboard screen determined based on the display of each key on the first keyboard screen displayed on the terminal device, and inputs information corresponding to the selection. And an input information transmitting step for transmitting to the server device.   The information input method according to claim 1, wherein in the input information transmission step, the client device transmits key position information indicating a position of the selected key to the server device as the input information.   The said 2nd keyboard information transmission process WHEREIN: The said server apparatus transmits the 2nd keyboard screen information which shows the 2nd keyboard screen comprised with a blank key with respect to the said client apparatus. Information input method.   In the second keyboard information transmitting step, the server device displays a second keyboard screen showing a second keyboard screen in which characters having a key layout different from the first keyboard screen are displayed on each key for the client device. The information input method according to claim 1, wherein screen information is transmitted. A server device, a client device that is communicably connected to the server device, accepts selection of each key on a keyboard screen simulating a keyboard, and transmits input information corresponding to the selection to the server device; and the client In an information input system comprising a terminal device different from the device,
The server device is
First keyboard screen information transmitting means for transmitting first keyboard screen information indicating a first keyboard screen, which is a keyboard screen on which specific characters are displayed on each key, to the terminal device;
A second keyboard for transmitting, to the client device, second keyboard screen information indicating a second keyboard screen, which is a keyboard screen in which characters displayed on the keys of the first keyboard screen are not displayed on the keys. Screen information transmission means,
The terminal device is
First keyboard screen display means for displaying the first keyboard screen based on the first keyboard screen information;
The client device is
Second keyboard screen display means for displaying the second keyboard screen based on the second keyboard screen information;
Accepts selection of each key on the second keyboard screen determined based on the display of each key on the first keyboard screen displayed on the terminal device, and transmits input information corresponding to the selection to the server device An information input system comprising: an input information transmitting means.   The information input system according to claim 5, wherein the input information transmitting unit is configured to transmit key position information indicating a position of the selected key as the input information to the server device.   The said 2nd keyboard information transmission means is comprised so that the 2nd keyboard screen information which shows the 2nd keyboard screen comprised with a blank key with respect to the said client apparatus may be transmitted. The information input system described.   The second keyboard information transmission means transmits second keyboard screen information indicating a second keyboard screen in which characters having a key layout different from that of the first keyboard screen are displayed on each key to the client device. The information input system according to claim 5 or 6, wherein the information input system is configured as described above. In the information input device that is communicably connected to the server device, accepts selection of each key on a keyboard screen simulating a keyboard, and transmits input information corresponding to the selection to the server device.
Second keyboard screen information indicating a second keyboard screen, which is a keyboard screen having a key layout different from the first keyboard screen, which is a keyboard screen in which specific characters are displayed on each key displayed on an external terminal device. Second keyboard screen information receiving means for receiving from the server device;
Second keyboard screen display means for displaying the second keyboard screen based on the second keyboard screen information received by the second keyboard screen information receiving means;
Accepts selection of each key on the second keyboard screen determined based on the display of each key on the first keyboard screen displayed on the terminal device, and transmits input information corresponding to the selection to the server device An information input device comprising: an input information transmitting means.   The information input device according to claim 9, wherein the input information transmitting unit is configured to transmit key position information indicating a position of the selected key to the server device as the input information. A computer that is communicably connected to a server device, accepts selection of each key on a keyboard screen that simulates a keyboard, and transmits input information corresponding to the selection to the server device.
Second keyboard screen information indicating a second keyboard screen, which is a keyboard screen having a key layout different from the first keyboard screen, which is a keyboard screen in which specific characters are displayed on each key displayed on an external terminal device. Second keyboard screen information receiving means for receiving from the server device;
Second keyboard screen display means for displaying the second keyboard screen based on the second keyboard screen information received by the second keyboard screen information receiving means;
Accepts selection of each key on the second keyboard screen determined based on the display of each key on the first keyboard screen displayed on the terminal device, and transmits input information corresponding to the selection to the server device A computer program for functioning as input information transmitting means.   The computer program according to claim 11, wherein the input information transmitting unit is configured to transmit key position information indicating a position of the selected key to the server device as the input information.

Images