JP2012146153A - Authentication device and authentication method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To improve safety in user authentication at a low cost and prevent even a short password set with numerals and the like from being stolen and leaked.SOLUTION: A touch panel 23 displays plural input areas assigned with mutually different characters, numerals or symbols and detects a touch operation performed on each input area by a user. A storage unit 21 stores setting information on plural touch operations simultaneously performed on one of the plural input areas by the user. When the touch panel 23 detects the plural touch operations simultaneously performed on the one of the plural input areas, an authentication processing unit 24b compares the detected plural touch operations with the setting information and authenticates the user on the basis of a result of the comparison.

Description

  The present invention relates to an authentication apparatus and an authentication method for authenticating a user.

  Conventionally, a user authentication technique for authenticating whether or not a user is the user is widely used. In this user authentication technique, there is a method of allowing a user to input a predetermined password made up of letters, numbers, and symbols using an input device such as a keyboard. However, with this method, there is a risk that unauthorized access is easily made when the password is known to a third party. In addition, there is a method of performing user authentication based on biometric information such as a fingerprint, a face, and an iris of an eye. However, user authentication by this method has a problem of high cost.

  Patent Document 1 discloses an authentication method in which information input by simultaneously pressing a plurality of keys on a keyboard or the like is used as at least a part of authentication information in order to perform secure authentication. .

JP 2008-152757 A

  However, even if the prior art of Patent Document 1 is used, the information input as the password is a combination of numbers, so that the password is easily stolen or leaked, and once the password is stolen or leaked. , There was a risk that the password could be easily communicated to others by verbal or text. The risk is particularly high for short passwords.

  In view of the above problems, the present invention can enhance the security of user authentication at a low cost, and can prevent password theft and leakage even when a password set with letters, numbers, or symbols is short. An object is to provide an authentication device and an authentication method.

  In order to solve the above-described problem, a first technical means of the present invention is an authentication device for authenticating a user, and displays a plurality of input areas to which different characters, numbers, or symbols are assigned. A touch panel that detects a touch action performed by the user for each input area; a storage unit that stores setting information of a plurality of touch actions that the user performs simultaneously on one of the plurality of input areas; and the touch panel When the plurality of touch operations performed simultaneously on one of the plurality of input areas is detected, the detected plurality of touch operations are compared with the setting information, and the comparison result is obtained. And an authentication processing unit for authenticating the user.

  According to a second technical means of the present invention, in the first technical means, the authentication processing unit detects the plurality of touch operations performed simultaneously on one of the plurality of input areas a plurality of times by the touch panel. The comparison is performed for each of the plurality of touch operations detected a plurality of times.

  According to a third technical means of the present invention, in the first or second technical means, the authentication processing unit compares the number of touch operations performed simultaneously on one of the plurality of input areas. It is characterized by performing.

  According to a fourth technical means of the present invention, in any one of the first to third technical means, the authentication processing unit performs a plurality of touch operations simultaneously performed on one of the plurality of input areas. When the first place and the second place in one of the plurality of input areas are touched, the comparison is performed with respect to the relative position of the second place with respect to the first place. .

  According to a fifth technical means of the present invention, in any one of the first to fourth technical means, the authentication processing unit performs the plurality of touch operations performed simultaneously on one of the plurality of input areas. The comparison is performed on the area of the part touched by the user on the touch panel.

  According to a sixth technical means of the present invention, in any one of the first to fifth technical means, the authentication processing unit performs the plurality of touch operations performed simultaneously on one of the plurality of input areas. The comparison is performed for the duration of time that the touch panel is touched by the user.

  According to a seventh technical means of the present invention, in any one of the first to sixth technical means, the authentication processing unit includes a plurality of touches made simultaneously to one of the plurality of input areas, and The comparison is performed with respect to a time interval between touches made before a plurality of touches.

  An eighth technical means of the present invention is an authentication method for authenticating a user, wherein a display step of displaying a plurality of input areas to which different characters, numbers, or symbols are assigned on a touch panel, and the display step A detecting step for detecting a touch action performed by the user for each input area displayed in the memory, and a storage unit storing setting information for a plurality of touch actions performed simultaneously by the user for one of the plurality of input areas A plurality of touch operations detected when the plurality of touch operations performed simultaneously with respect to one of the plurality of input areas in the detection step are detected; , Comparing with the setting information read in the information reading step, and authenticating the user based on the comparison result Characterized by comprising an authentication step of performing, the.

  According to the present invention, a plurality of input areas to which different characters, numbers, or symbols are assigned are displayed on the touch panel, a touch action performed by the user for each displayed input area is detected, and a plurality of input areas are detected. The setting information is read from a storage unit that stores setting information of a plurality of touch operations performed by the user at the same time for one of the input areas, and a plurality of touch operations performed simultaneously on one of the plurality of input areas is detected In this case, a comparison is made between the detected touch operations and the read setting information, and user authentication is performed based on the comparison result. The password can be prevented from being stolen or leaked even when the password set with letters, numbers, or symbols is short.

It is a figure explaining an example of the authentication process which concerns on embodiment of this invention. It is a block diagram explaining the structure of the authentication apparatus which concerns on this embodiment. It is a figure which shows an example of a security code. It is a figure which shows an example of touch operation | movement detection information. It is a figure which shows an example of matching flag information. It is a figure explaining an example of the process sequence of the authentication process which concerns on this embodiment. It is a figure explaining an example of the process sequence of a code comparison process. It is a figure explaining an example of the process sequence of a code comparison process. It is a figure explaining an example of the process sequence of a touch button comparison process. It is a figure explaining an example of the process sequence of a touch relative position comparison process. It is a figure explaining an example of the process sequence of a touch continuation time comparison process. It is a figure explaining an example of the process sequence of a touch time space | interval comparison process. It is a figure explaining an example of the process sequence of a touch area comparison process.

  Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings. FIG. 1 is a diagram illustrating an example of authentication processing according to an embodiment of the present invention. FIG. 1 shows a case where the multi-touch display is touched four times by a user at the same time with a plurality of fingers or with one finger. A multi-touch display is a touch panel that can detect that a plurality of locations are touched simultaneously.

  Specifically, FIG. 1 shows a multi-touch display on which touch buttons that accept input of numbers “0” to “9” are displayed as part of a password ((a) of FIG. 1). In FIG. 1, the touch button “1” is touched with three fingers (FIG. 1B), and the touch button “5” is touched with two fingers ((c) in FIG. )), The touch button “3” is touched with one finger (FIG. 1D), and the touch button “8” is touched with two fingers (FIG. 1E). It is shown.

  In this authentication process, in addition to the number of touch buttons touched by the user, the number of fingers touching the touch button is detected, and when the detected information matches preset information, the user Authenticated as the person. That is, for the “1” touch button, three locations (FIG. 1B), for the “5” touch button, two locations (FIG. 1C), and for the “3” touch button, one location. ((D) in FIG. 1) For the touch button “8”, information that two places ((e) in FIG. 1) are touched is registered in advance, and as shown in FIG. ”,“ 5 ”,“ 3 ”and“ 8 ”when the user touches three places, two places, one place, two places with three fingers, two places, one place, two places, The user is authenticated as the principal.

  In this way, not only detecting the input number as a password, but also detecting a plurality of touch operations performed simultaneously by the user on one of the touch buttons, and performing user authentication based on the detection results In addition, the security of user authentication can be strengthened at a low cost, and even when a password set with numbers is short, the password can be prevented from being stolen or leaked. Although the input number is detected as a password here, a character or symbol may be assigned to the touch button and the character or symbol may be detected as a password.

  Next, the configuration of the authentication device 20 according to the present embodiment will be described. FIG. 2 is a block diagram illustrating the configuration of the authentication device 20 according to the present embodiment. The authentication device 20 includes a storage unit 21, a timing unit 22, a touch panel 23, a control unit 24, and an authentication result transfer unit 25.

  The storage unit 21 is a storage device such as a memory (RAM (Random Access Memory), flash memory, etc.) or a hard disk device. The storage unit 21 stores a security code 21a, touch motion detection information 21b, and match flag information 21c.

  The security code 21a is setting information for user authentication in which a touch operation performed by the user on the touch panel 23 is set. The touch panel 23 corresponds to a multi-touch display that displays the touch buttons shown as an example in FIG. The security code 21a corresponds to the setting information in the present invention. The information registered in the security code 21a is compared with the information about the touch action actually performed by the user, and when the information matches, the user is authenticated as the person himself / herself. Here, the touch operation includes both a pressing operation for pressing the touch panel 23 and a releasing operation for releasing the finger from the touch panel 23.

  FIG. 3 is a diagram illustrating an example of the security code 21a. As shown in FIG. 3, in the security code 21a, touch information number, group number, identification number, press / release information, touch button, X coordinate, Y coordinate, time, and touch area information are registered.

  Here, the touch information number is a number assigned to touch information including group number, identification number, press / release information, touch button, X coordinate, Y coordinate, time, and touch area information. The group number is a number assigned to a series of touch operations. A series of touch operations refers to one or more pressing operations performed between the time when the touch panel 23 is first pressed by a finger and all the fingers pressing the touch panel 23 leave the touch panel 23, and the pressing state. Is one or more release operations for releasing. When a plurality of positions on the touch panel 23 are simultaneously pressed by a plurality of fingers and then all the fingers move away from the touch panel 23, the same group number is assigned to the series of touch operations.

  For example, when only one place on the touch panel 23 is pressed and then the touch panel 23 is released from the pressed state, one group number is assigned to two pieces of generated touch information. In addition, when a plurality of locations on the touch panel 23 are pressed at the same time and all of the pressed locations are released, two pieces of touch information are generated for the pressing operation and the releasing operation at each location. The same group number is assigned to each piece of touch information generated in this way.

  The identification number is a number used to identify the touch operation at each location when a plurality of locations on the touch panel 23 are simultaneously pressed or released. The press / release information is information indicating whether the touch operation is a press operation or a release operation. In the example of FIG. 3, “1” represents a pressing operation, and “0” represents a release operation. The touch button is numerical information assigned to the touch button touched by the user. The X coordinate and the Y coordinate are coordinate values in a rectangular coordinate system (X, Y) of a place on the touch panel 23 touched by the user. For example, the X axis direction and the Y axis direction of the orthogonal coordinate system coincide with the horizontal direction and the vertical direction of the touch panel 23.

  The time is a relative time at which each touch operation is detected starting from the time when the touch operation with the touch information number “1”, which is the first touch operation, is detected. Here, after the touch operation with the touch information number “1” is detected, the touch operation with the touch information number “2” is detected after 0.10 seconds, and the touch information number “3” is detected after 0.14 seconds. An example when a touch operation is detected is shown. The touch area is information on the area of the area where the finger and the touch panel 23 come into contact when the touch panel 23 is pressed by the user. When the touch panel 23 is released from the pressed state (touch information numbers “4”, “5”, “6”, “9”, “10”, “12”, “15”, “16”). Case), the touch area information is not registered.

  Here, the security code 21a is set by receiving input from the user in advance before performing user authentication. Specifically, the touch operation detection unit 24a described later may cause the user to perform a series of touch operations and register information on the touch operation performed by the user as the security code 21a. In addition, the touch motion detection unit 24a causes the user to perform a series of touch motions a plurality of times, and the error between the touch information of the touch motions at each time is actually made by the user with the touch information registered in the security code 21a. It may be set as an allowable range when it is considered that the touch information about the touch operation matches. The touch information is registered in the security code 21a in order of time. If the times are the same, for example, the touch information with the smaller X coordinate or Y coordinate may be registered first. .

  Returning to the description of FIG. 2, the touch motion detection information 21b is data that stores information about the touch motion on the touch panel 23 performed by the user. Information registered in the touch motion detection information 21b is compared with information included in the security code 21a, and user authentication is performed based on a comparison result of whether or not the information matches.

  FIG. 4 is a diagram illustrating an example of the touch motion detection information 21b. As shown in FIG. 4, in the touch motion detection information 21b, touch information number, group number, identification number, press / release information, touch button, X coordinate, Y coordinate, time, touch area information are registered. .

  Touch information number, group number, identification number, press / release information, touch button, X coordinate, Y coordinate, time, touch area are the touch information number, group number, identification number, press / release information described in FIG. The touch button, the X coordinate, the Y coordinate, the time, and the touch area are the same information, but the information registered in the touch motion detection information 21b is the touch motion actually performed by the user when executing the user authentication. This information is different from the security code 21a. FIG. 4 shows the state of the touch motion detection information 21b after all touch motions have been performed, but touch information is added to the touch motion detection information 21b every time a touch motion is performed. The

  Returning to the description of FIG. 2, the match flag information 21 c is a flag indicating whether or not the user touch information stored as the security code 21 a matches the user touch information stored as the touch motion detection information 21 b. Information. FIG. 5 is a diagram illustrating an example of the match flag information 21c. As shown in FIG. 5, the match flag information 21c includes a touch information number, a group number, a touch button match flag, a touch number match flag, a touch relative position match flag, a touch duration match flag, and a touch time interval match flag. The information of the touch area coincidence flag is registered.

  The touch information number and the group number are information having the same contents as the touch information number and the group number described in FIG. As many touch information numbers as the number of touch information registered in the security code 21a (in the example of FIG. 3, the number of touch information is 16) are registered.

  The touch button match flag is used to execute user authentication when the information on the touch button registered in the security code 21a is compared with the information on the touch button registered in the touch motion detection information 21b. Is information indicating whether or not.

  The touch number coincidence flag matches the number of touch information registered in the security code 21a when a plurality of touch operations are simultaneously performed on the same touch button by the user. It is information indicating whether or not. For example, in the security code 21a shown in FIG. 3, the group with the group number “1” includes three pieces of touch information (touch) corresponding to the “press” touch operation performed simultaneously on the touch button “1”. If the touch numbers of the information numbers “1” to “3”) are registered, and the touch information corresponding to the touch action made by the user matches, the above three touch information is supported. In addition, “1” is registered in the touch count match flag.

  The touch relative position match flag is used to execute user authentication. When the touch relative position information obtained from the security code 21a and the touch relative position information obtained from the touch motion detection information 21b are compared, This is information indicating whether the information matches. Here, the information on the touch relative position obtained from the security code 21a is information on the relative position preset by the user, and the information on the touch relative position obtained from the touch motion detection information 21b is on the touch button. This is information on the relative position with respect to the reference position of the part touched by the user on the same touch button when a certain part touched by the user is set as the reference position.

  When the touch duration matching flag is used to perform user authentication, the touch duration information obtained from the security code 21a is compared with the touch duration information obtained from the touch motion detection information 21b. This is information indicating whether the information matches. Here, the information on the touch duration obtained from the security code 21a is information on the preset duration of the touch, and the information on the touch duration obtained from the touch motion detection information 21b is a touch button by the user. This is information on the time during which the state where the touch button was pressed is continued when is pressed.

  The touch time interval coincidence flag is used to execute user authentication. When the touch time interval information obtained from the security code 21a and the touch time interval information obtained from the touch operation detection information 21b are compared with each other, This is information indicating whether the information matches. Here, the information on the touch time interval obtained from the security code 21a is information on the touch time interval set in advance, and the information on the touch time interval obtained from the touch motion detection information 21b is a touch button by the user. Is the information of the time interval at which each touch was made when touched multiple times.

  The touch area coincidence flag executes user authentication, and therefore, when the touch area information obtained from the security code 21a and the touch area information obtained from the touch motion detection information 21b are compared, the information matches. This is information indicating whether or not it has been performed. Here, the information on the touch area obtained from the security code 21a is information on the area of the touch area set in advance, and the information on the touch area obtained from the touch motion detection information 21b is a touch button touched by the user. In this case, the touch panel 23 is information on the area of the area touched by the user's finger.

  FIG. 5 shows the state of the match flag information 21c after all the comparison processes have been performed. Here, the flag “1” indicates that the information matches. Before the comparison process is performed, all the flags are set to “0”, and the flags are updated to “1” when it is determined that the information matches.

  Further, since the touch buttons are compared when the touch panel 23 is pressed, the touch information generated when the touch panel 23 is released from the pressed state (touch information number is “4”). ”To“ 6 ”,“ 9 ”,“ 10 ”,“ 12 ”,“ 15 ”,“ 16 ”), the information is not registered in the touch button match flag. Similarly, regarding the touch match flag, information is not registered for touch information generated when the touch panel 23 is released from the pressed state.

  Also, no information is registered in the touch relative position match flags having the touch information numbers “1”, “7”, “11”, and “13”, but the touch information having these touch information numbers is the relative position. This is because the relative position is not calculated because it is information on the reference position when calculating. Note that touch information generated when the touch panel 23 is released (touch information numbers “4” to “6”, “9”, “10”, “12”, “15”, “16”). The touch relative position match flag information is registered for a certain touch information), because the relative position of the finger away from the touch panel 23 is also a comparison target.

  Further, since the touch duration time is compared when the touch panel 23 is released from the pressed state, touch information generated when the touch panel 23 is pressed (touch information number is “1”). -"3", "7", "8", "11", "13", "14" touch information), no information is registered in the touch duration matching flag.

  Further, the comparison of the touch time interval is performed when the touch panel 23 is pressed again after the touch panel 23 is released, so when the touch panel 23 is pressed first, Touch information generated when the touch panel 23 is in the released state (with touch information numbers “1” to “6”, “9”, “10”, “12”, “15”, “16”) No information is registered in the touch time interval match flag.

  Furthermore, since the comparison of the touch areas is performed when the touch panel 23 is pressed, touch information generated when the touch panel 23 is released (touch information numbers “4” to “6”). , “9”, “10”, “12”, “15”, “16”) is not registered in the touch area match flag.

  Returning to the description of FIG. 2, the timer unit 22 is a processing unit that measures time. The time measured by the time measuring unit 22 is used as time information in the touch information. The touch panel 23 is a display / input device that displays various information and receives a touch input from the user. The touch panel 23 is configured by, for example, a multi-touch display that can detect that a plurality of locations are touched simultaneously.

  Specifically, the touch panel 23 generates touch information registered in the touch motion detection information 21b illustrated in FIG. 4 when a touch motion is performed by the user. This touch information includes identification number, press / release information, touch button, X coordinate, Y coordinate, time, and touch area information.

  For example, the touch panel 23 sets the press / release information to “1” when the touch panel 23 is pressed by the user, and sets the press / release information to “0” when the touch panel 23 changes from the pressed state to the released state. To "". In addition, when the touch button is pressed by the user, the touch panel 23 detects a number assigned to the pressed touch button, and sets the detected number as touch button information in the touch information.

  Further, when the touch panel 23 is pressed by the user, the touch panel 23 detects the X coordinate and the Y coordinate of the pressed position, and when the touch panel 23 is released from the pressed state, the user's finger is touched. The X coordinate and Y coordinate of the part away from 23 are detected, and the detected information is set as the X coordinate and Y coordinate information in the touch information.

  In addition, when the touch panel 23 is pressed by the user or when the touch panel 23 is released from the pressed state, the touch panel 23 acquires time information from the time measuring unit 22, and the acquired time is included in the touch information. Set as time information. Furthermore, when the touch panel 23 is pressed by the user, the touch panel 23 detects a contact area between the finger and the touch panel 23 and sets the area as a touch area in the touch information.

  In addition, the touch panel 23 gives an identification number to each touch information. In that case, the touch panel 23 increases the identification number of the generated touch information by one each time the touch panel 23 is pressed by the user. When the user presses the touch panel 23 with a finger and then releases the finger from the touch panel 23, the touch panel 23 changes from the pressed state to the released state. The same identification number as the identification number of the touch information generated when the user presses the touch panel 23 with a finger is assigned to the generated touch information.

  Specifically, the touch panel 23 has the same group number as the touch information for the touch information generated for the touch operation in which the touch panel 23 is released, the X coordinate and the Y coordinate match, and The same identification number as the identification number of the touch information whose press / release information is “1” is assigned. Here, the touch panel 23 determines that the X coordinate and the Y coordinate match when the X coordinate difference and the Y coordinate difference are within a predetermined range.

  For example, in the example of FIG. 4, when the user presses the touch panel 23 with a finger, the touch information with the touch information number “2” is generated, and when the finger is subsequently released from the touch panel 23, the touch information number is “5”. ”Is generated. In this case, the group number is “1”, the X coordinate difference is 2 (= 131-129), the Y coordinate difference is 1 (= 93-92), and each is within a predetermined range (for example, ± 5). Touch information with the push / release information “1”, that is, the same identification number as the identification number “1” of the touch information with the touch information number “2”, and the touch with the touch information number “5” It is given to information.

  The control unit 24 is a control unit that controls the authentication apparatus 20 as a whole and controls data exchange between the functional units. The control unit 24 is configured by a processor such as a CPU (Central Processing Unit), for example. The control unit 24 includes a touch operation detection unit 24a and an authentication processing unit 24b.

  The touch operation detection unit 24a receives touch information output from the touch panel 23, assigns a touch information number and a group number to the received touch information, and stores the received touch information together with the touch information number and the group number. 21 is a processing unit that stores information as touch motion detection information 21b.

  Specifically, the touch operation detection unit 24a assigns a serial number to each touch information as a touch information number in the order in which the touch information is received from the touch panel 23. Further, the touch motion detection unit 24a assigns the same group number to each touch information every time a touch motion is detected in the touch motion detection information 21b shown in FIG. When the number of “0” becomes the same as the number of “1” registered in the press / release information, the group number assigned to the touch information of the touch action detected after that is increased by one.

  In the example of FIG. 4, the touch information with the touch information number “1” is given the group number “1”, and then the touch information with the touch information numbers “6”, “10”, and “12”. Since the number of “0” registered in the press / release information becomes the same as the number of “1” at the time when is registered in the touch motion detection information 21b, the touch information numbers are “7” to “10”. , “11” to “12” and “13” to “16” are assigned group numbers “2”, “3”, and “4”, respectively.

  The authentication processing unit 24b compares the information registered in the security code 21a with the information registered in the touch motion detection information 21b, and determines whether or not the information matches, thereby performing user authentication. It is a processing part to perform. The authentication processing unit 24b stores the determination result in the storage unit 21 as match flag information 21c. In addition, the authentication processing unit 24 b outputs authentication result information indicating whether or not the user is the user to the authentication result transfer unit 25.

  The authentication result transfer unit 25 receives authentication result information indicating whether or not the user is the user from the authentication processing unit 24b, and receives the received authentication result information from other devices that require execution of the user authentication process. It is a processing part to transfer to.

  Next, a processing procedure of authentication processing according to the present embodiment will be described. FIG. 6 is a diagram illustrating an example of a processing procedure of authentication processing according to the present embodiment. As shown in FIG. 6, first, the touch panel 23 of the authentication device 20 starts a detection process for detecting a touch operation performed by the user (step S101).

  Then, the touch operation detecting unit 24a determines whether or not the touch operation by the user has been detected by the touch panel 23 within a predetermined time (step S102). Specifically, the touch operation detection unit 24a performs the above determination by detecting whether or not touch information is received from the touch panel 23 within a predetermined time. When the touch operation is not detected within the predetermined time (NO in step S102), the authentication processing unit 24b determines that the user is not the person (step S113).

  Then, the authentication processing unit 24b determines whether authentication information is registered (step S114). Here, the authentication information is information registered in the touch motion detection information 21b or the match flag information 21c. If the authentication information is registered (YES in step S114), the authentication processing unit 24b deletes the authentication information (step S109). When the authentication information is not registered (NO in step S114), or after the process of step S109, the touch panel 23 displays the determination result, and the authentication result transfer unit 25 displays the determination result. (Step S110). Thereafter, this user authentication process ends.

  When the touch panel 23 detects a touch action within a predetermined time (YES in step S102), the touch action detection unit 24a registers touch information for the touch action detected this time in the touch action detection information 21b (step S103). ). When a plurality of touch operations are detected at the same time, the processes after step S103 are sequentially performed on the touch information for each touch operation.

  Thereafter, the touch motion detection unit 24a refers to the press / release information included in the touch information for the touch motion detected this time, and determines whether or not the touch motion detected this time is “press” (step S104). When the touch action detected this time is “press” (YES in step S104), the touch action detection unit 24a controls the touch panel 23 to display the input acceptance information on the touch panel 23 (step S105). Here, the input acceptance information is information indicating that the authentication device 20 has accepted a touch operation performed by the user pressing the touch panel 23. For example, in the example of FIG. 1, “*” marks correspond to the input acceptance information.

  If the touch action detected this time is “release” instead of “pressing” (NO in step S104), or if the process of step S105 is executed, the authentication processing unit 24b registers in the security code 21a. The code comparison process is performed for comparing the registered information with the information registered in the touch motion detection information 21b and registering the information in the match flag information 21c based on the comparison result (step S106). The code comparison process will be described in detail later with reference to FIGS.

  Thereafter, the authentication processing unit 24b determines whether or not the touch information registered in the security code 21a and the touch information registered in the touch motion detection information 21b all match (step S107). Specifically, the authentication processing unit 24b refers to the match flag information 21c shown in FIG. 5, and touch button match flag, touch number match flag, touch relative position match flag, touch duration match flag, touch time interval match. It is determined whether or not the flag and the touch area coincidence flag are all “1” in each touch information with the touch information number.

  Here, when touch information is not registered in the touch motion detection information 21b by the number of touch information registered in the security code 21a (in the example of FIG. 3, the number of touch information is 16), that is, the number of touch information. If only the touch operation on the touch panel 23 is not performed by the user, the authentication processing unit 24b determines in step S108 that all pieces of touch information do not match.

  Further, as will be described later with reference to FIG. 7, when the touch time interval comparison process is excluded from the user authentication process, the authentication processing unit 24 b uses a match flag other than the touch time interval match flag for each touch. It is determined whether or not all the information is “1”.

  When all touch operations for user authentication on the touch panel 23 are performed by the user and the touch information registered in the security code 21a and the touch information registered in the touch motion detection information 21b all match (YES in step S107) ), The authentication processing unit 24b determines that the user who touched the touch panel 23 is the person himself (step S108).

  Thereafter, the authentication processing unit 24b deletes the authentication information, that is, the touch motion detection information 21b and the match flag information 21c used for user authentication (step S109). Subsequently, the touch panel 23 displays the determination result, and the authentication result transfer unit 25 transfers the determination result to another device or the like (step S110). Then, this user authentication process ends.

  In step S107, when all the touch information registered in the security code 21a and the touch information registered in the touch motion detection information 21b do not match (NO in step S107), the authentication processing unit 24b It is determined whether or not the touch information registered in the code 21a and the touch information registered in the touch motion detection information 21b match up to the present time (step S111).

  That is, in the authentication processing unit 24b, the number of touch operations not registered by the user is the number of touch information registered in the security code 21a, and the number of touch information registered in the touch motion detection information 21b is stored in the security code 21a. When the touch information is less than the registered number, it is determined whether or not the touch information registered in the touch motion detection information 21b so far matches the touch information registered in the security code 21a.

  If the touch information is consistent up to the present time (YES in step S111), the process proceeds to step S102 and subsequent processing is executed to obtain touch information for the touch operation performed by the user. When the touch information up to the present time does not match (NO in step S111), the authentication processing unit 24b determines that the user who touched the touch panel 23 is not the person himself (step S112). Thereafter, the process proceeds to step S109, and the subsequent processing is executed.

  Next, the code comparison process shown in step S106 of FIG. 6 will be described in detail. 7 and 8 are diagrams for explaining an example of the procedure of the code comparison process. As shown in FIG. 7, first, the authentication processing unit 24b selects a group of touch information to be subjected to a comparison process with the touch information regarding the touch action detected this time from the touch information registered in the security code 21a. Select (step S201). Specifically, the authentication processing unit 24b touches the touch information registered in the security code 21a with the same touch information number as the touch information number attached to the touch information regarding the touch operation detected this time. Select the group that contains the information.

  For example, with reference to FIG. 3, when the touch information number of the touch information for the touch action detected this time is “1”, a group consisting of six touch information with the touch information numbers “1” to “6”. The group with the number “1” is selected. When the touch information number of the touch information for the touch action detected this time is “12”, the group number composed of the two touch information whose touch information numbers are “11” and “12” is “3”. Are selected.

  Thereafter, the authentication processing unit 24b determines whether or not the touch operation detected this time is “pressing” (step S202). If the touch action detected this time is “press” (YES in step S202), the authentication processing unit 24b selects the touch button information touched by the user in the touch action detected this time and the selection in step S201. A process of comparing the information of the touch button obtained from the touch information included in the group of the security code 21a is executed (step S203). This comparison process will be described in detail later with reference to FIG.

  Then, the authentication processing unit 24b determines whether or not the touch buttons match as a result of the touch button information comparison process (step S204). If the touch button information does not match (NO in step S204), as shown in FIG. 8, the code comparison process ends as it is, and the process proceeds to step S107 in FIG. 6, and the subsequent processes are executed. The If the touch button information matches (YES in step S204), the authentication processing unit 24b determines whether a plurality of pieces of touch information are registered in the touch motion detection information 21b (step S205).

  When a plurality of touch information is registered in the touch motion detection information 21b (in the case of YES in step S205), or in step S202, the touch motion detected this time is not “press” (in the case of NO in step S202). The authentication processing unit 24b compares the information on the relative position where the user touches the touch button with the information on the relative position obtained from the touch information included in the group of the security code 21a selected in step S201. It is determined whether or not these pieces of information match (step S206). This comparison process will be described in detail later with reference to FIG.

  Subsequently, the authentication processing unit 24b determines whether or not the touch operation detected this time is “release” (step S207). If the touch action detected this time is “release” (YES in step S207), the authentication processing unit 24b selects the information on the duration of the touch in which the pressed state is in the released state, and is selected in step S201. The information of the touch duration obtained from the touch information included in the group of the security code 21a is compared, and it is determined whether or not the information matches (step S208). This comparison process will be described later in detail with reference to FIG.

  Thereafter, the authentication processing unit 24b determines whether or not the touch operation detected this time is “pressing” performed after “release” (step S209). When the touch operation detected this time is “pressing” after “release” (YES in step S209), the authentication processing unit 24b touches until the touch operation changes from “release” to “press”. The time interval information is compared with the touch time interval information obtained from the touch information included in the group of the security code 21a selected in step S201, and it is determined whether or not the information matches. Step S210). This comparison process will be described in detail later with reference to FIG.

  In step S205, when a plurality of pieces of touch information are not registered in the touch motion detection information 21b (NO in step S205), in step S207, when the touch motion detected this time is not “release” (NO in step S207). 8), when the touch operation detected this time is not “pressing” after “release” in step S209 (NO in step S209), or when the process of step S210 is executed, as shown in FIG. As described above, the authentication processing unit 24b determines whether or not the touch operation detected this time is “pressing” (step S211). When the touch operation detected this time is “press” (in the case of YES in step S211), the authentication processing unit 24b includes information on the touch area of the location where the user touches the touch panel 23 in the touch operation detected this time. Then, the touch area information obtained from the touch information included in the group of the security code 21a selected in step S201 is compared, and it is determined whether or not the information matches (step S212). This comparison process will be described in detail later with reference to FIG.

  In step S211, when the touch operation detected this time is not “press” (in the case of NO in step S211) or when the process of step S212 is executed, the authentication processing unit 24b performs steps S203, S206, and step S206. It is determined whether or not only the touch time intervals compared in step S210 of the comparison processes in step S208, step S210, or step S212 are inconsistent (step S213). When only the touch time interval does not match (in the case of YES in step S213), the authentication processing unit 24b has reached the predetermined number of times that the touch time interval comparison processing is repeatedly executed because only the touch time interval does not match. It is determined whether or not (step S214). If only the touch time intervals do not match, the user performs a “press” touch operation twice and compares the touch time intervals again. Here, the number of times this touch time interval comparison processing has been performed exceeds a predetermined number. It is determined whether or not.

  When the number of times the touch time interval comparison process has been repeatedly executed does not reach the predetermined number because only the touch time intervals are inconsistent (NO in step S214), the touch panel 23 is inconsistent only in the touch time intervals. This is notified to the user (step S215). Specifically, the touch panel 23 displays a message indicating that only the touch time intervals do not match, and the user repeats a series of touch operations such as “press”, “release”, and “press”. Displays a message that instructs When the “press” touch operation included in the series of touch operations is a part of the plurality of touch operations in which the touch panel 23 is simultaneously pressed with a plurality of fingers, the touch panel 23 is configured to perform the plurality of touch operations. Display a message instructing the user to repeat.

  Thereafter, the authentication processing unit 24b deletes the authentication information (step S216). Specifically, the authentication processing unit 24b includes, in the touch motion detection information 21b illustrated in FIG. 4, a touch information of a group including touch information for the touch motion detected this time, a group having a group number one smaller than that group. And the information registered in the match flag information 21c corresponding to the touch information are deleted.

  For example, in the touch operation detection information 21b of FIG. 4, the touch time interval of the touch information with the touch information number “11” becomes inconsistent, and the touch time interval comparison process is executed, but the number of executions is still less than the predetermined number. If not, the authentication processing unit 24b includes each piece of touch information included in the group having the group number “3” corresponding to the touch information number “11” (touch information having the touch information number “11”. Then, the touch information with the touch information number “12” is not registered.) The touch information included in the group with the group number “2” (touch information with the touch information numbers “7” to “10”). ) And the information of each match flag whose touch information numbers registered in the match flag information 21c are “7” to “11”. Here, in addition to the touch information whose touch information number is “11”, the touch information of the group whose group number is “2” is deleted from the touch motion detection information 21b. This is because the corresponding touch operation is performed and the touch time intervals are compared.

  After the process of step S216, the process proceeds to step S102 of FIG. 6, and the subsequent processes are executed. Note that in the touch information registration processing in step S103, the touch motion detection unit 24a newly detects the touch motion so as to be the touch information number and the serial number of the touch information that has not been deleted from the touch motion detection information 21b. The touch information number is assigned to the touch information for.

  In step S214, when only the touch time interval is inconsistent and the number of times the touch time interval comparison process is repeatedly executed reaches a predetermined number (in the case of YES in step S214), the authentication processing unit 24b performs the touch time interval comparison. The process is set so as to be excluded from the match determination targets in steps S107 and S111 in FIG. 6 (step S217).

  In step S213, when there is mismatch information other than the touch time interval, or when there is no mismatch information (NO in step S213), when the process of step S217 is executed, this code comparison process is performed. , It ends as it is.

  As described above, although the touch button information, the touch relative position information, the touch time interval, and the touch area information match between the security code 21a and the touch motion detection information 21b, the user performs a predetermined touch motion. If the touch time interval cannot be reproduced well even if the number of times is repeated, and only the touch time interval information does not match, the user is authenticated as the user by excluding the touch time interval information from the user authentication judgment material. Therefore, the convenience for the user increases.

  Here, the touch time interval information is excluded from the match determination target, but the touch relative position, the touch duration time, and the touch area information may be excluded from the match determination target. Further, here, when only the information of the touch time interval does not match between the security code 21a and the touch motion detection information 21b, a series of touch operations of the latest “press”, “release”, and “press” are performed by the user. However, the user may repeat the operation from the first touch operation registered in the security code 21a.

  Next, the touch button comparison process shown in step S203 of FIG. 7 will be described in detail. FIG. 9 is a diagram illustrating an example of a processing procedure of touch button comparison processing. As shown in FIG. 9, first, the authentication processing unit 24b has the same touch information and press / release information for the touch action detected this time from the group of security codes 21a selected in step S201 of FIG. As a touch button match flag, “1” is selected as one touch information not registered in the match flag information 21c (step S301). This touch button comparison process is a process that is performed when the touch action detected this time is “press” in step S202 of FIG. 7, so that the press / release information is “1” from the selected group. The touch information that is is selected.

  After that, the authentication processing unit 24b acquires the touch button information in the touch information selected in step S301 and the touch button information in the touch information regarding the touch operation detected this time (step S302). Then, the authentication processing unit 24b determines whether or not the touch button in the touch information selected in step S301 matches the touch button in the touch information regarding the touch operation detected this time (step S303).

  If the touch buttons do not match (NO in step S303), the authentication processing unit 24b selects the touch information selected in step S301 among the touch information included in the group of the security code 21a selected in step S201 in FIG. It is determined whether there is touch information in which the press / release information is the same “1”, the identification number is different, and “1” is not registered in the match flag information 21c as the touch button match flag (step S307). ).

  When the touch information selected in step S301 is the same “1” as the press / release information, the identification number is different, and “1” is not registered in the match flag information 21c as the touch button match flag. (In the case of YES at step S307), the process proceeds to step S301, where the touch information is selected, and the processes after step S302 are executed on the selected touch information. When the touch information selected in step S301 is the same “1” as the press / release information, the identification number is different, and there is no touch information in which “1” is not registered in the match flag information 21c as the touch button match flag (In the case of NO in step S307), this touch button comparison process is ended as it is.

  If the touch buttons match in step S303 (YES in step S303), the authentication processing unit 24b matches the touch button match flag indicating that the touch buttons match with the touch information number of the touch information. Register in the flag information 21c (step S304). For example, the authentication processing unit 24b touches the touch button “1” having the touch information number “1” in the touch motion detection information 21b illustrated in FIG. 4 and the touch information having the touch information number “1” in the security code 21a. Therefore, “1” is registered in the touch button match flag corresponding to the touch information number “1” of the match flag information 21c.

  Thereafter, the authentication processing unit 24b compares the security code 21a shown in FIG. 3 with the touch motion detection information 21b shown in FIG. 4, and in the group including the touch information of the touch motion detected this time, for the same touch button It is determined whether or not the number of “pressing” touch actions simultaneously performed by the user matches the number of “pressing” touch actions obtained from the security code 21a (step S305).

  For example, in the group with the group number “1” in the security code 21 a shown in FIG. 3, the touch / release information is “1” and the touch button is “1”, and the touch information (touch information number is “1”). To touch information “3”) is registered. In addition, in the group with the group number “1” in the touch motion detection information 21b illustrated in FIG. 4, three pieces of touch information with the press / release information “1” and the touch button “1” (touch information number “1”). ”To“ 3 ”touch information) is registered. In this case, since the number of “pressing” touch operations is the same between the two groups, the authentication processing unit 24b sets the touch number matching flag for touch information having touch information numbers “1” to “3” to “ 1 ”is registered.

  In step S305, the number of “pressing” touch operations simultaneously performed by the user for the same touch button does not match the number of “pressing” touch operations obtained from the security code 21a (in the case of NO in step S305). Alternatively, when the process of step S306 ends, the touch button comparison process ends.

  As described above, in the authentication process, user authentication is performed using not only the number input by the user pressing the touch button but also the number of touch operations performed simultaneously on the same touch button by the user. Thereby, the safety of user authentication can be strengthened at a low cost, and even when the password set with numbers or the like is short, the password can be prevented from being stolen or leaked.

  Next, the touch relative position comparison process shown in step S206 of FIG. 7 will be described in detail. FIG. 10 is a diagram for explaining an example of the processing procedure of the touch relative position comparison processing. As shown in FIG. 10, first, the authentication processing unit 24b has the same touch information and press / release information for the touch action detected this time from the group of security codes 21a selected in step S201 of FIG. As a touch relative position match flag, “1” is selected as one touch information that is not registered in the match flag information 21c (step S401).

  For example, referring to FIG. 3, when the touch information number of the touch information for the touch action detected this time is “2” and the press / release information is “1”, the authentication processing unit 24b Touch information with the same touch information number “1” with the same press / release information is selected from the group with the group number “1” of 21a. Here, it is assumed that “1” is not registered in the match flag information 21c as the touch relative position match flag for the touch information with the touch information number “1”.

  When “1” is registered in the match flag information 21c as the touch relative position match flag for the touch information with the touch information number “1”, the authentication processing unit 24b determines that the touch information number is “ 2 ”touch information is selected. Even for the touch information with the touch information number “2”, if “1” is registered in the match flag information 21c as the touch relative position match flag, the authentication processing unit 24b has the touch information number “3”. Touch information is selected.

  Then, the authentication processing unit 24b determines whether or not the touch operation detected this time is the first touch operation on the touch button on which the touch operation has been performed (step S402). Specifically, the authentication processing unit 24b determines whether or not the touch information for the touch motion detected this time is the first touch information registered in each group in the touch motion detection information 21b of FIG.

  When the touch operation detected this time is the first touch operation on the touch button on which the touch operation has been performed (YES in step S402), the authentication processing unit 24b determines the X coordinate of the touch information corresponding to the touch operation. , Y coordinates are set as reference values for calculating the relative position (step S403). Thereafter, the touch relative position comparison process ends.

  When the touch operation detected this time is not the first touch operation for the touch button on which the touch operation has been performed (NO in step S402), the authentication processing unit 24b presses down the touch button in the touch operation detected this time. The relative value of the coordinates of the place where the touch button is pressed or the place where the touch button is released is calculated (step S404).

  Specifically, the authentication processing unit 24b belongs to the same group as the touch information from the X coordinate and the Y coordinate included in the touch information regarding the touch operation detected this time, and the coordinate value is set as the reference value in step S403. X coordinate in the set touch information (for example, touch information whose touch information number is “1”, “7”, “11”, or “13” in the touch motion detection information 21b shown in FIG. 4), Y The relative value is calculated by subtracting the coordinates.

  Subsequently, the authentication processing unit 24b calculates the relative values of the X coordinate and the Y coordinate of the touch information of the security code 21a to be compared with the touch information for the touch operation detected this time (step S405). Specifically, in the security code 21a shown in FIG. 3, the authentication processing unit 24b belongs to the same group as the selected touch information from the X coordinate and Y coordinate of the touch information selected in step S401, and the touch information X coordinate of the touch information with the smallest number (for example, when the group number of the touch information selected in step S401 is “2”, the touch information number of the touch information number of the security code 21a shown in FIG. 3 is “7”) The relative value is calculated by subtracting the Y coordinate and the Y coordinate, respectively.

  Thereafter, the authentication processing unit 24b determines the difference between the relative value calculated in step S404 and the relative value calculated in step S405 for the X coordinate, and the relative value calculated in step S404 and the relative value calculated in step S405 for the Y coordinate. It is determined whether or not the difference in value is within a predetermined range (step S406).

  If the relative value difference for the X coordinate or the relative value difference for the Y coordinate is not within the predetermined range (NO in step S406), the authentication processing unit 24b is selected in step S201 of FIG. Among the touch information included in the group, the touch information selected in step S401 is the same as the press / release information, the identification number is different, and “1” is registered in the match flag information 21c as the touch relative position match flag. It is determined whether there is any touch information (step S408).

  For example, with reference to FIG. 3, for touch information with the press / release information “1”, the identification number “0”, and the touch information number “7”, the difference in relative value with respect to the X coordinate, or When it is determined that the relative value difference for the Y coordinate is not within the predetermined range, the authentication processing unit 24b presses / releases the touch information included in the group having the group number “2”. It is determined whether or not the information is “1”, the identification information is “1”, and the match flag information 21c illustrated in FIG. 5 includes touch information whose touch relative position match flag is “0”. In the case of the example of FIG. 3, since the touch information with the touch information number “8” matches the above condition, the authentication processing unit 24b determines that there is touch information that matches the above condition.

  When the touch information selected in step S401 is the same as the press / release information, the identification number is different, and there is touch information in which “1” is not registered in the match flag information 21c as the touch relative position match flag (in step S408) In the case of YES), the process proceeds to step S401, where the touch information is selected, and the processes after step S402 are executed on the selected touch information. When the touch information selected in step S401 is the same as the press / release information, the identification number is different, and there is no touch information in which “1” is not registered in the match flag information 21c as the touch relative position match flag (in step S408) In the case of NO), the relative position comparison process is finished as it is.

  In step S406, if the difference between the relative values for the X coordinate and the difference between the relative values for the Y coordinate are within predetermined ranges (YES in step S406), the authentication processing unit 24b determines that the relative position is A touch relative position coincidence flag “1” indicating coincidence is registered in the coincidence flag information 21c in association with the touch information number (step S407).

  For example, in the touch motion detection information 21b of FIG. 4, when the touch information whose touch information number is “8” is touch information for the touch motion detected this time, the relative value of the X coordinate of the touch information is 18 (= 228-210), the relative value of the Y coordinate is −20 (= 189−209). Further, in the security code 21a of FIG. 3, the relative value of the X coordinate of the touch information whose touch information number is “8” is 18 (= 217 to 199), and the relative value of the Y coordinate is −21 (= 202 to 223). It becomes. Therefore, the difference in the relative value for the X coordinate between the touch motion detection information 21b and the security code 21a is 0 (= 18-18), and the difference in the relative value for the Y coordinate is 1 (= −20 − (− 21)).

  When the predetermined range in step S304 is ± 5, the relative value difference 0 for the X coordinate and the relative value difference 1 for the Y coordinate are within this range. In association with “8”, “1” is registered as the touch relative position coincidence flag of the coincidence flag information 21c. Thereafter, the relative position comparison process ends.

  Thus, by performing user authentication using not only the number input by the user pressing the touch button but also the information on the relative position of the part touched by the user on the same touch button, the cost can be reduced. The security of user authentication can be strengthened, and even when a password set with a number input by a touch button is short, the password can be prevented from being stolen or leaked.

  Next, the touch duration comparison process shown in step S208 of FIG. 7 will be described in detail. FIG. 11 is a diagram for explaining an example of a processing procedure of the touch duration comparison process. As shown in FIG. 11, first, the authentication processing unit 24b has the same touch information and press / release information for the touch action detected this time from the group of security codes 21a selected in step S201 of FIG. Then, one touch information whose “1” is not registered in the match flag information 21c is selected as the touch duration matching flag (step S501). This touch duration comparison process is a process that is performed when the touch action detected this time is “release” in step S207 of FIG. 7, so that the press / release information from the selected group is “0”. ”Is selected.

  Thereafter, the authentication processing unit 24b calculates the touch duration for the touch operation detected this time (step S502). Specifically, the authentication processing unit 24b includes, in the touch motion detection information 21b illustrated in FIG. 4, the touch information and the identification number for the touch motion detected this time in the group including the touch information for the touch motion detected this time. Touch information that is the same and has different press / release information is selected, and the touch duration time is calculated by subtracting the time of the selected touch information from the time of the touch information for the touch action detected this time.

  For example, in the touch motion detection information 21b shown in FIG. 4, when the touch information number of the touch information for the touch motion detected this time is “6”, the authentication processing unit 24b touches the touch information number “6”. Among the groups having the group number “1” including the information, the touch information number having the same identification number “2” as the touch information and the press / release information “1” different from the touch information is “3”. Select touch information. Then, by subtracting the time 5.19 of the touch information with the touch information number “3” from the time 6.11 of the touch information with the touch information number “6”, the touch duration time is calculated as 0.92.

  Similarly, the authentication processing unit 24b calculates the touch duration time of the touch information of the security code 21a to be compared with the touch information for the touch action detected this time (step S503). Specifically, the authentication processing unit 24b belongs to the group having the same group number as the touch information selected in step S501, has the same identification number as the touch information selected in step S501, and has the press / release information. Touch information of “1” is selected, and the touch duration time is calculated by subtracting the time of the touch information having the selected press / release information of “1” from the time of the touch information selected in step S501.

  For example, in the security code 21a shown in FIG. 3, when the touch information number of the touch information selected in step S501 is “6”, the authentication processing unit 24b includes a group including touch information whose touch information number is “6”. In the group with the number “1”, the touch information with the same identification number “2” as the touch information and the touch information number “3” with the press / release information “1” different from the touch information is selected. To do. Then, by subtracting the time 0.14 of the touch information with the touch information number “3” from the time 1.19 of the touch information with the touch information number “6”, the touch duration time is calculated as 1.05.

  Then, the authentication processing unit 24b determines whether or not the difference between the touch duration calculated in step S502 and the touch duration calculated in step S503 is within a predetermined range (step S504). If the difference in touch duration is not within the predetermined range (NO in step S504), the authentication processing unit 24b is selected in step S501 from the touch information included in the group selected in step S201 in FIG. It is determined whether there is touch information in which the touch information and the press / release information are the same “0”, the identification numbers are different, and “1” is not registered in the match flag information 21c as the touch duration match flag. (Step S506).

  There is touch information in which the touch information selected in step S501 is the same “0” as the press / release information, the identification number is different, and “1” is not registered in the match flag information 21c as the touch duration match flag. In the case (YES in step S506), the process proceeds to step S501, where the touch information is selected, and the processing after step S502 is executed on the selected touch information. The touch information selected in step S501 is the same “0” as the press / release information, the identification number is different, and there is no touch information in which “1” is not registered in the match flag information 21c as the touch duration match flag. If this is the case (NO in step S506), the touch duration comparison process is terminated as it is.

  In step S504, if the difference in touch duration is within a predetermined range (YES in step S504), the authentication processing unit 24b indicates that the touch duration match flag of “1” indicating that the touch duration matches. Is registered in the match flag information 21c in association with the touch information number (step S505).

  For example, in the touch motion detection information 21b shown in FIG. 4, the touch duration in the touch information with the touch information number “6” is 0.92, and in the touch information with the touch information number “6” in the security code 21a. If the touch duration is 1.05, the difference is −0.13 (= 0.92−1.05).

  When the predetermined range in step S504 is ± 0.4, the difference in touch duration is within this range, so the authentication processing unit 24b associates “1” with the touch information number “6” of the touch information. Is registered in the touch duration match flag of the match flag information 21c. Thereafter, the touch duration comparison process ends.

  Thus, by performing user authentication using not only the number input by the user pressing the touch button but also information on the duration of the pressed state, the safety of user authentication can be enhanced at a low cost. Even if the password set by the numbers input by the touch buttons is short, the password can be prevented from being stolen or leaked.

  Next, the touch time interval comparison process shown in step S210 of FIG. 7 will be described in detail. FIG. 12 is a diagram illustrating an example of a processing procedure of touch time interval comparison processing. As shown in FIG. 12, first, the authentication processing unit 24b has the same touch information and press / release information for the touch action detected this time from the group selected in step S201 of FIG. One touch information having “1” not registered in the match flag information 21c is selected as the match flag (step S601). This touch time interval comparison process is a process performed when the touch operation detected this time is “press” in step S209 of FIG. 7, and therefore the press / release information is “1” from the selected group. ”Is selected.

  Thereafter, the authentication processing unit 24b calculates a touch time interval for the touch operation detected this time (step S602). Specifically, the authentication processing unit 24b includes, among the touch information included in the group whose group number is one smaller than the group including the touch information for the touch motion detected this time in the touch motion detection information 21b illustrated in FIG. By selecting touch information that is different from the touch information for the touch action detected this time and the press / release information, and subtracting the time of the selected touch information from the time of the touch information for the touch action detected this time, the touch time Calculate the interval.

  For example, in the touch motion detection information 21b illustrated in FIG. 4, when the touch information number of the touch information for the touch motion detected this time is “11”, the authentication processing unit 24b has the touch information number “11”. Of the group having the group number “2” whose group number is one smaller than the group including the touch information, the touch information number having “0” press / release information different from the touch information for the touch operation detected this time is “9”. ”,“ 10 ”, and the touch time interval is calculated by subtracting the time 7.86, 8.06 of the selected touch information from the time 9.12 of the touch information for the touch action detected this time. Is calculated as 1.26 (= 9.12−7.86) and 1.06 (= 9.12−8.06).

  Similarly, the authentication processing unit 24b calculates the touch time interval of the security code 21a to be compared with the touch information for the touch action detected this time (step S603). Specifically, the authentication processing unit 24b differs from the touch information selected in step S601 among the touch information included in the group having a group number one smaller than the group to which the touch information selected in step S601 belongs. The touch duration is obtained by selecting the touch information having the press / release information of “0” and subtracting the time of the touch information having the selected press / release information of “0” from the time of the touch information selected in step S601. Is calculated.

  For example, in the security code 21a shown in FIG. 3, when the touch information number of the touch information selected in step S601 is “11”, the authentication processing unit 24b includes the group to which the touch information whose touch information number is “11” belongs. Among touch information included in the group having the group number “3” that is one smaller than the touch information number having “0” press / release information different from the touch information selected in step S601 is “9”. , “10” touch information is selected. The touch duration time is calculated by subtracting the time 2.83 and 2.98 of the touch information with the touch information numbers “9” and “10” from the time 4.06 of the touch information with the touch information number “11”. Is calculated as 1.23 (= 4.06-2.83) and 1.08 (= 4.06-2.98).

  Then, the authentication processing unit 24b determines whether or not the difference between the touch time interval calculated in step S602 and the touch time interval calculated in step S603 is within a predetermined range (step S604). If the difference in touch time interval is not within the predetermined range (NO in step S604), the authentication processing unit 24b is selected in step S601 from the touch information included in the group selected in step S201 in FIG. It is determined whether there is touch information in which the touch information and the press / release information are the same “1”, the identification number is different, and “1” is not registered in the match flag information 21c as the touch time interval match flag. (Step S606).

  The touch information selected in step S601 and the press / release information are the same “1”, the identification number is different, and there is touch information in which “1” is not registered in the match flag information 21c as the touch time interval match flag. In the case (YES in step S606), the process proceeds to step S601, where the touch information is selected, and the processes after step S602 are executed on the selected touch information. The touch information selected in step S601 and the press / release information are the same “1”, the identification number is different, and there is no touch information in which “1” is not registered in the match flag information 21c as the touch time interval match flag. If this is the case (NO in step S606), the touch time interval comparison process ends as it is.

  In step S604, if the difference in touch time interval is within a predetermined range (YES in step S604), the authentication processing unit 24b displays a touch time interval match flag indicating that the touch time interval has been matched with the touch information. It is registered in the match flag information 21c in association with the number (step S605).

  For example, in the touch motion detection information 21b shown in FIG. 4, the touch time interval in the touch information with the touch information number “11” is 1.26, 1.06, and the touch information number is “11” in the security code 21a. When the touch time interval in the touch information is 1.23, 1.08, the difference is 0.03 (= 1.26-1.23), 0.18 (= 1.26-1.08), -0.17 (= 1.06-1.23), -0.02 (= 1.06-1.08).

  When the predetermined range in step S604 is ± 0.4, the difference in the touch time interval is within this range, so the authentication processing unit 24b associates “1” with the touch information number “11” of the touch information. Is registered in the touch time interval match flag of the match flag information 21c. Thereafter, the touch time interval comparison process ends.

  In this way, user authentication is performed by using not only the number input by the user pressing the touch button but also information on the time interval at which the user touches the touch button, thereby reducing the safety of user authentication. The password can be strengthened, and even when the password set by the number input by the touch button is short, the password can be prevented from being stolen or leaked.

  Next, the touch area comparison process shown in step S212 of FIG. 8 will be described in detail. FIG. 13 is a diagram for explaining an example of the processing procedure of the touch area comparison processing. As shown in FIG. 13, first, the authentication processing unit 24 b selects the same touch information for the touch action detected this time from the group selected in step S201 of FIG. One piece of touch information whose flag is “1” that is not registered in the match flag information 21c is selected (step S701). This touch area comparison process is a process that is performed when the touch action detected this time is “press” in step S211 of FIG. 8, so that the press / release information is “1” from the selected group. The touch information that is is selected.

  Thereafter, the authentication processing unit 24b acquires the touch area information in the touch information selected in step S701 and the touch area information in the touch information regarding the touch operation detected this time (step S702). Then, the authentication processing unit 24b determines whether or not the difference between the touch area in the touch information selected in step S701 and the touch area in the touch information regarding the touch operation detected this time is within a predetermined range. (Step S703).

  If the touch area difference is not within the predetermined range (NO in step S703), the authentication processing unit 24b is selected in step S701 from the touch information included in the group selected in step S201 in FIG. It is determined whether there is touch information in which the touch information and the press / release information are the same “1”, the identification number is different, and “1” is not registered in the match flag information 21c as the touch area match flag. (Step S705).

  When the touch information selected in step S701 and the press / release information are the same “1”, the identification number is different, and there is touch information in which “1” is not registered in the match flag information 21c as the touch area match flag. (In the case of YES in step S705), the process proceeds to step S701, where the touch information is selected, and the processing after step S702 is executed on the selected touch information. When the touch information selected in step S701 and the press / release information are the same “1”, the identification number is different, and there is no touch information in which “1” is not registered in the match flag information 21c as the touch area match flag. (In the case of NO in step S705), the touch area comparison process is terminated as it is.

  In step S703, if the difference in touch area is within a predetermined range (YES in step S703), the authentication processing unit 24b displays a touch area match flag indicating that the touch areas match in the touch information touch. It is registered in the match flag information 21c in association with the information number (step S704). For example, the authentication processing unit 24b touches the touch area 11 of the touch information whose touch information number is “1” in the touch motion detection information 21b shown in FIG. 4 and the touch information whose touch information number is “1” in the security code 21a. Since the difference 2 (= 11−9) from the area 9 is within a predetermined range of ± 2, “1” is registered in the touch area coincidence flag corresponding to the touch information number “1” of the coincidence flag information 21c. Thereafter, the touch area comparison process ends.

  In this way, user authentication is performed at low cost by performing user authentication using not only the number input by the user pressing the touch button but also information on the area of the area touched by the user. In addition, the password can be prevented from being stolen or leaked even when the password set by the numbers input by the touch buttons is short.

  In the above authentication process, the authentication processing unit 24b completes the user authentication when the user reproduces all the touch information registered in the security code 21a illustrated in FIG. A touch area for allowing the user to explicitly input the completion of the touch operation may be provided on the touch panel 23, and the touch operation for the touch area may be included in the user authentication target. In this case, the authentication processing unit 24b detects that the user has reproduced all the touch information registered in the security code 21a illustrated in FIG. 3 by the touch operation at the time of user authentication, and then the touch area is touched by the user. If the touch area is detected, it is determined that the user is the person himself / herself. If the touch area is not touched by the user, the authentication processing unit 24b determines that the user is not the person.

  In the authentication process, the case where the touch relative position comparison process, the touch duration comparison process, the touch time interval comparison process, and the touch area comparison process are all performed has been described. However, these comparison processes should be excluded from the authentication process. It is good.

  Furthermore, in the authentication process, when the touch information for the touch operation detected by the touch panel 23 is compared with the security code 21a shown in FIG. 3, the touch information to be compared is selected using the identification number. However, it is good also as selecting a comparison object based on a coordinate value, without using an identification number. In this case, in each group of the security code 21a, each touch information whose pressing / release information is “1” is registered in order of a short distance from the origin of the XY coordinate system, and behind that, the pressing / release information is “ Each piece of touch information that is “0” is registered in ascending order of the distance from the origin of the XY coordinate system.

  For example, in the example of FIG. 3, the touch information with the touch information number “1” has an X coordinate of 97 and a Y coordinate of 117, so the distance from the origin is 152.0, and the touch information number is “2”. ”Is 121 with the X coordinate and 101 with the Y coordinate, the distance from the origin is 157.6, and the touch information with the touch information number“ 3 ”has the X coordinate of 137 and the Y coordinate of 107. Therefore, the distance from the origin is 173.8. Therefore, the touch information with the touch information numbers “1”, “2”, and “3” is registered in this order in the security code 21a. Similarly, touch information with touch information numbers “4”, “5”, and “6” are registered in this order thereafter.

  Then, when all the touch information belonging to the group is registered in the group of the touch information detection information 21b illustrated in FIG. 4, the touch motion detection unit 24a displays each touch information whose press / release information is “1” as XY. It is registered so that the distance from the origin of the coordinate system is short, and thereafter each touch information whose press / release information is “0” is registered in the order of the short distance from the origin of the XY coordinate system. Then, each touch information is rearranged.

  For example, in the example of FIG. 4, the touch information with the touch information number “1” has an X coordinate of 112 and a Y coordinate of 109, so the distance from the origin is 156.3, and the touch information number is “2”. The touch information of "" has an X coordinate of 129 and a Y coordinate of 92, so the distance from the origin is 158.4, and the touch information with the touch information number "3" has an X coordinate of 149 and a Y coordinate of 101. Therefore, the distance from the origin is 180.0. Therefore, the touch information with the touch information numbers “1”, “2”, and “3” is registered in this order in the touch information detection information 21b. Similarly, touch information with touch information numbers “4”, “5”, and “6” are registered in this order thereafter.

  Then, the authentication processing unit 24b compares the touch information of the security code 21a included in the group having the same group number and the same registered order with the touch information of the touch information detection information 21b. It is determined whether or not the touch information matches.

  For example, in the example of FIGS. 3 and 4, the authentication processing unit 24b determines that the touch information number of the security code 21a is “1” and the touch information number of the touch information detection information 21b is “1”. It is compared with certain touch information, and it is determined whether or not the relative position of the touched part, the duration of the touch, the time interval of the touch, and the area information of the touched part match. Similarly, the authentication processing unit 24b touches the touch information numbers “2” to “6” of the security code 21a and the touch information numbers “2” to “6” of the touch information detection information 21b. Each of the information is compared, and it is determined whether or not the touch information matches.

  Thus, by rearranging and comparing the touch information, the comparison target can be uniquely specified, and the authentication process can be simplified. In addition, when touch information is registered in the security code 21a or the touch information detection information 21b and there is touch information having the same distance from the origin, touch information with a small X coordinate or Y coordinate is selected first. Just register.

  Now, the description has been made centering on the embodiment of the authentication device and the authentication method, but the present invention is not limited to these embodiments, and the form as a computer program for realizing the function of the authentication device. Alternatively, the present invention may be implemented as a form of a computer-readable recording medium on which the computer program is recorded.

  Here, as a recording medium, a disk system (for example, magnetic disk, optical disk, etc.), a card system (for example, memory card, optical card, etc.), a semiconductor memory system (for example, ROM, nonvolatile memory, etc.), a tape system (for example) For example, various forms such as a magnetic tape and a cassette tape can be employed.

  By recording and distributing the computer program for realizing the function of the authentication device in the above embodiment or the computer program for causing the computer to execute the authentication method on these recording media, cost reduction, portability and versatility can be achieved. Can be improved.

  Then, the above-described recording medium is mounted on a computer, a computer program recorded on the recording medium is read out by the computer, stored in a memory, and a processor (CPU: Central Processing Unit, MPU: Micro Processing Unit) included in the computer is the computer program. Is read from the memory and executed, the function of the authentication device according to the present embodiment can be realized, and the authentication method can be executed.

  The present invention is not limited to the above-described embodiments, and various modifications and corrections can be made without departing from the scope of the present invention.

DESCRIPTION OF SYMBOLS 20 ... Authentication apparatus, 21 ... Memory | storage part, 21a ... Security code, 21b ... Touch motion detection information, 21c ... Match flag information, 22 ... Timekeeping part, 23 ... Touch panel, 24 ... Control part, 24a ... Touch motion detection part, 24b ... authentication processing unit, 25 ... authentication result transfer unit.

Claims (8)

An authentication device for authenticating a user,
A touch panel that displays a plurality of input areas to which different characters, numbers, or symbols are assigned, and detects a touch action performed by the user for each input area;
A storage unit that stores setting information of a plurality of touch operations performed simultaneously by a user with respect to one of the plurality of input regions;
When the plurality of touch operations performed simultaneously on one of the plurality of input areas is detected by the touch panel, the detected plurality of touch operations are compared with the setting information, and the comparison is performed. And an authentication processing unit for authenticating the user based on the result of
An authentication device comprising:   When the plurality of touch operations performed simultaneously on one of the plurality of input areas are detected a plurality of times by the touch panel, the authentication processing unit detects each of the plurality of touch operations detected a plurality of times. The authentication apparatus according to claim 1, wherein the comparison is performed on the authentication apparatus.   The authentication apparatus according to claim 1, wherein the authentication processing unit performs the comparison with respect to the number of touch operations performed simultaneously on one of the plurality of input areas.   When the first place and the second place in one of the plurality of input areas are touched by a plurality of touch operations simultaneously performed on one of the plurality of input areas, the authentication processing unit The authentication device according to claim 1, wherein the comparison is performed with respect to a relative position of the second location with respect to the first location.   The authentication processing unit performs the comparison with respect to the area of the portion touched by the user on the touch panel in the plurality of touch operations performed simultaneously on one of the plurality of input regions. The authentication device according to any one of claims 1 to 4.   The authentication processing unit performs the comparison with respect to a duration in which the touch panel is touched by the user in a plurality of the touch operations performed simultaneously on one of the plurality of input areas. The authentication device according to any one of claims 1 to 5.   The authentication processing unit performs the comparison with respect to a time interval between a plurality of touches made simultaneously on one of the plurality of input areas and a touch made before the plurality of touches. The authentication apparatus according to any one of claims 1 to 6, wherein the authentication apparatus is characterized in that: An authentication method for authenticating a user,
A display step of displaying on the touch panel a plurality of input areas to which different letters, numbers, or symbols are assigned;
A detection step of detecting a touch action made by the user for each input area displayed in the display step;
An information reading step of reading the setting information from a storage unit storing setting information of a plurality of touch operations performed by the user simultaneously on one of the plurality of input areas;
When the plurality of touch operations performed simultaneously on one of the plurality of input areas are detected in the detection step, the plurality of touch operations detected and the information read in the information reading step An authentication step for performing a comparison with the setting information and authenticating a user based on a result of the comparison;
An authentication method comprising:

Images