JP2013047859A - Authentication device and authentication method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To achieve convenience of a user and strength of security in an authentication device.SOLUTION: When an image 950 for correction is displayed, and information for dividing an area is input to an input device, a line 800 indicating an input trajectory is displayed on a display part. Then, the display area is divided into two with the line 800 as a boundary, and a certain area 801 and an area 802 are generated. When the area 801 is selected as a segmentation area, the image for correction is updated such that the sun 911 whose whole part is displayed in the area 801 is deleted, and the updated image (image 951 for correction) is displayed. Also, the updated images (image 952 for correction and image 953 for correction) are successively displayed in response to a further instruction. Since the image 953 for correction is coincident with an image for authentication, processing for authentication ends when the image 953 for correction is displayed.

Description

  The present invention relates to an authentication device and an authentication method, and more particularly to an authentication device and an authentication method for performing authentication based on information input from the outside.

  Conventionally, various techniques for performing personal authentication by electronic methods in a system have been disclosed.

  For example, Patent Document 1 discloses a method of displaying a plurality of images on a screen and selecting a specific image from the plurality of images during user authentication.

JP-A-2005-71202

  However, the user's act of touching a specific position on the screen has a problem that the third party who sees the act easily estimates the content of the act (that is, the touch position) and is vulnerable to “spoofing”. It was.

  Here, in order to make it difficult for a third party to estimate the selected image, it is conceivable to increase the number of images displayed on the screen as candidates.

  However, if the number of images displayed on the screen is increased, the size of each image on the screen is reduced due to the relationship with the size of the screen, making it difficult for the user to view. Arise.

In recent years, it has been required to input a combination of 4 to 8 digits as a personal identification number in a mobile phone. That is, one combination is selected from at least 10 ⁴ combinations and used as a personal identification number. Therefore, if an attempt is made to secure an equivalent security strength in a system that performs authentication by selecting one image, it is necessary to display 10,000 images.

  In order to display about 10,000 images in a size that allows the user to recognize each image, a very large display screen is required, which is considered difficult to put into practical use.

  As described above, in the conventional system, it is difficult to achieve both user convenience and security strength.

  The present invention has been conceived in view of such circumstances, and an object thereof is to achieve both user convenience and security strength in an authentication apparatus.

  An authentication apparatus according to the present invention includes a storage unit that stores an authentication image, a display unit that displays an image, an input unit that inputs information to the image displayed on the display unit, and an input unit. Based on the information input to the generating means for generating information for specifying a partial area of the image displayed on the display means, and the image displayed on the display means based on the information generated by the generating means Update means for updating the image, and determination means for determining whether the image updated by the update means matches the authentication image.

  In the authentication apparatus of the present invention, it is preferable that the input means inputs information for drawing a trajectory to the display means.

  In the authentication apparatus of the present invention, it is preferable that the generation unit generates continuous line segment information by complementing information input to the input unit.

  The authentication apparatus according to the present invention further includes a display control unit that causes the display unit to display an image including a plurality of objects, and the generation unit generates information specifying an object included in the image displayed on the display unit. It is preferable to do.

  In the authentication apparatus of the present invention, it is preferable that the updating unit updates the image by changing an image of a partial region in the image displayed on the display unit.

  In the authentication device of the present invention, the storage means further stores the image information, and the update means displays the information on the display means by replacing a part of the area with an image based on the image information stored in the storage means. Preferably, the updated image is updated.

  In the authentication device of the present invention, it is preferable that the image information stored in the storage unit includes a moving image.

  An authentication method according to the present invention is an authentication method executed in an authentication apparatus including a display unit, the step of storing an authentication image, the step of displaying an image on the display unit, and the displayed image A step of receiving information input to the device, a step of generating information for designating a partial area of the image displayed on the display means based on the input information, and a display based on the generated information. Updating the image displayed on the means, and determining whether the updated image matches the authentication image.

  According to the present invention, when the user inputs information specifying a partial area of the displayed image, the displayed image is updated based on the information, and the updated image is used for authentication. It is determined whether or not the image matches the image.

  In other words, according to the present invention, the displayed image is updated to determine whether or not it matches the authentication image. The image is updated based on information input by the user. Thus, if the user inputs information until the displayed image matches with the authentication image, the user can determine whether the image matches with the authentication image. The displayed image can be updated.

  Therefore, it is possible to avoid a situation in which the display of each image becomes small due to the display of many images, and it is possible to ensure a certain level of security without degrading the convenience for the user. Furthermore, since it is not necessary for the user to show an image that matches the image for authentication from the beginning, a plurality of images including images that match the image for authentication are presented to the user at the time of user authentication. Even in contrast to the conventional technique that showed the user the image that matches the authentication image, according to the present invention, the user needs to show the image that matches the authentication image before the user performs an operation. Therefore, the security strength can be improved.

It is a figure which shows the external appearance of the information terminal which is 1st Embodiment of the authentication apparatus of this invention. It is a figure which shows the hardware constitutions of the information terminal of FIG. It is a control block diagram of the information terminal of FIG. It is a flowchart of the main routine performed in the information terminal of FIG. It is a figure which shows an example of the image for authentication utilized in the user authentication process of the information terminal of FIG. 5 is a flowchart of a user authentication processing subroutine of FIG. 4. It is a figure which shows an example of the image displayed on the display part of FIG. It is a figure which shows an example of the image displayed on the display part of FIG. It is a figure which shows an example of the image displayed on the display part of FIG. It is a figure which shows an example of the image displayed on the display part of FIG. It is a figure which shows an example of the image displayed on the display part of FIG. It is a figure for demonstrating the interpolation of the data performed in the information terminal of FIG. It is a figure for demonstrating the interpolation of the data performed in the information terminal of FIG. It is a control block diagram of the information terminal which is 2nd Embodiment of the authentication apparatus of this invention. It is a flowchart of the user authentication process performed in the information terminal of FIG. It is a figure for demonstrating the change of the display mode of the display part in the user authentication process of FIG. It is a figure for demonstrating the change of the display mode of the display part in the user authentication process of FIG.

  Embodiments of the present invention will be described below with reference to the drawings. In each figure, elements having the same function are denoted by the same reference numerals, and description thereof will not be repeated.

[1. First Embodiment]
[1-1. Schematic configuration of information terminal]
FIG. 1 shows an appearance of an information terminal 100 that is the first embodiment of the authentication apparatus of the present invention.

  The information terminal 100 has a display unit 110 on its main surface. Display unit 110 is configured by a general display device such as an LCD (liquid crystal display).

  Below the display unit 110 on the main surface of the information terminal 100, four operation buttons 112 to 115 are provided. The function assigned to each of the operation buttons 112 to 115 can be changed according to the type of application being executed on the information terminal 100 and the state in which the application is being executed.

  On the right side surface of the information terminal 100, a power button 111 for switching ON / OFF of power-on of the information terminal 100 is provided. A card slot 120 for inserting a recording medium such as a memory card into the main body of the information terminal 100 is provided on the lower surface of the information terminal 100.

  In addition, the information terminal 100 includes a touch pen 190 that is separated from the main body of the information terminal 100.

[1-2. Hardware configuration of information terminal]
FIG. 2 is a control block diagram of the information terminal 100 of FIG.

  Referring to FIG. 2, information terminal 100 stores a CPU (Central Processing Unit) 101 that controls the entire terminal, a RAM (Random Access Memory) 102 that temporarily stores data, a program, a constant, and the like. A ROM (Read Only Memory) 103, a hard disk drive (HDD) 104 for storing image data, and a communication interface (I / F) 105 for connecting to a network for communication with other devices , The input unit 106 for the operation buttons 112 to 115 and the power button 111, the touch panel 107 provided in contact with the display unit 110, and the card reader 108.

  The card reader 108 reads and / or writes information with respect to the recording medium inserted into the card slot 120.

[1-3. Block configuration of authentication device]
FIG. 3 is a control block diagram of the information terminal 100.

  With reference to FIG. 3, in information terminal 100, when operation is performed on touch panel 107 and / or operation keys 112 to 115, the input determination unit 151 detects that the operation has been performed and the content thereof. In the information terminal 100, the information input unit 150 is configured by the touch panel 107, the operation keys 112 to 115, and the input determination unit 151.

  The display control unit 155 controls the display content of the display unit 110 via the drawing control unit 156, and stores the screen data displayed on the display unit 110 in the second storage unit 153.

  The authentication information generation unit 152 generates a correct image (hereinafter referred to as “authentication image” as appropriate) used when authenticating the user, and stores the image in the third storage unit 157.

  Further, in the information terminal 100, when user authentication is performed, an image different from the authentication image is displayed on the display unit 110, and information for correcting the image is input to the user to generate an authentication image. User authentication is performed. In this specification, an image displayed on the display 110 during user authentication is referred to as a correction image. The authentication information generation unit 152 generates an image to be displayed first as a correction image and stores it in the first storage unit 158.

  For example, the authentication information generation unit 152 can generate an authentication image and a correction image using parts stored in advance in the first storage unit 158.

  The authentication determination unit 154 determines whether or not the image displayed on the display unit 110 (the image stored in the second storage unit 153) matches the image stored in the third storage unit 157.

  In the information terminal 100, if it is determined that the two images match, the user authentication is successful.

  In the information terminal 100, the first storage unit 158, the second storage unit 153, and the third storage unit 157 are configured by the HDD 104 and / or the RAM 102.

  In the information terminal 100, the input determination unit 151, the authentication determination unit 154, the display control unit 155, the drawing control unit 156, the authentication information generation unit 152, and the input information generation unit 159 are stored in the HDD 104 or the like. This is realized by executing the program. Each unit may be realized by a dedicated hardware component such as a dedicated LSI (Large-Scale Integration) having an equivalent function.

  As a general tendency, various program modules are prepared as a part of a computer operating system, and an application program is called to advance the processing by calling these modules in a predetermined arrangement when necessary. . In such a case, the software itself for realizing the authentication apparatus according to the present invention does not include such a module, and the authentication apparatus is realized only when the computer cooperates with the operating system. However, as long as a general platform is used, it is not necessary to distribute software including such modules, and the software itself not including these modules and the recording medium storing the software (and the software distributes on the network). Data signal) can be considered to constitute the embodiment.

[1-4. Main routine]
The contents of the main routine executed in the information terminal 100 will be described with reference to FIG. The main routine is started, for example, by operating the power key 111 of the information terminal 100 that is in a power-off state.

  First, in step S1, the CPU 101 determines whether or not another key (any one of the operation keys 112 to 115) has been operated when the power key 111 that is a condition for starting the main routine is operated. If it is determined that it has been operated, the process proceeds to step S2, and if it is determined that it has not been operated, the process proceeds to step S3.

  In step S2, for example, based on information input to the operation keys 112 to 115 and the touch panel 107, image information is generated by a combination of parts stored in the first storage unit 158, and the generated image information is used as an authentication image. Is stored in the third storage unit 157. When a plurality of images are stored in advance in the first storage unit 158 (or another storage device in the information terminal 100) as authentication image candidates, in step S2, from the plurality of images, 1 Information for selecting the authentication image may be received, and the authentication image may be stored in the third storage unit 157 based on the received information.

  In step S3, the CPU 101 executes a user authentication process and advances the process to step S4. Details of the user authentication process will be described later with reference to FIG.

  In step S4, the CPU 101 determines whether or not the power key 111 has been operated. If it is determined that the power key 111 has not been operated, the CPU 101 executes processing corresponding to the operation on the touch panel 107 or the operation keys 112 to 115 in step S5. . On the other hand, if it is determined in step S4 that the power key 111 has been operated, the main routine is terminated.

[1-5. Example of authentication image]
FIG. 5 shows an example of the authentication image.

  The authentication image 900 includes an image of a house 920 and a crescent moon 910, and two regions of a region 901 and a region 902 as a background. House 920 includes a roof 921, a main body 925, a window 923, a door 924, and a chimney 922.

  Table 1 shows an example of authentication image information stored in the third storage unit 157.

  The authentication image information is information for each part (object) constituting the authentication image. Specifically, the serial number (No.) of each object in the authentication image, the serial number (object number) of each object stored in the first storage unit 151, and the display position on the display unit 110 are shown. Block number.

  The display unit 110 is configured by, for example, a 6-inch (800 × 600 pixel) 8-gradation display device. In the display unit 110, a block is defined for each predetermined number of adjacent pixels. That is, all the pixels constituting the display unit 110 belong to any block. In Table 1, the position where each object is displayed is indicated by listing the blocks of the display unit 110.

[1-6. User authentication process]
FIG. 6 is a flowchart of a subroutine of user authentication processing (step S3 in FIG. 4).

  Referring to FIG. 6, in the user authentication process, CPU 101 first generates a correction image in step S300 and advances the process to step S302.

  The correction image is, for example, an image that is not the same as the image stored in the third storage unit 157, and the type or display position of one or more objects of the authentication image is exchanged, or the object Generated by adding or deleting.

  Table 2 shows an example of data indicating the correction image generated in step S300.

  The correction image shown in Table 2 is obtained by deleting the image of the chimney indicated by the object number 2 from the authentication image shown in Table 1, and the image of the crescent moon of the object number 3 is the object number. It is generated by being replaced with 21 sun images.

The CPU 101 stores the generated correction image in the first storage unit 158.
FIG. 7 shows the correction image 950 shown in Table 2.

  The correction image 950 includes the sun 911 and the house 920A. The house 920A does not include the chimney 922 as compared to the house 920 illustrated in FIG. This corresponds to the fact that the object number 2 is not included in Table 2.

  Further, in the correction image 950 in FIG. 7, the sun 911 is displayed instead of the month 910 as compared with the authentication image 900 in FIG. 5. This corresponds to the fact that in Table 2, object number 21 (sun) is included instead of object number 3 (month (crescent moon)) in Table 1.

  Returning to FIG. 6, in step S <b> 302, the CPU 101 displays the correction image generated in step S <b> 300 on the display unit 110 and advances the process to step S <b> 304.

  In step S304, the CPU 101 activates the input device (touch panel 107 and operation keys 112 to 115), and the process proceeds to step S306.

  In step S306, the CPU 101 waits for an input to the input device. If there is an input to the input device, the process proceeds to step S308.

  In step S308, the CPU 101 determines the content input to the input device. If the CPU 101 determines that the information is to divide the display area of the display unit 110, the CPU 101 proceeds to step S310 and designates addition / deletion / change of the object. If it is determined that it is, the process proceeds to step S314.

  Here, for example, if the CPU 101 determines that information has been input to the touch panel 107, the CPU 101 proceeds to step S310 on the assumption that information regarding area division has been input, and operates any one of the operation keys 112 to 115. If it is determined that there has been, information regarding addition of an object or the like may be input, and the process may proceed to step S314.

  In step S310, the CPU 101 generates a plurality of divided areas by dividing the display area of the display unit 110 based on the input information, and further confirms the cut area by receiving input from the input device. Then, the process proceeds to step S312.

  Here, the cut-out area refers to an area cut out among a plurality of divided areas generated from the correction image. In the information terminal 100, the correction image is corrected so as to delete the object included in the cutout area, and becomes a new correction image.

The process of step S310 will be described in more detail with reference to FIGS.
In FIG. 8, a line 800 that divides the display area of the display unit 110 input to the touch panel 107 is added to the correction image 950 illustrated in FIG. 7.

  When the line 800 is input, the CPU 101 divides the display area of the display unit 110 into an area 801 and an area 802. In FIG. 8, it is assumed that the correction image 950 is displayed in the entire display area of the display unit 110.

  Then, the CPU 101 receives input of information for selecting one of the area 801 and the area 802 in order to delete the object displayed in the area. By accepting the input of the information, the CPU 101 determines the cut area.

  When receiving information for designating the cut area, the CPU 101 can execute control for allowing the user to clearly recognize the display contents of each area, for example, the display of the area 801 and the area 802 blinks alternately.

  The user inputs information for selecting one of the areas 801 or 802 by touching one of the areas 801 or 802 with the touch pen 190, for example.

  When the cut area is confirmed, the CPU 101 updates the correction image displayed on the display unit 110 so as to delete the object displayed in the cut area.

  In FIG. 8, for example, when an area 801 is selected as a cut area, the CPU 101 updates an image to be displayed on the display unit 110 as a correction image 951 in FIG. 9. In the correction image 951, the backgrounds 901 and 902 and the house 901A are displayed, but the sun 911 is deleted as compared with the correction image 950 shown in FIG. This is because all of the sun 911 was displayed in the area 801.

  Returning to FIG. 6, in step S <b> 310, after the generation of the divided area, the determination of the cut area, and the cutting of the image, in step S <b> 312, the CPU 101 displays the image after cutting the image in step S <b> 310. The content is stored in the second storage unit 153, and the display content of the display unit 110 is updated so that the image is displayed, and the process proceeds to step S318.

  In step S <b> 314, the CPU 101 accepts input of information specifying specific contents regarding addition / deletion / change of the object to the operation keys 112 to 115 and / or the touch panel 107, and configures an image based on the information. The type and position of the object are changed, and the process proceeds to step S316.

  In step S314, for example, when the correction image 951 in FIG. 9 is displayed on the display unit 110, an operation for adding an object is input, and the process proceeds from step S308 to step S314. In step S314, when information for adding a crescent moon object is input to the upper left of the screen, such an image is stored in the second storage unit 153, and the display unit 110 displays the correction shown in FIG. The image 952 is updated. In the correction image 952, a crescent moon 910 is displayed in the upper left area.

  Returning to FIG. 6, in step S316, the CPU 101 causes the second storage unit 153 to store an image according to the type and position of the object changed based on the input content to the input device in step S314, and the image The display content of the display unit 110 is updated so as to display, and the process proceeds to step S318.

  In step S318, the CPU 101 compares the image stored in the second storage unit with the image (authentication image) stored in the third storage unit 157, and advances the process to step S320.

  In step S320, it is determined whether or not the two images match as a result of the comparison in step S318. If it is determined that they match, the process proceeds to step S322, and if it does not match, the process returns to step S306.

  In step S322, the CPU 101 deactivates the input device and returns the process to FIG.

  Here, whether or not the two images match is determined by, for example, displaying the same object over the same block number in the third storage unit 157 and the second storage unit 153 as the authentication image and the correction image. It is determined by whether or not it is a thing. As for the block number, as long as it is about several blocks on the left and right, it may be determined that both images match even if the display position is shifted.

  In the user authentication process described above, the correction image is changed based on the input to the input device and compared with the authentication image stored in the third storage unit 157. When it is determined that the two images match, the user authentication process is terminated, and the processes after step S4 are executed in the main routine (FIG. 4).

  That is, in the information terminal 100, even if the image displayed on the display unit 110 is changed, the user authentication process does not end until it matches the authentication image stored in the third storage unit 157.

[1-7. Overview of user authentication processing]
An overview of the user authentication process will be described with reference to FIG.

  As shown in FIG. 11A, when information for dividing an area is input to the input device when the correction image 950 is displayed, as shown in FIG. Displays a line 800 that is information for dividing the area together with the correction image.

  Thereby, the display area of the display unit 110 is divided into two with the line 800 as a boundary. As a result, two divided regions, region 801 and region 802, are generated.

  Then, when the region 801 is selected as the cutout region, the correction image displayed on the display unit 110 is updated so that the sun 911 that is entirely displayed in the region 801 is deleted. The updated image is shown as a correction image 951 in FIG.

  Since the correction image 951 in FIG. 11C and the authentication image 900 in FIG. 5 do not yet match, in the state where the correction image 951 in FIG. It returns to S306.

  In the user authentication process, it is possible to accept not only area division information but also information for adding, deleting, and changing objects.

  When information for adding a crescent moon object is input to the upper left of the correction image 951 in FIG. 11C, the correction image 952 in FIG. 11D is displayed on the display unit 110. The correction image 952 is obtained by adding a crescent moon 910 to the correction image 951 in FIG.

  Further, when information for adding a chimney object is input to the right side of the roof of the house 920A, the correction image 953 in FIG. 11E is displayed on the display unit 110. The correction image 953 is obtained by adding a chimney 922 to the correction image 952 in FIG.

When the correction image 953 and the authentication image 900 (FIG. 5) are compared, they match.
Therefore, when the correction image 953 is displayed on the display unit 110, the processing in FIG. 6 proceeds from step S320 to step S322, and returns to FIG. Thereby, the process after step S4 is performed.

  In the present embodiment, when the cut area is determined in step S310, the image displayed on display unit 110 is updated so that the object that is entirely included in the cut area is deleted. Information indicating that the operation on the touch panel 107 has been performed, which is indicated by a line 800 in FIG. 8, corresponds to information for dividing the region input to the input unit.

  Based on such information, the input information generation unit 159 generates information that the display area of the display unit 110 is divided into two areas according to the line 800.

  Then, the image update unit 150B divides the correction image 950 into the region 801 and the region 802 along the line 800, and displays it on the display unit 110 so as to delete the object included in the selected region. Update the image to be played.

  The image updated in this way is stored in the second storage unit 153, and the authentication determination unit 154 includes the authentication image stored in the third storage unit 157 and the image stored in the second storage unit 153 ( It is determined whether or not the correction images match.

[1-8. Interpolation of input data]
In the present embodiment, as described above, when information that draws a trajectory is input to the touch panel 107, the input information generation unit 159 displays information for dividing the display area of the display unit 110 based on the information. Generate. If the input trajectory is not enough to divide the display area, that is, depending on the input trajectory, the display unit 110 cannot be divided into a plurality of closed areas. And interpolate to generate multiple closed regions.

  For example, as shown in FIG. 12A, there is a case where an input is made on the touch panel 107 with a locus as indicated by a locus 810 while the correction image 950 is displayed. The upper end of the locus 810 is in contact with the upper end of the display unit 110 (the upper end of the correction image 950 in FIG. 12A), but the lower end thereof is in contact with any end of the display unit 110. No closed region is formed by the locus 810 itself. Therefore, depending on the locus 810, the display unit 110 cannot be divided into a plurality of closed regions.

  In the present embodiment, when the trajectory 810 is a straight line, it is extended to the end of the display unit 110, and when the trajectory 810 is a curve, by an existing interpolation method such as Lagrange interpolation, It extends so as to reach the end of the display unit 110 (or so that a closed dormitory can be configured only by the trajectory 810).

  In addition, as shown as a locus 820 in FIG. 12B, when the input locus is not continuous, portions adjacent to each other can be interpolated by Lagrange interpolation or the like to form a continuous locus. In FIG. 12B, lines connecting the fragmented trajectories 820 generated by the separation are indicated by broken lines 821 to 824.

  In addition, when a plurality of points are input as information for dividing an area on the touch panel 107, the input information generation unit 159 generates a line connecting the plurality of points, thereby displaying the display area of the display unit 110. Can be generated.

  For example, as shown in FIG. 13A, a case where two points 831 and 832 are input to the touch panel 107 can be given.

  In this case, the input information generation unit 159 generates a straight line 830 that is a straight line connecting them and whose both ends are in contact with the end of the display area of the display unit 110, and the display area of the display unit 110 is generated by the straight line 830. Split.

  In addition, as illustrated in FIG. 13B, a case where three points of a point 841, a point 842, and a point 843 are input to the touch panel 107 can be given.

  In such a case, a line 840 that passes through these three points and whose both ends are in contact with the end of the display unit 110 is generated by interpolation using an existing separation method (for example, spline separation). With the line 840, the display area of the display unit 110 can be divided into a plurality of closed areas.

[2. Second Embodiment]
[2-1. Block configuration of information terminal]
The information terminal according to the second embodiment of the authentication apparatus of the present invention can have the same appearance and hardware configuration as the information terminal 100 in the first embodiment.

FIG. 14 is a control block diagram of information terminal 100 according to the present embodiment.
The information terminal 100 according to the present embodiment has a button input detection unit 154A in addition to the information terminal 100 according to the first embodiment.

  In the present embodiment, as shown in steps S318 and S320 in the first embodiment, whether or not the authentication image matches the correction image (authentication determination) is determined using the operation keys 112 to 115. This is performed on condition that any one of the keys has been operated. When the key input detection unit 154A detects that the key has been operated, the key input detection unit 154A outputs a command to the authentication determination unit 154 to execute the authentication determination. The authentication determination unit 154 performs the authentication determination on the condition that the instruction is received.

[2-2. User authentication process]
FIG. 15 is a flowchart of a user authentication processing subroutine executed in the information terminal 100 according to the present embodiment.

  Referring to FIG. 15, in the user authentication process executed in the present embodiment, as described with reference to FIG. 6, after the processes of steps S300 to S306 are executed, in step S330, the input device It is determined whether or not the input made with respect to specifies the coordinates of the display unit 110 or the authentication key has been operated. The authentication key is a key operated to cause the authentication determination unit 154 to execute the authentication determination, and is any one of the operation keys 112 to 115.

  If CPU 101 determines that the information is information for specifying coordinates, the process proceeds to step S332, and if it is determined that the authentication key has been operated, the process proceeds to step S340.

  In step S332, the CPU 101 determines the coordinates designated by the information input to the input device, and proceeds to step S334.

  In step S334, the CPU 101 identifies an object including the coordinates determined to be specified in step S332 among the objects displayed on the display unit 110, and advances the process to step S336. In step S334, the CPU 101 identifies an object based on information about an image displayed on the display unit 110 as shown in Table 2. Specifically, the block number including the coordinates acquired in step S332 is acquired, and the object associated with the block number is specified by referring to Table 2.

  In step S336, the information which updates the display mode etc. about the object specified by step S334 is acquired, and a process is advanced to step S338. In the present embodiment, after information specifying coordinates is input to the input device, a display mode such as deleting the object or changing the display color is displayed for an object including the specified coordinates. It is assumed that an operation for inputting information for changing is performed. In step S336, information input to the input device by the operation is acquired.

  In step S338, the CPU 101 updates the display mode for the object identified in step S334 based on the information acquired in step S336, and registers information about the updated image in the second storage unit 153. The process returns to step S306.

  For example, in the state where the correction image 952 shown in FIG. 10 is displayed, when an operation for specifying coordinates belonging to the background 901 is performed, the background 901 is specified as the specified object. When information for changing the display color of the background 901 is input, the correction image 954 of FIG. 16 updated to change the display color of the background 901 is displayed on the display unit 110. .

  In addition, when information specifying the coordinates included in the roof 921 is input in a state where the correction image 952 in FIG. 10 is displayed, the roof 921 is specified as an object including the specified coordinates. And when the information which changes the display color of the said roof 921 is input as update information, the image for correction of FIG. 17 updated so that the display color of the roof 921 may be changed on the display part 110 according to this. 955 is displayed.

  Returning to FIG. 15, in step S <b> 340, the CPU 101 determines whether the image in the second storage unit 153 and the image in the third storage unit 157 are the same as in step S <b> 320 (see FIG. 6). If it is determined that they do not match, the process returns to step S306, and if it is determined that they match, the process proceeds to step S342.

  In step S342, as in step S322 (see FIG. 6), the CPU 101 deactivates the input device and returns the process to FIG.

[3. Other modifications]
In each of the embodiments described above, the object used for updating the authentication image, the correction image, and the correction image has been selected from those stored in the first storage unit 151. The storage location of the object used is not limited to this. The CPU 101 may use an object acquired from another device via the communication I / F 105 as an authentication image.

  In each embodiment described above, the authentication image is generated in the information terminal 100 based on the information input to the input device. However, the authentication image used in the authentication apparatus according to the present invention is used. The image is not limited to this. In the information terminal 100, an image received from another device via the communication I / F 105 may be used as an authentication image.

  In addition, an object used as a component such as an authentication image in each embodiment is not limited to a still image. By using a moving image such as an animation as a component such as an authentication image, it is possible to provide diversity to an image used for user authentication.

  The embodiment disclosed this time should be considered as illustrative in all points and not restrictive. The scope of the present invention is defined by the terms of the claims, rather than the description above, and is intended to include any modifications within the scope and meaning equivalent to the terms of the claims.

  100 information terminal, 101 CPU, 102 RAM, 103 ROM, 104 HDD, 105 communication I / F, 106 input unit, 107 touch panel, 108 card reader, 110 display unit, 150 information input unit, 151 input determination unit, 152 for authentication Information generation unit, 153 second storage unit, 154 authentication determination unit, 155 display control unit, 156 drawing control unit, 157 third storage unit, 158 first storage unit, 159 input information generation unit, 900 authentication image, 950- 955 Image for correction.

Claims (8)

Storage means for storing an authentication image;
Display means for displaying an image;
Input means for inputting information to the image displayed on the display means;
Generating means for generating information for designating a partial region of the image displayed on the display means based on the information input to the input means;
Updating means for updating the image displayed on the display means based on the information generated by the generating means;
An authentication apparatus comprising: a determination unit that determines whether or not the image updated by the update unit matches the authentication image.   The authentication device according to claim 1, wherein the input unit inputs information for drawing a trajectory to the display unit.   The authentication apparatus according to claim 2, wherein the generation unit generates continuous line segment information by complementing the information input to the input unit. The display means further comprises display control means for displaying an image including a plurality of objects,
The authentication device according to claim 1, wherein the generation unit generates information for specifying an object included in an image displayed on the display unit.   The authentication apparatus according to claim 1, wherein the update unit updates the image by changing an image of the partial area in the image displayed on the display unit. . The storage means further stores image information,
The authentication apparatus according to claim 5, wherein the updating unit updates the image displayed on the display unit by replacing the partial area with an image based on image information stored in the storage unit.   The authentication apparatus according to claim 4, wherein the image information stored in the storage unit includes a moving image. An authentication method to be executed in an authentication device provided with a display means,
Storing an authentication image;
Displaying an image on the display means;
Receiving input of information for the displayed image;
Generating information for designating a partial area of the image displayed on the display means based on the input information;
Updating the image displayed on the display means based on the generated information;
And a step of determining whether or not the updated image matches the authentication image.

Images