JP2013047865A - Information processor, personal authentication system, personal authentication method, and personal authentication program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To easily and safely perform personal authentication using images.SOLUTION: In a personal authentication system 1, an information processor Js is connected to a terminal Ts via a network NW, and registers an image, which is selected by an authentication target person from images retrieved on the Internet with a pass image retrieval word based on taste information of the person, or an image created by the person with a mass memory 25 as a pass image, and also stores similar images, which is retrieved by using an image retrieved with a retrieval word of a superordinate concept of the pass image retrieval word or the pass image as a retrieval image, in the mass memory 25 as decoy images. On receiving a personal authentication request from the terminal Ts, the information processor Js generates an authentication image selection screen composed of the pass image and the plurality of decoy images stored in the mass memory 25, transmits the created authentication image selection screen to the terminal Ts, and determines whether an image selected by the terminal Ts is the pass image. Thus, the information processor Js performs personal authentication.

Description

  The present invention relates to an information processing apparatus, a personal authentication system, a personal authentication method, and a personal authentication program. More specifically, the present invention relates to an information processing apparatus that performs personal authentication using an image, a personal authentication system, a personal authentication method, and a personal authentication program.

  In recent years, with the development of information processing apparatuses such as computers and complex apparatuses, confidentiality of information to be handled is required, and personal authentication is required to access the information processing apparatus.

  In an information processing apparatus, a method of performing personal authentication using a password consisting of a character string has been conventionally used as a method of personal authentication. However, the number of passwords to be remembered as the number of information processing apparatuses to be accessed increases. In addition to the increase, in order to strengthen security, password rules required by access destinations, for example, it is required to use symbols in addition to numbers, or passwords are frequently changed, and appropriate security is required. It is becoming difficult to manage passwords properly while securing passwords.

  Also, remembering multiple complex passwords over a long period of time is practically difficult for normal humans, and even when trying to access an information processing device that has not been used for a long period of time, it does not remember the correct password. , Frequent situations that can not be accessed. For this reason, common use and reuse of a small number of passwords for a plurality of information processing devices, carrying them by memo recording of passwords and encrypted storage in a storage medium, and the like have occurred, and a substantial weakening of security has occurred.

  Therefore, conventionally, an image database for storing images registered by an individual to be authenticated, an authentication database for storing images for authentication selected from the image database, and a plurality of images from the image database at the time of authentication. An authentication screen creation / transmission means for creating an authentication image selection screen combining the authentication image from the authentication database and transmitting it to the terminal, and reception authentication for receiving the image selected from the terminal and performing personal authentication And a personal authentication system comprising means (see Patent Document 1).

  Conventionally, when a plurality of images including a pass image are displayed on the screen, positional relationship information indicating the positional relationship between the indication position that the user should indicate on the screen and the display position of the pass image is set. Thus, an information processing method has been proposed in which authentication information including the positional relationship information is created and registered in a memory so that a path image is selected by selecting an image having the positional relationship during authentication (patent) Reference 2).

  However, the conventional technique using the image has the following three problems.

  Problem 1: There is a lot of labor for registering an image used for authentication of the correct image and the selection position of the correct image in the image.

  Problem 2: Since redundancy is greater than character input, it is easy to remember if an operation for selecting the correct image or the position of the correct image in the image is stolen.

  Problem 3: Images tend to remain in memory, but it is difficult for humans to store for a long time.

  Among the above problems, for problem 1, a countermeasure such as registering an image taken from a terminal such as a mobile phone as a pass image (correct image) to an information processing apparatus that performs authentication processing (see Patent Document 1). Although it can be used, the image taken by the person to be authenticated is easy to understand for the person to be authenticated, but it takes a lot of time to shoot an image with quality suitable for authentication, and pets that were petting in the past You can't shoot something that doesn't exist. Furthermore, when a decoy image (incorrect image) is registered together with a pass image, a method of randomly acquiring a decoy image by google (registered trademark) image search has been proposed (see Non-Patent Document 1). However, in this method, when a decoy image is randomly selected, there is a high possibility that a user who is an authentication target mistakes or hesitates the pass image and the decoy image during authentication. Therefore, the decoy image is preferably the image selected by the user, but for that purpose, it takes time to register the decoy image.

  As for problem 2, the method described in Patent Document 2 is a countermeasure. However, in the method described in Patent Document 2, an image having a positional relationship in which a path image is difficult to understand is set as an operation image. However, depending on the setting of the operation image, it may be difficult to understand for users who require authentication, making it difficult to understand. There was a problem of becoming insufficient.

  Furthermore, regarding the third problem, it is possible to make it difficult to forget for a long period of time by making it an authentication condition that pass images are selected in the order based on the scenario stored in the user's memory. It is not easy to come up with an image or prepare an image that matches it, and it is difficult to remember the image order according to the scenario without making a mistake, and this is not an appropriate solution.

  Accordingly, an object of the present invention is to improve security by registering correct images that can withstand leaks of correct images due to snooping during authentication and long-term storage.

  In order to achieve the above object, the information processing apparatus according to claim 1 is a communication means that exchanges information with a terminal that requests at least personal authentication via a wired or wireless network and is connected to the Internet. And a correct image search word input screen for prompting input of a correct image search word based on the preference information of the individual to be authenticated is transmitted from the communication means to the terminal, and based on the correct image search word input screen at the terminal The correct image search word acquisition means for acquiring the input correct search word from the terminal via the communication means, and the image acquired by performing an image search on the Internet based on the correct image search word via the communication means A correct image selection screen consisting of a predetermined number of correct candidate images is generated and transmitted to the terminal to select the correct image, and the terminal to be authenticated by the individual to be authenticated The correct image stored in the correct image database corresponding to the authentication target individual or the terminal, the correct image selected and received from the terminal, or the correct image created and received from the terminal by the individual to be authenticated A correct image registration means for storing the correct image and an incorrect image search word input screen for prompting an input of an incorrect image search word consisting of a higher concept of the correct image search word used for searching for the correct image from the communication means to the terminal An incorrect image search word acquisition means for acquiring an incorrect answer search word input on the terminal based on the incorrect image search word input screen from the terminal via the communication means; An image obtained by performing an image search on the Internet based on the incorrect image search word via the communication means, or on the Internet based on the correct image Create an incorrect image selection screen using a predetermined number of images obtained by searching for similar images as incorrect candidate images and send the image to the terminal to select an incorrect image. An incorrect image registration unit that stores an incorrect image selected by the terminal and received from the terminal in the incorrect image storage unit as an incorrect image database corresponding to the individual to be authenticated or the terminal, and from the terminal When there is an authentication request, an authentication image selection screen is generated in which the correct image stored in the correct image storage unit and a predetermined number of incorrect images stored in the incorrect image storage unit are arranged in a predetermined arrangement state, and the communication unit is operated. When the communication means receives an authentication screen generation means for transmitting to the terminal via the authentication image selection screen and the selection image selected based on the authentication image selection screen, it is determined whether or not the selection image is the correct image. And authentication means for performing personal authentication.

  According to the present invention, it is possible to register a correct image that can withstand leaking of a correct image due to snooping at the time of authentication and long-term storage, thereby improving confidentiality.

The figure which shows the system configuration | structure of the personal authentication system to which one Example of this invention is applied, and the principal part block structure of information processing apparatus. The functional block block diagram at the time of the registration of the pass image of information processing apparatus. FIG. 3 is a functional block configuration diagram when registering a decoy image of an information processing apparatus. The functional block block diagram at the time of personal authentication of information processing apparatus. The flowchart which shows a pass image registration process. The figure which shows an example of the pass image which the user prepared. The figure which shows an example of a path image search input screen. The figure which shows an example of a pass image selection screen. The flowchart which shows a decoy image registration process. The figure which shows an example of a high-order concept word inquiry screen. The figure which shows an example of a decoy image selection screen. The figure which shows the other example of a high-order concept word inquiry screen. The figure which shows the other example of the decoy image selection screen corresponding to FIG. The figure which shows an example of the similar image search result of a path | pass image. The flowchart of an authentication process. The figure which shows an example of an authentication image selection screen.

  Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings. In addition, since the Example described below is a suitable Example of this invention, various technically preferable restrictions are attached | subjected, However, The range of this invention is unduly limited by the following description. However, not all the configurations described in the present embodiment are essential constituent elements of the present invention.

  1 to 16 are diagrams showing an embodiment of an information processing apparatus, a personal authentication system, a personal authentication method, and a personal authentication program of the present invention. FIG. 1 shows an information processing apparatus, a personal authentication system of the present invention, It is a figure which shows the system configuration | structure of the personal authentication system 1 to which one Example of the personal authentication method and the personal authentication program is applied, and the principal block structure of information processing apparatus.

  1, the personal authentication system 1 includes an information processing device Js that performs personal authentication and a terminal Ts that requests personal authentication connected by a wired or wireless network NW. The information processing device Js and the information processing device Js are The number is not limited at all.

  The terminal Ts is a terminal that is connected to the information processing device Js via the network NW and requires personal authentication to access the information processing device Js. For example, a normal computer, a mobile phone device, a smartphone, etc. It is desirable to have a digital camera function or a function to capture image data taken by a digital camera.

  The terminal Ts registers a pass image (correct image) as the personal authentication information required when accessing the information processing device Js in the information processing device Js, and a decoy image for preventing unauthorized access by a third party. (Incorrect image) is registered in the information processing device Js. The registration of the pass image and the registration of the decoy image will be described in detail later.

  The terminal Ts includes a display 11 that displays various types of information and an operation unit 12 that inputs various types of information. Using these displays 11 and the operation unit 12, registration of pass images and decoy images, and subsequent authentication operations, etc. When the authentication is successful, access to the information processing apparatus Js becomes possible.

  The information processing apparatus Js is an information processing apparatus that handles various types of information, such as a normal computer, a composite apparatus, and a copying apparatus, and permits access using personal authentication as an access requirement for an access request from the terminal Ts.

  The information processing device Js includes a CPU (Central Processing Unit) 21, a ROM (Read Only Memory) 22, a RAM (Random Access Memory) 23, a network I / F 24, a large-capacity memory 25, an operation display unit 26, and the like. Each part is connected by a bus 27.

  The ROM 22 stores a basic program as the information processing apparatus Js, a program such as the personal authentication program of the present invention, and necessary system data. The RAM 23 is used as a work memory of the CPU 22 and temporarily stores various information. To do.

  A CPU (correct image search word acquisition means, correct image registration means, incorrect image search word acquisition means, incorrect image registration means, authentication screen generation means, authentication means) 21 stores a RAM 23 in a work memory based on a program in the ROM 22. As the information processing device Js is controlled, each unit of the information processing device Js is controlled to execute basic processing as the information processing device Js, personal authentication processing for the access request from the terminal Ts, and the pass image and decoy image for personal authentication. Perform the registration process.

  The network I / F (communication means) 24 is connected to the terminal Ts via a wired or wireless network NW, is connected to the Internet, and exchanges various information with the terminal Ts. Various processes such as image retrieval are performed through the interface.

  The large-capacity memory (correct image storage password, incorrect image storage means) 25 uses a hard disk, SSD (Solid State Drive), etc., and various data processed by the information processing device Js, for example, image data and document data Etc., and a decoy image database in which a pass image used for personal authentication described later is associated with an individual or terminal Ts and a decoy image database in which a decoy image is associated with the individual or terminal Ts.

  The operation display unit 26 includes operation keys used for causing the information processing apparatus Js to perform various operations, a display such as an LCD (Liquid Crystal Display), and the like, and the contents input from the operation keys are displayed on the display. And various information notified from the information processing device Js to the user of the information processing device Js.

  The information processing device Js includes ROM, EEPROM (Electrically Erasable and Programmable Read Only Memory), EPROM, flash memory, flexible disk, CD-ROM (Compact Disc Read Only Memory), CD-RW (Compact Disc Rewritable), DVD ( A personal authentication program for executing the personal authentication method of the present invention recorded on a computer-readable recording medium such as a digital versatile disk (SD), a secure digital (SD) card, or an MO (Magneto-Optical Disc) is read into the ROM 22 or By being installed in the large-capacity memory 25, it is constructed as an information processing apparatus that executes a personal authentication method using an image to be described later. This personal authentication program is a computer-executable program written in a legacy programming language such as assembler, C, C ++, C #, Java (registered trademark) or an object-oriented programming language, and is stored in the recording medium. Can be distributed.

  Then, the information processing apparatus Js introduces the personal authentication program, so that when the pass image is registered, the function block when registering the pass image shown in FIG. 2 is used, and when the decoy image is registered, the function when registering the decoy image shown in FIG. When the block is authenticated, the function block upon authentication shown in FIG. 4 is constructed. That is, when there is a personal authentication request from the terminal Ts, the information processing apparatus Js sends a request to the terminal Ts or the individual in the pass image database corresponding to the terminal Ts or the decoy image database in the large-capacity memory 25. An authentication image selection screen made up of a plurality of corresponding decoy images is sent to the terminal Ts, and authentication is performed based on whether or not the image selected on the authentication image selection screen by the terminal Ts is a pass image. Therefore, the information processing device Js registers the pass image and the decoy image for each individual of the terminal Ts that requests authentication, and stores the pass image database and the decoy image database in the large-capacity memory 25 as the pass image database and the decoy image database.

  First, the functional block at the time of registration of the pass image shown in FIG. 2 of the information processing apparatus Js will be described. As shown in FIG. 2, the information processing apparatus Js uses a personal authentication program to register a pass image search function unit 31, a pass image selection screen creation function unit 32, a selected pass image registration function unit 33, and a unique pass image. A registration function unit 34, an image database function unit 35, and the like are constructed.

  When registering a pass image, the information processing apparatus Js first sets, for example, the pass image search function unit (correct image search word acquisition unit) 31 to set a pass image based on preference information for the terminal Ts. When an inquiry is made as to whether to set an image as a pass image, and the user of the terminal Ts transmits a unique image (preference information image) taken by the camera function or the like, the unique pass image registration function unit 34 The unique image is registered as a pass image of the user or the terminal Ts in the image database function unit (correct image storage means) 35 constructed by the large-capacity memory 25.

  When the terminal Ts transmits preference information in response to the inquiry, the information processing device Js uses the image search engine on the Internet to search for an image using the preference image as a search term. Then, the search result image (search result image) is passed to the path image selection screen creation function unit 32.

  The pass image selection screen creation function unit 32 selects an appropriate number of images from the search result images passed from the pass image search function unit 31 as pass image candidate images, and arranges the pass image candidate images in a predetermined order in a predetermined order. The screens arranged in the above are generated as a path image selection screen and transmitted to the terminal Ts.

  The terminal Ts displays a path image selection screen sent from the information processing device Js on the display unit 11, and an image such as an image that is most easily memorized by the user according to his / her preference from the path image selection screen of the display unit 11. Is selected as the path image.

  When a path image is selected, the terminal Ts transmits path image selection information for specifying the selected path image to the information processing apparatus Js.

  When the information processing device Js receives the path image selection information from the terminal Ts, the selected path image registration function unit 33 adds the path image corresponding to the path image selection information to the path image database of the image database function unit 35 or the user or Register as a pass image of the terminal Ts. The path image selection image creation function unit 32, the selection path image registration function unit 33, and the unique path image registration function unit 34 function as correct image registration means as a whole.

  Further, the decoy image registration function block shown in FIG. 3 is constructed by the personal authentication program when the decoy image is registered in the information processing apparatus Js. The decoy image registration function block includes a decoy image search function unit 41 and a decoy image. A selection screen creation function unit 42, a similar image search function unit 43, a selection decoy image registration function unit 44, an image database function unit 35, and the like are constructed.

  When the decoy image is registered, the information processing apparatus Js has an image search instruction using a higher order concept word (preference information higher concept word) of preference information used at the time of path image search from the terminal Ts or a similar image search instruction using a pass image. When there is an image search instruction using the preference information higher-order concept word from the terminal Ts, the information processing device Js receives the preference information when the decoy image search function unit (incorrect image search word acquisition unit) 41 searches the path image. An image search is performed using an image search engine on the Internet using the broader concept word as a search term, and the search result image (search result image) is passed to the decoy image selection screen creation function unit 42.

  The decoy image selection screen creation function unit 42 selects an appropriate number of images as decoy image candidate images from the search result images passed from the decoy image search function unit 41, and arranges the decoy image candidate images in a predetermined order in a predetermined order. The screen arranged in the above is generated as a decoy image selection screen and transmitted to the terminal Ts.

  Further, when there is a similar image search instruction using a pass image from the terminal Ts, the information processing apparatus Js registers the similar image search function unit 43 in the image database 35 corresponding to the terminal Ts or the user of the terminal Ts. A path image as a search image, a similar image search using a similar image search engine on the Internet, and a search result image (search result image) in the decoy image selection screen creation function unit 42 hand over. As a similar image search engine on the Internet, for example, VisualSeeker of Yahoo Japan Institute can be used. In this case, for example, by uploading a pass image and searching the Internet for an image similar to this pass image, or by specifying some color in the pass image, similar color schemes including those specified colors The searched image (similar image) is searched from the Internet.

  The decoy image selection screen creation function unit 42 selects an appropriate number of images from the search result image passed from the decoy image search function unit 41 or the search result image passed from the similar image search function unit 43 as a decoy image candidate image. A screen in which the decoy image candidate images are arranged in a predetermined order in a predetermined arrangement is generated as a decoy image selection screen and transmitted to the terminal Ts.

  The terminal Ts displays the decoy image selection screen sent from the information processing device Js on the display unit 11, and the user is unlikely to make a mistake from the decoy image selection screen of the display unit 11, but another person steals it. Select multiple images that are likely to be mistaken as decoy images.

  When the decoy image is selected, the terminal Ts transmits decoy image selection information for specifying the selected decoy images to the information processing device Js.

  When the information processing device Js receives the decoy image selection information from the terminal Ts, the selected decoy image registration function unit 44 outputs a plurality of decoy images corresponding to the decoy image selection information to an image database function unit (incorrect image storage unit). The decoy image database is registered as a decoy image of the user or the terminal Ts. The decoy image selection screen creation function unit 42, the similar image search function unit 43, and the selected decoy image registration function unit 44 function as an incorrect image registration unit as a whole.

  Then, the information processing device Js constructs a function block at the time of personal authentication as shown in FIG. 4 by the personal authentication program at the time of personal authentication. As the function block at the time of personal authentication, the authentication image selection screen creation function unit 51, the reception authentication A function unit 52, an image database function unit 35, and the like are constructed.

  In the information processing apparatus Js, at the time of personal authentication, an authentication image selection screen creation function unit (authentication screen generation means) 51 is stored in the image database function unit 35 in association with the individual (user) to be authenticated or the terminal Ts. A pass image and a plurality of decoy images are read out, and a screen in which the pass image and the decoy image are arranged in a predetermined order in a predetermined arrangement is created as an authentication image selection screen and transmitted to the terminal Ts.

  The terminal Ts displays the authentication image selection screen sent from the information processing device Js on the display unit 11, and selects the pass image registered by the user from the authentication image selection screen of the display unit 11 as the authentication image.

  When the authentication image is selected, the terminal Ts transmits authentication image selection information for specifying the selected authentication image to the information processing device Js.

  When the information processing apparatus Js receives the authentication image selection information from the terminal Ts, the reception authentication function unit (authentication unit) 52 acquires the authentication image corresponding to the authentication image selection information from the image database function unit 35, and passes An image is acquired from the image database function unit 35, and it is determined whether or not the authentication image and the pass image match. If they match, an authentication success result is transmitted to the terminal Ts as a successful authentication, and the authentication image and the pass image are If they do not match, an authentication failure authentication result is transmitted to the terminal Ts as an authentication failure.

  Next, the operation of this embodiment will be described. The personal authentication system 1 according to the present embodiment easily registers a pass image that can withstand leakage of a pass image (correct image) due to snooping at the time of authentication and long-term storage, and improves confidentiality easily and reliably.

  When the user uses the information processing apparatus Js using the terminal Ts, the personal authentication system 1 requires personal authentication for the information processing apparatus Js. In order to use this personal authentication, first, the terminal Ts Then, the pass image and the decoy image are registered, and authentication is performed by selecting the pass image as the authentication image from the authentication image selection screen sent from the information processing apparatus Js at the time of authentication.

  When registering a pass image, the information processing apparatus Js performs the pass image registration process as shown in FIG. 5 by the function block at the time of registration of the pass image shown in FIG.

  That is, as shown in FIG. 5, the information processing apparatus Js inquires of the terminal Ts whether to register a path image related to the preference prepared by the user of the terminal Ts (step S101), and the terminal corresponding to the inquiry In response to a response from Ts, it is checked whether the user has selected to register a pass image prepared by the user (step S102).

  When the information processing device Js registers a pass image prepared by the user in step S102 (YES in step S102), the unique pass image registration function unit 34 is sent from the terminal Ts. The coming image (preference information image) is registered as a pass image in the image database function unit 35 of the large-capacity memory 25 (step S103). As the pass image prepared by the user, for example, an image prepared by photographing the prickly pear as shown in FIG. 6 by the camera function or the like of the terminal Ts is used. When such a prickly pear is used as a pass image, the decoy image to be described later is the same type as the prickly pear that is a pass image as long as the user can identify the pass image from the prickly pactus of the pass image. Prickly cactus images may be selected as decoy images.

  In step S102, when the image prepared by the user is not registered as a pass image (NO in step S102), the information processing apparatus Js performs a search related to the user's preference. A pass image search word input screen for inquiring a term is transmitted to the terminal Ts (step S104). For example, the path image search function unit 31 transmits a path image search word input screen as shown in FIG. 7 to the terminal Ts for display. For example, as shown in FIG. 7, this path image search input screen presents “Please enter the name of something you like or dislike” and prompts you to enter the name of something related to your preference. It is a screen. In response to this inquiry, the information processing apparatus Js inputs a search term related to preference information input and specified by the user at the terminal Ts, for example, “twentieth century pear” as shown in FIG. When a search related to information is transmitted, an image search is performed using an image search engine on the Internet using a search term related to the preference information, and a search result image (search result image) is created as a path image selection screen. The data is transferred to the function unit 32 (step S104).

  The pass image selection screen creation function unit 32 selects an appropriate number of images from the search result image passed from the pass image search function unit 31 as the pass image candidate images, and selects the pass image candidate images in a predetermined order. For example, a screen arranged in a way of arrangement is generated as a path image selection screen as shown in FIG. 8, and the path image selection screen is transmitted to the terminal Ts to prompt selection of a path image (step S106).

  The terminal Ts displays a path image selection screen sent from the information processing device Js on the display unit 11, and an image that the user can easily store according to his / her preference from the path image selection screen of the display unit 11, for example, The 20th century pear image in the upper right corner of the pass image selection screen is selected as the pass image.

  When a path image is selected, the terminal Ts transmits path image selection information for specifying the selected path image to the information processing apparatus Js.

  When the information processing device Js receives the path image selection information from the terminal Ts, the selected path image registration function unit 33 adds the path image corresponding to the path image selection information to the path image database of the image database function unit 35 or the user or It registers as a pass image of the terminal Ts (step S108).

  Next, when the decoy image is registered, the information processing apparatus Js performs the decoy image registration process as shown in FIG.

  That is, as illustrated in FIG. 9, the information processing apparatus Js, for the terminal Ts, “searches for a decoy image with a higher-order concept word of a search term related to user preference” or “similar decoy image from a path image. An image search] inquiry is sent to the terminal Ts (step S201), and in response to a response from the terminal Ts to the inquiry, "search for a decoy image with a broader term of search terms related to user preferences" It is checked whether or not “a similar image is searched for a decoy image from a pass image” (step S202).

  In step S202, when the user selects “search with a higher-order concept word related to preference” in step S202, the decoy image search function unit 41 sets “search term related to user preference when registering a pass image”. Inquiry of a broader concept word, for example, as shown in FIG. 10, a query such as “What is your favorite or disliked broader concept word” is made to the terminal Ts (step S203), and the user at the terminal Ts When a high-order concept word of a search term related to user enforcement at the time of registration of a pass image is input in response to the query of the high-order concept word and the high-order concept word is sent from the terminal Ts, a decoy image search function unit 41 However, an image search is performed using an image search engine on the Internet using the broader concept word as a search term, and a search result image (search result image) is taken as a decoy image selection image. It passed to the production function unit 42 (step S204). FIG. 10 shows a state in which the user inputs “pear” in response to an inquiry “What is your favorite or disliked high-level concept word?”.

  The decoy image selection screen creation function unit 42 selects an appropriate number of images as decoy image candidate images from the search result images passed from the decoy image search function unit 41, and arranges the decoy image candidate images in a predetermined order in a predetermined order. For example, the screen arranged in FIG. 11 is generated as a decoy image selection screen as shown in FIG. 11, and transmitted to the terminal Ts to cause the user to select a decoy image (step S205). The terminal Ts displays the decoy image selection screen sent from the information processing device Js on the display unit 11, and the user is not likely to make a mistake from the decoy image selection screen of the display unit 11, but others have seen it. Select multiple images that are likely to be mistaken as decoy images. When the decoy image is selected, the terminal Ts transmits decoy image selection information for specifying the selected decoy images to the information processing device Js.

  In response to the inquiry “What is your favorite or disliked high-level concept word?”, A prickly pear cactus original image prepared by the user is registered as a pass image, as shown in FIG. In this case, when “prickly cactus” is input at the terminal Ts, the decoy image selection screen created from the search result image is, for example, a decoy image selection screen as shown in FIG.

  When the decoy image selection information is received from the terminal Ts, the information processing apparatus Js causes the selection decoy image registration function unit 45 to add a plurality of decoy images corresponding to the decoy image selection information to the decoy image database of the image database function unit 35. The user or the terminal Ts is registered as a decoy image (step S206).

  Further, in step S202, when the user selects “search for a similar image from a pass image” in step S202, the similar image search function unit 43 corresponds to the terminal Ts or the user of the terminal Ts. Then, a path image registered in the image database 35 is acquired, and the path image is used as a search image, a similar image search is performed using a similar image search engine on the Internet, and a search result image (search result image) Is transferred to the decoy image selection screen creation function unit 42 (step S207).

  As a similar image search engine on the Internet, for example, when using VisualSeeker of Yahoo Japan Institute and using a path image (pear of the 20th century) selected on the path image selection screen of FIG. 8 as a path image, for example, As shown in FIG. 14, the searched similar image is displayed around the central path image.

  The image selection screen creation function unit 42 selects an appropriate number of images as decoy image candidate images from the search result images passed from the similar image search function unit 43, and arranges the decoy image candidate images in a predetermined order in a predetermined order. The arranged screen is generated as a decoy image selection screen and transmitted to the terminal Ts to allow the user to select a decoy image (step S205). The terminal Ts displays the decoy image selection screen sent from the information processing device Js on the display unit 11, and the user is not likely to make a mistake from the decoy image selection screen of the display unit 11, but others have seen it. Select multiple images that are likely to be mistaken as decoy images. When the decoy image is selected, the terminal Ts transmits decoy image selection information for specifying the selected decoy images to the information processing device Js.

  When the decoy image selection information is received from the terminal Ts, the information processing apparatus Js causes the selection decoy image registration function unit 45 to add a plurality of decoy images corresponding to the decoy image selection information to the decoy image database of the image database function unit 35. The user or the terminal Ts is registered as a decoy image (step S206).

  Then, the information processing apparatus Js performs an authentication process as illustrated in FIG. That is, when the information processing apparatus Js receives a user ID inquiry from the terminal Ts (step S301), the authentication image selection screen creation function unit 51 displays the pass image and the decoy image registered by the user in the image in the large-capacity memory 25. For example, as shown in FIG. 16, an authentication image selection screen in which these pass images and decoy images are arranged in a predetermined arrangement order in a predetermined arrangement is created by reading from the database function unit 35 (step S302). The authentication image selection screen is transmitted to the user terminal Ts (step S303). The authentication image selection screen shown in FIG. 16 is a screen in which eight decoy images are arranged around the pear in the upper right corner selected as the pass image on the pass image selection screen in FIG. Yes.

  The information processing device Js displays the authentication image selection screen sent from the information processing device Js on the display unit 11 at the terminal Ts, and the pass image registered by the user from the authentication image selection screen of the display unit 11. Is selected as the authentication image, the terminal Ts transmits authentication image selection information for specifying the selected authentication image to the information processing apparatus Js, and the reception authentication function unit 52 receives the authentication image selection information (step S304). ).

  When receiving the authentication image selection information, the reception authentication function unit 52 refers to the pass image data and decoy image data of the image database function unit 35 based on the authentication image selection information, and indicates the authentication image selection information. It is checked whether the image is a pass image (step S305).

  In step S305, when the image indicated by the authentication image selection information is a pass image (YES in step S305), the reception authentication function unit 52 transmits an authentication result indicating successful authentication to the terminal Ts. Then, the connection permission is notified to the login target system of the information processing apparatus Js that requires the authentication process using the pass image, and the authentication process is terminated (step S306).

  In step S305, when the image indicated by the authentication image selection information is a decoy image (NO in step S305), the reception authentication function unit 52 transmits an authentication failure authentication result to the terminal Ts. The connection rejection is notified to the login target system of the information processing apparatus Js, and the authentication process is terminated (step S307).

  That is, the personal authentication system 1 according to the present embodiment solves the problem of selecting the image that cannot be forgotten for a long time, which is the problem 3 in the prior art, by using an image relating to the preference tendency of each person as a pass image. Yes. In other words, the tendency of human preference is different for each person and is difficult to change for a long time, and is suitable for long-term memory. In addition, people's detailed likes and dislikes are information that is particular to the person, but for others, the trivial tendency of other people's tastes is not something that can be grasped even by familiar people, and it is difficult to perceive, and images used for authentication Suitable as

  In addition, the personal authentication system 1 according to the present embodiment authenticates the pass image for the problem 1 in the prior art, which takes time to acquire the pass image and the decoy image, and the problem that the problem 2 is easy to remember. In addition to registering the image taken by the requesting individual (user) as a pass image, the individual selects from the image searched using the image search engine on the Internet, using the preference information of the individual to be authenticated as a search term By using the obtained image as the pass image, the time and effort for acquiring the pass image is simplified. In addition, for decoy images, by using the image selected by the individual from the images searched using the image search engine on the Internet as the search terms, the high-level concept word used for the search for the path image is used as a decoy image. In addition, by using a pass image as a search image and an image selected by the individual from images searched for similar images on the Internet as a decoy image, the labor of obtaining a decoy image is simplified. The decoy image is similar on the Internet based on the image or path image selected by the individual from the images searched on the Internet using the broader terms of the search terms used to search the path image as the search terms. Since the image selected by the individual from the searched images is used, an image that is difficult to be mistaken for an individual to be authenticated and difficult to remember for a peeper can be used as a decoy image.

  As described above, in the personal authentication system 1 of this embodiment, the information processing device Js exchanges information with the terminal Ts that requests at least personal authentication via the wired or wireless network NW and connects to the Internet. Pass image search word input screen (correct image search word input screen) for prompting input of a possible network I / F (communication means) 24 and a pass image search word (correct image search word) based on personal preference information to be authenticated Is transmitted from the network I / F 24 to the terminal Ts, and the path image search word obtained from the terminal Ts based on the path image search word input screen is acquired from the terminal Ts via the network I / F 24. An image on the Internet based on the path image search word via the function unit (correct image search word acquisition means) 31 and the network I / F 24 A path image selection screen (correct image selection screen) composed of a predetermined number of path candidate images (correct answer candidate images) among the images acquired by searching is created and transmitted to the terminal Ts to select a pass image (correct image). A path image selected by the terminal Ts by the authentication target individual and received from the terminal Ts, or a path image created and received by the authentication target individual from the terminal Ts or the authentication target individual or the terminal A path image selection screen creation function unit 32 and a selected path image registration function stored in an image database function unit (correct image storage means) 35 constructed in the large-capacity memory 25 as a path image database (correct image database) corresponding to Ts. A decoy image search word (incorrect) consisting of a correct image registration means comprising the unit 33 and a superordinate concept of the pass image search word used for searching the pass image. A decoy image search word input screen (incorrect image search word input screen) for prompting input of an image search word is transmitted from the network I / F 24 to the terminal Ts, and the terminal Ts is based on the decoy image search word input screen. A decoy image search function unit (incorrect image search word acquisition means) 41 that acquires the input decoy image search word from the terminal Ts via the network I / F 24 and a decoy image search word via the network I / F 24. A decoy candidate image (incorrect answer candidate image) of a predetermined number of images among images obtained by image retrieval on the Internet based on the above or images obtained by searching similar images on the Internet based on the pass image; A decoy image selection screen (incorrect image selection screen) to be created and transmitted to the terminal Ts to select a decoy image (incorrect image) and A decoy image selected by the person at the terminal Ts and received from the terminal Ts is stored in the image database function unit (incorrect image storage means) 35 as a decoy image database corresponding to the individual to be authenticated or the terminal Ts. When there is an authentication request from the decoy image selection screen creation function unit 42, the similar image search function unit 43, and the selection decoy image registration function unit 44 to be performed, and an authentication request from the terminal Ts, the path of the image database function unit 35 An authentication image selection screen creation function unit (authentication screen generation means) that generates an authentication image selection screen in which an image and a predetermined number of decoy images are arranged in a predetermined arrangement state and transmits the generated image to the terminal Ts via the network I / F 24 51, when the network I / F 24 receives the selected image selected based on the authentication image selection screen, the selected image is passed. Receiving authentication function unit for performing personal authentication by determining whether an image includes a (authentication means) 52, a.

  Therefore, it is possible to register a pass image that can withstand leakage of a pass image due to snooping at the time of authentication and long-term storage, and to improve confidentiality.

  Further, in the personal authentication system 1 according to the present embodiment, the information processing apparatus Js transmits and receives information to and from the terminal Ts that requests at least personal authentication via the wired or wireless network NW and connects to the Internet. Processing step and a pass image search word input screen for prompting input of a pass image search word based on personal preference information to be authenticated is transmitted to the terminal Ts in the communication processing step, and the pass image search word input is performed at the terminal Ts. A correct image search word acquisition processing step for acquiring the path image search word input based on the screen from the terminal Ts in the communication processing step, and an image search on the Internet based on the pass image search word in the communication processing step A path image selection screen consisting of a predetermined number of path candidate images is created from the images acquired in this manner, and transmitted to the terminal Ts to select a path image. A correct image selected from the terminal Ts by the individual to be authenticated and received from the terminal Ts, or a pass image created and received from the terminal Ts by the individual to be authenticated A correct image registration process step that is stored in the image database function unit 35 as a path image database in correspondence with the terminal Ts and a decoy image search word that is a superordinate concept of the path image search word used for the search of the path image are prompted to input. The decoy image search word input screen is transmitted to the terminal Ts in the communication processing step, and the decoy image search word input based on the decoy image search word input screen in the terminal Ts is transmitted from the terminal Ts in the communication processing step. The decoy image search word acquisition processing step to be acquired, and the Internet based on the decoy image search word in the communication processing step A decoy image selection screen is created by using a predetermined number of decoy candidate images among the images obtained by image search in step 1 or images obtained by searching for similar images on the Internet based on the pass image, and the terminal Ts The decoy image transmitted as the decoy image and selected from the terminal Ts by the individual to be authenticated and received from the terminal Ts is associated with the individual to be authenticated or the terminal Ts as an image database as a decoy image database. When there is an incorrect image registration processing step to be stored in the function unit 35 and an authentication request is received from the terminal Ts, an authentication image selection screen in which a pass image of the image database function unit 35 and a predetermined number of decoy images are arranged in a predetermined arrangement state is displayed. An authentication screen generation processing step for generating and transmitting to the terminal Ts in the communication processing step, and a selection based on the authentication image selection screen When the selected image is received in the communication processing step, an authentication processing step is performed, which includes an authentication processing step of determining whether the selected image is the pass image and performing personal authentication.

  Therefore, it is possible to register a pass image that can withstand leakage of a pass image due to snooping at the time of authentication and long-term storage, and to improve confidentiality.

  Furthermore, in the personal authentication system 1 according to the present embodiment, the information processing apparatus Js exchanges information with the computer via the wired or wireless network NW and at least the terminal Ts that requests personal authentication, and transmits the information to the Internet. A communication process to be connected and a pass image search word input screen for prompting input of a pass image search word based on personal preference information of the authentication target are transmitted to the terminal Ts by the communication process, and the pass image search word is transmitted to the terminal Ts. A correct image search word acquisition process for acquiring the path image search word input based on the input screen from the terminal Ts in the communication process, and an image search on the Internet based on the pass image search word in the communication process. A pass image selection screen composed of a predetermined number of pass candidate images among the acquired images is created and transmitted to the terminal Ts to select the pass image, and the individual to be authenticated Thus, the correct image selected by the terminal Ts and received from the terminal Ts, or the pass image created and received by the individual to be authenticated from the terminal Ts is associated with the individual to be authenticated or the terminal Ts. A decoy image search word input screen for prompting input of a decoy image search word composed of a higher-order concept of the pass image search word used for searching the pass image and a correct image registration process stored in the image database function unit 35 as a pass image database Is transmitted to the terminal Ts in the communication process, and a decoy image search word input based on the decoy image search word input screen in the terminal Ts is acquired from the terminal Ts in the communication process. And an image obtained by performing an image search on the Internet based on a decoy image search word in the communication process, or an interface based on a pass image. A decoy image selection screen using a predetermined number of images obtained by searching for similar images on the net as decoy candidate images is generated and transmitted to the terminal Ts to select a decoy image. An incorrect image registration process in which the decoy image selected by the terminal Ts and received from the terminal Ts is stored in the image database function unit 35 as a decoy image database corresponding to the individual to be authenticated or the terminal Ts, and from the terminal Ts When there is an authentication request, an authentication screen generation process for generating an authentication image selection screen in which a pass image of the image database function unit 35 and a predetermined number of decoy images are arranged in a predetermined arrangement state and transmitting to the terminal Ts by the communication process When the selected image selected based on the authentication image selection screen is received in the communication process, it is determined whether or not the selected image is the pass image. An authentication process for performing personal authentication and a personal authentication program for executing the personal authentication are installed.

  Therefore, it is possible to register a pass image that can withstand leakage of a pass image due to snooping at the time of authentication and long-term storage, and to improve confidentiality.

  In addition, in the personal authentication system 1 of the present embodiment, the correct image created by the authentication target individual may be a photographic image taken by the authentication target individual by the information processing apparatus Js.

  Therefore, a pass image that can withstand long-term storage can be registered, and confidentiality can be further improved.

  Furthermore, when the authentication image selection screen creation function unit 51 receives an authentication request from the terminal Ts, the personal authentication system 1 of the present embodiment uses the terminal information transmitted from the terminal Ts together with the authentication request. An authentication image selection screen is generated by specifying Ts or an authentication target individual and selecting a pass image and a decoy image corresponding to the terminal Ts or the authentication target individual.

  Accordingly, it is possible to appropriately select a pass image and a decoy image according to an authentication request and generate an authentication image selection screen, thereby improving confidentiality.

  The invention made by the present inventor has been specifically described based on the preferred embodiments. However, the present invention is not limited to that described in the above embodiments, and various modifications can be made without departing from the scope of the invention. It goes without saying that it is possible.

1 Personal Authentication System Js Information Processing Device Ts Terminal NW Network 11 Display 12 Operation Unit 21 CPU
22 ROM
23 RAM
24 Network I / F
25 Large-capacity memory 26 Operation display section 27 Bus 31 Path image search function section 32 Path image selection screen creation function section 33 Selected path image registration function section 34 Original path image registration function section 35 Image database function section 41 Decoy image search function section 42 Decoy image selection screen creation function part 43 Similar image search function part 44 Selection decoy image registration function part 51 Authentication image selection screen creation function part 52 Reception authentication function part

JP 2004-157675 A

JP 2010-3259 A UNIX Magazine January 2002, Toshiyuki Masui “The Street Corner of the Interface (49) – Riddle Authentication Using Images”

Claims (6)

A communication means that exchanges information with a terminal that requests at least personal authentication via a wired or wireless network and can be connected to the Internet;
A correct image search word input screen that prompts input of a correct image search word based on preference information of an individual to be authenticated is transmitted from the communication means to the terminal, and is input based on the correct image search word input screen at the terminal. Correct image search word acquisition means for acquiring the correct image search word from the terminal via the communication means;
A correct image selection screen composed of a predetermined number of correct candidate images among images obtained by performing image search on the Internet based on the correct image search word via the communication means is generated and transmitted to the terminal to be the correct image The correct image selected from the terminal by the individual to be authenticated and received from the terminal, or the correct image created and received by the individual to be authenticated from the terminal or the individual to be authenticated or the Correct image registration means for storing in the correct image storage means as a correct image database corresponding to the terminal;
An incorrect image search word input screen for prompting input of an incorrect image search word composed of a higher concept of the correct image search word used for searching for the correct image is transmitted from the communication means to the terminal, and the terminal An incorrect image search word acquisition means for acquiring an incorrect image search word input based on an incorrect image search word input screen from the terminal via the communication means;
A predetermined number of images obtained by searching for images on the Internet based on the incorrect image search word via the communication means, or images acquired by searching for similar images on the Internet based on the correct images An incorrect image selection screen using the image of the incorrect answer as a candidate image is created and transmitted to the terminal to select an incorrect image, and the incorrect answer selected from the terminal by the individual to be authenticated and received from the terminal An incorrect image registration means for storing an image in an incorrect image storage means as an incorrect image database in association with the individual to be authenticated or the terminal;
When there is an authentication request from the terminal, an authentication image selection screen is generated in which the correct image stored in the correct image storage unit and a predetermined number of the incorrect image stored in the incorrect image storage unit are arranged in a predetermined arrangement state. Authentication screen generation means for transmitting to the terminal via communication means;
When the communication unit receives the selected image selected based on the authentication image selection screen, an authentication unit that determines whether the selected image is the correct image and performs personal authentication;
An information processing apparatus comprising: The information processing apparatus includes:
The information processing apparatus according to claim 1, wherein the correct image created by the individual to be authenticated is a photographic image taken by the individual to be authenticated. The authentication screen generation means includes
When there is an authentication request from the terminal, the correct answer corresponding to the terminal or the individual to be authenticated is specified by identifying the terminal or the individual to be authenticated based on terminal information sent together with the authentication request from the terminal The information processing apparatus according to claim 1, wherein the authentication image selection screen is generated by selecting an image and the incorrect image. In a personal authentication system in which a terminal and an information processing device are connected via a wired or wireless network, and the terminal requests personal authentication from the information processing device,
The personal information system characterized by using the information processing apparatus in any one of Claims 1-3 as the said information processing apparatus. A communication processing step of exchanging information with a terminal requesting at least personal authentication via a wired or wireless network and connecting to the Internet;
A correct image search word input screen for prompting input of a correct image search word based on preference information of an individual to be authenticated is transmitted to the terminal in the communication processing step, and input based on the correct image search word input screen in the terminal A correct image search word acquisition processing step of acquiring the correct image search word that has been performed from the terminal in the communication processing step;
In the communication processing step, a correct image selection screen including a predetermined number of correct candidate images among images acquired by performing image search on the Internet based on the correct image search word is generated and transmitted to the terminal to obtain the correct image. The correct image selected by the terminal to be selected by the terminal and received from the terminal, or the correct image created and received from the terminal by the individual to be authenticated or the terminal Correct image registration processing step for storing the correct image as a correct image database in the correct image storage means,
An incorrect image search word input screen for prompting input of an incorrect image search word consisting of a higher concept of the correct image search word used for the search of the correct image is transmitted to the terminal in the communication processing step. An incorrect image search word acquisition processing step of acquiring the incorrect image search word input based on the incorrect image search word input screen from the terminal in the communication processing step;
A predetermined number of images obtained by performing an image search on the Internet based on the incorrect image search word in the communication processing step, or an image obtained by performing a similar image search on the Internet based on the correct image. An incorrect image selection screen that uses an image as an incorrect answer candidate image, transmits the image to the terminal, selects an incorrect image, and is selected by the authentication target individual at the terminal and received from the terminal. An incorrect image registration processing step of storing an incorrect image storage unit as an incorrect image database in association with the individual to be authenticated or the terminal;
When there is an authentication request from the terminal, an authentication image selection screen is generated in which the correct image stored in the correct image storage unit and a predetermined number of the incorrect image stored in the incorrect image storage unit are arranged in a predetermined arrangement state. An authentication screen generation processing step to be transmitted to the terminal in the communication processing step;
An authentication processing step of performing personal authentication by determining whether or not the selected image is the correct image when the selected image selected based on the authentication image selection screen is received in the communication processing step;
The personal authentication method characterized by having. On the computer,
A communication process for transferring information to and connecting to the Internet through at least a terminal requesting personal authentication via a wired or wireless network;
The correct image search word input screen that prompts the user to input a correct image search word based on the preference information of the individual to be authenticated is transmitted to the terminal by the communication process, and is input based on the correct image search word input screen at the terminal. Correct image search word acquisition processing for acquiring the correct image search word from the terminal in the communication process;
A correct image selection screen composed of a predetermined number of correct candidate images among images acquired by searching the Internet based on the correct image search word in the communication process is created and transmitted to the terminal to select the correct image The correct image selected from the terminal by the individual to be authenticated and received from the terminal, or the correct image created and received from the terminal by the individual to be authenticated is sent to the individual to be authenticated or the terminal. A correct image registration process for storing the correct image as a correct image database in the correct image storage means;
An incorrect image search word input screen for prompting input of an incorrect image search word composed of a higher concept of the correct image search word used for searching for the correct image is transmitted to the terminal by the communication process, and the terminal An incorrect image search word acquisition process for acquiring an incorrect image search word input based on an incorrect image search word input screen from the terminal in the communication process;
A predetermined number of images out of images acquired by searching images on the Internet based on the incorrect image search word in the communication process, or images acquired by searching similar images on the Internet based on the correct images An incorrect image selection screen is created using the image as an incorrect answer candidate image, transmitted to the terminal to select an incorrect image, and the incorrect image received and selected from the terminal by the individual subject to authentication is received from the terminal. An incorrect image registration process for storing in the incorrect image storage means as an incorrect image database corresponding to the individual to be authenticated or the terminal;
When there is an authentication request from the terminal, an authentication image selection screen is generated in which the correct image stored in the correct image storage unit and a predetermined number of the incorrect image stored in the incorrect image storage unit are arranged in a predetermined arrangement state. An authentication screen generation process to be transmitted to the terminal in the communication process;
When a selection image selected based on the authentication image selection screen is received in the communication process, an authentication process for determining whether the selection image is the correct image and performing personal authentication;
A personal authentication program characterized in that