JP2013242661A - Telephone device having user authentication function - Google Patents

Abstract

PROBLEM TO BE SOLVED: To solve the problem in which: a password lock function of a conventional telephone device has the problem that a password is easily guessed; to address the problem, there is a technology of creating authentication information or pseudo-authentication information based on behavior history information of a user, and causing the user to select from both to perform authentication; however, as the behavior history information is automatically created, if the user do not recognize the history of their behavior, the user cannot release the password lock.SOLUTION: In a telephone device 1, when an authentication start operation detection unit 103 receives a request for permission of use of a predetermined function, a question sentence and option creation unit 107 randomly selects from a schedule book information table 120, a telephone book information table 121, and a profile information table 122, and automatically creates and displays a question sentence and an answer on an LCD display unit 102. Upon receiving an answer from a user, an answer collation unit 108 permits the use of the predetermined function if the answer from the user is correct.

Description

  The present invention relates to a telephone device having a function of authenticating a user of its own device.

  Conventionally, a telephone device has a lock function as an example of an information security system that prohibits the use of other users. When using this lock function, the password stored beforehand by the user with alphanumeric characters is stored, and the lock is released when the password entered by the user at the time of user authentication is normal.

  The above information security system has a problem with the strength of the password because the user sets the password. A password that is easily guessed has a security problem, and a password that is difficult to guess causes a problem that the user forgets the password.

  As a technique for solving this problem, for example, there is a technique disclosed in Patent Document 1. In Patent Document 1, behavior history information is generated from various behaviors such as purchase history, entrance / exit to a building, meeting with an acquaintance, image capturing, etc., and uploaded to a server or stored in a user storage device. A technique is disclosed in which authentication information and pseudo-authentication information are generated based on the information, the authentication target user is allowed to select authentication information indicating his / her action history, and authentication is performed based on the correct answer rate.

JP 2011-59837 A

  However, when applying the technique of Patent Document 1, action history information used for authentication information is an ID or a position acquired by a sensor (RFID (Radio Frequency IDentification) reader, GPS (Global Positioning System) sensor, etc.). Since it is automatically generated by information or the like, there is a possibility that the user does not recognize action history information used as authentication information.

  The present invention has been made to solve the above-described conventional problems. The object of the present invention is to randomly select information input by the user himself, generate a question and an answer based on the information, and perform user authentication. It is to provide a telephone device that performs the above.

  In order to solve the above-described problems, the present invention provides a telephone device having a function of authenticating whether or not a person who uses the apparatus is a registered user, and the telephone stored in the apparatus A question display means for randomly generating a question with any one of the personal information as an answer and displaying the content for obtaining the answer with reference to the personal information relating to the user registered in advance including the number or schedule data; The answer receiving means for receiving the answer to the question displayed by the question display means, and the person who uses the device when the answer received by the answer receiving means matches the answer requested by the display means is registered in advance. It is characterized that the user is authenticated and permitted to use a predetermined function.

  ADVANTAGE OF THE INVENTION According to this invention, in user authentication of a telephone apparatus, the user authentication technique which can produce | generate the question with a high security strength and the user who should be authenticated can lead an answer by changing a question and an answer every time is provided. can do.

It is a functional block diagram of a telephone apparatus when one embodiment of the present invention is applied. It is an operation | movement flow of a telephone apparatus. It is a specific operation | movement flow of the question sentence and choice production | generation process in FIG. It is the figure which showed typically the display content of the question sentence and the option displayed on the LCD display part of a telephone apparatus. It is the figure which represented typically the schedule book information table memorize | stored in the memory | storage part of a telephone apparatus. It is the figure which represented typically the telephone directory information table memorize | stored in the memory | storage part of a telephone apparatus. It is the figure which represented typically the profile information table memorize | stored in the memory | storage part of a telephone apparatus. It is the figure which represented typically the dummy answer information table memorize | stored in the memory | storage part of a telephone apparatus. It is the figure which represented typically the question sentence table memorize | stored in the memory | storage part of a telephone apparatus.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings. FIG. 1 is a functional block diagram of a telephone device 1 when an embodiment of the present invention is applied.

  The telephone device 1 is connected to a PSTN (Public Switched Telephone Networks) network 2 which is a public network and performs telephone communication.

  The telephone device 1 includes a key input unit 101, an LCD display unit 102, an authentication start operation detection unit 103, an answer selection operation detection unit 104, a question sentence / option display instruction unit 105, and an authentication result display instruction unit 106. , Question sentence / option generation unit 107, answer collation unit 108, authentication result operation instruction unit 109, storage unit 110, communication interface unit 111, communication control unit 112, handset 113, telephone function unit 114, Have

  When the key input unit 101 detects a user operation with a dial key or touch panel input unit, the key input unit 101 analyzes the event, and notifies the authentication start operation detection unit 103 or the answer selection operation detection unit 104 described later of the event.

  The LCD display unit 102 is an output unit of an LCD or a touch panel, and displays question sentences and options notified from a question sentence / option display instruction unit 105 described later, and authentication notified from an authentication result display instruction unit 106 described later. Display the result.

  The authentication start operation detecting unit 103 is an event in which the notified event requires user authentication such as a terminal unlock operation, an operation to start using electronic money, or an operation to access personal information such as a telephone book set by the user. If it is, after setting the parameters for performing the authentication process, the parameter / option generation unit 107 described later is notified.

  When the notified event is an answer selection event for user authentication, the answer selection operation detection unit 104 acquires the answer selected by the user and notifies the answer verification unit 108 described later.

  The question sentence / option display instruction unit 105 notifies the LCD display unit 102 of the question sentence / options used for user authentication generated by the question sentence / option generation unit 107 described later.

  The authentication result display instruction unit 106 notifies the LCD display unit 102 of the authentication result determined by the authentication result operation instruction unit 109 described later.

  The question sentence / option generation unit 107 randomly selects data to be used for an answer from the storage unit 110, generates an option including a question sentence and an answer for user authentication, and a question sentence / option display instruction unit 105. Notify The selected answer is stored in the storage unit 110 described later.

  The answer collating unit 108 compares the answer selected by the user notified from the answer selection operation detecting unit 104 with an answer (correct answer) acquired from the storage unit 110 described later, and the comparison result is an authentication result operation instruction unit described later. 109 is notified.

  The authentication result operation instruction unit 109 determines the authentication result from the notified comparison result. If the authentication result is unconfirmed (the comparison result is normal but the user's answer selection count <the number of questions used for authentication), the question text Notify the question sentence / options generation unit 107 to regenerate the options. When the authentication is successful, the authentication result display instruction unit 106 and the telephone function unit 114 are notified of the authentication success. When the authentication is unsuccessful, the authentication result display instruction unit 106 is notified of the authentication failure.

  The storage unit 110 includes a schedule book information table 120, a phone book information table 121, a profile information table 122, a dummy answer information table 123, a question sentence table 124, and an answer collating unit used by the question sentence / option generation unit 107. An answer (correct answer) to the question sentence used in 108 is stored.

  FIG. 5 is a diagram schematically showing the schedule book information table 120 stored in the storage unit 110 of the telephone device 1. Each time a user registers a schedule in the schedule book, a record is registered in the schedule book information table 120. Each record includes a month / day field 300 indicating a date on which the schedule is scheduled, a meeting start time and a train. A time field 301 indicating a scheduled time such as the departure time of the vehicle, a field 302 indicating who the person is to meet, a field 303 indicating a meeting place or a destination, and a purpose of indicating the purpose of the schedule such as a meeting or business trip Field 304. Referenced when performing question / choice generation processing.

  FIG. 6 is a diagram schematically showing a telephone directory information table 121 stored in the storage unit 110 of the telephone device 1. A record is registered in the phone book information table 121 every time a user registers phone book data such as a phone number and a first name in the phone book. Each record has a first and last name field 400 indicating the name of the other party registered in the phone book. The telephone number field 401 indicating the other party's telephone number, the mail address field 402 indicating the other party's mail address, the FAX field 403 indicating the other party's FAX number, the address of the other party's house, the location of the office, etc. And an affiliation field 405 indicating the business name of the other party and the name of the workplace to which the affiliation belongs. Referenced when performing question / choice generation processing.

  FIG. 7 is a diagram schematically showing the profile information table 122 stored in the storage unit 110 of the telephone device 1. The profile information table 122 is registered every time the user's personal information such as user settings is registered. The surname field 500 indicating the name of the user who uses the telephone device 1, the first name field 501, and the user's date of birth Year field 502 indicating the day, Month field 503, Day field 504, Blood type field 505 indicating the user's blood type, Home field 506 indicating the user's hometown, There is a height field 507 indicating height and a weight field 508 indicating the weight of the user. Referenced when performing question / choice generation processing.

  In addition to the registered user's personal information, the profile information includes, for example, the name or phone number of the person whom the user frequently calls, the name or mail address of the person whom the user frequently mails, the application that the user has recently used, and the user It is also possible to use information based on the user's usage history, such as the address or site name of the WEB site recently viewed by the user, the search word recently used by the user, the name of the user's final destination, or the telephone number .

  FIG. 8 is a diagram schematically showing a dummy answer information table 123 stored in the storage unit 110 of the telephone device 1. The dummy answer information table 123 stores information that becomes a dummy answer other than the answer that becomes a correct answer in the question sentence / choice generation process, a type field 600 that indicates the type of answer, and information that is displayed as a dummy answer in the option Field 601 of dummy answer data indicating. After selecting the information to be used for the answer from the records registered in the schedule book information table 120, the phone book information table 121, and the profile information table 122 in the question sentence / choice generation process, the registration record in the information table Referenced when the number is 10 or less.

  The dummy answer information table 123 is a dummy answer information table of schedule book information. In addition to the above, the dummy answer information table 123 includes a dummy answer information table for telephone directory information and a dummy answer information table for profile information.

  FIG. 9 is a diagram schematically showing the question sentence table 124 stored in the storage unit 110 of the telephone device 1. The question sentence table 124 stores question sentence generation information for generating a question sentence corresponding to an answer in the question sentence / choice generation process, a type field 700 indicating an answer type, and a question to be embedded in a base question sentence It has a question parameter field 701 indicating the type and a question sentence field 702 indicating a question sentence as a base. It is referred to after selecting an answer and a dummy answer in the question sentence / option generation process.

  The question sentence table 124 shows a question sentence table of schedule book information. In addition to the above, the question sentence table 124 includes a question sentence table for phone book information and a question sentence table for profile information.

  The communication interface unit 111 receives an instruction from the communication control unit 112 and performs communication with the telephone device of the communication partner via the PSTN network 2.

  The communication control unit 112 performs transmission / reception control of communication data such as conversion processing and error detection processing of a signal transmitted from the communication interface unit 111 or the telephone function unit 114.

  The handset 113 is a handset that transmits a user's voice signal input from a microphone to the telephone function unit 114 and outputs a voice signal of the other party notified from the telephone function unit 114 from a speaker.

  The telephone function unit 114 reads settings from the storage unit 110 and controls functions of a general telephone device such as a transmission operation and an incoming operation of the telephone device 1. When registering the schedule book data, the schedule book information table 120 of the storage unit 110 is registered. When registering the phone book data, the phone book information table 121 of the storage unit 110 is registered. When registering personal information, the profile information table 122 of the storage unit 110 is stored. Register each data.

  When the authentication result operation instruction unit 109 notifies the authentication success, the function restriction of the terminal is released.

  FIG. 2 is an operation flow of the telephone device 1.

  This flow starts when the user of the telephone device 1 performs an unlock operation.

  When the telephone device 1 detects the unlocking operation by the user (S101), the parameters used for the authentication process (the number of questions presented to the user for authentication, the number of times the user actually selected the answer to the question, and the question Is read or set (S102, S103).

  In the present embodiment, the flow is described starting from the detection of the unlocking operation, but the present application is not limited to this. For example, the flow process may be started when an event requiring user authentication is detected, such as when an electronic money use start operation is detected or when access to personal information such as a telephone book set by the user is detected.

  Next, the telephone device 1 executes a question sentence / option generation process to generate a question sentence and options (S200). The specific operation of the question sentence / option generation process will be described later with reference to FIG.

  After generating the question text and the options, the telephone device 1 displays them on the LCD screen (S104), and waits until the user selects an answer to the question.

  After detecting the event that the user has selected the answer to the question, the answer selected by the user is compared with the answer read from the storage unit 110. If they match (S105, YES), the number of correct answers is increased (S106). In other cases (S105, NO), nothing is done and the number of selections is increased (S107).

  Thereafter, the number of selections is determined. If the number of answer selections of the user <the number of questions used for authentication (S108, NO), it is used for user authentication until the number of questions reaches a certain value (eg, 3 times). The question sentence / choice is generated again and displayed to the user. When the number of answers selected by the user is equal to or greater than the number of questions used for authentication (S108, YES), the number of correct answers is compared, and when all questions are correct (S109, YES), authentication success processing is performed (S110). In the case (S109, NO), an authentication failure process is performed (S111).

  FIG. 3 is a specific operation flow of the question sentence / option generation process (S200) in FIG.

  In the question sentence / option generation process, in order to determine data to be used for the question sentence and the answer, one table to be used is randomly selected from the schedule book information table 120, the phone book information table 121, and the profile information table 122. (S201), one record to be used is randomly selected from the registered records in the selected information table (S202), and from the fields 300 to 304, 400 to 405, and 500 to 508 in the selected record, One field is selected at random, and the data of the selected field is used as an answer to the question sentence (S203).

  As a method for selecting data, in addition to selecting randomly from all the data in the record, the user has memorized, for example, selecting randomly from 10 pieces of data with earlier dates registered in the record. It is also possible to select from data with high possibility.

  After determining the data used for the answer, in order to obtain a dummy answer other than the answer used for the option, the number of registered records in the information table selected in S201 is compared (S204), and the set value or more (example: 10) (S204, YES), three random fields of data corresponding to the answer are read from the records other than the record selected in S202, and set as dummy answers (S205).

  When the number of registered records in the information table selected in S201 is equal to or smaller than the set value (S204, NO), from the type 600 of the dummy answer information table 123, the type 600 of the answer selected in S203, and the dummy answer data 601. Select the record to read. Three pieces of data are read at random from the dummy answer data 601 of the selected record, and set as dummy answers (S206).

  Based on the answer selected in S203 and the dummy answer selected in S205 or S206, an option including the answer to be displayed to the user is generated (S207).

  After the choices are generated, a record to be read from the question sentence table is selected from the question sentence table type 700 in FIG. 9 and the answer type selected in S203. The question parameter 701 of the selected record is read, and the question parameter data embedded in the question sentence is acquired from the data of the information table selected in S202.

Based on the question sentence acquired from the question sentence 702 of the selected record in the question sentence table, the question parameter is embedded to generate a question sentence to be displayed to the user (S208).
FIG. 4 is a diagram schematically showing display contents of the question text / option displayed on the LCD display unit 102 of the telephone device 1. FIG. 4 shows a question sentence / option with the location of the schedule book information table 120 as an answer, as an example of the question sentence / option.

  As shown in FIG. 4, the question text / options generated by the question text / option generation processing of FIG. 3 are displayed on the LCD screen, and the user presses the dial keys 1 to 4 of the telephone device 1 to select the options. Select an answer to the question sentence from 1 to 4.

  As a method for selecting an answer, in addition to the above, a dial key operation combining a dial key for moving the cursor and a decision dial key is also conceivable.

  As described above, according to the present invention, in the user authentication of the telephone device, there is an advantage that a telephone device having a user authentication function with higher security strength than before can be provided by changing the question / answer every time. .

  By the way, in the above embodiment, in the above-mentioned question display means, the personal information used for generating the question text / choice, the name or phone number of the person whom the user frequently calls, the person who frequently mails Name or email address, user's recently used app, WEB site address or site name recently viewed by the user, user's recently used search word, user's last destination name, phone number, etc. You may make it produce | generate a question sentence and a choice using the information based on usage history.

  Since data other than the personal information registered in the schedule book information table 120, the phone book information table 121, and the profile information table 122 can be used, the possibility of redisplaying the previously displayed question is reduced. The increase in personal information used for generating sentences and choices has the effect of providing a telephone device having a user authentication function with high security strength that is difficult for others to decipher.

1 ... telephone device 101 ... key input unit,
102 ... LCD display section,
103. Authentication start operation detection unit,
104 ... answer selection operation detection unit,
105 ... Question sentence / option display instruction section,
106 ... Authentication result display instruction section,
107 ... Question sentence / choice generation part,
108 ... the answer verification unit,
109 ... Authentication result operation instruction section,
110 ... storage part,
111 ... communication interface part,
112 ... communication control unit,
113 ... handset,
114 ... telephone function part,
120 ... schedule book information table,
121 ... Phonebook information table,
122 ... Profile information table,
123 ... dummy answer information table,
124 ... Question sentence table,
2 ... PSTN network

Claims (1)

A telephone device having a function of authenticating whether or not a person who uses the device is a registered user;
Content that refers to personal information relating to the user registered in advance and includes a telephone number or schedule data stored in its own device, randomly generates a question with any one of the personal information as an answer, and seeks the answer A question display means for displaying
Answer accepting means for accepting an answer to the question displayed by the question displaying means;
If the answer received by the answer accepting unit matches the answer obtained by the display unit, the person who uses the device authenticates that the user is registered in advance and permits the use of a predetermined function. A telephone device having a user authentication function.

Images