JP2014021779A - Authentication information input device, server device, authentication system and program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an authentication information input device which makes it difficult for a third person to guess authentication information.SOLUTION: An authentication information input device comprises: display means (110) which displays a display pattern configured to include authentication image data arbitrarily selected piece by piece from each authentication image group stored in storage means (130) and dummy image data of necessary pieces to configure the display pattern selected from a dummy image group stored in the storage means (130); and input means (110) which inputs at least one piece of image data selected by a user operation from the pieces of image data configuring the display pattern displayed on the display means (110) as authentication information used to permit authentication of a user. The authentication of the user is permitted when all pieces of the image data configuring the authentication information inputted by the input means (110) is authentication image data and the number of pieces of image data configuring the authentication information is the number necessary to permit the authentication of the user.

Description

  The present invention relates to a technique for performing authentication using image data that can be identified by a user based on the user's own memory.

  As a technology for authenticating whether or not the user is a legitimate user, the user side operates a screen such as a touch panel to input authentication information such as a personal identification number, and the input authentication information and authentication information set in advance on the system side, There is a technique for verifying whether the user is a legitimate user by checking. However, in this case, when the user inputs the authentication information by operating the touch panel or the like, the authentication information may be stolen by a third party.

  As a method to prevent authentication information from being seen by a third party, for example, the viewing angle of a touch panel or the like for inputting authentication information is narrowed, or the input authentication information is displayed on the screen with “*” mark or the like. There is a method of displaying only the number of input digits.

  Patent Document 1 (Japanese Patent No. 2985888) discloses a technology of a password input device in which a user inputs a password using a numeric keypad from a terminal such as a financial automatic machine (ATM). In the above Patent Document 1, an input numeric keypad screen and a fake input numeric keypad screen are displayed on the display, and information for instructing the user whether to input a dummy number or a password is presented on the fake input numeric keypad screen. In addition, by inserting a dummy number into the personal identification number, the personal identification number is prevented from being stolen by a third party when the personal identification number is input.

  Patent Document 2 (Japanese Patent Application Laid-Open No. 2005-71202) uses system authentication information by a recording medium incorporated in a system-side electronic device and personal authentication information by a user's personal input operation. A technique for mutually authenticating an individual and a system-side electronic device to be accessed is disclosed. In the above Patent Document 2, two sets of authentication data, that is, personal authentication data indicating personal authentication information and server authentication data indicating system authentication information are registered and set, and server-side authentication using server authentication data; User-side authentication using personal authentication data is performed alternately. In addition, image data is used for personal authentication data and server authentication data.

Japanese Patent No. 2985888 JP-A-2005-71202

  However, the technology disclosed in the above-mentioned Patent Document 1 assumes that a third party such as a financial automatic machine (ATM) is at a certain distance, and is seen by a third party from a close distance. It is not taken into consideration even when measures are taken. For this reason, for example, not only the movement of the user's hand entering the PIN but also the screen on which the PIN is entered may be seen due to the shoulder of the user entering the PIN or a hidden camera. May be identified as to which input is a dummy number, and the personal identification number may be known to a third party.

  In the above-mentioned Patent Document 2, since server-side authentication using server authentication data and user-side authentication using personal authentication data are alternately performed, all authentication information is instantly known to a third party. It can be prevented to some extent. However, it is not possible to prevent authentication information when watched. In addition, it is necessary to perform the authentication operation with the system-side electronic device a plurality of times, which takes time and effort to complete the authentication operation.

  The present invention has been made in view of the above circumstances, and even when a third party sees a screen on which the user's hand or authentication information is input when inputting the authentication information, the analogy of the authentication information is first. An object of the present invention is to provide an authentication information input device, a server device, an authentication system, and a program that are difficult for the three parties and that enable a user to perform authentication efficiently with a simple operation.

  In order to achieve this object, the present invention has the following features.

<Authentication information input device>
An authentication information input device according to the present invention includes:
The authentication image group including at least one authentication image data that can be identified by the user based on the user's own memory is stored more than the number necessary for permitting authentication of the user, and at least one different from the authentication image data. Authentication image data arbitrarily selected from each of the authentication image groups stored in the storage means for storing a plurality of dummy image groups each consisting of one dummy image data, and the dummy stored in the storage means Display means for displaying a display pattern comprising the dummy image data selected from the image group as many as necessary for constituting a display pattern; and
Input means for inputting at least one image data selected by a user operation from among image data constituting the display pattern displayed on the display means as authentication information used when permitting the user authentication; Have
All the image data constituting the authentication information input by the input means is the authentication image data, and the number of image data constituting the authentication information is the number necessary for permitting the user authentication. In this case, the user authentication is permitted.

<Server device>
The server device according to the present invention includes:
A server device connected to the authentication information input device,
The authentication image group including at least one authentication image data that can be identified by the user based on the user's own memory is stored more than the number necessary for permitting authentication of the user, and at least one different from the authentication image data. Authentication image data arbitrarily selected from each of the authentication image groups stored in the storage means for storing a plurality of dummy image groups each consisting of one dummy image data, and the dummy stored in the storage means Transmitting means for transmitting to the authentication information input device a display pattern configured to include the dummy image data selected from the image group as many as necessary to configure the display pattern;
Authentication information used when permitting at least one image data selected by a user operation from among image data constituting the display pattern displayed on the display means on the authentication information input device side to authenticate the user Receiving means for receiving the authentication information input to the input means on the authentication information input device side,
All the image data constituting the authentication information received by the receiving means is the authentication image data, and the number of image data constituting the authentication information is a number necessary for permitting the user authentication. An authentication means for authorizing the user in some cases;
It is characterized by having.

<Authentication system>
An authentication system according to the present invention includes:
An authentication system comprising an authentication information input device and a server device,
The server device
The authentication image group including at least one authentication image data that can be identified by the user based on the user's own memory is stored more than the number necessary for permitting authentication of the user, and at least one different from the authentication image data. Authentication image data arbitrarily selected from each of the authentication image groups stored in the storage means for storing a plurality of dummy image groups each consisting of one dummy image data, and the dummy stored in the storage means Transmitting means for transmitting to the authentication information input device a display pattern configured to include the dummy image data selected from the image group as many as necessary to configure the display pattern;
Authentication information used when permitting at least one image data selected by a user operation from among image data constituting the display pattern displayed on the display means on the authentication information input device side to authenticate the user Receiving means for receiving the authentication information input to the input means on the authentication information input device side,
All the image data constituting the authentication information received by the receiving means is the authentication image data, and the number of image data constituting the authentication information is a number necessary for permitting the user authentication. An authentication means for authorizing the user in some cases, and
The authentication information input device includes:
The display means for displaying the display pattern received from the server device;
Input means for inputting at least one image data selected by a user operation from among image data constituting the display pattern displayed on the display means as authentication information used when permitting the user authentication; ,
And transmitting means for transmitting the authentication information input to the input means to the server device.

<Program>
The program according to the present invention is:
The authentication image group including at least one authentication image data that can be identified by the user based on the user's own memory is stored more than the number necessary for permitting authentication of the user, and at least one different from the authentication image data. Authentication image data arbitrarily selected from each of the authentication image groups stored in the storage means for storing a plurality of dummy image groups each consisting of one dummy image data, and the dummy stored in the storage means A display process for displaying on the display means a display pattern that includes the dummy image data selected from the image group as many as necessary to form a display pattern; and
At least one piece of image data selected by a user operation from among image data constituting the display pattern displayed on the display unit is input to the input unit as authentication information used when the user authentication is permitted. Let the computer execute the input process,
All the image data constituting the authentication information input by the input means is the authentication image data, and the number of image data constituting the authentication information is the number necessary for permitting the user authentication. In this case, the user authentication is permitted.

The program according to the present invention is:
A program to be executed by a computer of a server device connected to an authentication information input device,
The authentication image group including at least one authentication image data that can be identified by the user based on the user's own memory is stored more than the number necessary for permitting authentication of the user, and at least one different from the authentication image data. Authentication image data arbitrarily selected from each of the authentication image groups stored in the storage means for storing a plurality of dummy image groups each consisting of one dummy image data, and the dummy stored in the storage means A transmission process for transmitting to the authentication information input device a display pattern configured to include the dummy image data selected from the image group as many as necessary to configure a display pattern;
Authentication information used when permitting at least one image data selected by a user operation from among image data constituting the display pattern displayed on the display means on the authentication information input device side to authenticate the user Receiving processing for receiving the authentication information input to the input means on the authentication information input device side,
All the image data constituting the authentication information received by the reception process is the authentication image data, and the number of image data constituting the authentication information is a number necessary for permitting the user authentication. In some cases, the computer is caused to execute an authentication process for permitting authentication of the user.

  According to the present invention, it is difficult for a third party to guess the authentication information even if the third party sees the screen on which the user's hand or the authentication information is input when inputting the authentication information. However, authentication can be performed efficiently with a simple operation.

2 is a diagram illustrating a configuration example of an authentication information input device 100 according to the present embodiment. FIG. 3 is a diagram illustrating a configuration example of a display pattern 10. FIG. It is a figure which shows the processing operation example at the time of the user authentication of 1st Embodiment. FIG. 10 is a diagram for explaining a case of authentication OK and a case of authentication NG. It is a figure which shows the system configuration example of an authentication system. It is the 1st figure showing an example of processing operation at the time of user authentication of a 2nd embodiment. It is a 2nd figure which shows the example of a processing operation at the time of the user authentication of 2nd Embodiment. It is a figure which shows the structural example of the authentication information input device 100 of 3rd Embodiment. It is a figure which shows the example of a processing operation at the time of the user authentication of 3rd Embodiment.

(Outline of Embodiment of Authentication Information Input Device 100 According to the Present Invention)
First, an outline of an authentication information input device 100 according to the present invention will be described with reference to FIGS. 1 and 2. FIG. 1 shows a configuration example of an embodiment of an authentication information input device 100 according to the present invention, and FIG. 2 shows a configuration example of a display pattern 10.

  An authentication information input device 100 according to the present invention includes a display unit (corresponding to the display input unit 110) that displays a display pattern 10 including a plurality of image data, and a display pattern 10 displayed on the display unit 110. An input unit (corresponding to the display input unit 110) for inputting at least one image data selected by user operation from the image data to be used as authentication information used when permitting user authentication; The display unit 110 stores more authentication image groups including at least one authentication image data that can be identified by the user based on the user's own memory, and the authentication image data required for permitting the user's authentication. Each of the authentication image groups stored in the storage unit 130 for storing a plurality of dummy image groups each including at least one dummy image data different from 2 is selected and the number of dummy image data necessary for constituting the display pattern 10 is selected from the dummy image group stored in the storage unit 130, and the display pattern 10 shown in FIG. All the image data constituting the authentication information configured and input by the input unit 110 is authentication image data, and the number of image data constituting the authentication information is a number necessary for permitting user authentication. In some cases, user authentication is permitted. As a result, even if the third party sees the screen on which the user's hand or authentication information is input when inputting the authentication information, it is difficult for the third party to guess the authentication information, and the user can easily Authentication can be performed efficiently by operation.

  Further, at least one image data selected by a user operation from the image data constituting the display pattern 10 displayed on the display unit 110 is input to the input unit 110 as authentication information used when the user authentication is permitted. Since it is determined whether or not to allow user authentication based on the authentication information input to the input unit 110, the user can efficiently perform authentication with a simple operation.

  When the authentication information input device 100 according to the present invention is a touch panel type portable terminal, it is also conceivable to input the authentication information in a train or a crowd. In this case, when the user is inputting authentication information, the user's hand, a screen on which the authentication information is input, or the like may be seen by a third party from a close range. In addition, it is considered that beginners, elderly people, and the like are very slow in inputting authentication information. In this case, there is a possibility that a screen on which the user's hand movement or authentication information is input is easily seen by a third party and stored.

  However, when the authentication of the user is permitted, the authentication information input device 100 according to the present invention displays at least the display pattern 10 in which the authentication image data constituting the authentication information is different at the next user authentication. Even if a third party sees a screen on which the user's hand or authentication information is input, it is possible to make the analogy of the authentication information difficult for the third party. However, since the user can identify the authentication image data based on the user's own storage, the user can input the authentication image data to the input unit 110 as authentication information. Hereinafter, embodiments of an authentication information input device 100 according to the present invention will be described in detail with reference to the accompanying drawings.

(First embodiment)
<Configuration example of authentication information input device 100>
First, a configuration example of the authentication information input device 100 of the present embodiment will be described with reference to FIG.

  The authentication information input device 100 of this embodiment includes a display input unit 110, a control unit 120, and a storage unit 130.

  The display input unit 110 is configured with a touch panel or the like, and displays and inputs information. The display input unit 110 according to the present embodiment displays the display pattern 10 shown in FIG. 2 composed of a plurality of image data. Then, when a user operation is performed on the image data constituting the displayed display pattern 10, the position of the image data where the user operation is performed is detected, and the display is performed based on the detected position information. It is determined which image data is selected by the user operation from the image data constituting the pattern 10.

  The display pattern 10 shown in FIG. 2 is composed of 36 pieces of image data. Display pattern 10 is necessary for configuring display pattern 10 with image data (authentication image data) (three) associated with authentication image groups corresponding to the number of image data constituting authentication information (three). Image data (dummy image data) (33 pieces) associated with dummy image groups corresponding to the number of remaining image data pieces (33 pieces). Therefore, the storage unit 130 stores at least three authentication image groups and at least 33 dummy image groups, and stores at least one image data in association with each group. The image data associated with the authentication image group is image data (authentication image data) that requires selection by the user when the user authentication is permitted. The image data associated with the dummy image group is image data (dummy image data) that should not be selected by the user when permitting user authentication.

  The display pattern 10 of the present embodiment is composed of 36 pieces of image data, and the user can select three pieces of image data that can be identified by the user based on the user's own memory from among the 36 pieces of image data. (Authentication image data) is input to the display input unit 110 as authentication information. If the authentication is successful based on the authentication information input to the display input unit 110, the display pattern 10 having at least the above-described authentication image data is displayed on the display input unit 110 at the next user authentication. For this reason, a third party who cannot recognize image data (authentication image data) that requires user selection when permitting user authentication must randomly try 42840 (36 x 35 x 34) input operations. (7140 ways (36 x 35 x 34/3 x 2 x 1) if the key input order of authentication input is not required). Even if a third party sees and remembers the three pieces of image data (authentication image data) that constitute authentication information over the shoulder of the user, for example, the number of image data (authentication image data) in each authentication image group Assuming that the number of image data (authentication image data) constituting authentication information is 3 and the number of image data (authentication image data) used during user authentication is 30 in total, all image data ( In order to view and remember the authentication image data), it is necessary to steal and store the authentication information more than 30 times. In addition, since the group ID of each authentication image group is managed only inside and is not displayed on the display input unit 110, the third party can determine which authentication image group the image data displayed on the display input unit 110 is. It is not possible to determine whether the image data belongs to the group ID. Moreover, even if the user sees and remembers the image data (authentication image data) constituting the authentication information over the shoulder of the user only once, the number of image data (authentication image data) in each authentication image group is 10, Assuming that the number of image data (authentication image data) that make up the image is 3, there are 1000 (10 × 10 × 10) combinations, so the same image data (authentication image data) as when stored by a third party The probability that the combination is displayed on the display input unit 110 can be reduced. For this reason, even when the third party sees the screen on which the user's hand or the authentication information is input when inputting the authentication information, the analogy of the authentication information can be made difficult for the third party.

  The control unit 120 performs display control of the display pattern 10 displayed on the display input unit 110. Further, authentication control of authentication information input by a user operation from the display input unit 110 is performed. The control unit 120 of this embodiment includes a pattern generation unit 121 and an authentication unit 122.

  The pattern generation unit 121 generates the display pattern 10 shown in FIG. 2 to be displayed on the display input unit 110, and displays the generated display pattern 10 on the display input unit 110. When the authentication unit 122 receives from the display input unit 110 authentication information configured by image data selected by a user operation from the image data configuring the display pattern 10 shown in FIG. The group ID of the group corresponding to the image data constituting the received authentication information is collated with the group ID of the authentication image group stored in the storage unit 130 in advance as the collation information, and both group IDs are all If the numbers match and the number of group IDs that match is the number (three) necessary for permitting user authentication, user authentication is permitted.

  The storage unit 130 includes an authentication image group table 131 for registering an authentication image group composed of at least one image data, and a dummy image group table 132 for registering a dummy image group composed of at least one image data. ing.

  In the authentication image group table 131, at least authentication image groups corresponding to the number of image data constituting authentication information are registered. In the present embodiment, since the number of image data constituting the authentication information is 3, at least three authentication image groups are registered in the authentication image group table 131.

  In addition, the dummy image group table 132 registers as many dummy image groups as the number obtained by subtracting the number of image data constituting authentication information from the number of image data necessary for constituting the display pattern 10. In the present embodiment, the number of image data constituting the display pattern 10 is 36, and the number of image data constituting authentication information is 3, so that the remaining 33 or more dummy image groups are dummy images. Register in the group table 132. In the display pattern 10 shown in FIG. 2, image data is selected from 33 dummy image groups. For example, one dummy image group including 330 image data is registered in the dummy image group table 132. It is also possible to select 33 pieces of image data from one dummy image group. It is also possible to register a plurality of dummy image groups including 33 image data in the dummy image group table 132 and select 33 image data from one dummy image group.

  The authentication image group is a group composed of image data that can be identified by the user based on the user's own storage, and manages the group ID and the image ID in association with each other as shown in FIG. The group ID is information for identifying the authentication image group, and the image ID is information for identifying the image data. The image data associated with the authentication image group is registered in advance by the user. The user registers image data that can be identified by the user for each authentication image group. The image data associated with the authentication image group is image data (authentication image data) that requires selection by the user when the user authentication is permitted.

  As the authentication image group, for example, a group of image data related to the individual is registered. In this case, for example, the photo data for elementary school, the photo data for kindergarten, and the photo data for babies are used as authentication image groups for your own photo data, and the teacher's photo data and your best friend's photo data are your own. Authenticating photo data of people related to the photo Authenticating photo data of items related to you, such as photo data of elementary school buildings, photo data of gloves bought for the first time, photo data of record jackets bought for the first time As an image group, it is registered as three groups of image data related to the individual.

  The dummy image group is a group composed of image data that should not be selected by the user when permitting user authentication, and manages the group ID and the image ID in association with each other. The group ID is information for identifying a dummy image group. Since the image data registered in the dummy image group is image data that should not be selected by the user when permitting user authentication, the image data may or may not be identified based on the user's own memory. It can be composed of any desired image data.

  As image data associated with each group, image data created by the user himself / herself, image data obtained by searching a website with an appropriate keyword, and the like can be used.

<Example of processing operation during user authentication>
Next, an example of processing operation during user authentication will be described with reference to FIG.

  First, the pattern generation unit 121 selects authentication image groups for the number of image data constituting the authentication information and dummy image groups for the number of remaining image data necessary for constituting the display pattern 10. The display pattern 10 is determined (Step S1).

  The display pattern 10 of the present embodiment is composed of 36 pieces of image data, and the number of image data constituting authentication information is 3, so three authentication image groups are selected from the authentication image group table 131. . In addition, 33 dummy image groups are selected from the dummy image group table 132. Thereby, the display pattern 10 composed of 36 groups can be determined.

  Next, the pattern generation unit 121 determines the display position of each group constituting the display pattern 10 (step S2). The method for determining the display position is not particularly limited, and can be determined by an arbitrary method. For example, the display position of each group can be determined at random. Thereby, for example, it is possible to determine which group of image data is displayed at the display positions 1 to 36 of the display pattern 10 shown in FIG.

  Next, the pattern generation unit 121 selects one image data from each group constituting the display pattern 10, and sets the selected image data at the display position determined in step S2 (step S3). Thereby, the display pattern 10 shown in FIG. 2 is generated.

  Next, the pattern generation unit 121 displays the display pattern 10 composed of the image data set in step S3 on the display input unit 110 (step S4). As a result, the display input unit 110 displays a display pattern 10 including three pieces of image data (authentication image data) constituting authentication information and 33 pieces of image data (dummy image data) not constituting authentication information. can do.

  When the display pattern 10 is displayed on the display input unit 110, the authentication unit 122 starts receiving authentication information (step S5). Further, the authentication unit 122 monitors authentication information input from the display input unit 110 and determines whether or not to start authentication (step S6).

  The user selects image data from the image data constituting the display pattern 10 displayed on the display input unit 110 based on the user's own memory. At least one image data selected by the user operation is input to the display input unit 110 as authentication information used when the user authentication is permitted.

  The authentication unit 122 determines that authentication is started when an input of a predetermined number (three in the present embodiment) of image data is received from the display input unit 110 by a user operation, or an authentication information input device When an authentication start button (not shown) separately installed at 100 is pressed, it is determined that authentication is started.

  When starting authentication (step S6 / Yes), the authentication unit 122 registers the group ID of the group corresponding to the image data constituting the authentication information received from the display input unit 110 and the authentication image group table 131. The group ID of the authenticated image group that has been checked is collated (step S7).

  The authentication unit 122 matches the group IDs of the authentication image groups registered in the authentication image group table 131 all of the group IDs corresponding to the image data constituting the authentication information received from the display input unit 110, In addition, when the number of matching group IDs is the number necessary for permitting user authentication (3) (step S8 / Yes), it is determined that the authentication is OK (step S9), and the process is terminated. (End). Thus, if it is determined that the authentication is OK, the process starts from step S1 described above. Therefore, at the next user authentication, the display pattern 10 is newly generated, and the generated new display pattern 10 is displayed on the display input unit. 110 will be displayed. For this reason, even if a third party steals the authentication information during the authentication OK authentication information input operation, the new display pattern 10 is displayed at the next user authentication. It can be made difficult for the three parties.

  Further, when even a part of the group ID of the group corresponding to the image data constituting the authentication information that has received the input from the display input unit 110 does not match the group ID of the authentication image group registered in the authentication image group table 131, Alternatively, even if all the group IDs of the groups corresponding to the image data constituting the authentication information received from the display input unit 110 match the group IDs of the authentication image groups registered in the authentication image group table 131, If the number of matching group IDs is not the number necessary for permitting user authentication (step S8 / No), it is determined as authentication NG (step S10). In this case, the same display pattern 10 is again displayed on the display input unit 110 (step S4). As a result, if it is determined as authentication NG, the same display pattern 10 is always displayed repeatedly, so even if a third party steals the authentication OK authentication information during the authentication OK authentication information input operation, It is possible to prevent an attack in which authentication NG is repeated until the same display pattern 10 as the authentication OK authentication information is displayed.

<Example of user authentication when authentication is OK>
Next, an example of user authentication in the case of authentication OK will be described with reference to FIG.

  Assume that the pattern generation unit 121 generates the display pattern 10 shown in FIG. 4A and displays the generated display pattern 10 on the display input unit 110. In this case, since the number of image data constituting the authentication information is three, the number necessary for permitting user authentication is three. It is assumed that the user has selected the image data P1-1, P2-2, and P3-3 from the image data constituting the display pattern 10 displayed on the display input unit 110 based on the user's own memory. .

  In this case, the display input unit 110 inputs the image data of P1-1, P2-2, and P3-3 selected by the user as authentication information. The authentication unit 122 is registered in the group ID of the group corresponding to the image data of P1-1, P2-2, and P3-3 constituting the authentication information input from the display input unit 110, and the authentication image group table 131. Check the group ID of the authenticated image group.

  The group IDs of the groups corresponding to the image data of P1-1, P2-2, and P3-3 constituting the authentication information are P1, P2, and P3. P1, P2, and P3 all match the group IDs of the authentication image groups registered in the authentication image group table 131, and the number of matching group IDs is the number necessary for permitting user authentication ( Because it is 3), it is determined that authentication is OK. In this case, at the next user authentication, the display pattern 10 is newly generated, and the generated new display pattern 10 is displayed on the display input unit 110.

  For this reason, even if a third party steals the authentication information during the authentication OK authentication information input operation, the new display pattern 10 is displayed at the next user authentication. It can be made difficult for the three parties.

<Example of user authentication for authentication NG>
Next, an example of user authentication in the case of authentication NG will be described with reference to FIG.

  Assume that the pattern generation unit 121 generates the display pattern 10 shown in FIG. 4B and displays the generated display pattern 10 on the display input unit 110. In this case, since the number of image data constituting the authentication information is three, the number necessary for permitting user authentication is three. It is assumed that the user has selected the image data D9-2, P2-2, and P3-3 from the image data constituting the display pattern 10 displayed on the display input unit 110 based on the user's own memory. .

  In this case, the display input unit 110 inputs the image data of D9-2, P2-2, and P3-3 selected by the user as authentication information. The authentication unit 122 is registered in the group ID of the group corresponding to the image data of D9-2, P2-2, and P3-3 constituting the authentication information input from the display input unit 110, and the authentication image group table 131. Check the group ID of the authenticated image group.

  The group IDs of the groups corresponding to the image data D9-2, P2-2, and P3-3 that constitute the authentication information are D9, P2, and P3. Since D9 is not the group ID of the authentication image group registered in the authentication image group table 131, it is determined as authentication NG. In this case, at the next user authentication, the same display pattern 10 as in FIG. 4B is displayed on the display input unit 110.

  As a result, if it is determined as authentication NG, the same display pattern 10 is always displayed repeatedly, so even if a third party steals the authentication OK authentication information during the authentication OK authentication information input operation, It is possible to prevent an attack in which authentication NG is repeated until the same display pattern 10 as the authentication OK authentication information is displayed.

  The authentication information input apparatus 100 according to the present embodiment collates the group ID of the group corresponding to the image data constituting the authentication information with the group ID of the authentication image group registered in the authentication image group table 131. In this case, it is possible to provide order. For example, it is assumed that the order of P1 → P2 → P3 is given to the group ID of the authentication image group registered in the authentication image group table 131. Further, it is assumed that the group IDs of the groups corresponding to the image data constituting the authentication information are P1, P2, and P3, and are input from the display input unit 110 in the order of P3 → P2 → P1. In this case, both group IDs match, but since the order of group IDs is different, authentication NG is determined. In this way, security can be further improved by performing the collation with the group IDs having order.

<Operation / Effect of Authentication Information Input Device 100 of this Embodiment>
As described above, the authentication information input device 100 according to the present embodiment includes the authentication image groups as many as necessary when the user authentication is permitted, and the remaining image data (dummy images) necessary for configuring the display pattern 10. Dummy image groups corresponding to the number of data) are selected, and the display pattern 10 is determined. Then, one image data is selected from each group constituting the display pattern 10, and the display pattern 10 constituted by the selected image data is displayed on the display input unit 110. As a result, the display pattern 10 including the authentication image data corresponding to the number required for permitting user authentication can be displayed on the display input unit 110. Next, at least one image data selected by a user operation from the image data constituting the display pattern 10 displayed on the display input unit 110 is displayed and input as authentication information used when permitting user authentication. Input to part 110. When the authentication information is input from the display input unit 110, the group ID of the group corresponding to the image data constituting the input authentication information is checked against the group ID of the authentication image group. The group IDs of the groups corresponding to the image data constituting the authentication information input from the display input unit 110 all match the group IDs of the authentication image group, and the number of the matching group IDs permits the user authentication. If the number is necessary, it is determined that authentication is OK, and a new display pattern 10 is displayed on the display input unit 110 at the next user authentication. Further, when even a part of the group ID of the group corresponding to the image data constituting the authentication information input from the display input unit 110 does not match the group ID of the authentication image group, or the authentication input from the display input unit 110 If the group IDs of the groups corresponding to the image data constituting the information all match the group IDs of the authentication image group, but the number of matching group IDs is not the number necessary for permitting user authentication The authentication pattern is determined to be NG, and the same display pattern 10 is displayed on the display input unit 110 at the next user authentication.

  When the authentication is OK, the authentication information input device 100 of the present embodiment displays a new display pattern 10. Therefore, when the authentication information is input, the user's hand and the screen on which the authentication information is input can be seen by a third party. Even if it has been, the analogy of authentication information can be made difficult for a third party.

  In the above-described embodiment, user authentication is performed using the group ID. However, it is also possible to perform user authentication using an image ID instead of a group ID. In this case, the image ID corresponding to the image data constituting the authentication information input from the display input unit 110, the image ID associated with the group ID of the authentication image group registered in the authentication image group table 131, and , And the image IDs corresponding to the image data constituting the authentication information input from the display input unit 110 all match the image IDs associated with the group IDs of the authentication image group, and the matching images If the number of IDs is the number necessary for permitting user authentication, it is determined that authentication is OK. Further, when even a part of the image ID corresponding to the image data constituting the authentication information input from the display input unit 110 does not match the image ID associated with the group ID of the authentication image group, or the display input unit 110 Even if the image IDs corresponding to the image data constituting the authentication information input from all match the image IDs associated with the group IDs of the authentication image group, the number of the matching image IDs will authenticate the user. If the number is not necessary for permission, it is determined as authentication NG.

(Second Embodiment)
Next, a second embodiment will be described.

  In the first embodiment, the case where user authentication is performed by the authentication information input apparatus 100 shown in FIG. 1 has been described.

  In the second embodiment, a case where user authentication is performed by the authentication information input device 100 and the server device 200 illustrated in FIG. 5 will be described. In the case of the second embodiment, the generation processing of the display pattern 10 and the authentication processing are performed on the server device 200 side. Hereinafter, the second embodiment will be described with reference to FIGS.

<System configuration example of authentication system>
First, a system configuration example of the authentication system of this embodiment will be described with reference to FIG.

  The authentication system of the present embodiment is configured by connecting an authentication information input device 100 and a server device 200 via a network NW. The network NW can be applied to any communication form regardless of wired or wireless, and the authentication information input apparatus 100 and the server apparatus 200 are connected in any connection form to perform two-way information communication.

  The authentication information input device 100 according to the present embodiment includes a display input unit 110, a control unit 120, and a communication unit 140. The display input unit 110 has the same function as in the first embodiment. The control unit 120 performs display control of the display pattern 10 displayed on the display input unit 110. The communication unit 140 communicates with the server device 200 in an arbitrary communication form.

  The server device 200 according to the present embodiment includes a control unit 220, a storage unit 230, and a communication unit 240. The control unit 220 is connected to the authentication information input device 100 via the communication unit 240 and performs display control of the display pattern 10 displayed on the display input unit 110 on the authentication information input device 100 side. Further, authentication control of authentication information input by a user operation from the display input unit 110 is performed. The control unit 220 of this embodiment includes a pattern generation unit 221 and an authentication unit 222. The functions of the pattern generation unit 221 and the authentication unit 222 have the same functions as those in the first embodiment. The communication unit 240 communicates with the authentication information input device 100 in an arbitrary communication form. The authentication image group table 231 and the dummy image group table 232 stored in the storage unit 230 are the same as those in the first embodiment.

<Example of processing operation during user authentication>
Next, an example of processing operation during user authentication will be described with reference to FIG.

  The pattern generation unit 221 of the server device 200 generates the display pattern 10 as in the first embodiment, and transmits the generated display pattern 10 to the authentication information input device 100 via the communication unit 240 (Step A1). ~ A4).

  The authentication information input device 100 receives the display pattern 10 via the communication unit 140 and displays the received display pattern 10 on the display input unit 110. Also, the reception of authentication information starts (step A5). As a result, the authentication information input device 100 has a display pattern 10 composed of three image data (authentication image data) constituting authentication information and 33 image data (dummy image data) not constituting authentication information. Can be displayed on the display input unit 110.

  The user selects image data from the image data constituting the display pattern 10 displayed on the display input unit 110 based on the user's own memory. At least one image data selected by the user operation is input to the display input unit 110 as authentication information used when the user authentication is permitted.

  The display input unit 110 starts authentication when receiving a predetermined number (three in the present embodiment) of image data input from the display input unit 110 by a user operation (step A6 / Yes). Further, when an authentication start button separately installed in the authentication information input device 100 is pressed, authentication is started (step A6 / Yes).

  When starting the authentication (step A6 / Yes), the display input unit 110 transmits the authentication information input from the display input unit 110 to the server device 200 via the communication unit 140 (step A7).

  When the server device 200 receives the authentication information via the communication unit 240, the authentication unit 222 receives the group ID of the group corresponding to the image data constituting the authentication information received from the authentication information input device 100, and the authentication image. The group ID of the authentication image group registered in the group table 231 is collated (step A8).

  The authentication unit 222 matches all the group IDs of the groups corresponding to the image data constituting the authentication information received from the authentication information input device 100 with the group IDs of the authentication image groups registered in the authentication image group table 231, and If the number of matching group IDs is the number (three) necessary for permitting user authentication, it is determined that authentication is OK. In addition, when a part of the group ID of the group corresponding to the image data constituting the authentication information received from the authentication information input device 100 does not match the group ID of the authentication image group registered in the authentication image group table 231, or Even if all the group IDs of the groups corresponding to the image data constituting the authentication information received from the authentication information input device 100 match the group IDs of the authentication image groups registered in the authentication image group table 231, they match. When the number of group IDs is not the number necessary for permitting user authentication, it is determined as authentication NG. The authentication unit 222 transmits the above-described verification result to the authentication information input device 100 via the communication unit 240 (step A9).

<Operation and effect of authentication system of this embodiment>
As described above, the server device 200 configuring the authentication system of the present embodiment displays the display pattern 10 generated by the server device 200 on the display input unit 110 on the authentication information input device 100 side. The authentication information input device 100 transmits at least one image data selected by a user operation from the display patterns 10 displayed on the display input unit 110 to the server device 200 as authentication information. The server device 200 performs user authentication based on the authentication information received from the authentication information input device 100.

  As a result, the authentication system of the present embodiment can obtain the same effects as those of the first embodiment, and further improve security compared to performing user authentication by the authentication information input device 100 alone as in the first embodiment. Can be made.

  Further, the display pattern 10 is generated on the server device 200 side, and the generated display pattern 10 is displayed on the display input unit 110 on the authentication information input device 100 side. Then, the server apparatus 200 receives the image data selected by the user operation from the display pattern 10 displayed on the display input unit 110 as authentication information, and performs user authentication based on the received authentication information. For this reason, since authentication such as challenge and response can be performed, spoofing of the terminal itself (including spoofing of a program on the terminal) can be prevented.

  In the processing operation shown in FIG. 6 described above, the server apparatus 200 determines the display position of each group that constitutes the display pattern 10 in the processing of steps A2 and A3, and 1 from each group that constitutes the display pattern 10. One image data is selected, and the selected image data is set as a display position.

  However, as in the processing operation shown in FIG. 7, the server apparatus 200 transmits the image data constituting the display pattern 10 to the authentication information input apparatus 100 without determining the display position (step B1). On the information input device 100 side, it is also possible to determine and display the display position of the image data constituting the display pattern 10 (step B2).

  Specifically, the pattern generation unit 221 of the server device 200 performs authentication image groups for the number of image data constituting the authentication information and dummy for the number of remaining image data necessary for configuring the display pattern 10. The image group is selected, and the display pattern 10 is determined (step A1). Next, the pattern generation unit 221 selects one image data from each group constituting the display pattern 10, and displays the display pattern 10 constituted by the selected image data via the communication unit 240. (Step B1).

  The authentication information input device 100 receives the display pattern 10 via the communication unit 140, determines the display position of each image data constituting the received display pattern 10, and sets each image data to the determined display position Then, the display pattern 10 is displayed on the display input unit 110 (step B2). Thereby, the display position of the image data constituting the display pattern 10 can be arbitrarily set on the authentication information input device 100 side.

  In the above-described embodiment, user authentication is performed using the group ID. However, as in the first embodiment, it is also possible to perform user authentication using an image ID instead of a group ID. In this embodiment, it is preferable to use an image ID string. This is because when the group ID string is used, the same data string always flows through the communication path when used by a legitimate user, which is not desirable in terms of security. By using an image ID string as authentication information, a different image ID string can be sent to the communication path every time, so that an effect of being strong against wiretapping and replay attack can be obtained.

(Third embodiment)
Next, a third embodiment will be described.

  In the first embodiment, as shown in FIG. 2, the authentication image group and the dummy image group can be identified. In this case, when the data in the storage unit 130 is analyzed, there is a possibility that image data belonging to the authentication image group is specified.

  In the third embodiment, as shown in FIG. 8, the authentication image group and the dummy image group are managed in one image group table 133 without distinction. Then, the group ID of the authentication image group is hashed with a hash function (one-way function such as HMAC) and stored in the authentication table 134 in advance. When the authentication is started, as shown in FIG. 9, in the process of step S20, the hash value is calculated by hashing the group ID of the group corresponding to the image data constituting the authentication information input by the user. (Step S20). Then, the hash value stored in advance in the authentication table 134 is compared with the hash value calculated in step S20 (step S21).

  If the two hash values match (step S22 / Yes), it is determined that the authentication is OK (step S9). If both hash values do not match (step S22 / No), it is determined as authentication NG (step S10). When ordering group IDs configured as authentication information, it is preferable to use a code (for example, P3 → P2 → P1) generated by concatenating group IDs in the order of input. If the group IDs that are configured as authentication information are not ordered, codes generated by concatenating the group IDs in ascending order (for example, P1 → P2 → P3), or the group IDs are composed of prime numbers. It is also possible to use a product of group IDs (for example, P1 × P2 × P3).

  In the embodiment described above, user authentication is performed using a hashed group ID. However, it is also possible to perform user authentication using a hashed image ID. In this case, the image ID of the authentication image data used at the time of collation is hashed and stored in the authentication table 134. When the hashed group ID is stored in the authentication table 134, it is not necessary to store it for each display pattern 10. However, when storing the hashed image ID in the authentication table 134, it is desirable to store it for each display pattern 10.

<Operation / Effect of Authentication Information Input Device 100 of this Embodiment>
As described above, the authentication information input device 100 according to the present embodiment has the hash value calculated by hashing the group ID of the authentication image group constituting the display pattern 10 or the image ID of the authentication image data constituting the display pattern 10. Are stored in the authentication table 134 in advance. As a result, even if a third party who obtains the authentication information input device 100 analyzes the information in the authentication table 134, it is possible to prevent the identification of authentication information for which authentication is OK. As a result, security can be further improved.

  The above-described embodiment is a preferred embodiment of the present invention, and the scope of the present invention is not limited to the above-described embodiment alone, and various modifications are made without departing from the gist of the present invention. Implementation is possible.

  For example, in the embodiment described above, the display pattern 10 is composed of a total of 36 pieces of image data including three pieces of authentication image data and 33 pieces of dummy image data, as shown in FIG. However, the display pattern 10 is an example, and can be configured by an arbitrary number of image data. However, the display pattern 10 needs to be configured to include at least as many pieces of authentication image data that can be identified by the user based on the user's own memory as required when the user authentication is permitted.

  Further, the display pattern 10 described above is composed of image data selected one by one from each group. However, it is also possible to select a plurality of dummy image data from one group without selecting one dummy image data from one group.

  In the above-described embodiment, the display input unit 110 that combines the function of displaying the display pattern 10 and the function of inputting the image data constituting the authentication information has been described as an example. However, a function (display unit) for displaying the display pattern 10 and a function (input unit) for inputting image data constituting the authentication information can be provided separately.

  Further, the control operation in the authentication information input device 100 and the server device 200 of the present embodiment described above can be executed using hardware, software, or a combined configuration of both.

  In the case of executing processing using software, it is possible to install and execute a program in which a processing sequence is recorded in a memory in a computer incorporated in dedicated hardware. Alternatively, the program can be installed and executed on a general-purpose computer capable of executing various processes.

  For example, the program can be recorded in advance on a hard disk or ROM (Read Only Memory) as a recording medium. Alternatively, the program can be stored (recorded) temporarily or permanently in a removable recording medium. Such a removable recording medium can be provided as so-called package software. Examples of the removable recording medium include a floppy (registered trademark) disk, a CD-ROM (Compact Disc Read Only Memory), an MO (Magneto optical) disk, a DVD (Digital Versatile Disc), a magnetic disk, and a semiconductor memory.

  The program is installed in the computer from the removable recording medium as described above. In addition, it is wirelessly transferred from the download site to the computer. In addition, it is transferred to the computer via a network by wire.

  Further, the authentication information input device 100 and the server device 200 in the present embodiment are not only executed in time series according to the processing operation described in the above embodiment, but also the processing capability of the device that executes the processing, or necessary. It is also possible to construct to execute in parallel or individually.

100 Authentication Information Input Device 110 Display Input Unit (Display Unit, Input Unit)
120 Control Unit 121 Pattern Generation Unit 122 Authentication Unit (Authentication Unit)
130 Storage Unit 131 Authentication Image Group Table (Storage Unit)
132 Dummy image group table (storage means)
133 Image group table 134 Authentication table (authentication storage means)
140 Communication unit (transmission means)
200 Server Device 220 Control Unit 221 Pattern Generation Unit 222 Authentication Unit (Authentication Unit)
230 Storage Unit 231 Authentication Image Group Table (Storage Unit)
232 Dummy image group table (storage means)
240 Communication unit (transmission means, reception means)
NW network

Claims (11)

The authentication image group including at least one authentication image data that can be identified by the user based on the user's own memory is stored more than the number necessary for permitting authentication of the user, and at least one different from the authentication image data. Authentication image data arbitrarily selected from each of the authentication image groups stored in the storage means for storing a plurality of dummy image groups each consisting of one dummy image data, and the dummy stored in the storage means Display means for displaying a display pattern comprising the dummy image data selected from the image group as many as necessary for constituting a display pattern; and
Input means for inputting at least one image data selected by a user operation from among image data constituting the display pattern displayed on the display means as authentication information used when permitting the user authentication; Have
All the image data constituting the authentication information input by the input means is the authentication image data, and the number of image data constituting the authentication information is the number necessary for permitting the user authentication. The authentication information input device, wherein the user authentication is permitted. The display means includes
When authentication of the user is permitted, the authentication image data displays at least the different display pattern,
The authentication information input device according to claim 1, wherein when the user authentication is not permitted, the authentication image data displays the same display pattern.   The group information corresponding to all the image data constituting the authentication information input by the input means and the authentication image group information stored in the storage means are collated and input by the input means. The group information corresponding to all the image data constituting the authentication information is the authentication image group information stored in the storage means, and the authentication information input by the input means The authentication unit for permitting the authentication of the user when the number of groups corresponding to all the image data constituting the image is a number necessary for permitting the authentication of the user. The authentication information input device according to claim 1 or 2.   All the image data constituting the authentication information inputted by the input means and the authentication image data stored in the storage means are collated to constitute the authentication information inputted by the input means. All the image data is the authentication image data stored in the storage unit, and the number of all the image data constituting the authentication information input by the input unit permits the user authentication. The authentication information input device according to claim 1, further comprising an authentication unit that permits authentication of the user when the number is necessary. Transmitting means for transmitting the authentication information input to the input means to a server device connected to the authentication information input device;
All the image data constituting the authentication information transmitted by the transmission means is the authentication image data, and the number of image data constituting the authentication information is a number necessary for permitting the user authentication. 3. The authentication information input device according to claim 1, wherein in some cases, authentication of the user is permitted on the server device side. 4. Authentication storage means for storing information of the authentication image group obtained by hashing information of the authentication image group corresponding to all the authentication image data constituting the display pattern;
The authentication image group information obtained by hashing the authentication image group information corresponding to the image data constituting the authentication information input by the input unit, and the hashed authentication stored in the authentication storage unit Image group information, and when both hashed information matches, an authentication unit that permits authentication of the user;
The authentication information input device according to claim 1, further comprising: Authentication storage means for storing information of the authentication image data obtained by hashing information of all the authentication image data constituting the display pattern;
The image data information hashed from the image data information constituting the authentication information input by the input means is collated with the hashed authentication image data information stored in the authentication storage means. And, if both hashed information matches, an authentication means for permitting authentication of the user;
The authentication information input device according to claim 1, further comprising: A server device connected to the authentication information input device,
The authentication image group including at least one authentication image data that can be identified by the user based on the user's own memory is stored more than the number necessary for permitting authentication of the user, and at least one different from the authentication image data. Authentication image data arbitrarily selected from each of the authentication image groups stored in the storage means for storing a plurality of dummy image groups each consisting of one dummy image data, and the dummy stored in the storage means Transmitting means for transmitting to the authentication information input device a display pattern configured to include the dummy image data selected from the image group as many as necessary to configure the display pattern;
Authentication information used when permitting at least one image data selected by a user operation from among image data constituting the display pattern displayed on the display means on the authentication information input device side to authenticate the user Receiving means for receiving the authentication information input to the input means on the authentication information input device side,
All the image data constituting the authentication information received by the receiving means is the authentication image data, and the number of image data constituting the authentication information is a number necessary for permitting the user authentication. An authentication means for authorizing the user in some cases;
A server device characterized by comprising: An authentication system comprising an authentication information input device and a server device,
The server device
The authentication image group including at least one authentication image data that can be identified by the user based on the user's own memory is stored more than the number necessary for permitting authentication of the user, and at least one different from the authentication image data. Authentication image data arbitrarily selected from each of the authentication image groups stored in the storage means for storing a plurality of dummy image groups each consisting of one dummy image data, and the dummy stored in the storage means Transmitting means for transmitting to the authentication information input device a display pattern configured to include the dummy image data selected from the image group as many as necessary to configure the display pattern;
Authentication information used when permitting at least one image data selected by a user operation from among image data constituting the display pattern displayed on the display means on the authentication information input device side to authenticate the user Receiving means for receiving the authentication information input to the input means on the authentication information input device side,
All the image data constituting the authentication information received by the receiving means is the authentication image data, and the number of image data constituting the authentication information is a number necessary for permitting the user authentication. An authentication means for authorizing the user in some cases, and
The authentication information input device includes:
The display means for displaying the display pattern received from the server device;
Input means for inputting at least one image data selected by a user operation from among image data constituting the display pattern displayed on the display means as authentication information used when permitting the user authentication; ,
An authentication system comprising: a transmission unit configured to transmit the authentication information input to the input unit to the server device. The authentication image group including at least one authentication image data that can be identified by the user based on the user's own memory is stored more than the number necessary for permitting authentication of the user, and at least one different from the authentication image data. Authentication image data arbitrarily selected from each of the authentication image groups stored in the storage means for storing a plurality of dummy image groups each consisting of one dummy image data, and the dummy stored in the storage means A display process for displaying on the display means a display pattern that includes the dummy image data selected from the image group as many as necessary to form a display pattern; and
At least one piece of image data selected by a user operation from among image data constituting the display pattern displayed on the display unit is input to the input unit as authentication information used when the user authentication is permitted. Let the computer execute the input process,
All the image data constituting the authentication information input by the input means is the authentication image data, and the number of image data constituting the authentication information is the number necessary for permitting the user authentication. In this case, authentication of the user is permitted. A program to be executed by a computer of a server device connected to an authentication information input device,
The authentication image group including at least one authentication image data that can be identified by the user based on the user's own memory is stored more than the number necessary for permitting authentication of the user, and at least one different from the authentication image data. Authentication image data arbitrarily selected from each of the authentication image groups stored in the storage means for storing a plurality of dummy image groups each consisting of one dummy image data, and the dummy stored in the storage means A transmission process for transmitting to the authentication information input device a display pattern configured to include the dummy image data selected from the image group as many as necessary to configure a display pattern;
Authentication information used when permitting at least one image data selected by a user operation from among image data constituting the display pattern displayed on the display means on the authentication information input device side to authenticate the user Receiving processing for receiving the authentication information input to the input means on the authentication information input device side,
All the image data constituting the authentication information received by the reception process is the authentication image data, and the number of image data constituting the authentication information is a number necessary for permitting the user authentication. In some cases, the program causes the computer to execute an authentication process for permitting the authentication of the user.

Images