JP2014153859A - Personal authentication system using image corresponding to action history, authentication method, and authentication program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an authentication system capable of automatically generating and updating a combination of images corresponding to actions of a person to be authenticated which are stored only by the person, as a password.SOLUTION: A personal authentication system for performing personal authentication by a plurality of images comprises: an action history storage unit for acquiring and storing identification information on a person to be authenticated and action history of the person to be authenticated (movement history, purchase history by a credit card, browsing history of web sites, and the like); an authentication image storage unit for acquiring and storing images for authentication corresponding to the action history (a location image, a store image, a commodity image, a submission image, and the like); an authentication image generation unit for extracting a combination of a plurality images for authentication corresponding to the action history stored in the action history storage unit and displaying a plurality of false images different from the images for authentication, together with the images for authentication simultaneously on an authentication screen of a terminal of the person to be authenticated; and a personal authentication unit for accepting a selection of an image displayed on the authentication screen from the terminal of the person to be authenticated and determining whether personal authentication is possible.

Description

  The present invention relates to a personal authentication system, an authentication method, and an authentication program for authenticating an individual, and in particular, a personal authentication system and an authentication method for authenticating an individual based on an image corresponding to an action history of a person to be authenticated. And an authentication program.

  In recent years, in order to perform personal authentication electronically, an authentication system that performs authentication based on the action history of the individual to be authenticated has been proposed. For example, in Patent Literature 1, when an authentication target is imaged by a camera of a user terminal, the current position information of the user, current time information, and image data of the target are sent to a server and sent using this operation as a trigger. An authentication information issuance system that issues an authentication ID when the image data is collated with previously registered position conditions, time conditions, and image conditions and it is determined that the above conditions are satisfied is disclosed.

  In addition, Patent Document 2 prevents the bias of behavior history information by generating authentication information by combining various behavior histories such as purchase history, admission to a building, merging with acquaintances, photographing images, etc. An authentication system for making it difficult for others to guess action history information is disclosed.

JP2009-175887 JP2011-59837A

  The authentication systems described in Patent Documents 1 and 2 are intended to construct an authentication system that generates authentication information without forcing the person to be authenticated to perform operations such as password registration and biometric information registration. . However, even in such an authentication system, in order to generate authentication information, it is necessary for the user to take an image of an object used for authentication (Patent Document 1), or to prevent bias in behavior history information. For this reason, there is a privacy problem such that various behavior histories of the user are collected in a large amount without being conscious of the user (Patent Document 2).

  On the other hand, the conventional authentication method using character string passwords is an easy and familiar method for many users. However, passwords using character strings are easily leaked, and passwords are regularly updated to prevent leakage. This is a troublesome work for the user. For this reason, a mechanism that automatically generates and updates authentication information is desired while retaining the convenience of a conventional password.

  Therefore, in the present invention, in view of the above-described problems, the actual behavior of the authenticated person stored only by the authenticated person using image information instead of text information and combining the image information and the action history information. An object of the present invention is to provide a personal authentication system in which a combination of images corresponding to is used as a password, and this password is automatically generated and updated.

  The personal authentication system of the present invention provides the following solution.

  The invention described in claim 1 is a personal authentication system that performs personal authentication using a plurality of images, and includes an identification information of a person to be authenticated and an action history storage unit that acquires and stores the action history of the person to be authenticated. A combination of an authentication image storage unit that acquires and stores an authentication image corresponding to the action history and a plurality of authentication images corresponding to the action history stored in the action history storage unit, and the authentication An authentication image generation unit that displays a plurality of false images different from the image for authentication on the authentication screen of the terminal of the person to be authenticated at the same time as the authentication image, and selection of the image displayed on the authentication screen A personal authentication unit that receives from the terminal and determines whether or not personal authentication is possible.

  According to the above configuration, the daily behavior of the person to be authenticated is recorded in the behavior history storage unit, an image corresponding to each recorded behavior is acquired, an image corresponding to the acquired behavior history, and a behavior history A plurality of false images that do not correspond to the above are combined and displayed simultaneously on the authentication screen. When the person to be authenticated selects a correct image combination that matches his / her behavior known only to the person from the authentication screen, the person authentication is determined to be OK. In this way, an authentication system that combines the action history of the person to be authenticated and the image can be realized. Since the combination of images based on the action history is used as the authentication password, it is not necessary to memorize the character string like a normal password, and it is possible to respond to the action of the person to be authenticated without registering / updating the password by yourself. The authentication image that becomes the authentication password is also automatically updated.

  According to a second aspect of the present invention, in the first aspect of the present invention, the personal authentication unit is configured so that the person to be authenticated corresponds to the order of the actions of the person to be authenticated stored in the action history on the authentication screen. When the authentication image to be selected is selected, it is determined that the personal authentication is completed.

  According to the above configuration, it is not sufficient to correctly select an image as an authentication password, and the selection order is also considered. That is, the personal authentication is OK only when the order of the actions of the person to be authenticated has correctly selected the order of the images corresponding to those actions. In this way, the authentication strength can be increased by greatly reducing the probability that the combination of images selected coincides with the one selected by others.

  The invention according to claim 3 is the invention according to claim 2, wherein a terminal location information acquisition unit that acquires a current location of the portable terminal of the person to be authenticated and stores the current location in the action history storage unit, and the terminal location A point image acquisition unit that acquires a point image that is an image of the position of the mobile terminal acquired by the information acquisition unit, and the authentication image generation unit uses the authentication image from the acquired point image. The combination is extracted.

  According to said structure, the positional information on a to-be-authenticated person's portable terminal is acquired as action history, and the image of the point to which the to-be-authenticated person moved is acquired at any time. And the combination of the image of a some point, and its order are used as an authentication password. In this way, it is possible to easily collect the action history of the person to be authenticated, and for the person to be authenticated, the image (photo etc.) of the place he / she visited is used as the authentication password, so the memory can be easily revived and selected Easy to do.

  According to a fourth aspect of the present invention, in the third aspect of the present invention, the authentication image generating unit is a photographic image taken from a direction corresponding to the movement direction of the person to be authenticated among the acquired spot images. From the above, the combination of the authentication images is extracted.

  According to said structure, said point image is extracted in consideration of the moving direction which the to-be-authenticated person actually moved. That is, it is necessary to correctly select an image corresponding to its own moving direction (an image viewed from substantially the same direction as the moving direction) from a plurality of images at the same point. By doing in this way, authentication strength can further be raised.

  The invention according to claim 5 is the invention according to claim 2, further comprising a credit card usage information acquisition unit that acquires credit card usage information of the person to be authenticated and stores the information in the action history storage unit, The authentication image generation unit extracts a combination of the authentication images from an image of a store using a credit card based on the credit card usage information acquired by the credit card usage information acquisition unit.

  According to said structure, when a to-be-authenticated person is a member of a credit card, the purchase history using the credit card is used as an action history, and the image of the store (member store) used is acquired. The store image thus obtained is extracted as an authentication image. By doing so, the image of the store where the person to be authenticated actually shopped can be used as the authentication image, so that it tends to remain in memory.

  The invention according to claim 6 is the invention according to claim 2, further comprising a credit card usage information acquisition unit that acquires credit card usage information of the person to be authenticated and stores the information in the action history storage unit, The authentication image generation unit extracts a combination of the authentication images from an image of a product purchased with a credit card based on the credit card usage information acquired by the credit card usage information acquisition unit.

  According to the above configuration, as in the above case, when the person to be authenticated is a member of a credit card, the purchase history using the credit card is used as the action history, and an image of the purchased product is acquired. The product image thus obtained is extracted as an authentication image. By doing so, an image of a product actually purchased by the person to be authenticated can be used as an authentication image, and therefore, it is more easily stored.

  The invention according to claim 7 is the invention according to claim 5 or 6, wherein the member attribute of the credit card of the person to be authenticated is acquired, and the authentication displayed on the authentication screen according to the member attribute. The number of images for use or the type of the false image is changed.

  According to the above configuration, when the person to be authenticated is a member of a credit card, the number of authentication images displayed on the authentication screen or the type of false image is determined according to the registered member attributes (age, gender, address, etc.). Change. For example, when the person to be authenticated is an elderly person, the number of authentication images can be relatively reduced to reduce erroneous input. For example, when the person to be authenticated is a woman, the product image displayed as a false image can be limited to only products that are highly likely to be purchased by the woman. Moreover, the store image as a false image can also be used centering on the image of the store in the area where the person to be authenticated lives. By doing in this way, the authentication screen suitable for a to-be-authenticated person can be comprised.

  The invention described in claim 8 is the invention described in claim 2, further comprising a site browsing information acquisition unit including information of an image posted by the person to be authenticated on the website or an image downloaded from the website, The authentication image generation unit extracts a combination of the authentication images from the posted or downloaded image.

  According to the above configuration, the browsing history of the website accessed by the person to be authenticated is used as the action history. In this case, an image posted by the person to be authenticated or a downloaded image on the accessed website can be used as an authentication image. In particular, an image posted without a mark or a downloaded image is not easily guessed by a third party and is suitable as an authentication image.

  The invention according to claim 9 is the invention according to any one of claims 1 to 8, wherein the authentication image generation unit accepts selection of the pattern of the action history for extracting the authentication image. It is characterized by.

  According to the said structure, a to-be-authenticated person can select the pattern used as action history at any time. In this way, the person to be authenticated can select the action history of various patterns, so the bias of the action history is prevented to further increase the authentication strength, or conversely, the action history collected by the system is limited. And protect your privacy.

  The invention according to claim 10 is the invention according to any one of claims 1 to 8, wherein the authentication image is a still image or a moving image.

  According to the above configuration, the authentication image can include not only a still image but also a moving image. In this way, when the movement history or purchase history is used as the action history, it becomes easy to distinguish a point (especially when the movement direction is taken into account) or a store image that is difficult to distinguish only with a still image. In addition, when the browsing history of the website is used as the action history, the target can be extended to a website dedicated to moving images.

  The invention according to claim 11 is a personal authentication method for performing personal authentication by using a plurality of images, the step of acquiring and storing identification information of a person to be authenticated and an action history of the person to be authenticated, and the action Obtaining and storing an authentication image corresponding to a history; extracting a combination of a plurality of authentication images corresponding to the action history of the person to be authenticated from the stored authentication image; and Displaying a plurality of false images different from the image on the authentication screen of the authentication subject's terminal simultaneously with the authentication image, and receiving the selection of the image displayed on the authentication screen from the authentication subject's terminal. And a step of determining whether or not the identity authentication is possible.

  The invention described in claim 11 regards the personal authentication system described in claim 1 as an invention of the personal authentication method, and has the same effects as the invention described in claim 1.

  The invention according to claim 12 is a personal authentication program for performing personal authentication by using a plurality of images, and acquiring and storing identification information of the person to be authenticated and an action history of the person to be authenticated in a computer; Acquiring and storing an authentication image corresponding to the action history; extracting a combination of a plurality of authentication images corresponding to the action history of the person to be authenticated from the stored authentication image; Displaying a plurality of false images different from the authentication image on the authentication screen of the terminal of the person to be authenticated at the same time as the authentication image; and selecting the image displayed on the authentication screen And the step of determining whether or not to authenticate the user is executed.

  The invention described in claim 12 captures the personal authentication system according to claim 1 or the personal authentication method according to claim 11 as an invention of a personal authentication program executed by a computer. The same effects as those of the invention according to Item 11 are exhibited.

  According to the present invention, it is possible to provide a personal authentication system that can automatically generate and update, as a password, a combination of images corresponding to the actions of the authenticated person stored only by the authenticated person.

It is a figure which shows the structure and functional block of a personal authentication system which concern on one Embodiment of this invention. It is a figure which shows the specific example of the data stored in movement history DB102, credit card utilization history DB105, and site browsing history DB107. It is a figure which shows the specific example of the data stored in the site browsing history memory | storage part 202 of the to-be-authenticated person terminal 200, and the captured image memory | storage part 203. FIG. It is a figure which shows the flow of the image production | generation process for authentication. It is a figure which shows the flow of a personal authentication process. It is a figure which shows an example of an action history pattern selection screen. It is a figure which shows an example of an authentication screen. It is a figure which shows another example of an authentication screen.

  DESCRIPTION OF EMBODIMENTS Hereinafter, embodiments for carrying out the present invention (hereinafter referred to as embodiments) will be described in detail with reference to the accompanying drawings. In addition, the same number or code | symbol is attached | subjected to the same element throughout the description of embodiment.

  FIG. 1 is a diagram showing a configuration and functional blocks of a personal authentication system according to an embodiment of the present invention. FIG. 2 is a diagram showing a specific example of data stored in the movement history DB 102, the credit card usage history DB 105, and the site browsing history DB 107. FIG. 3 is a diagram illustrating a specific example of data stored in the site browsing history storage unit 202 and the captured image storage unit 203 of the user terminal 200 to be authenticated. Hereinafter, FIGS. 1 to 3 will be described together.

  In the personal authentication system of the present embodiment, the core personal authentication server 100 is connected to the authenticated user terminal 200, the map information providing system 300, the member store system 400, and the credit card company system 500 via networks. Configured.

  The personal authentication server 100 is a server that is accessed first when a person to be authenticated receives authentication of another system using the user terminal 200 to be authenticated, and may be configured independently. It may be built in and configured. For example, the authentication for logging in to the credit card system may be performed by incorporating the personal authentication server 100 into the credit card company system 500. The function of the personal authentication server 100 will be described in detail later.

  The person-to-be-authenticated terminal 200 is one or a plurality of terminals possessed by the person to be authenticated, and includes at least one portable terminal (mobile phone, smartphone, tablet terminal, etc.) carried by the person to be authenticated. Shall be. Authentication-subjected user terminal 200 has as its functional configuration a position information acquisition unit 201 (in the case of a mobile terminal) that acquires its own position information such as GPS (Global Positioning System), a site browsing history storage unit 202 incorporated in a browser, etc. A captured image storage unit 203 and a display unit 204 that store images captured by the built-in camera are included.

  The site browsing history storage unit 202 of the authenticated user terminal 200 stores the browsed website and image data accessed (uploaded or downloaded) together with date / time information, as shown in the upper part of FIG. Further, as shown in the lower part of FIG. 3, the captured image storage unit 203 stores captured images (photos or videos) and date / time information when the images are transmitted to the outside. The “image” includes not only a still image but also a moving image unless otherwise specified, and means a photograph, a painting, an illustration, a sketch, a figure, a symbol, a video, and an animation.

  The map information providing system 300 is a system of a service provider that mainly provides a map and information related to the map. The map information providing system 300 is associated with a position on the map from a certain point such as a building such as a commercial facility or a public facility or an intersection. A point image information DB 301 for storing a point image that is a landscape is provided. The member store system 400 is a credit card member store system, and mainly stores store information 401 for storing store information (including store location, access, store images), and information on products handled at the store ( A product information DB 402 for storing product images (including product images).

  The personal authentication server 100 includes a terminal location information acquisition unit 101, a spot image acquisition unit 103, a credit card use information acquisition unit 104, a site browsing information acquisition unit 106, a store image / product image acquisition unit 109, and an authentication image as processing units. A generation unit 110 and a personal authentication unit 111 are included. Further, as a database for storing data necessary for each processing unit and processing results, a movement history DB 102, a credit card use history DB 105, a site browsing history DB 107, a member store DB 108, and an authentication image DB 112 (authentication image storage unit) are used. Prepare. The movement history DB 102, the credit card usage history DB 105, and the site browsing history DB 107 are all databases that store information indicating the action history of the person to be authenticated, and when there is no need to distinguish each of them, the action history storage unit as a whole. Let's call it 120.

  The terminal location information acquisition unit 101 acquires location information of the terminal from the portable authenticated user terminal 200 provided with location information acquisition means such as GPS as needed. The timing for acquiring the position information is basically acquired at a time interval (for example, several minutes to several tens of minutes) preset on the terminal side after the terminal is turned on. When you are stationary, or when you perform a certain operation on the terminal (phone operation, mail operation, browsing the website, calling an app, taking a picture with the built-in camera, etc.) Information may be acquired. The acquired location information of the terminal (specifically, latitude and longitude, including altitude in some cases) is stored in the movement history table 102a of the movement history DB 102 together with the acquired date and time information for each authenticated person ID. (See FIG. 2 (a)).

  The spot image acquisition unit 103 acquires spot image information from the spot image information DB 301 of the map information providing system 300. A point here means a place with a facility or terrain that serves as a marker of position information on a road or a specific place such as a building, a store, an intersection, a station, an interchange, a bridge, or the like. The image at a certain point is mainly a photograph, but may be a sketch or an illustration. In addition, it is preferable that the image of each point contains the some image seen from the different angle instead of one. In addition to the image acquired from the external system in this way, the point image can include an image captured or obtained by the person to be authenticated, and in any case, stored in the authentication image DB 112 for “predetermined period”. . Here, the “predetermined period” means a period used as an action history for authentication (a period stored in the DB). For example, the last week, one month, or X month X day From Y to Y month Y, the person to be authenticated can freely set. By doing so, it is possible to prevent all unintended behavior histories from being stored in the system.

  The credit card usage information acquisition unit 104 stores the credit card usage history of the authenticated person in the credit card usage history DB 105 for a predetermined period from the system of the credit card company used by the authenticated person. The credit card use history DB 105 includes a credit card use history table 105a, and includes the card use date and time and the card use store ID for each authenticated person ID (see FIG. 2B). Although the credit card usage history table 105a can store a credit card NO and other information, only the minimum necessary data is used from the viewpoint of privacy protection.

  The site browsing information acquisition unit 106 receives information including an image when an authenticated person posts (uploads) an image on a website such as a blog, SNS, or auction on the Internet or downloads an image. It is acquired from the site browsing history storage unit 202 and the captured image storage unit 203 of the terminal 200 and stored in the site browsing history DB 107 for a predetermined period. The site browsing history DB 107 stores a posting history table 107a and a download history table 107b. For each authenticated person ID (authenticated person identification information), the posting date / time or the downloading date / time, the posting destination site or the downloading destination site, the posting image A file or a download image file is included (see FIG. 2C). As the image posting date and time, a record of the date and time when the image is transmitted from the authenticated user terminal 200 to the website is used. The posted image file itself may be directly stored in the authentication image DB 112. The site browsing information acquisition unit 106 also has a function of storing an image taken by the person to be authenticated in the authentication image DB 112 without accessing the website. In addition, when using the posted image or the downloaded image as an authentication image in this way, it is desirable to use an anonymous name or an alias to make it difficult to guess by a third party.

  The store image / product image acquisition unit 109 uses the credit card to make a purchase based on the member store ID (member store identification information) stored in the credit card use history DB 105 and the member store DB 108. The store image of the member store and / or the image of the purchased product are acquired from the store information DB 401 and the product information DB 402 of the member store system 400. As the store image or the purchased product image, an image taken or obtained by the person to be authenticated may be stored in the authentication image DB 112. When the member store is an online specialty store that does not have a store, an image that can identify the store such as a logo mark may be used as the store image.

  The authentication image generation unit 110 posts a spot image acquired by the spot image acquisition unit 103, a store image or product image acquired by the store image / product image acquisition unit 109, and an authenticated person acquired by the site browsing information acquisition unit 106. Alternatively, a combination of images corresponding to the actual behavior of the person to be authenticated is extracted from either of the downloaded images. Although a specific example will be described later, in the authentication method of this system, a plurality of images in which a plurality of images are displayed are displayed on the authentication screen by arranging a plurality of images in a vertical and horizontal matrix and displaying them on the display unit 204 of the user terminal 200. It is determined that the personal authentication is OK only when the image corresponding to the actual action of the user is correctly selected based on the memory. You may make it select the image corresponding not only to the combination of an image but the order which acted.

  Here, the image displayed on the authentication screen includes an image corresponding to the actual action of the person to be authenticated (correct image) and an image unrelated to the action of the person to be authenticated (false image). The correct image includes the image of the point where the user actually visited, the image of the store used when actually purchasing with the credit card, the image of the purchased product, and the image actually uploaded or downloaded on the website It is. As the false image, an image similar to the correct image may be acquired when the correct image is acquired, or an image prepared in advance in the authentication image DB 112 may be used. In the present embodiment, both the correct image and the false image are stored in the authentication image DB 112.

  The personal authentication unit 111 determines that the authentication is OK only when the person to be authenticated correctly selects the correct image among the plurality of images displayed on the screen. For example, if the product purchased with a credit card by a person to be authenticated for a predetermined period (for example, the last month) is “shoes”, “clothes”, “computer”, “back” The authentication is OK only when images of these products are correctly selected in the order of purchase on the screen, and the authentication is NG when one of the images is selected by mistake or the order is wrong. Of course, the number of images to be selected (usually about 4 to 8) may be changeable by the setting of the person to be authenticated, and may be automatically changed according to the member attribute of the person to be authenticated as will be described later. Also good. In general, the greater the number of images to be selected and the longer the period to be used as the action history, the higher the authentication strength. It is desirable to make the length of the period used as the action history inversely proportional. In addition, from the viewpoint of privacy protection, it is desirable that information on the action history past the period used as the action history is sequentially deleted.

  The functional configuration of the personal authentication server 100 described above is merely an example, and one functional unit (processing unit and database) may be further divided, or a plurality of functional units may be combined into one functional unit. It may be configured. In each functional unit, a CPU (Central Processing Unit) built in the computer reads a computer program stored in a storage device such as a ROM (Read Only Memory) or a hard disk, and the computer program executed by the CPU is Reads and writes necessary data such as tables from a database (DB; Data Base) stored in a storage device or a storage area in memory, and in some cases, related hardware (for example, input / output devices, display devices, communication interfaces) This is realized by controlling the apparatus and the like. Further, the database (DB) in the embodiment of the present invention may be a commercial database, but it simply means a collection of tables and files, and the internal structure of the database itself is not questioned.

  FIG. 4 is a diagram showing a flow of authentication image generation processing. The authentication image generation unit 110 of the personal authentication server 100 executes the following processing steps after allowing the person to be authenticated to select an action history pattern used for authentication.

  First, in step S10, the action history pattern selected by the person to be authenticated is checked. If the action history pattern is a movement history, the process proceeds to step S11. If the action history pattern is a purchase history, the process proceeds to step S13. If the action history pattern is a site browsing history, the process proceeds to step S17. Of course, other action histories can be added. For example, it is also possible to register the school history of elementary schools, junior high schools, high schools, etc., through which the person has been authenticated, and use the photos of the main gates of each school and the photos of each school trip as authentication images. . Alternatively, in the case of a member of society, a work history can be registered, and a photograph of each workplace or a photograph of each employee trip can be used as an authentication image.

  In the case of a movement history, in step S11, a plurality of images of points where the person to be authenticated has visited in a predetermined period are extracted from the movement history DB in order of date and time. Here, the predetermined period and the number of points to be extracted are values set in advance by the person to be authenticated. The predetermined period is preferably a period of several hours to several weeks before the movement history remains in the memory of the person to be authenticated. Further, since the number of points to be extracted corresponds to the number of digits of the password, it is set according to the authentication strength required by the person to be authenticated. Although not specifically illustrated, it is possible to specify the type of the moving point instead of extracting all the points recorded in the movement history. For example, if the type of travel point is designated as “commuting route”, an intersection that has passed “in the middle of commuting” based on the home and work addresses registered in advance and the date and time recorded in the location information, etc. Extract only certain points. If the type of travel point is specified as “travel” or “business trip”, a point other than the home or work area is extracted. Alternatively, only points that have visited the point to be extracted a certain number of times or more may be extracted. This is because the site has been visited only once or twice, and a point having no particular feature is difficult to remember.

  In the case of a movement history, in step S12, using the position information of each extracted point, a correct image of the point extracted from the movement history and an image (false image) of a point different from the extracted point are used for authentication. Obtained from the image DB 112. For example, images from a plurality of angles are acquired for each intersection, and a photograph of the intersection taken from the direction almost coincident with the direction of movement of the person to be authenticated is set as a correct image, and the others are adopted as false images. May be.

  When the process of step S12 is completed, the process proceeds to step S19, where the acquired correct image and false image are randomly arranged in a matrix, and finally, in step S20, the authentication image generation process is completed by transmitting it to the authenticated user terminal. To do.

  When the purchase history is used as the action history, the processes of steps S13 to S16 are executed. First, in step S13, a plurality of purchase information for a predetermined period is extracted from the credit card usage history DB 105. The predetermined period in this case may be set slightly longer than in the case of the movement history. This is because the purchase history is usually not updated as frequently as the travel history.

  In the case of a purchase history, in step S14, it is determined whether to use an image of a purchased store or an image of a purchased product according to the selection of the person to be authenticated. When the store image is used (step S14: Y), the process proceeds to step S15, and an image of the store unrelated to the image of the store where the product is actually purchased (correct image) is acquired as a false image from the authentication image DB 112. . When the product image is used (step S14: N), the process proceeds to step S16, the image of the purchased product (correct image) and the irrelevant product from the authentication image DB 112 with reference to the credit card usage history DB. Get an image. The correct image can easily be stored in the memory because the image of the store actually visited by the person to be authenticated or the image of the purchased product can be used. It is assumed that the store image and the product image are stored in the authentication image DB 112 by the store image / product image acquisition unit 109 from the member store system 400. The subsequent processing (after step S19) is the same as in the case of the movement history.

  Although not shown in particular, when the person to be authenticated is a credit card member, the attribute of the displayed authentication image is automatically changed depending on the registered member attributes (age, gender, address, etc.) You may make it do. For example, when the person to be authenticated is an elderly person, the number of authentication images to be displayed may be relatively reduced, or the size of the authentication image to be displayed may be changed for easy viewing. By doing so, it is possible to reduce the number of items to be authenticated. Moreover, when using purchase history, the image of the store used as a false image or purchased goods can be considered with a to-be-authenticated person attribute. For example, when the person to be authenticated is a woman, the false image can be limited to an image of a product (clothing, clothing, food, etc.) that is likely to be purchased by the woman. That is, an image of a store or a product that is considered inappropriate for age or gender can be prevented from being adopted as a false image. The same applies to the movement history and the site browsing history described below. In the case of the movement history, in particular, the address of the person to be authenticated and the time zone of the moved place are considered. Alternatively, the authentication strength may be changed depending on the place and time zone.

  When the site browsing history is used as the action history, the processes of steps S17 to S18 are executed. First, in step S17, a plurality of browsing sites for a predetermined period are extracted from the site browsing history DB 107. For example, when a photograph is posted on an SNS site such as his blog or Facebook (registered trademark), the site name and image file name are extracted together with the date and time information. However, not all browsed websites are extracted, but only websites that have posted (uploaded) or downloaded images. Moreover, you may limit the kind of website to extract. Alternatively, information other than a specific website may not be recorded in the site browsing history storage unit 202 of the authenticated user terminal 200. In this way, it is possible to eliminate the possibility that others will know all the websites that they have browsed. In addition, it is desirable to set a relatively short period that can be stored in the predetermined period when this site browsing history is used. This is because browsing the website after a long time is difficult to remember.

  In the case of the site browsing history, in step S18, image data posted or downloaded to each extracted website is acquired from the authentication image DB 112 with reference to the site browsing history DB 107. The subsequent processing (after step S19) is the same as the case of the movement history and purchase history. By using the site browsing history in this way, if an image posted on a blog or a downloaded image is used as an authentication image, or if it is exhibited or sold on an auction site, that product image is used as an authentication image Can do. Of course, the posted image or the downloaded image may be a moving image. In addition, when the person to be authenticated is a member of a credit card, it is the same that what is judged to be inappropriate according to the member attribute is not adopted as a false image.

  FIG. 5 is a diagram showing a flow of the personal authentication process. This flow is a processing step executed by the personal authentication unit 111 of the personal authentication server 100.

  First, in step S20, the personal authentication unit 111 acquires the correct image number and its selection order from the action history storage unit 120 (any one of the movement history DB 102, the credit card use history DB 105, and the site browsing history DB 107). Next, in step S21, the image number input from the to-be-authenticated person terminal 200 and the selection order thereof are received. For example, if the authentication image is displayed on the screen in a 5 × 5 matrix, each displayed image is represented by a number from 1 to 25 corresponding to the position on the matrix on the screen. Then, if the image numbers selected on the screen by the person to be authenticated are in the order of 1-3-11-25, the character string “1-3-11-25” is received as the authentication password. It goes without saying that this authentication password is changed every time depending on the action history of the person to be authenticated and the pattern of the screen display.

  Next, in step S22, only when the character string of the received authentication password completely matches the correct combination of image numbers and the selection order thereof (step S22: Y), it is determined that the authentication is OK (step S23). . If they do not match completely, authentication NG is determined (step S24).

  FIG. 6 is a diagram illustrating an example of an action history pattern selection screen. As already described, the person to be authenticated can select the type (pattern) of the action history used for authentication. The illustrated action history pattern selection screen 600 is a screen for selecting which pattern of the action history is used. The action history pattern selection screen 600 may be displayed every time authentication is performed, but the same pattern may be used until the user is explicitly changed. However, if the person to be authenticated has used the same pattern for a certain period or longer, a change is prompted.

  According to the action history pattern selected here, on the subsequent authentication screen, an image according to the selected action history pattern is displayed as an authentication image. In addition, a plurality of patterns may be selected (in this case, the authentication screen is displayed a plurality of times). In this way, the person to be authenticated can select the action history to be used for the image for authentication, so the bias of the action history can be prevented to further increase the authentication strength, or the action collected by the system. You can limit your history to ensure a certain level of privacy.

  FIG. 7 is a diagram illustrating an example of the authentication screen. Here, an authentication screen when a commute route is selected as the behavior history pattern is shown. As shown in the figure, a photograph of an intersection is used as a point image here. When the person to be authenticated requests authentication, an authentication screen 610 is displayed. If the person to be authenticated passes through the intersection on the commuting route that has passed most recently, the selection order is changed to an arrow as shown in the authentication screen 620. You may make it display with a number.

  As already described, the image of the correct intersection may take into account the direction in which the person to be authenticated has actually moved. That is, even in the image of the intersection of the same commuting route, the correct answer image is different between going and returning. Therefore, when authenticating after going to work in the morning and when authenticating after going home at night, the image of the intersection that is the correct answer and the selection order thereof are different. In order to display the moving direction more clearly, the image at the intersection may be a short moving image instead of a still image. Also, if the person to be authenticated intentionally changes the intersection that passes every day even on the same commuting route, the correct image will change each time. By doing so, even if it is a daily commute route, it is difficult to make an analogy from others, leading to security enhancement.

  In the case of commuting by car, not only a photograph of an intersection but also a photograph of a toll gate on a toll road may be added to the authentication image. The toll gate that has passed during the movement can be identified not only from the location information of the authenticated user terminal 200 but also from the usage history of an ETC (Electronic Toll Collection System) card.

  FIG. 8 is a diagram illustrating another example of the authentication screen. The illustrated authentication screens 630 and 640 show an example in which an image of a purchased product is used as an authentication image. As already described, when the person to be authenticated is a credit card member, the size of the matrix displayed on the authentication screen (4 × 4 in this example) and the number of images to be selected (5 in this example) However, it can also be automatically determined according to the member attribute. Further, the displayed false image can be displayed in accordance with the attribute of the person to be authenticated. In the example of FIG. 8, since the person to be authenticated is a woman, products that are usually purchased by men are excluded from the false image. In addition, the setting of the predetermined period described above may be set to a period in which shopping is performed relatively frequently, for example, Bongo New Year. In this way, an authentication screen suitable for the attributes of each person to be authenticated can be configured.

  As mentioned above, although this invention was demonstrated using embodiment, it cannot be overemphasized that the technical scope of this invention is not limited to the range as described in the said embodiment. It will be apparent to those skilled in the art that various modifications or improvements can be added to the above-described embodiments. Further, it is apparent from the scope of the claims that the embodiments added with such changes or improvements can be included in the technical scope of the present invention.

100 personal authentication server 101 terminal location information acquisition unit 102 movement history DB
102a Movement history table 103 Point image acquisition unit 104 Credit card usage information acquisition unit 105 Credit card usage history DB
105a Credit card usage history table 106 Site browsing information acquisition unit 107 Site browsing history DB
107a contribution history table 107b download history table 108 member store DB
109 Store Image / Product Image Acquisition Unit 110 Authentication Image Generation Unit 111 Personal Authentication Unit 112 Authentication Image DB
DESCRIPTION OF SYMBOLS 120 Action history memory | storage part 200 Authentication subject terminal 201 Location information acquisition part 202 Site browsing history memory | storage part 202a Site browsing history table 203 Captured image memory | storage part 203a Captured image history table 204 Display part 300 Map information provision system 301 Point image information DB
400 member store system 401 store information DB
402 Product information DB
500 Credit card company system 600 Action history pattern selection screen 610, 620, 630, 640 Authentication screen

Claims (12)

A user authentication system that performs user authentication using a plurality of images,
Identification information of the person to be authenticated, and an action history storage unit that acquires and stores the action history of the person to be authenticated;
An authentication image storage unit for acquiring and storing an authentication image corresponding to the action history;
A combination of a plurality of authentication images corresponding to the action history stored in the action history storage unit is extracted, and a plurality of false images different from the authentication image are simultaneously authenticated with the authentication image. An authentication image generator to be displayed on the screen;
A personal authentication unit that accepts a selection of an image displayed on the authentication screen from the terminal of the person to be authenticated, and determines whether or not personal authentication is possible; and
A personal authentication system comprising:   The personal authentication unit determines that personal authentication is completed when the authentication target selects the authentication images corresponding to the order of the authentication target actions stored in the action history on the authentication screen. The personal authentication system according to claim 1, wherein: A terminal position information acquisition unit for acquiring a current position of the authentication subject's portable terminal and storing the current position in the action history storage unit;
A point image acquisition unit that acquires a point image that is an image of the position of the mobile terminal acquired by the terminal position information acquisition unit;
Further comprising
The personal authentication system according to claim 2, wherein the authentication image generation unit extracts a combination of the authentication images from the acquired spot image.   The authentication image generation unit extracts a combination of the authentication images from a photograph image taken from a direction corresponding to a movement direction of the person to be authenticated among the acquired spot images. The personal authentication system according to claim 3. A credit card usage information acquisition unit for acquiring the credit card usage information of the person to be authenticated and storing the credit card usage information in the action history storage unit;
The authentication image generation unit extracts a combination of the authentication images from an image of a store using a credit card based on the credit card usage information acquired by the credit card usage information acquisition unit. The personal authentication system according to claim 2. A credit card usage information acquisition unit for acquiring the credit card usage information of the person to be authenticated and storing the credit card usage information in the action history storage unit;
The authentication image generation unit extracts a combination of the authentication images from an image of a product purchased with a credit card based on the credit card usage information acquired by the credit card usage information acquisition unit. The personal authentication system according to claim 2.   The member attribute of the credit card of the person to be authenticated is acquired, and the number of the authentication images displayed on the authentication screen or the type of the false image is changed according to the member attribute. 5. The personal authentication system according to 5 or 6. A site browsing information acquisition unit including information on an image posted by the person to be authenticated or information downloaded from the website;
The personal authentication system according to claim 2, wherein the authentication image generation unit extracts a combination of the authentication images from the posted or downloaded image.   The personal authentication system according to claim 1, wherein the authentication image generation unit accepts selection of the action history pattern for extracting the authentication image.   The personal authentication system according to claim 1, wherein the authentication image is a still image or a moving image. A user authentication method for performing user authentication using a plurality of images,
Acquiring and storing identification information of the person to be authenticated and an action history of the person to be authenticated;
Obtaining and storing an authentication image corresponding to the action history;
Extracting a combination of a plurality of authentication images corresponding to the action history of the person to be authenticated from the stored authentication images;
Displaying a plurality of false images different from the authentication image on the authentication screen of the authentication subject's terminal simultaneously with the authentication image;
Receiving a selection of an image displayed on the authentication screen from the terminal of the person to be authenticated and determining whether or not to authenticate the person;
A personal authentication method characterized by comprising: A user authentication program that performs user authentication using a plurality of images,
On the computer,
Acquiring and storing identification information of the person to be authenticated and an action history of the person to be authenticated;
Obtaining and storing an authentication image corresponding to the action history;
Extracting a combination of a plurality of authentication images corresponding to the action history of the person to be authenticated from the stored authentication images;
Displaying a plurality of false images different from the authentication image on the authentication screen of the authentication subject's terminal simultaneously with the authentication image;
Receiving a selection of an image displayed on the authentication screen from the terminal of the person to be authenticated and determining whether or not to authenticate the person;
A personal authentication program characterized in that