JP2015001889A - Input information authentication device and program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an input information authentication device, even when an operation for authentication is viewed by a third person, capable of making it hard for the third person to analogize password information to be used when permitting the authentication.SOLUTION: An input information authentication device (100) includes: display means (110) that displays a display pattern constituted of a plurality of input keys; input means (110) that inputs information corresponding to an input key located at a specific display position when a prescribed user operation is performed, in the input keys constituting the display pattern; and authentication means (123) that performs authentication as a determination whether or not the information input by the input means (110) matches password information used when permitting the authentication of the user.

Description

  In the present disclosure, authentication is a determination as to whether information corresponding to an input key selected by a user operation from a plurality of input keys matches password information used when user authentication is permitted. It is related to the technology to do.

  As a technique for authenticating whether or not the user is a legitimate user, the user side operates a screen of an input means such as a touch panel to input information such as a personal identification number, and collates the input information with preset authentication information. Thus, there is a technique for authenticating whether or not the user is a legitimate user. This type of technology is used for, for example, user authentication when using a financial automatic machine (ATM) or the like, and user authentication when releasing a screen lock of a smartphone or a straight PC.

  However, in the above technique, when a user inputs information by operating an input means such as a touch panel, there is a possibility that information input by the user may be stolen by a third party.

  To prevent the information entered by the user from being viewed by a third party, for example, the viewing angle of the screen of an input means such as a touch panel for inputting information is narrowed, or the entered information is marked with “*”. For example, it is possible to display only the number of input digits by displaying it on the screen.

  Patent Document 1 (Japanese Patent No. 2985888) discloses a technology of a password input device in which a user inputs a password using a numeric keypad from a terminal such as a financial automatic machine (ATM). In the above Patent Document 1, an input numeric keypad screen and a fake input numeric keypad screen are displayed on the display, and information for instructing the user whether to input a dummy number or a password is presented on the fake input numeric keypad screen. In addition, by inserting a dummy number into the personal identification number, the personal identification number is prevented from being stolen by a third party when the personal identification number is input.

  Patent Document 2 (Japanese Patent Application Laid-Open No. 2005-71202) uses system authentication information by a recording medium incorporated in a system-side electronic device and personal authentication information by a user's personal input operation. A technique for mutually authenticating an individual and a system-side electronic device to be accessed is disclosed. In the above Patent Document 2, two sets of authentication data, that is, personal authentication data indicating personal authentication information and server authentication data indicating system authentication information are registered and set, and server-side authentication using server authentication data; User-side authentication using personal authentication data is performed alternately.

Japanese Patent No. 2985888 JP-A-2005-71202

  However, the technology disclosed in the above-mentioned Patent Document 1 assumes that a third party is located some distance away, such as a financial automatic machine (ATM). It is not taken into account even if measures are taken when seen. For this reason, for example, not only the movement of the user's hand entering the personal identification number but also the screen on which the personal identification number is entered may be seen due to the shoulder of the user entering the personal identification number or a hidden camera. May be identified as to which input is a dummy number, and the personal identification number may be known to a third party.

  In the above-mentioned Patent Document 2, since server-side authentication using server authentication data and user-side authentication using personal authentication data are alternately performed, all authentication information is instantly known to a third party. Can be prevented to some extent. However, it is not possible to prevent authentication information when watched. In addition, it is necessary to perform the authentication operation with the system-side electronic device a plurality of times, which takes time and effort to complete the authentication operation.

  An object of the present disclosure is to make it difficult for a third party to analogize password information used when authentication is permitted even when an operation for authentication is seen by a third party.

An input information authentication apparatus according to an aspect of the present disclosure is provided.
Display means for displaying a display pattern composed of a plurality of input keys;
An input means for inputting information corresponding to an input key located at a specific display position when a predetermined user operation is performed among the input keys constituting the display pattern;
Authentication means for performing authentication, which is a determination as to whether or not the information input by the input means matches the password information used when permitting user authentication;
It is characterized by having.

A program according to an aspect of the present disclosure is provided.
Display processing for displaying on the display means a display pattern composed of a plurality of input keys;
An input process for inputting information corresponding to an input key located at a specific display position when a predetermined user operation is performed among the input keys constituting the display pattern;
An authentication process for performing authentication, which is a determination as to whether or not the information input to the input means matches the password information used when permitting user authentication;
Is executed by a computer.

  According to one aspect of the present disclosure, even if an operation for authentication is seen by a third party, it is possible to make it difficult for the third party to guess the password information used when authentication is permitted. .

1 is a diagram illustrating a configuration example of an input information authentication device 100 according to the present embodiment. 3 is a diagram showing an example of a display pattern 10. FIG. 10 is a diagram illustrating an example of operation of a display pattern 10. FIG. It is a 1st figure which shows the example of input operation of password information. It is a 2nd figure which shows the example of input operation of password information. It is a 3rd figure which shows the example of input operation of password information. 6 is a diagram showing another example of the display pattern 10. FIG. It is a 1st figure which shows the example of input operation of password information. It is a 2nd figure which shows the example of input operation of password information. It is a 3rd figure which shows the example of input operation of password information. It is a figure which shows the processing operation example of the input information authentication apparatus 100 of this embodiment. It is a figure which shows an example of the display pattern 10 of 2nd Embodiment. It is a figure which shows the example of input operation of password information.

(Outline of Embodiment of Input Information Authentication Device 100 According to One Aspect of Present Disclosure)
First, an overview of an embodiment of the input information authentication device 100 according to an aspect of the present disclosure will be described with reference to FIGS. FIG. 1 illustrates a configuration example of an input information authentication apparatus 100 according to an aspect of the present disclosure, and FIGS. 2 and 3 are diagrams illustrating a configuration example of a display pattern 10 including a plurality of input keys. The display pattern 10 shown in FIGS. 2 and 3 includes eight input keys indicated by a to g and operation keys indicated by ◯. The input key is a key constituting password information. The operation keys are keys for moving the display positions of the eight input keys indicated by a to g. As shown in FIG. 3, when the user moves the operation key indicated by ◯, the display positions of the eight input keys indicated by a to g change according to the movement operation of the operation key indicated by ◯.

  The input information authentication device 100 according to an aspect of the present disclosure includes a display unit, an input unit, and an authentication unit. The display input unit 110 shown in FIG. 1 functions as the display means and the input means. The authentication unit 123 functions as an authentication unit.

  The display means 110 performs processing for displaying the display pattern 10 composed of a plurality of input keys. For example, the display pattern 10 shown in FIG. 2 is displayed.

  The input unit 110 performs a process of inputting information corresponding to an input key located at a specific display position when a predetermined user operation is performed among the input keys constituting the display pattern 10. For example, the display pattern 10 shown in FIG. 3 is changed by the operation of moving the operation key indicated by ◯ constituting the display pattern 10 shown in FIG. Then, information corresponding to an input key located at a specific display position is input when the user releases his / her hand from the operation key with the display pattern 10 shown in FIG. 3 being changed. For example, when the display pattern 10 shown in FIG. 2 is displayed, the specific display position is input corresponding to the first character information constituting the password information among the input keys constituting the display pattern 10. The display position where the key is displayed can be a specific display position.

  The authentication unit 123 performs a process of performing authentication, which is a determination as to whether or not the information input by the input unit 110 matches the password information used when the user authentication is permitted.

  According to one aspect of the present disclosure, information corresponding to an input key located at a specific display position is used for authentication when a predetermined user operation is performed among the input keys constituting the display pattern 10 . For this reason, even when an operation for authentication is seen by a third party, it is possible to make it difficult for the third party to guess the password information used for permitting the authentication. Hereinafter, embodiments of the input information authentication device 100 according to an aspect of the present disclosure will be described in detail with reference to the accompanying drawings.

(First embodiment)
<Configuration Example of Input Information Authentication Device 100>
First, a configuration example of the input information authentication device 100 of the present embodiment will be described with reference to FIG.

  The input information authentication apparatus 100 according to the present embodiment includes a display input unit 110, a control unit 120, and a storage unit 130.

  The display input unit 110 displays the display pattern 10 shown in FIG. The display pattern 10 shown in FIG. 2 is composed of a 3 × 3 matrix, and eight input keys and one operation key are arranged. The input key is a key constituting password information, and uses characters a to h. The operation keys are keys for moving the display positions of the eight input keys indicated by a to g, and ◯ is used. In the display pattern 10 shown in FIG. 2, when the operation keys indicated by ○ in the 3 × 3 matrix are moved as shown in FIG. 3, the input keys are moved according to the movement of the operation keys. The display position of is changed.

  The display pattern 10 shown in FIG. 3 (e) is the same as the display pattern 10 shown in FIG. 2. By moving the operation key of the display pattern 10 shown in FIG. The display position is changed to a display pattern 10 shown in FIG. Also, the display pattern 10 shown in FIG. 3B is obtained by moving the operation key of the display pattern 10 shown in FIG. 3E upward. Further, the display pattern 10 shown in FIG. 3C is obtained by moving the operation key of the display pattern 10 shown in FIG.

  Further, the display pattern 10 shown in FIG. 3D is obtained by moving the operation key of the display pattern 10 shown in FIG. 3E to the left. Further, the display pattern 10 shown in FIG. 3F is obtained by moving the operation key of the display pattern 10 shown in FIG. 3E to the right.

  Further, the display pattern 10 shown in FIG. 3G is obtained by moving the operation key of the display pattern 10 shown in FIG. Further, the display pattern 10 shown in FIG. 3H is obtained by moving the operation key of the display pattern 10 shown in FIG. 3E downward. Further, the display pattern 10 shown in FIG. 3I is obtained by moving the operation key of the display pattern 10 shown in FIG.

  Note that the display pattern 10 shown in FIG. 2 is an example, and the display positions of the input keys and operation keys constituting the display pattern 10 can be made random.

  The storage unit 130 stores password information used during user authentication. The password information is composed of a plurality of input keys constituting the display pattern 10, and is composed of a plurality of digits. For example, the password information is composed of a plurality of digits “abcd”. The authorized user needs to know the password information stored in the storage unit 130.

  The control unit 120 performs display control of the display pattern 10 displayed on the display input unit 110. Further, authentication control is performed on an input key selected by a user operation from among a plurality of input keys constituting the display pattern 10 displayed on the display input unit 110.

  In the present embodiment, when the input key constituting the password information among the plurality of input keys constituting the display pattern 10 is located at a specific display position, the user releases the operation key, and the specific key is displayed. The input of the input key located at the display position is accepted.

  The reception display position 11 that accepts input of the input key when the user releases the operation key registers the input key that constitutes the password information in the storage unit 130 among the plurality of input keys that constitute the display pattern 10. Can be set when. Further, when the display pattern 10 is first displayed on the display input unit 110, the display position where the first character input key constituting the password information is displayed can be set as the reception display position 11.

  In the present embodiment, when the display pattern 10 shown in FIG. 2 is displayed on the display input unit 110 at the time of authentication, the display position where “a” that is the first character input key constituting the password information is displayed is accepted. A case where the display position 11 is set will be described as an example.

<Example of password information input operation>
Next, an example of password information input operation in the present embodiment will be described.

  In this embodiment, the password information is “abcd”. Further, the display pattern 10 in the initial state displayed on the display input unit 110 is assumed to be the display pattern 10 shown in FIG. In this case, the display position where “a” which is the first character input key constituting the password information in the display pattern 10 shown in FIG. Note that “a”, which is the first character input key constituting the password information, is automatically input. For this reason, the authorized user does not need to perform an input operation of the first character input key constituting the password information.

  The user operates the operation keys of the display pattern 10 shown in FIG. 2 displayed on the display input unit 110, and the input keys having larger digits among the input keys constituting the password information are sequentially displayed at the reception display position 11. Try to position. Then, when the user releases the operation key while the input key constituting the password information is positioned at the reception display position 11, the input operation of the input key constituting the password information is performed.

  In this embodiment, since the password information is “abcd”, the operation key is operated from the state of the display pattern 10 shown in FIG. 2, and “bcd” constituting the password information is changed from “b” → “c” → “d Are placed at the reception display position 11 in this order. Then, when the user releases the operation key while the “b”, “c”, “d” input keys are positioned at the reception display position 11, the “b”, “c”, “d” input A key input operation is performed.

  For example, “b” constituting the password information is a display pattern shown in FIG. 4C by moving the operation key as shown in FIGS. 4A and 4B without releasing the operation key. Set to 10. Thereby, the input key “b” can be positioned at the reception display position 11. Then, when the hand is released from the operation key in the state of the display pattern 10 shown in FIG. 4C, the input operation of the input key “b” is performed.

  Further, “c” constituting the password information is a display pattern shown in FIG. 5C by moving the operation key as shown in FIGS. 5A and 5B without releasing the operation key. Set to 10. Thereby, the input key “c” can be positioned at the reception display position 11. Then, by releasing the hand from the operation key in the state of the display pattern 10 shown in FIG. 5C, the input operation of the “c” input key is performed.

  Further, “d” constituting the password information is a display pattern shown in FIG. 6C by moving the operation key as shown in FIGS. 6A and 6B without releasing the operation key. Set to 10. Thereby, the input key “d” can be positioned at the reception display position 11. Then, by releasing the hand from the operation key in the state of the display pattern 10 shown in FIG. 6C, the input operation of the “d” input key is performed.

  Thus, the authorized user can operate the operation keys constituting the display pattern 10 and input “b”, “c”, “d” constituting the password information from the display input unit 110.

  In the present embodiment, the position of the reception display position 11 is different each time depending on the display position of the input key of the first character constituting the password information. Further, the operation of the operation key for moving the input key constituting the password information to the reception display position 11 is different every time.

  Since the authorized user knows the input keys constituting the password information, the authorized user can identify the reception display position 11 and position the input keys constituting the password information at the reception display position 11.

  However, it is difficult for a third party to grasp which input key is operated to be positioned at which display position even if a third party steals the operation of moving the operation key of the authorized user. In addition, since there are a plurality of combinations of the input key and the display position constituting the password information, even if the movement operation of the authorized user's operation key is stolen and stored, or the movement operation of the operation key is recorded on paper or the like, It is very difficult to grasp the combination. For this reason, it is necessary for a third party to verify the above combination by photographing the operation of moving the operation key of the authorized user with a video or the like.

  For example, it is assumed that the display pattern 10 shown in FIG. 7 different from the display pattern 10 shown in FIG. Assume that the same operation key movement operation as that when the display pattern 10 shown in FIG. 2 is displayed is performed from the state where the display pattern 10 shown in FIG. 7 is displayed. In this case, the input key is input in the state of the display pattern 10 shown in FIGS. 8C, 9C, and 10C, and the password information “abeh” is input. . Therefore, security can be improved by changing the display pattern 10 in the initial state displayed on the display input unit 110 each time.

  In addition, in the display pattern 10 shown in FIG. 2, the operation key moving operation for positioning the “bcd” input key constituting the password information at the “right middle” reception display position 11 of the display pattern 10 is performed at any display position. If it is not known whether the input key is located, a plurality of combinations of the display position and the input key can be considered. For example, in addition to “abcd” positioned at the “middle right” display position of the display pattern 10 shown in FIG. 2, the “bcag” and “middle upper” display positions positioned at the “upper left” display position are displayed. “Hfec” positioned, “ehfb” positioned at the “middle left” display position, and “feha” positioned at the “bottom right” display position are considered, and a total of five combinations are possible. Other combinations are excluded from the possibility of combinations constituting password information because the operation key is positioned at the display position at any digit.

  The number of the above combinations is a number obtained by subtracting the number of input password information from the number of input keys constituting the display pattern 10. In the present embodiment, the number of input keys constituting the display pattern 10 is eight, the password information is four, and the first input key is automatically input, so the number of inputs is three. For this reason, the number of combinations is 8-3 = 5.

  For random attack, 8 types ^ 3 digits = 512 trials are required.

  In the above-described embodiment, the display pattern 10 is configured by a 3 × 3 matrix as shown in FIG. 2, and eight input keys and one operation key are arranged.

  However, the display pattern 10 is formed of a 5 × 5 matrix, and it is possible to arrange 24 input keys and one operation key. When the password information is composed of four digits using the display pattern 10 having this configuration, the number of combinations of display positions and input keys is 24-3 = 21. For random attack, 24 types ^ 3 digits = 13824 trials are required. Thus, security can be strengthened by increasing the number of input keys.

  The control unit 120 of this embodiment includes a password information setting unit 121, a pattern generation unit 122, and an authentication unit 123.

  The password information setting unit 121 stores password information used in user authentication in the storage unit 130. The password information is composed of information corresponding to a plurality of input keys constituting the display pattern 10, and has a plurality of digits.

  The pattern generation unit 122 generates the display pattern 10 to be displayed on the display input unit 110. The display pattern 10 is configured by arranging a plurality of input keys and operation keys. The authorized user operates the operation keys constituting the display pattern 10 displayed on the display input unit 110, and inputs the input keys for each digit constituting the password information. However, the first input key for the password information is automatically input.

  The authentication unit 123 collates the input key of each digit input from the display input unit 110 with the input key of each digit constituting the password information stored in the storage unit 130. The authentication unit 123 determines that the authentication is OK when all the input keys of each digit correspond to the input keys of each digit of the password information stored in the storage unit 130, and determines that the authentication is NG otherwise. For example, in the case of the display pattern 10 shown in FIG. 2, when the input key input from the display input unit 110 is “abcd”, the input key of each digit is used as the input key of each digit of the password information “abcd”. Since it corresponds, it becomes authentication OK.

<Example of Processing Operation of Input Information Authentication Device 100>
Next, an example of the processing operation of the input information authentication apparatus 100 of this embodiment will be described with reference to FIG.

  First, the pattern generation unit 122 generates a display pattern 10 including input keys and operation keys constituting password information based on the password information stored in the storage unit 130 (step A1). Thereby, for example, the display pattern 10 shown in FIG. 2 is generated. Next, the pattern generation unit 122 displays the display pattern 10 on the display input unit 110 (step A2). As a result, the display pattern 10 shown in FIG. 2 is displayed on the display input unit 110.

  The user refers to the display pattern 10 displayed on the display input unit 110 and performs an input operation of an input key to be input as password information based on the user's own memory. However, since the input key of the first character constituting the password information is automatically input, the input operation of other input keys is performed. Since the password information has four digits “abcd”, an input operation of a three-digit input key “bcd” is performed. For example, the input operation is changed to the display pattern 10 as shown in FIG. 3 by the operation of moving the operation key indicated by ◯ constituting the display pattern 10 shown in FIG. Then, information corresponding to an input key located at a specific display position is input when the user releases his / her hand from the operation key with the display pattern 10 shown in FIG. 3 being changed.

  The authentication unit 123 receives each digit input from the display input unit 110 when an input key input operation is performed a predetermined number of times from the display input unit 110 and a predetermined number of input keys are input (step A3 / Yes). And the input key of each digit constituting the password information stored in the storage unit 130 are collated (step A4). In this embodiment, the password information is composed of 4 digits, and the number of inputs is 3 digits. Therefore, when the input operation of the input key is performed 3 times and the input key of 4 characters is input, Each digit input key input from the display input unit 110 is collated with each digit input key constituting the password information stored in the storage unit 130.

  The authentication unit 123 determines that the authentication is OK when all the input keys of each digit correspond to the input keys of each digit of the password information stored in the storage unit 130, and determines that the authentication is NG otherwise. For example, in the case of the display pattern 10 shown in FIG. 2, when the input key input from the display input unit 110 is “abcd”, the input key of each digit is used as the input key of each digit of the password information “abcd”. Since it corresponds, it becomes authentication OK.

<Operation / Effect of Input Information Authentication Device 100 of this Embodiment>
In the present embodiment, after performing authentication OK, when an input operation for the next authentication is performed, a display pattern 10 different from the previous one is displayed. For this reason, when the authorized user performs the password information input operation, a different input operation can be performed each time. As a result, even if the third party steals the input operation of the input key of the authorized user a plurality of times, it is possible to prevent the third party from guessing correct password information.

(Second Embodiment)
Next, a second embodiment will be described.

  In the first embodiment, when the display pattern 10 is displayed on the display input unit 110, the input corresponding to the first character information constituting the password information among the input keys constituting the display pattern 10 The display position where the key is displayed is the reception display position 11. That is, the reception display position 11 is composed of dots. For example, in the case of the display pattern 10 shown in FIG. 2, the display position of the first character “a” of the password information is set as the reception display position 11.

  In the second embodiment, when the display pattern 10 is displayed on the display input unit 110, the input corresponding to the first character information constituting the password information among the input keys constituting the display pattern 10 A display position that is in a predetermined positional relationship with the display position where the key is displayed is defined as a reception display position 11. For example, as shown in FIG. 12, the reception display position 11 is constituted by lines such as rows and columns. In the case of the display pattern 10 shown in FIG. 12, the display position of the column including the display position of the first character “a” of the password information is set as the reception display position 11.

  As shown in FIG. 12, by configuring the reception display position 11 with lines such as rows and columns, even if a third party steals the movement operation of the operation key of the authorized user, which input key is displayed It is difficult to grasp whether the operation is performed so as to be positioned. For this reason, it is possible to further improve security when a third party steals a movement operation of the operation key of the authorized user.

  For example, when the display position of the example including the display position where the first character input key constituting the password information is displayed is the reception display position 11 and the display pattern 10 shown in FIG. 12 is displayed, “a” is displayed. The display position of the example including the display position where the input key is displayed is the reception display position 11. Thereby, the display position of the right column becomes the reception display position 11.

  In this case, since the input of three input keys is received by one input operation of the user, there are 3 ^ 3 = 27 combinations that match the password information.

  On the other hand, even if the third party sees the operation of moving the operation key of the authorized user, the third party does not know which column and which row the reception display position 11 is.

  For example, the display pattern 10 shown in FIG. 13A is displayed in the initial state, and the authorized user can enter the password information with the display pattern 10 shown in FIGS. 13B, 13C, and 13D. Is input.

In this case, when the reception display position 11 is in the left column, there are 3 × 2 × 3 × 3 = 54 ways.
When the reception display position 11 is in the middle row, there are 2 × 3 × 3 × 2 = 36 ways.
Further, when the reception display position 11 is in the right column, there are 3 × 3 × 2 × 3 = 54 ways.
Further, when the reception display position 11 is on the upper line, there are 3 × 3 × 2 × 3 = 54 ways.
When the reception display position 11 is a middle line, there are 2 × 3 × 3 × 3 = 54 ways.
Further, when the reception display position 11 is a downward line, there are 3 × 2 × 3 × 2 = 36 ways.

  For this reason, there are overlaps in the rows and columns of the display pattern 10, but a total of about 288 trials are required.

  In the case of the display pattern 10 shown in FIG. 12, since the random attack is reduced to 27/125, it is actually preferable to configure the display pattern 10 in a matrix such as 5 × 5 and increase the number of input keys. .

  When the display pattern 10 is composed of a 5 × 5 matrix and 24 input keys are used, there are 5 ^ 3 = 125 combinations that match the password information. Also, the random attack is 125 / 13824≈9 / 1000, which is strong against the random attack.

<Operation / Effect of Input Information Authentication Device 100 of this Embodiment>
The input information authentication device 100 of the present embodiment configures the reception display position 11 that accepts input of input keys constituting password information with lines such as rows and columns. By configuring the acceptance display position 11 with lines such as rows and columns, a third party can operate to move which input key to which display position even if the third party steals the operation key movement operation It becomes difficult to grasp what is being done. For this reason, it is possible to further improve security when a third party steals a movement operation of the operation key of the authorized user. The reception display position 11 corresponds to the first character information constituting the password information among the input keys constituting the display pattern 10 when the display pattern 10 is displayed on the display input unit 110. It is also possible to configure a display position having a predetermined positional relationship with the display position where the input key is displayed.

  The above-described embodiment is a preferred embodiment of the present invention, and the scope of the present invention is not limited to the above-described embodiment alone, and various modifications are made without departing from the gist of the present invention. Implementation is possible.

  For example, in the first and second embodiments described above, password information is stored in the storage unit 130 in plain text.

  However, password information can be hashed and stored in the storage unit 130 to enhance security. In this case, when storing the password information in the storage unit 130, a plurality of display patterns 10 are generated, and for each display pattern 10, the password information is displayed when the display position of the operation key is located. Decide whether to configure, and hash the information of the display position at that time. Then, the hashed hash value and the display pattern 10 are stored in the storage unit 130 in association with each other.

  At the time of authentication, the display pattern 10 is randomly selected from the plurality of display patterns 10 stored in the storage unit 130, and the user releases his / her hand from the operation key by the user operation and the hash value associated with the display pattern 10. The hash value obtained by hashing the information on the display position of the operation key at this time is collated. As a result of this collation, if both hash values match, it is determined that the authentication is OK, and if they do not match, it is determined that the authentication is NG.

  For example, in the same example as in the first embodiment, referring to FIGS. 4C, 5C, and 6C, the operation keys display g, d, and c shown in FIG. The user releases his hand at the position. That is, a hash value obtained by hashing information on the display position of “gdc” when the user releases the operation key is stored in the storage unit 130 in association with the display pattern 10 of FIG. Then, when the user releases the operation key at the display positions of g, d, and c shown in FIG. 2 and a hash value obtained by hashing the information on the display position of the operation key is input, the verification is OK. .

  Further, in the above-described embodiment, the case where the input keys constituting the display pattern 10 are characters has been described as an example. However, any information may be used as long as the information can identify each input key. , Color, etc. In this case, each input key can be realized in the same manner as in the above-described embodiment by assigning a number or the like that can specify the input key to each input key.

  In the above-described embodiment, the display input unit 110 that combines the function of displaying the display pattern 10 and the function of inputting an input key has been described as an example. However, a function (display unit) for displaying the display pattern 10 and a function (input unit) for inputting an input key may be provided separately.

  Further, the control operation in the input information authentication apparatus 100 of the present embodiment described above can be executed using hardware, software, or a combined configuration of both.

  When executing processing using software, it is possible to install and execute a program in which a processing sequence is recorded in a memory in a computer incorporated in dedicated hardware. Alternatively, it can be installed in a memory in a general-purpose computer capable of executing various processes and executed.

  For example, the program can be recorded in advance on a hard disk or ROM (Read Only Memory) as a recording medium. Alternatively, the program can be stored (recorded) temporarily or permanently in a removable recording medium. Such a removable recording medium can be provided as so-called package software. Examples of the removable recording medium include various recording media such as a magnetic disk and a semiconductor memory.

  The program is installed in the computer from the removable recording medium as described above. In addition, it is wirelessly transferred from the download site to the computer. In addition, it is transferred to a computer via a network by wire.

  In addition, the input information authentication device 100 in the present embodiment is not only executed in time series according to the processing operation described in the above embodiment, but also the processing capability of the device that executes the processing, or in parallel as necessary. It can also be constructed to run separately or individually.

DESCRIPTION OF SYMBOLS 100 Input information authentication apparatus 110 Display input part 120 Control part 121 Password information setting part 122 Pattern production | generation part 123 Authentication part 130 Storage part 10 Display pattern 11 Reception display position

Claims (6)

Display means for displaying a display pattern composed of a plurality of input keys;
An input means for inputting information corresponding to an input key located at a specific display position when a predetermined user operation is performed among the input keys constituting the display pattern;
Authentication means for performing authentication, which is a determination as to whether or not the information input by the input means matches the password information used when permitting user authentication;
An input information authentication apparatus characterized by comprising:   2. The input information authentication apparatus according to claim 1, further comprising setting means for setting the specific display position from display positions where the plurality of input keys are displayed.   When the display means displays the display pattern on the display means, an input key corresponding to the first character information constituting the password information among the input keys constituting the display pattern is displayed. The input information authentication apparatus according to claim 2, wherein a display position to be displayed is set as the specific display position.   When the display means displays the display pattern on the display means, an input key corresponding to the first character information constituting the password information among the input keys constituting the display pattern is displayed. 4. The input information authentication apparatus according to claim 2, wherein a display position having a predetermined positional relationship with a display position to be set is set as the specific display position. The display pattern includes an operation key for moving the display position of the input key, and the display position of the input key changes according to a movement operation of the operation key by a user operation.
The input information authentication apparatus according to claim 1, wherein the predetermined user operation is an operation in which a user releases a hand from the operation key. Display processing for displaying on the display means a display pattern composed of a plurality of input keys;
An input process for inputting information corresponding to an input key located at a specific display position when a predetermined user operation is performed among the input keys constituting the display pattern;
An authentication process for performing authentication, which is a determination as to whether or not the information input to the input means matches the password information used when permitting user authentication;
A program characterized by causing a computer to execute.

Images