JP2015153338A - Electronic apparatus, authentication method, and authentication program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an electronic apparatus, an authentication method, and an authentication program capable of preventing illegal access by a remote control.SOLUTION: An electronic apparatus includes: a touch panel 102 for receiving a touch operation by a user; a display part 101 capable of displaying a symbol input screen for inputting a symbol corresponding to the orbit of a touch position on the touch panel 102; a symbol comparison part 131 for comparing an input symbol input on the symbol input screen with a preliminarily set authentication symbol; a determination part 133 for determining the presence/absence of an interrupt signal indicating that the touch operation has been directly performed to the touch panel 102; a character comparison part 132 for comparing an input character input by the user with a preliminarily set authentication character; and an authentication part 134 for performing authentication on the basis of the comparison result of the symbol comparison part 131 and the determination result of the determination part 133 and the comparison result of the character comparison part 132.

Description

  The present invention relates to an electronic device, an authentication method, and an authentication program.

  In order to prove the legitimacy of a user, an authentication system in which a user inputs a password is widely used. However, there is a risk of unauthorized use only by entering a password. Therefore, Patent Documents 1 and 2 disclose a method for performing password authentication by inputting from a touch panel.

  Patent Document 1 discloses an information processing terminal that performs authentication using not only a password but also position information of a cursor on a display image. The information processing terminal registers image data and collation position data in the image data. The collation position data includes position information of the cursor shared range. At the time of authentication, the user moves the cursor to a desired position on the display image displayed on the display unit. If the cursor position information is included in the cursor allowable range, the authentication is successful. In setting the cursor allowable range, the position is designated by a finger or a stylus pen on the touch panel.

  Patent Document 2 discloses an electronic device that performs authentication using a symbol input by a touch panel. In the electronic device of Patent Document 2, coordinate information input from the touch panel is stored as input image data. Then, the comparison image data and the input image data are compared, and if they match, the system is activated.

JP 2010-97413 A JP 2000-35948 A

  However, with the conventional authentication method, there is a problem that a malicious application or browser may be used illegally by remotely controlling the terminal.

  The present invention provides an electronic device, an authentication method, and an authentication program that can prevent unauthorized use by remote control.

  An electronic apparatus according to an aspect of the present invention includes a touch panel that accepts a touch operation by a user, a display unit that can display a symbol input screen for inputting a symbol corresponding to a locus of a touch position on the touch panel, and the symbol A symbol comparison unit that compares an input symbol input on the input screen with a preset authentication symbol, a determination unit that determines the presence or absence of an interrupt signal indicating that a touch operation has been directly performed on the touch panel, and a user Based on a character comparison unit that compares an input character with a preset authentication character, a comparison result in the symbol comparison unit, a determination result in the determination unit, and a comparison result in the character comparison unit And an authentication unit that performs authentication.

  An authentication method according to an aspect of the present invention is an authentication method for performing authentication using a touch panel that accepts a touch operation by a user, and a symbol input screen for inputting a symbol corresponding to a locus of a touch position on the touch panel A display step for displaying a symbol, a symbol comparison step for comparing an input symbol input on the symbol input screen with a preset authentication symbol, and presence / absence of an interrupt signal indicating that a direct touch operation has been performed on the touch panel A determination step for determining a character, a character comparison step for comparing an input character input by a user with a preset authentication character, a comparison result in the symbol comparison step, a determination result in the determination step, and the character And an authentication step for performing authentication based on the comparison result in the comparison step.

  An authentication program according to an aspect of the present invention is an authentication program that causes a computer including a touch panel that accepts a touch operation by a user to perform an authentication process, and inputs a symbol corresponding to a locus of a touch position on the touch panel A display step for displaying a symbol input screen, a symbol comparison step for comparing an input symbol input on the symbol input screen with a preset authentication symbol, and a direct touch operation on the touch panel. A determination step for determining the presence or absence of an interrupt signal, a character comparison step for comparing an input character input by a user with a preset authentication character, a comparison result in the symbol comparison step, and a determination step An authentication step for performing authentication based on the determination result and the comparison result in the character comparison step. Tsu is intended to be executed and up, to the computer.

  According to the present invention, it is possible to provide an authentication system, an authentication method, and an authentication program that can prevent unauthorized use by remote control.

1 is a block diagram illustrating an electronic device according to a first embodiment. It is a figure which shows a symbol input screen. It is a figure which shows a character input screen. 4 is a flowchart showing touch symbol registration processing according to the first embodiment. 4 is a flowchart illustrating authentication character registration processing according to the first embodiment. 3 is a flowchart illustrating an authentication method according to the first embodiment. 1 is a block diagram illustrating an electronic device according to a first embodiment.

  Embodiments of the present invention will be described with reference to the accompanying drawings. The embodiments described below are examples of the present invention, and the present invention is not limited to the following embodiments. In the present specification and drawings, the same reference numerals denote the same components.

  The electronic device according to the present embodiment has a touch panel that receives a touch operation from a user. The electronic device is a portable information terminal having a communication function. Specifically, the electronic device is a tablet terminal, a smartphone, a personal computer, or the like. The electronic device is configured to be able to use various application programs such as mail, word processor, spreadsheet, game, and web browsing. Furthermore, the electronic device performs user authentication using a password. For example, when a user requests connection with an external network, the electronic device performs user authentication.

  In the following embodiment, an example in which authentication is performed when mail is transmitted will be described. Of course, the authentication method according to the present embodiment may be applied to authentication other than during mail transmission. For example, authentication may be performed when an application such as a web browser is activated, or when a setting is changed such as an internal setting change or an activation setting change. Alternatively, the authentication method according to the present embodiment can be used for the unlock screen.

  FIG. 1 is a block diagram showing an electronic apparatus according to the present embodiment. The electronic device 100 includes a display unit 101, a touch panel 102, a control unit 103, and a storage unit 104.

  The display unit 101 includes a display device such as a liquid crystal display. The display unit 101 displays a screen corresponding to an OS (Operating System) or an application used by the user. Furthermore, when performing character input, the display unit 101 displays a character input screen including a keyboard and the like. In addition, when performing symbol input, the display unit 101 displays a symbol input screen including an input frame for designating an area for symbol input.

  The touch panel 102 is disposed so as to overlap the front surface of the display unit 101. The touch panel 102 receives a user's touch operation. The touch panel 102 detects coordinates (touch position) touched by the user and generates a detection signal based on the detected coordinates. Then, the detection signal is output to the control unit 103. Furthermore, when the touch panel 102 receives an operation by the user, the touch panel 102 outputs an interrupt signal indicating that the touch panel 102 has been directly operated to the control unit 103. That is, when there is a physical contact with the detection surface of the touch panel 102, the touch panel 102 outputs an interrupt signal to the control unit 103.

  The control unit 103 includes a processor such as a CPU (Central Processing Unit), and executes predetermined arithmetic processing. The storage unit 104 is a storage unit such as a memory, and stores programs and settings for operating the electronic device 100. When the control unit 103 reads a program, setting, or the like stored in the storage unit 104, the electronic device 100 executes a desired operation.

  Further, the control unit 103 outputs an image signal corresponding to the image to be displayed on the display unit 101 to the display unit 101. Thereby, the display unit 101 displays a desired image. The touch panel 102 outputs a detection signal and an interrupt signal to the control unit 103. Based on the detection signal, the control unit 103 identifies the input content from the touch panel. For example, the control unit 103 identifies the input content based on the display image on the display unit 101 and the touch position. Therefore, the user can input characters and symbols using the touch panel 102.

  As described above, the electronic device 100 executes processing based on the display image displayed on the display unit 101 and the coordinates detected by the touch panel. That is, the user performs a touch operation with the touch panel 102 while viewing the display screen displayed on the display unit 101. In this way, desired processing such as mail transmission can be executed.

  Next, a configuration for executing user authentication will be described. The control unit 103 includes a symbol comparison unit 131, a character comparison unit 132, a determination unit 133, and an authentication unit 134. The storage unit 104 includes a symbol storage unit 141 and a character storage unit 142.

  The symbol storage unit 141 stores a preset authentication symbol. At the time of user authentication, the symbol comparison unit 131 determines whether or not the input symbol input by the user through the touch panel 102 matches the authentication symbol. That is, the symbol comparison unit 131 compares the preset authentication symbol with the input symbol input on the symbol input screen. Then, the symbol comparison unit 131 outputs a symbol match signal to the authentication unit 134 when the authentication symbol matches the input symbol.

  The character storage unit 142 stores a preset authentication character. At the time of user authentication, the character comparison unit 132 determines whether or not the input character input by the user through the touch panel 102 matches the authentication character. That is, the character comparison unit 132 compares the preset authentication character with the input character input on the character input screen. Then, the character comparison unit 132 outputs a character match signal to the authentication unit 134 when the authentication character matches the input character.

  The determination unit 133 determines the presence / absence of an interrupt signal. That is, the determination unit 133 determines whether or not a direct input is performed using the touch panel. Then, the determination unit 133 outputs a determination signal corresponding to the determination result to the authentication unit 134.

  The authentication unit 134 performs authentication based on the comparison result in the symbol comparison unit 131, the comparison result in the character comparison unit 132, and the determination result in the determination unit 133. That is, when the input character matches the authentication character, the input symbol matches the authentication symbol, and there is an interrupt signal, the authentication is successful. In other words, the authentication unit 134 determines that the authentication is successful when there is an interrupt signal, and determines that the authentication is unsuccessful when there is no interrupt signal. The authentication unit 134 determines that the authentication is successful when the character match signal is input, and determines that the authentication is not successful when the character match signal is not input. If there is a symbol match signal, the authentication unit 134 makes the authentication successful, and if no symbol match signal is input, the authentication unit 134 makes the authentication unsuccessful.

  Next, a symbol input screen for inputting symbols will be described with reference to FIG. FIG. 2 is a diagram schematically showing a symbol input screen. When performing symbol input, the display unit 101 displays a symbol input field 114 for symbol input on the screen 111 as shown in FIG. Then, the user traces the touch panel 102 and inputs a symbol. When the user touches the OK button 115, the symbol input is completed. The touch panel 102 determines a symbol corresponding to the touch position locus in the symbol input field 114. Thereby, symbol input can be performed.

  In FIG. 2, a symbol “◯” is entered in the symbol input field 114. The input symbol is not limited to ○, but may be x, triangle, square, double circle, or the like. Alternatively, a symbol whose touch position locus is close to a preset template may be selected. The symbol comparison unit 131 compares the input symbol input at the time of user authentication with the authentication character stored in the symbol storage unit 141.

  Next, a character input screen for inputting characters will be described with reference to FIG. FIG. 3 is a diagram schematically showing a character input screen. When inputting characters, for example, the display unit 101 displays a keyboard 112 for inputting characters on a screen 111 as shown in FIG. In FIG. 3, a numeric keypad for inputting characters is displayed as the keyboard 112. When the user touches the touch panel 102, characters corresponding to the touch position on the keyboard 112 are input. That is, a character corresponding to the key displayed at the touch position is input. In the character input field 113, an input character, here, “1234” is input.

  When an enter key included in the keyboard 112 is touched, character input is terminated. In this manner, character input can be performed on the character input screen including the keyboard 112. Of course, when inputting alphabets, the display unit 101 displays an alphabet (English) keyboard 112. The display unit 101 may display a keyboard 112 including alphanumeric characters. The character comparison unit 132 compares the input character input at the time of user authentication with the authentication character stored in the character storage unit 142.

  Next, an authentication method according to the present embodiment will be described with reference to FIGS. First, an authentication character setting method will be described with reference to FIG. FIG. 4 is a flowchart showing a method for setting an authentication symbol. The authentication symbol can be set on the symbol input screen in the same manner as the symbol input shown in FIG.

  First, the user operates an input unit such as the touch panel 102 to display a menu screen (S11). Then, the user selects the authentication symbol registration screen displayed on the menu screen and displays the setting symbol registration screen (S12). Thereby, as shown in FIG. 2, the display part 101 displays a symbol input screen. That is, a frame serving as the symbol input field 114 is displayed on the screen 111.

  Then, the user operates the touch panel 102 to input an authentication symbol (S13). That is, the user touches the touch panel 102 in accordance with the shape of the authentication symbol desired to be registered. For example, when the user traces the touch panel 102, the touch panel 102 generates a detection signal based on the locus of the touch position. Then, the control unit 103 determines which symbol is similar based on the detection signal. The control unit 103 determines the most similar symbol as an authentication symbol. When the input operation of the authentication symbol is completed, the symbol storage unit 141 stores the authentication symbol and completes the registration of the authentication character (S14). In this way, the authentication symbol is set.

  Next, an authentication character setting method will be described with reference to FIG. FIG. 5 is a flowchart showing a method for setting an authentication character. The authentication character can be set on the character input screen in the same manner as the character input shown in FIG.

  First, the user operates an input unit such as the touch panel 102 to display a menu screen (S21). Then, the user selects the authentication character registration screen displayed on the menu screen and displays the setting character registration screen (S22). Thereby, as shown in FIG. 3, the display part 101 displays a character input screen. That is, the keyboard 112 and the character input field 113 are displayed on the screen 111.

  Then, the user operates the touch panel 102 to input an authentication character (S23). That is, the keyboard 112 of the touch panel 102 is touched according to the authentication character that the user wants to register. For example, the user touches a key on the keyboard 112 a plurality of times. The touch panel 102 generates a detection signal based on the touch position. Then, the control unit 103 compares the display position of the keyboard 112 on the display unit 101 with the touch position. As a result, the control unit 103 determines the key of the keyboard 112 touched by the user. In this way, the authentication character is determined. When the input of the authentication character is completed, the character storage unit 142 stores the authentication character and completes the registration of the authentication character (S24). In this way, the authentication character is set.

  Next, an authentication method according to the present embodiment will be described with reference to FIG. FIG. 6 is a flowchart showing the authentication method. In the following description, a process for performing authentication at the time of mail transmission will be described.

  First, in order to create a mail, when the user operates the touch panel 102 to activate the mailer, the display unit 101 displays a mail creation screen (S31). Then, the user operates the touch panel 102 to input characters and create a mail. When the user finishes creating the mail, the display unit 101 displays a mail transmission screen (S32). The electronic device 100 determines whether or not a mail has been transmitted (S33). For example, when the user touches a mail transmission button on the touch panel 102, the control unit 103 determines that a mail transmission request has been made. If there is no mail transmission (NO in S33), the mail transmission screen is displayed until there is a mail transmission and waits (S32).

  If there is mail transmission (YES in S33), the process proceeds to user authentication processing. Then, the display unit 101 displays a symbol input screen as shown in FIG. 2 (S34). Then, the user inputs a symbol (S35). That is, the user traces the touch panel 102 and inputs a symbol. Thereby, the input symbol is input.

  Then, the symbol comparison unit 131 compares the input symbol and the authentication symbol to determine whether or not they match (S36). If the symbols do not match (mismatch in S36), the process returns to S35. That is, the user operates the touch panel 102 to input the symbol again. If the symbols match (match in S36), the determination unit 133 determines the presence or absence of an interrupt signal. That is, the determination unit 133 determines whether or not there is an interrupt signal indicating that the user has directly touched the touch panel 102 to perform input.

  If there is no interrupt signal (No in S37), the process returns to the symbol input in S35. That is, since no operation is performed by the touch panel 102, it is determined that the input is performed by remote control, and the authentication is not successful. In addition, when the authentication by symbol input is performed a plurality of times and fails, a pop-up indicating that the authentication has failed a plurality of times may be issued, and the processing may be terminated as an authentication failure.

  When there is an interrupt signal (Yes in S37), the display unit 101 displays a character input screen as shown in FIG. 3 (S38). That is, the display unit 101 displays a keyboard screen including a keyboard. Then, the user operates the touch panel 102 to input characters. The character comparison unit 132 compares the input character with the authentication character and determines whether or not they match (S39). If the input character and the authentication character do not match (disagreement in S39), the process returns to the character input in S38. In addition, when the authentication by character input fails a plurality of times, a pop-up indicating that the authentication has failed a plurality of times may be displayed and the processing may be terminated as an authentication failure.

  If the characters match (matching in S39), the authentication is successful, so the mail is transmitted (S40), that is, the electronic device 100 transmits the mail through the Internet. In the above description, the example in which user authentication is performed at the time of mail transmission has been described, but user authentication may be performed in other situations, for example, application activation, web browser activation, setting change, etc. When executing the above, user authentication may be performed by the above method.

  In this way, simple setting symbols are registered by the touch panel 102. At the time of user authentication, the user directly inputs the setting symbol to the touch panel 102 of the electronic device 100. The symbol comparison unit 131 determines whether the set symbol matches the input symbol. Further, the determination unit 133 confirms input from the touch panel 102 of the electronic device 100. That is, the determination unit 133 determines the presence / absence of an interrupt signal from the touch panel 102. Only when there is an interrupt signal, the authentication unit 134 determines that authentication is successful. By performing authentication in this way, security can be strengthened rather than password cancellation using only alphanumeric characters. In particular, since an interrupt signal from the touch panel 102 is used, authentication can be unsuccessful when an illegal character input is performed by remote access. That is, even when data of a symbol that matches the authentication symbol is transmitted by remote access from the outside, unauthorized use can be prevented by using the interrupt signal. Therefore, security can be further improved.

  In recent years, many touch panel input devices mounted on portable information terminals such as smartphones are mounted as user interfaces. In addition to entering alphanumeric passwords, security can be enhanced by registering simple symbols on the touch panel as password cancellations. Further, when only alphanumeric characters are input, there is a risk that the portable information terminal may be remotely controlled and illegally used when a password input is required depending on a malicious application or browser. In addition to alphanumeric password input, a touch panel symbol input that requires direct input to the portable information terminal is provided to release the password from the terminal.

  By adding touch panel symbol input that requires direct input with a finger or the like to the mobile information terminal itself, it is possible to prevent unauthorized operation of the mobile information terminal and to improve security. In fingerprint authentication and face authentication, a dedicated module needs to be additionally installed in the portable information terminal, which increases costs. Costs can be reduced and user-friendliness can be improved by using a standard touch panel mounted on a smartphone.

  If you enter only alphanumeric characters and some malicious apps and browsers require you to enter a password, the personal digital assistant may be remotely controlled and used illegally. Thus, it is possible to add touch panel symbol input that needs to be input, detect an interruption, prevent unauthorized operation of the portable information terminal, and improve security. By determining whether or not there is an interrupt signal at the time of symbol input, authentication can be performed promptly.

  It is possible to improve security and reliability by performing direct input to the portable information terminal using a touch panel and detecting an interrupt and then transitioning to a password input screen. By using the touch panel, the dedicated module can be omitted from the device configuration of the portable information terminal, thereby reducing the cost. The user's operability is also improved by using a touch panel that is generally installed in the portable information terminal. By directly inputting the touch panel to the portable information terminal, it is possible to prevent the password unlocking operation for remote access. This function can be easily introduced by installing the touch panel in a portable information terminal for general use.

  A character input screen for inputting characters corresponding to the touch position on the touch panel 102 when the input symbol matches the authentication symbol by the symbol comparison unit 131 and there is an interrupt signal when the input symbol is input. The display unit 101 is displaying. By doing so, it is possible to improve security without deteriorating the user-friendliness. Note that the electronic device 100 according to the present embodiment may include input means such as a keyboard and a mouse in addition to the touch panel 102. Then, characters may be input using a keyboard or a mouse.

Embodiment 2. FIG.
An electronic device according to this embodiment will be described with reference to FIG. FIG. 7 is a block diagram illustrating a configuration of the electronic device 100. The electronic device 100 includes a touch panel 102, a display unit 101, a symbol comparison unit 131, a character comparison unit 132, a determination unit 133, and an authentication unit 134.

  The touch panel 102 receives a touch operation by the user. The display unit 101 can display a symbol input screen for inputting a symbol corresponding to the touch position locus on the touch panel. The symbol comparison unit 131 compares the input symbol input on the symbol input screen with a preset authentication symbol. The determination unit 133 determines the presence or absence of an interrupt signal indicating that a touch operation has been directly performed on the touch panel. The character comparison unit 132 compares the input character input by the user with a preset authentication character. The authentication unit 134 performs authentication based on the comparison result in the symbol comparison unit 131, the determination result in the determination unit 133, and the comparison result in the character comparison unit 132. With this configuration, unauthorized access by remote control can be prevented and security can be improved.

  Part or all of the processes in the authentication method according to the first and second embodiments may be executed by a computer program. The above-described program can be stored and supplied to a computer using various types of non-transitory computer readable media. Non-transitory computer readable media include various types of tangible storage media. Examples of non-transitory computer-readable media include magnetic recording media (for example, flexible disks, magnetic tapes, hard disk drives), magneto-optical recording media (for example, magneto-optical disks), CD-ROMs (Read Only Memory), CD-Rs, CD-R / W, semiconductor memory (for example, mask ROM, PROM (Programmable ROM), EPROM (Erasable PROM), flash ROM, RAM (Random Access Memory)) are included. The program may also be supplied to the computer by various types of transitory computer readable media. Examples of transitory computer readable media include electrical signals, optical signals, and electromagnetic waves. The temporary computer-readable medium can supply the program to the computer via a wired communication path such as an electric wire and an optical fiber, or a wireless communication path.

  Although the present invention has been described with reference to the exemplary embodiments, the present invention is not limited to the above. Various changes that can be understood by those skilled in the art can be made to the configuration and details of the present invention within the scope of the invention.

DESCRIPTION OF SYMBOLS 100 Electronic device 101 Display part 102 Touch panel 103 Control part 104 Storage part 131 Symbol comparison part 132 Character comparison part 133 Determination part 134 Authentication part 141 Symbol storage part 142 Character storage part

Claims (9)

A touch panel that accepts user touch operations;
A display unit capable of displaying a symbol input screen for inputting a symbol corresponding to the locus of the touch position on the touch panel;
A symbol comparison unit that compares an input symbol input on the symbol input screen with a preset authentication symbol;
A determination unit that determines the presence or absence of an interrupt signal indicating that a touch operation has been directly performed on the touch panel;
A character comparison unit that compares an input character input by a user with a preset authentication character;
An electronic device comprising: an authentication unit that performs authentication based on a comparison result in the symbol comparison unit, a determination result in the determination unit, and a comparison result in the character comparison unit.   A character input screen for inputting characters according to the touch position on the touch panel when the input symbol matches the authentication symbol by the symbol comparison unit and there is an interrupt signal when the input symbol is input. The electronic device of Claim 1 which the said display part displays.   The electronic device according to claim 1, wherein a symbol input in advance by the touch panel is registered as the authentication symbol. An authentication method for performing authentication using a touch panel that accepts a touch operation by a user,
A display step for displaying a symbol input screen for inputting a symbol corresponding to a locus of a touch position on the touch panel;
A symbol comparison step of comparing the input symbol input on the symbol input screen with a preset authentication symbol;
A determination step of determining the presence or absence of an interrupt signal indicating that a direct touch operation has been performed on the touch panel;
A character comparison step of comparing an input character input by a user with a preset authentication character;
An authentication method comprising: an authentication step for performing authentication based on a comparison result in the symbol comparison step, a determination result in the determination step, and a comparison result in the character comparison step.   A character input screen for inputting a character corresponding to a touch position on the touch panel when the input symbol matches the authentication symbol by the symbol comparison step and there is an interrupt signal when the input symbol is input. The authentication method according to claim 4 to be displayed.   The authentication method according to claim 4 or 5, wherein a symbol input in advance by the touch panel is registered as the authentication symbol. An authentication program for executing authentication processing on a computer having a touch panel that accepts a touch operation by a user,
A display step for displaying a symbol input screen for inputting a symbol corresponding to a locus of a touch position on the touch panel;
A symbol comparison step of comparing the input symbol input on the symbol input screen with a preset authentication symbol;
A determination step of determining the presence or absence of an interrupt signal indicating that a direct touch operation has been performed on the touch panel;
A character comparison step of comparing an input character input by a user with a preset authentication character;
An authentication step for performing authentication based on the comparison result in the symbol comparison step, the determination result in the determination step, and the comparison result in the character comparison step;
An authentication program that causes a computer to execute.   A character input screen for inputting a character corresponding to a touch position on the touch panel when the input symbol matches the authentication symbol by the symbol comparison step and there is an interrupt signal when the input symbol is input. The authentication program according to claim 7 displayed on a computer.   The authentication program according to claim 7 or 8, wherein a symbol input in advance by the touch panel is registered as the authentication symbol.

Images