JP2016081399A - Information processing unit, control method of information processing unit and program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an information processing unit having a highly reliable unlocking method for a touch-screen, capable of ensuring security even if an authentication operation is peeped.SOLUTION: In an information processing unit 101, if a character string received through a touch-screen 210 matches authentication information stored in storage means, and each character operation end position matches an authentication position stored in the storage means, the touch-screen will be unlocked, and otherwise, the touch-screen will not be unlocked.SELECTED DRAWING: Figure 9

Description

  The present invention relates to an information processing apparatus, a control method for the information processing apparatus, and a program.

  In an information processing apparatus equipped with a touch screen such as a smart device, an authentication operation is generally required to ensure security when performing an operation. As such an authentication method, a method for inputting a personal identification number via a touch screen, a method for performing authentication by tracing a point displayed on the touch screen, and the like are known. However, in such an authentication method, since the operation of the authentication operation is stolen, the authentication method leaks, and there is a possibility that security cannot be ensured.

  Therefore, as a mechanism that can ensure security even if the operation of the authentication operation is stolen, Patent Document 1 discloses that a target is displayed in a predetermined display mode when performing authentication according to the direction of the flick operation. Discloses that by detecting a flick operation on a target object as a reverse flick operation, security can be ensured even if it is seen.

Japanese Patent Laid-Open No. 2014-13383

  However, in the method disclosed in Patent Document 1, if the authentication operation is stolen several times, the authentication method is performed depending on the direction of the flick operation, and the operation is changed in the case of a specific display mode. There is a possibility that it is guessed.

  The present invention has been made in view of the above problems, and provides an information processing apparatus having a reliable touch screen unlocking method that can ensure security even if an authentication operation is stolen. It is an object.

  The invention of the present application is an information processing apparatus including a touch screen, and stores storage means for storing authentication information made up of character strings, authentication positions for each character constituting the character strings, and input of character strings via the touch screen. Receiving means for receiving the operation end position for each character, and the character string received by the receiving means matches the authentication information stored in the storage means, and the character received by the receiving means And an authentication unit that unlocks the touch screen when each of the operation end positions coincides with the authentication position stored in the storage unit, and does not release the lock otherwise. It is characterized by that.

  By performing authentication processing for unlocking the touch screen in this way, security can be ensured even if the authentication operation is stolen, and a highly reliable touch screen unlocking method can be provided. .

1 is a diagram showing an information processing apparatus 101 such as a smart device according to the present invention. 2 is a block diagram illustrating an example of a hardware configuration of an information processing apparatus 101. FIG. 2 is a block diagram illustrating a functional configuration of an information processing apparatus 101. FIG. It is a flowchart explaining the flow at the time of setting the authentication position for every PIN code and PIN in embodiment of this invention. It is a figure explaining operation at the time of setting a PIN in the embodiment of the present invention. It is a figure explaining operation at the time of setting the authentication position for every PIN in the embodiment of the present invention. It is a flowchart explaining the flow at the time of canceling | releasing the lock state of a touch screen. It is a flowchart explaining the flow at the time of canceling | releasing the lock state of a touch screen. It is a figure explaining operation at the time of canceling the locked state of a touch screen. It is an example of the data which memorize | stores an unauthorized authentication log | history. It is an example of the screen displayed after unlocking when there is an unauthorized authentication history.

  Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.

  FIG. 1 is a diagram illustrating a configuration of an information processing apparatus 101 such as a smart device including a touch screen according to the present embodiment. (Note that each terminal configuration in FIG. 1 is an example, and it goes without saying that there are various configuration examples depending on the application and purpose.)

  FIG. 2 is a diagram illustrating an example of a hardware configuration of the information processing apparatus 101 such as a smart device having a touch screen.

  The CPU 201 comprehensively controls each device and controller connected to the system bus 204.

  In addition, in the ROM 202 or the external memory 214 (storage means), a BIOS (Basic Input / Output System) that is a control program of the CPU 201, an operating system program (hereinafter referred to as OS), and a function executed by the information processing apparatus 101 are realized. Various programs and the like which will be described later are stored. The RAM 203 functions as a main memory, work area, and the like for the CPU 201.

  The CPU 201 implements various operations by loading a program necessary for execution of processing into the RAM 203 and executing the program.

  The input controller 205 controls the touch screen 210, the microphone 211, and the camera 212. The output controller 206 controls display on a display device such as the touch screen 210 and output to the speaker 213. The type of the display device is assumed to be a CRT or a liquid crystal display, but is not limited thereto.

  The memory controller 207 is connected to a hard disk (HD), flexible disk (FD), or PCMCIA card slot via an adapter for storing a boot program, browser software, various applications, font data, user files, editing files, various data, and the like. Controls access to an external memory 214 such as a connected card memory.

  A communication I / F controller (communication I / FC) 208 is connected to and communicates with an external device via a network, and executes communication control processing in the network. For example, Internet communication using TCP / IP is possible.

  Note that the CPU 201 can perform display on the touch screen 210 by executing outline font rasterization processing on a display information area in the RAM 203, for example.

  Various programs and the like used by the information processing apparatus 101 of the present invention to execute various processes described later are recorded in the external memory 214 and executed by the CPU 201 by being loaded into the RAM 203 as necessary. is there.

  Furthermore, definition files and various information tables used by the program according to the present invention are stored in the external memory 214.

  FIG. 3 is a block diagram illustrating a functional configuration of the information processing apparatus 101 according to the present embodiment.

  The information processing apparatus 101 according to the present embodiment is provided so as to be locked when the power is turned on or when the information processing apparatus 101 is not operated for a predetermined time, such as when the power is turned on or the sleep state is released. It has been. In such a locked state, a third party who does not know the unlocking method cannot freely operate the information processing apparatus 101, so that unauthorized operations can be prevented and security can be ensured. Can do.

  Then, when a predetermined unlocking operation is started, the authentication information input display unit 301 displays a screen requesting an operation for unlocking the screen on the touch screen 210, and appropriately locks the touch screen 210. The numeric keypad for performing release authentication is displayed randomly.

  When an operation for unlocking is performed by the user, the touch screen 210 and the touch operation input unit 304 transmit the gesture information input by the user to the authentication information processing unit 305. Specifically, as the information to be transmitted, the character touched at the start of the slide and the operation end position where the swipe operation is finished and the finger is removed from the touch screen are transmitted. When a 4-digit input character is set, four sets of characters and the position at which the finger is separated from the touch screen after the character input operation, that is, the swipe operation, is transmitted.

  The authentication information processing unit 305 performs an authentication operation using the input information received from the touch operation input unit 304 and the information acquired from the authentication information storage unit 303 that stores the authentication information via the authentication information management unit 302. The authentication information processing unit 305 compares the touch operation input unit 304 with the authentication information stored in the authentication information storage unit 303, and determines that the input information is correct when the authentication information matches, and the touch screen. Release the lock. Specifically, when the character string received from the touch operation input unit 304 is the same as the authentication information stored in the authentication information storage unit, the operation end position corresponding to the input character is stored in the authentication information storage unit. When the authentication position is correct, the input information is determined to be correct and the touch screen is unlocked.

  On the other hand, in other cases, for example, the information processing unit 305, when the character string matches the authentication information but any of the operation end positions is different, or when the character string does not match the authentication information in the first place, The input information is not correct and the touch screen is not unlocked.

  In this way, by performing authentication for unlocking in two stages of authentication information and authentication position, security can be ensured even if the authentication operation is stolen.

  In addition, when the character string matches the authentication information but any of the operation end positions is different, the character string used as the authentication information may be leaked. It is possible that an unauthorized authentication operation has been performed by causing the unit 307 to capture an image of the subject performing an unauthorized operation with the camera 212 (imaging control) and causing the position information acquisition unit 308 to acquire the position coordinates using the GPS acquisition unit 215. It is stored in the fraud authentication operation storage unit 306 as having the capability. Note that even if the character string does not match the authentication information, it may be stored that there is a possibility that the unauthorized authentication operation has been performed.

  After that, when the unlocking is normally performed, the authentication information processing unit 305 displays that fact on the touch screen 210 and notifies the user that there is a possibility that the unauthorized authentication operation has been performed. In that case, it is correct by displaying the case where the character string matches the authentication information but one of the operation end positions is different from the case where the character string does not match the authentication information. The user can be made aware that there is a possibility that the authentication character string is leaked.

  Further, the authentication information and the authentication position in the authentication information storage unit 303 may be set in advance, but the information acquired by the touch operation input unit 304 via the touch screen 210 is used. The authentication information management unit 302 can also set the information by storing it in the authentication information storage unit 303.

  Hereinafter, the flow of this embodiment will be further described in detail with reference to flowcharts. Here, a description will be given using an example in which a character string (four-digit password) consisting of four numbers is authentication information.

  First, with reference to FIGS. 4 to 6, a flow when a 4-digit password and an authentication position for each number are set in the authentication information storage unit 303 will be described.

  FIG. 4 is a flowchart for explaining a flow when setting a 4-digit password and an authentication position for each number. FIG. 5A shows an example of a screen displayed when a personal identification number is input, and FIG. 5B shows an example of a screen displayed when an authentication position is set. FIG. 6A is a diagram showing position information. FIG. 6B is an example of a table that stores authentication information and authentication positions.

  The process shown in the flowchart of FIG. 4 is realized by reading and executing a control program in which the CUP 201 of the information processing apparatus 101 is stored.

  In S401 of FIG. 4, the CUP 201 of the information processing apparatus 101 displays an input screen as shown in FIG. 5A for allowing the user to input a personal identification number on the touch screen 210. On the input screen of the touch screen 210, numbers are arranged, and a number is input to the input field 501 by selecting four in order.

  In step S402, when the user presses the OK button 502 shown in FIG. 5A, the CUP 201 of the information processing apparatus 101 uses the character string set in the input field 501 as the personal identification number as the user input is completed. Identify.

  In step S403, the CUP 201 of the information processing apparatus 101 functions as the authentication information management unit 302 and stores the input character string in the authentication information storage unit 303 as a password. In the example shown in FIG. 5, “1, 2, 3, 4” is stored as the personal identification number.

  In step S <b> 404, the CUP 201 of the information processing apparatus 101 displays a screen for setting a correct authentication position for each number on the touch screen 210 as illustrated in FIG. 5B. The user sequentially selects the authentication position for the personal identification number displayed in the input field 501 as shown in (b-1) to (b-4) on the setting screen as shown in FIG. Thus, the authentication position for each number can be set.

  In S405, when the user presses the OK button 502 shown in FIG. 5B, the CUP 201 of the information processing apparatus 101 specifies the position where the number is displayed as the user's selection is completed as the authentication position.

  In step S406, the CUP 201 of the information processing apparatus 101 functions as the authentication information management unit 302, and stores the position where the number is displayed in the authentication information storage unit 303 as the authentication position. Specifically, each position shown in FIG. 5B is assigned a position number as shown in FIG. 6A, and the position information shown in FIG. 6A is linked and stored for each number. doing.

  In the authentication information storage unit 303, for example, as shown in FIG. 6B, the personal identification number 601 “1, 2, 3, 4” used as the authentication information, the personal identification number and the 602 position information “1: position 1”. 2: position 6, 3: position 7, 4: position 5 ”can be stored. FIG. 6B shows an example in which numbers are stored in association with the position information. However, the digits of the code number may be stored in correspondence with the position information, or the numbers of the code numbers are supported. Thus, the position information may be stored, or the position information may be stored in correspondence with the digit of the password. Also, two or more of the same numbers may be used for the password, and the same position may be used twice or more as the authentication position.

  As described with reference to FIGS. 4 to 6, the authentication position and the authentication number can be set in this way. Such setting can be appropriately performed in the unlocked state.

  Next, the flow of the unlocking operation for releasing the locked screen will be described with reference to FIGS. 7 and 8 are flowcharts for explaining the flow when releasing the lock state of the touch screen. FIG. 9 is a diagram illustrating an operation when releasing the lock state of the touch screen. FIG. 10 is an example of data for storing an unauthorized authentication history. FIG. 11 is an example of a screen displayed after unlocking when there is an unauthorized authentication history.

  The processing shown in the flowcharts of FIGS. 7 and 8 is realized by reading and executing a control program in which the CUP 201 of the information processing apparatus 101 is stored.

  In S701, when the unlock operation is started, the CUP 201 of the information processing apparatus 101 randomly displays a numeric keypad for inputting a personal identification number on the screen as shown in FIG. 9A to authenticate the user. Prompt to perform the operation.

  Next, the correct authentication information is “1, 2, 3, 4” and the authentication position is “1 (position 1), 2 (position 6), 3 (position 7), 4 (position 5)”. An example in which the authentication information is input by the user will be described with reference to FIG.

  When the user touches the number 1 on the authentication operation screen, swipes to position 1 and releases his / her finger, the number 1 is input in the first digit of the input field 901, and the operation end position is specified as position 1. (FIG. 9B-1). Specifically, when the position where the finger is released is within the range of the number “3” (within the circular range), the operation end position is specified as position 1.

  When the user touches the number 2 on the authentication operation screen, swipes to the position 6 and releases the finger, the number 2 is input in the second digit of the input field 901, and the operation end position is specified as the position 6. (FIG. 9B-2). Specifically, when the position where the finger is released is within the range of the “number: 0” region, the operation end position is specified as position 6.

  When the user touches the number 3 on the authentication operation screen, swipes to the position 7 and releases the finger, the number 3 is input in the third digit of the input field 901, and the operation end position is specified as the position 7. (FIG. 9B-3). Specifically, when the position where the finger is released is within the range of the “number: 4” area, the operation end position is specified as position 7.

  When the user touches the number 4 on the authentication operation screen, swipes to the position 5 and releases the finger, the number 3 is input in the third digit of the input field 901, and the operation end position is specified as the position 7. (FIG. 9B-3). Specifically, when the position where the finger is released is within the range of the “number: 9” area, the operation end position is specified as position 5.

  That is, the character string “1, 2, 3, 4” and the operation end position “1 (position 1), 2 (position 6) are obtained by the user's operations shown in FIGS. 9 (b-1) to 9 (b-4). ), 3 (position 7), 4 (position 5) ".

  Returning to FIG. In step S702, it is determined whether the password input operation has been completed. If the 4-digit input has been completed, it is determined that the input operation has been completed, the process proceeds to step S703, and the authentication process described in detail in FIG. 8 is performed.

  In S <b> 801 of FIG. 8, the CUP 201 of the information processing apparatus 101 determines whether the character string input by the user matches the password stored in the authentication information storage unit 303. If they match, the process proceeds to S802. If they do not match, the process proceeds to S804, where the image capturing processing unit 307 causes the camera 212 to capture an image of the subject who performs an unauthorized operation, and S805. Then, the position information acquisition unit 308 acquires the position coordinates by the GPS acquisition unit 215, stores in the unauthorized authentication operation storage unit 306 that there is a possibility that the unauthorized authentication operation has been performed in S806, and ends as “authentication NG”.

  In step S <b> 802, the CUP 201 of the information processing apparatus 101 determines, for each number, whether or not the swipe destination operation end position matches the authentication position stored in the authentication information storage unit 303. If all numbers are correct, the process ends as “authentication OK”.

  If the operation end position of the swipe destination does not match the authentication position stored in the authentication information storage unit 303 in any number in S802, the process proceeds to S803 and stores that there is a possibility that the authentication number may be leaked. . In step S804, the image capturing processing unit 307 causes the camera 212 to capture an image, and in step S805, the position information acquisition unit 308 acquires position coordinates using the GPS acquisition unit 215. In step S806, an unauthorized authentication operation may have been performed. If there is any, it is stored in the unauthorized authentication operation storage unit 306, and the process ends as “authentication NG”.

  As information stored in the unauthorized authentication operation storage unit 306 as authentication NG, as shown in FIG. 10, as shown in FIG. 10, a time 1001, a location 1002 specified by the position coordinates of the GPS acquisition unit 215, and image data 1003 captured by the camera 212. The possibility of leaking the code number 1004 is stored.

  In the present embodiment, there is a possibility of leakage when even one of the numbers is inconsistent. However, there is a possibility of leakage when there is a mismatch more than once. . This is because even a legitimate user may miss the authentication input, and in such a case, it is not preferable that the unauthorized authentication operation is always performed.

  In S704 of FIG. 7, it is determined whether “authentication is OK” in the authentication processing of S703 described with reference to FIG. The character string input by the user matches the password stored in the authentication information storage unit 303, and the swipe destination operation end position matches the authentication position stored in the authentication information storage unit 303. In the case of “OK”, the process proceeds to S705 and the screen lock state is released. On the other hand, in the case of “authentication NG” other than that, the process is terminated without releasing the lock state.

  In step S <b> 706, the CUP 201 of the information processing apparatus 101 determines whether there is a history of input processing (unauthorized authentication operation) that has been authenticated NG between the previous unlocking and the current unlocking. Specifically, the table stored in the unauthorized authentication operation storage unit 306 as shown in FIG. 10 is referred to, and a determination is made based on whether or not an unauthorized authentication operation is stored. If there is a history of fraud authentication operations, the process advances to step S707 to refer to the password leak possibility 1004 column of the table stored in the fraud authentication operation storage unit 306 as shown in FIG. Determine if there is a possibility.

  If there is a possibility that the personal identification number is leaked, the process advances to step S709, and the CUP 201 of the information processing apparatus 101 controls the touch screen 210 to display fraud authentication operation information indicating that there is a possibility of personal identification number leakage. An example of the screen displayed at this time is shown in FIG. As shown in FIG. 11A, in the case where there is a possibility of the leakage of the personal identification number, the image 1103 of the subject photographed when an unauthorized operation is performed after unlocking and the position at that time The information and the operation time are displayed, and the user is notified that the password may have been leaked because the password has been correctly input.

  On the other hand, if there is no possibility of the security code leakage, the process advances to step S708, and the CUP 201 of the information processing apparatus 101 displays the target person's image 1103 photographed when the unauthorized operation is performed, and the position information and operation at that time. The time is displayed to notify the user that the unauthorized authentication operation has been performed.

  Then, the information in the fraud authentication operation storage unit 306 is reset and the process ends.

  By authenticating in this way, the lock cannot be released even if the authentication information leaks, and the lock cannot be released even if the operation at the time of authentication leaks. Further, when there is a possibility that the authentication operation has been performed illegally as described above, it is possible to prompt the user to appropriately change the authentication information (change the character string) by notifying that effect. That is, even if the authentication operation is stolen, security can be ensured, and a highly reliable touch screen unlocking method can be provided.

  In the present embodiment, the description has been given as an example using a number as a character used for authentication (password). However, the authentication processing at the time of unlocking is not limited to a number, and alphanumeric characters, symbols, figures, etc. Can be used. That is, the character in this embodiment includes the above input method.

  The present invention can be implemented as a system, apparatus, method, program, storage medium, or the like, and can be applied to a system including a plurality of devices. You may apply to the apparatus which consists of one apparatus.

  Note that the present invention includes a software program that implements the functions of the above-described embodiments directly or remotely from a system or apparatus. The present invention also includes a case where the information processing apparatus of the system or apparatus is achieved by reading and executing the supplied program code.

  Therefore, the program code itself installed in the information processing apparatus in order to realize the functional processing of the present invention with the information processing apparatus also realizes the present invention. In other words, the present invention includes a computer program itself for realizing the functional processing of the present invention.

  In that case, as long as it has the function of a program, it may be in the form of object code, a program executed by an interpreter, script data supplied to the OS, and the like.

  Examples of the recording medium for supplying the program include a flexible disk, hard disk, optical disk, magneto-optical disk, MO, CD-ROM, CD-R, and CD-RW. In addition, there are magnetic tape, nonvolatile memory card, ROM, DVD (DVD-ROM, DVD-R), and the like.

  As another program supply method, a browser on a client computer is used to connect to an Internet home page. The computer program itself of the present invention or a compressed file including an automatic installation function can be downloaded from the homepage by downloading it to a recording medium such as a hard disk.

  It can also be realized by dividing the program code constituting the program of the present invention into a plurality of files and downloading each file from a different homepage. That is, the present invention also includes a WWW server that allows a plurality of users to download a program file for realizing the functional processing of the present invention with an information processing apparatus.

  In addition, the program of the present invention is encrypted, stored in a storage medium such as a CD-ROM, distributed to users, and key information for decryption is downloaded from a homepage via the Internet to users who have cleared predetermined conditions. Let The downloaded key information can be used to execute the encrypted program and install it in the information processing apparatus.

  Further, the functions of the above-described embodiment are realized by the information processing apparatus executing the read program. In addition, based on the instructions of the program, the OS or the like operating on the information processing apparatus performs part or all of the actual processing, and the functions of the above-described embodiments can be realized by the processing.

  Further, the program read from the recording medium is written in a memory provided in a function expansion board inserted into the information processing apparatus or a function expansion unit connected to the information processing apparatus. Thereafter, the CPU of the function expansion board or function expansion unit performs part or all of the actual processing based on the instructions of the program, and the functions of the above-described embodiments are realized by the processing.

  Note that the above-described embodiments are merely examples of implementation in carrying out the present invention, and the technical scope of the present invention should not be construed in a limited manner. That is, the present invention can be implemented in various forms without departing from the technical idea or the main features thereof.

101 Information processing apparatus 210 Touch screen 212 Camera

JP 2014-134732 A

Claims (8)

An information processing apparatus including a touch screen,
Storage means for storing authentication information consisting of a character string and an authentication position for each character constituting the character string;
Receiving means for receiving input of a character string via the touch screen and an operation end position for each character;
The character string received by the receiving unit matches the authentication information stored in the storage unit, and each of the operation end positions of the characters received by the receiving unit is stored in the storage unit. An authentication means that unlocks the touch screen if it matches the authentication location and does not unlock otherwise;
An information processing apparatus comprising:   The authentication position where the character string received by the receiving unit matches the authentication information stored in the storage unit, but the operation end position of any character received by the receiving unit is stored in the storage unit When the lock is released by the authentication unit in the first case where the authentication unit does not match, and in the second case where the character string received by the receiving unit does not match the authentication information stored in the storage unit The information processing apparatus according to claim 1, further comprising display control means for controlling the display so as to display that effect.   The information processing apparatus according to claim 2, wherein the display control unit notifies that authentication information may be leaked in the first case.   A photographing control means for controlling the photographing subject to be photographed by the photographing means provided in the information processing apparatus when the first case or the second case is performed. The information processing apparatus according to claim 2, wherein the information processing apparatus is provided.   5. The apparatus according to claim 2, further comprising a position information acquisition unit configured to acquire position information on which the operation is performed when the first case or the second case is performed. The information processing apparatus according to item.   6. The apparatus according to claim 1, further comprising a setting unit that sets a character string and a position corresponding to each character as the authentication information and the authentication position with respect to the storage unit. The information processing apparatus described in 1. A control method for an information processing apparatus comprising: a touch screen; and storage means for storing authentication information including a character string and an authentication position for each character constituting the character string,
An accepting step of accepting an input of a character string via the touch screen and an operation end position for each character;
The character string received in the receiving step matches the authentication information stored in the storage unit, and each of the operation end positions of the characters received in the receiving step is stored in the storage unit. An authentication process that unlocks the touch screen if it matches the authentication location and does not unlock otherwise;
Control method of information processing apparatus having A program that can be installed in an information processing apparatus including a touch screen, and storage means for storing authentication information consisting of a character string and an authentication position for each character constituting the character string,
Accepting means for accepting an input of a character string via the touch screen and an operation end position for each character of the information processing apparatus;
The character string received by the receiving unit matches the authentication information stored in the storage unit, and each of the operation end positions of the characters received by the receiving unit is stored in the storage unit. An authentication means that unlocks the touch screen if it matches the authentication location, and otherwise does not unlock it,
A program characterized by functioning as