JP2016139188A - Program and telegraphic message generation method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To facilitate operation for user authentication.SOLUTION: A program causes a computer to function as a display control unit for displaying, on a display, an icon movable according to user's operation on the display, a generation unit for, when accepting user's operation on the icon, generating an authentication parameter on the basis of a movement parameter which can be calculated based on a relative position between a first position and a second position on a movement route of the icon moving according to the operation, and generating a telegraphic message including the authentication parameter, and a transmission unit for transmitting the telegraphic message requesting the authentication processing to a server.SELECTED DRAWING: Figure 16

Description

  The present invention relates to a technique for authenticating a user.

  Electronic transactions such as internet banking are conducted. Such electronic transactions are performed using a communication terminal, and an ID and a password for identifying the user are generally used for authentication of the user of the communication terminal. The password is often a combination of characters such as alphanumeric characters. While it is required to use a very complex combination of passwords so that others cannot easily guess the password, it is very difficult to remember such passwords. Therefore, an authentication method using an image instead of using a character has been developed (for example, Patent Document 1).

JP 2007-264929 A

  According to the technique disclosed in Patent Literature 1, for user authentication, a character displayed on a display is moved by a user operation and collated with a motion registered in advance. However, the user needs to register a complicated motion so that the registered motion is not guessed by other users. However, if a complicated movement is registered, it becomes difficult to remember the movement. Even if it is remembered, the operation for adding movement to the character becomes complicated.

  Furthermore, according to the technique disclosed in Patent Document 1, since the movement information is transmitted as it is from the ATM terminal to the host computer, the transmission content may be leaked to a third party. It may lead to a person attack.

  An object of the present invention is to easily perform an operation for user authentication.

  Another object of the present invention is to suppress leakage of information necessary for user authentication to a third party.

  According to an embodiment of the present invention, a display control unit that displays an icon that can be moved according to a user's operation on the display, and a user's operation on the icon moves in response to the operation. A generation unit that generates an authentication parameter based on a movement parameter that can be calculated based on a relative position between the first position and the second position on the movement path of the icon, and that generates a message including the authentication parameter; and an authentication process. A program for causing a computer to function as a transmission unit that transmits the requested electronic message to a server is provided.

  Further, according to an embodiment of the present invention, a numerical value designation image for designating a numerical value is displayed on a display, and a numerical value designated by the numerical value designation image is changed by a user's numerical value change operation on the display, A display control unit for continuing the change of the numerical value after enlarging a part of the numerical value designated image when the numerical value changing speed by the numerical value changing operation by the user is lower than a predetermined speed; When the numerical value is specified by the specified image, a program for causing the computer to function as a generation unit that generates a message based on the numerical value and a transmission unit that transmits the message requesting authentication processing to a server is provided. .

  According to an embodiment of the present invention, an icon that can be moved according to a user operation on the display is displayed on the display, and when the user operation on the icon is received, the icon that moves with the operation is displayed. An authentication parameter is generated based on a movement parameter that can be calculated based on a relative position between the first position and the second position on the movement path, a message including the authentication parameter is generated, and the message requesting an authentication process is generated. A message generation method including sending to a server is provided.

  Further, according to an embodiment of the present invention, a numerical value designation image for designating a numerical value is displayed on a display, and a numerical value designated by the numerical value designation image is changed by a user's numerical value change operation on the display, When the numerical value changing speed by the numerical value changing operation by the user is slower than a predetermined speed, the numerical value specifying image is enlarged, and then the numerical value changing image is continued. When a numerical value is specified, a message generation method is provided that includes generating a message based on the value and transmitting the message requesting authentication processing to a server.

  According to an embodiment of the present invention, an operation for user authentication can be easily performed.

  Moreover, according to one Embodiment of this invention, the leakage to the third party of information required for user authentication can be suppressed.

It is a block diagram which shows the structure of the authentication system 1 in 1st Embodiment of this invention. It is the schematic which shows the external appearance of the communication terminal 10 in 1st Embodiment of this invention. It is a figure which shows the example of the authentication screen in 1st Embodiment of this invention. It is a block diagram which shows the function of the authentication system 1 in 1st Embodiment of this invention. It is a figure explaining the allocation information in 1st Embodiment of this invention. It is a figure explaining the collation information in 1st Embodiment of this invention. It is a communication flowchart which shows the process of the authentication system 1 in 1st Embodiment of this invention. It is a figure which shows the example of the authentication screen in 2nd Embodiment of this invention. It is a figure explaining the allocation information in 2nd Embodiment of this invention. It is a figure explaining the collation information in 2nd Embodiment of this invention. It is a figure which shows the example of the authentication screen in 3rd Embodiment of this invention. It is a figure which shows the example of the authentication screen in 4th Embodiment of this invention. It is a figure which shows the example of the authentication screen in 5th Embodiment of this invention. It is a block diagram which shows the function of the financial transaction system 1B in 6th Embodiment of this invention. It is a figure which shows the example of the authentication screen in 12th Embodiment of this invention. It is a figure explaining the movement parameter when the authentication character in 12th Embodiment of this invention is selected as an authentication factor. In the 1st example of 12th Embodiment of this invention, it is a figure explaining the movement range of the authentication character for determining with being a valid user. In the 2nd example of 12th Embodiment of this invention, it is a figure explaining the movement range of the authentication character for determining with being a valid user. It is a figure explaining the method to move the authentication character in 13th Embodiment of this invention. It is a figure explaining the method of the numerical setting in 13th Embodiment of this invention. It is a figure which shows the example of the authentication screen in 14th Embodiment of this invention. It is a figure explaining authentication operation in the case of performing re-authentication in 14th Embodiment of this invention. It is a figure which shows the example of the authentication screen in 15th Embodiment of this invention. It is a figure which shows the example of the authentication screen in 16th Embodiment of this invention. It is a figure explaining the 1st example of the input result for determining with being a legitimate user in a 16th embodiment of the present invention. It is a figure explaining the 2nd example of the input result for determining with being a legitimate user in 16th Embodiment of this invention. It is a figure explaining the allocation information in 16th Embodiment of this invention.

  Hereinafter, an authentication system according to an embodiment of the present invention will be described in detail with reference to the drawings. The following embodiments are examples of the embodiments of the present invention, and the present invention is not limited to these embodiments.

<First Embodiment>
The authentication system according to the first embodiment of the present invention will be described in detail with reference to the drawings.

[Overview]
FIG. 1 is a block diagram showing the configuration of the authentication system 1 in the first embodiment of the present invention. The authentication system 1 includes a communication terminal 10 and an authentication device 20 connected to a network NW such as the Internet or a communication line. The communication terminal 10 in the first embodiment is a smartphone. The communication terminal 10 may be a mobile terminal that can be connected to the network NW and can communicate with other devices, and may be, for example, a mobile phone or a portable game machine. The authentication device 20 is a server or the like.

  A user may operate a communication terminal 10 to connect to another device via a network NW and receive a service provided from the other device. The authentication system 1 is a system for authenticating the user of the communication terminal 10 in the authentication device 20 in such a case. In the authentication system 1 according to the first embodiment, when a predetermined authentication operation is input to the communication terminal 10 by a user, a message requesting an authentication process for the authentication device 20 (hereinafter referred to as an authentication request message) is generated, and the user Used for authentication. Hereinafter, a user operation for generating an authentication request message is referred to as an authentication operation. Hereinafter, a user authentication method in the authentication system 1 and a configuration for realizing the method will be described.

[Hardware configuration of communication terminal 10]
FIG. 2 is a schematic diagram showing the appearance of the communication terminal 10 according to the first embodiment of the present invention. The communication terminal 10 has a main body 100. A control unit 11, an acceleration sensor 12, and a communication module 18 are provided inside the main body 100, and a display 14 and operation buttons 17 are provided on one surface side of the main body 100. The display 14 is provided with a touch sensor 16 on the surface side, and the display 14 and the touch sensor 16 constitute a touch panel. The acceleration sensor 12 and the operation button 17 may not be provided. Although not shown in FIG. 2, the communication terminal 10 may be provided with other configurations such as a microphone, a speaker, a headphone terminal, and a memory card slot.

  The control unit 11 includes an arithmetic processing circuit such as a CPU, a storage device such as a nonvolatile memory and a hard disk. The control unit 11 causes the CPU to execute a program stored in the storage device and implements various functions in the communication terminal 10. Depending on the realized function, signals output from the components of the communication terminal 10 are used.

  In this example, the acceleration sensor 12 measures the triaxial acceleration generated by the movement given to the main body 100, and outputs a measurement signal indicating the measurement result.

  The communication module 18 is connected to the network NW under the control of the control unit 11 and transmits / receives information to / from other devices such as the authentication device 20 connected to the network NW.

  The display 14 is a display device such as a liquid crystal display or an organic EL display, and displays various screens such as an authentication screen (details will be described later) under the control of the control unit 11.

  The touch sensor 16 is a device that receives an input operation (including an authentication operation) from a user and outputs a signal corresponding to the input operation. An input operation from the user is accepted by the touch sensor 16 by contact with a pointing device 101 called a stylus pen or the like, a user's finger or the like. For this reason, the touch sensor 16 uses a sensor such as a resistive film type, a capacitance type, an ultrasonic type, or a surface acoustic wave type.

  Note that a sensor that accepts a user's input operation by a non-contact operation that indicates the position of the display 14 with the user's finger or the like may be used, not only when the user's input operation is accepted by the touch panel. That is, it is only necessary for the user to specify an icon (authentication character or the like, details of which will be described later) displayed on the display 14 and to perform an operation on the icon.

  Similar to the touch sensor 16, the operation button 17 receives an input operation from the user and outputs a signal corresponding to the input operation.

[Authentication screen]
An example of a screen (hereinafter referred to as an authentication screen) displayed on the display 14 when an authentication operation by the user is accepted and an example of the authentication operation will be described. As described above, this authentication operation is an operation input by the user to generate an authentication request message.

  FIG. 3 is a diagram showing an example of an authentication screen in the first embodiment of the present invention. As shown in FIG. 3A, the display 14 displays a window W1 for accepting an authentication operation, a window W2 for accepting an input of a user ID, and an authentication button TB1. The authentication button TB1 is a button that should be operated by the user when the authentication operation is completed.

  The user ID for the window W2 can be input when the user touches the portion of the window W2, for example. For input, for example, software keyboard input, handwriting input, voice input, or the like is used. In the case where a user ID is input when receiving service provision, the user ID may be displayed.

  In this example, a plurality of characters are displayed in the window W1. In the example of FIG. 3, the plurality of characters include authentication characters A1 to A3, B1 to B3, C1 to C3 and a selection character S1 corresponding to icons. In the code of the authentication character, a difference in alphabet such as A, B, and C indicates a difference in outer shape, and a difference in number such as 1, 2, and 3 indicates a difference in pattern. Thus, in the example of FIG. 3, nine types of authentication characters exist by combining three types of external shapes and three types of patterns. In a smartphone or the like, the display 14 is small, and when a software keyboard is displayed to input a personal identification number as in the conventional case, each key becomes very small and input is difficult. On the other hand, when such an authentication character for use in authentication is used, it can be displayed relatively large on the display, and the input operation is facilitated.

  Note that it is sufficient that a plurality of authentication characters having at least different appearances are displayed in the window W1, and authentication characters having the same appearance may be displayed. Moreover, the case where an external appearance differs may be a case where an external shape or a pattern is different like the above-mentioned case, and a case where a color is different. Further, when characters, numbers, patterns, etc. are drawn on the character, the drawn contents correspond to patterns. Therefore, for example, the authentication character in which the number “1” is drawn and the authentication character in which the number “2” is drawn have different appearances even if the other elements such as the outer shape are the same. Shall.

  Further, the arrangement of each character on the authentication screen is not limited to the example shown in FIG. Then, when authentication processing is requested next time and an authentication screen is displayed, a character arrangement different from that of the authentication screen displayed immediately before may be used. In order to vary the arrangement of each character, a table defining a plurality of arrangement patterns is stored in the communication terminal 10 or the authentication device 20, and one of the arrangement patterns is selected for each authentication process using this table. The arrangement of each character may be determined. Further, the arrangement pattern may be determined at random. In this case, a table for recording past arrangement patterns may be stored.

  The authentication character can be moved by a user input operation. For example, as shown in FIG. 3A, when the user touches the portion where the authentication character A3 is displayed and inputs the slide operation ST, the authentication character A3 is slid as shown in FIG. Move in the direction along ST (arrow AR). By this slide operation ST, the authentication character A3 does not move by the amount of the slid length, but after the slide operation, it moves inertially along the arrow AR, and in this example, it gradually decelerates. Move to. As described above, if the authentication character moves based on the input operation after the user's input operation, the operation for moving the authentication character is not limited to the slide operation.

  Here, the slide operation ST is a state in which, for example, the user's finger is in contact with the touch panel, is moved substantially linearly from the portion of the character to be operated (for example, the authentication character A3), and is stopped at the end point portion. This is an operation of releasing the screen so as not to be maintained for a predetermined time. In other words, the user performs an operation as if he / she played authentication character A3 in the sliding direction. This operation is generally called a flick operation. By this operation, the authentication character A3 moves along the sliding direction at a speed corresponding to the sliding speed after the sliding operation. As an example, the faster the slide, the faster the authentication character moves. However, the invention is not limited to this, and the faster the slide, the slower the authentication character may move, and the correlation between the slide speed and the speed of the authentication character. As long as it has. As another example (for example, an embodiment described later), the moving speed of the authentication character may be determined in advance by an operation regardless of the speed of the slide.

  In this example, the selected character S1 is a character whose display position is fixed in the window W1. Note that the selected character S1 may be movable by a user input operation.

  A selection area SA1 is set around the selected character S1. The selection area SA1 is shown for convenience in FIG. 3 and is not actually displayed on the display 14, but may be displayed. Further, the selection area SA1 is not limited to the range surrounding the selection character S1, but may be the range not surrounding the selection character S1.

  When the authentication character reaches the selection area SA1, the authentication character is selected as an authentication factor. In other words, in this example, the user is not selected as an authentication factor simply by touching the part corresponding to the authentication character. For example, as shown in FIG. 3B, when the authentication character A3 is inertially moved from the original position indicated by the broken line by the slide operation ST in the direction of the arrow AR and reaches the selection area SA1, the authentication character A3 is selected as the authentication factor. Is done. At this time, when the movement path of the authentication character A3 passes through the selection area SA1 on the display, but does not touch the selection character S1, the movement path may be corrected so as to contact the selection character S1. . Further, the authentication character may be erased from the display 14 when it comes into contact with the selected character. In the example shown in FIG. 3B, the authentication character moves in a straight line along the same direction as the direction of the slide operation ST. However, the authentication character may move so as to bend or violate the physical laws. A movement (for example, zigzag movement) may be performed. In the case of turning and moving, for example, a larger turn may be made based on a signal from the acceleration sensor 12 obtained as a result of tilting the communication terminal 10.

  Note that the timing at which the authentication character A3 is selected as the authentication factor may be a timing at which the authentication character A3 is displayed as if it has actually reached the selection area SA1, or by calculating a route by the slide operation ST, etc. It may be the timing when the authentication character A3 is predicted to reach the selection area SA1.

  An authentication factor means what was selected by the user's input operation as an authentication character used for a user's authentication among several authentication characters. For example, when the user with the user ID “abc12345” selects an authentication factor in a pattern of A3 → B1 → A1 (hereinafter referred to as an authentication pattern), an authentication request message is generated based on the pattern. At this time, the authentication request message is generated so as to include an authentication parameter determined based on the moving speed of the authentication character selected as the authentication factor. This authentication parameter may be determined based on the moving direction of the authentication character selected as the authentication factor (the arrow AR direction in the above example). In the embodiment described below, an example in which the moving speed is used will be described. In the case of the movement direction, it may be determined as a movement direction AG shown in FIG.

  Here, as described above, the authentication character is selected as an authentication factor when any position on the movement path is included in a predetermined area. Therefore, it can be said that the position of the authentication character on the moving path is used as one of the parameters for authentication. That is, the fact that a unique value described later is included in the authentication value indicates that the authentication character to which the unique value is assigned has moved to a specific position. The parameter indicating the position is a parameter that changes every frame (corresponding to the still image of each frame constituting the moving image), and can be specified in each frame. On the other hand, the parameters indicating the moving speed and the moving direction described above are both movement parameters that can be calculated from the relationship between the relative positions of the two points on the moving path of the authentication character, and cannot be specified in each frame. Derived using parameters in one frame.

  The authentication request message is transmitted to the authentication device 20, and the authentication device 20 performs verification for user authentication using the verification information (see FIG. 6). The authentication device 20 performs user authentication according to the collation result. Details of the authentication pattern will be described later.

[Hardware Configuration of Authentication Device 20]
The authentication device 20 is a server or the like as described above, and includes a control unit 21 and a communication module 28 as shown in FIG. The control unit of the authentication device 20 includes an arithmetic processing circuit such as a CPU, a storage device such as a nonvolatile memory, and a hard disk, and executes various programs in the authentication device 20 by executing programs stored in the storage device. Let The communication module of the authentication device 20 is connected to the network NW and transmits / receives information to / from other devices such as the communication terminal 10 connected to the network NW under the control of the control unit of the authentication device 20.

  The program executed in the communication terminal 10 or the authentication device 20 may be provided in a state stored in a computer-readable recording medium such as a magnetic recording medium, an optical recording medium, a magneto-optical recording medium, or a semiconductor memory. In this case, the communication terminal 10 or the authentication device 20 only needs to include a device that reads the recording medium. Each program may be downloaded via the network NW.

[Functional configuration of authentication system 1]
FIG. 4 is a block diagram showing functions of the authentication system 1 in the first embodiment of the present invention. In the authentication system 1, the configuration for realizing the authentication function is realized by a function realized by the communication terminal 10 and a function realized by the authentication device 20. The communication terminal 10 includes a display control unit 111, a selection unit 113, a message generation unit 115, a storage unit 117, an eigenvalue assignment unit 119, an input reception unit 162, a transmission unit 181 and a reception unit 182. The authentication device 20 includes an authentication unit 215, a storage unit 217, an instruction information generation unit 219, a transmission unit 281 and a reception unit 282.

[Functional configuration of communication terminal 10]
First, the functional configuration of the communication terminal 10 will be described.

  The input receiving unit 162 receives an input operation to the touch sensor 16 by the user. The input operation here is, for example, the authentication operation described above.

  The display control unit 111 displays an authentication screen on the display 14. The authentication screen is a screen illustrated in FIG. 3 as described above, and an authentication character and a selection character are displayed. The authentication character displayed on the authentication screen moves on the display 14 based on the input operation received by the input receiving unit 162.

  When the selection area is included on the movement path of the authentication character moved by the user's input operation, the selection unit 113 selects the authentication character as an authentication factor. A plurality of authentication characters may be selected as authentication factors. In this example, the authentication factor selected until the authentication button TB1 is operated is used for generating an authentication request message.

  The storage unit 117 stores allocation information.

  FIG. 5 is a diagram for explaining allocation information in the first embodiment of the present invention. The assignment information is information for assigning a unique value for each authentication character for each assignment pattern (P1, P2, P3,...). When an assignment pattern is designated by the authentication device 20, a correspondence relationship between each authentication character and a unique value is defined corresponding to the assignment pattern. A unique value is assigned to each authentication character by this correspondence. For example, with the allocation pattern P2, “9152” is assigned to the authentication character A1, and “0235” is assigned to A2. This allocation information is also stored in the authentication device 20. The assignment information stored in the communication terminal 10 and the authentication device 20 may be periodically updated, and the unique value assigned to each authentication character may be changed. The eigenvalue is not limited to a four-digit number, and may have a smaller or larger number of digits, or a character other than a number may be used. Further, a value different from the value recalled from the appearance of the authentication character (value having low relevance) may be assigned as the unique value of the authentication character. For example, when the pattern of the authentication character represents “5”, another number other than “5” may be assigned as the eigenvalue.

  Returning to FIG. 4, the description will be continued. The receiving unit 182 receives instruction information from the authentication device 20. The instruction information is information indicating an allocation pattern used in the current authentication process.

  The unique value assigning unit 119 assigns a unique value used for generating the current authentication request message to each authentication pattern based on the assignment pattern indicated by the instruction information.

  The message generation unit 115 generates an authentication value based on the authentication factor selected by the selection unit 113 and, if a plurality of authentication factors are selected, further based on the selected order. This is because an authentication value related to the eigenvalue is generated by using a parameter related to the position that any position on the movement path of the authentication character has reached the selection area. That is, it can be said that the eigenvalue is included in the authentication value includes a parameter related to the position. The message generation unit 115 also uses an authentication parameter corresponding to the moving speed of the selected authentication factor (authentication character) when generating the authentication value. In this example, the message generation unit 115 detects the position when the authentication character is selected as the authentication factor (position in the first frame) and a predetermined time before the selected timing (for example, one position before the first frame). The distance from the position in the frame is calculated, and the moving speed is calculated from the distance and the predetermined time (one frame time).

  In addition, since a moving speed respond | corresponds to the distance per unit time, the message production | generation part 115 may acquire the said distance as a moving speed. Further, the moving speed is not limited to the case of being calculated from the above two points, but may be calculated from the relationship between the relative positions of the other two points as long as it is on the moving path of the authentication character. Moreover, it is not restricted to the case where it calculates in real time using the coordinate on an actual screen. For example, immediately after the authentication character starts moving, the moving speed when the authentication character is selected as the authentication factor may be calculated as a predicted value for calculation.

  An authentication value generation method will be described for an example in which authentication characters A3, B1, and A1 are selected in this order as authentication elements. It is assumed that P3 is designated for the allocation pattern at this time.

  Referring to FIG. 5, eigenvalues corresponding to the authentication characters A1, A3, and B1 for the allocation pattern P3 are “0645”, “6690”, and “7103”. In this case, the authentication value is a value arranged in the order in which the authentication characters are selected as the authentication factors, that is, “6699071030645”. It should be noted that they are not necessarily arranged in the selected order but may be arranged in the reverse order. That is, the eigenvalues need only be arranged based on the order in which the authentication characters are selected as the authentication factors. If the movement speeds of the authentication characters A1, A3, and B1 are 1207, 2001, and 1109 (the higher the numerical value, the faster the movement speed), in this example, a value obtained by further arranging the movement speed in the eigenvalue portion of the authentication value. A moving speed portion of “120720011109” is given. As a result, the entire authentication value (specific value part + movement speed part) including information on the movement speed is generated as “66907710306645120720011109”. On the other hand, the user only needs to store the order in which authentication characters are selected as authentication factors and the speed at which they are selected, and need not know the generated authentication value. Then, when the message generation unit 115 generates the authentication value, the message generation unit 115 generates an authentication request message including the authentication value.

  Note that the authentication value is not limited to being generated by this method, and for example, a dummy value may be included between the respective eigenvalues. The next eigenvalue may be changed based on the first eigenvalue. For example, “1”, which is the first digit of the sum of the first eigenvalue “6690” (21 = 6 + 6 + 9 + 0), may be added to each digit of the subsequent eigenvalues, and “66908214756” may be used as the authentication value. In this way, the authentication value may be generated by any method as long as it is generated by a predetermined method using the unique value assigned to the authentication character selected as the authentication factor.

  The transmission unit 181 transmits the authentication request message generated by the message generation unit 115 to the authentication device 20. The authentication value included in the authentication request message is used by the authentication device 20 for user authentication. At this time, a user ID for identifying the user, another password, or the like may be transmitted from the communication terminal 10 in association with the authentication request message. A user ID or the like may be transmitted at a timing different from the transmission / reception of the authentication request message including the authentication value.

[Functional Configuration of Authentication Device 20]
Next, the functional configuration of the authentication device 20 will be described. In addition, about the function structure demonstrated below, it is not restricted to the case where it implement | achieves with one server, You may implement | achieve cooperatively in the some server connected via the network NW. For example, the storage unit 217 may be realized by a different server from a server that realizes another functional configuration.

  The storage unit 217 stores verification information and allocation information for authenticating the user. In addition, the storage unit 217 stores application information for specifying an allocation pattern applied to authentication in the current authentication device 20. Since the allocation information is the same information as the allocation information (see FIG. 5) stored in the storage unit 117, description thereof is omitted.

  FIG. 6 is a diagram for explaining the collation information in the first embodiment of the present invention. In the verification information, a user ID, an authentication pattern, and an authentication speed are associated with each other. For example, the authentication pattern “A3 → B1 → A1” is associated with the user ID “abc12345”. Note that the authentication pattern may be changed by the user. The change of the authentication pattern may be executed by the user operating the communication terminal 10. Further, the authentication pattern is not limited to a sequence of three authentication characters, and may be smaller or larger as long as it is one or more.

  The authentication pattern indicates an authentication character that the user should select as an authentication factor in order to authenticate the user corresponding to the user ID. In the above example, as the authentication factor in the order of the authentication characters A3, B1, and A1. If selected, the user is authenticated as a valid user. From the authentication pattern and the allocation information (see FIG. 5), the authentication value corresponding to the user ID “abc12345” is “773913088154” if the allocation pattern is P1, and “119257119152” if the allocation pattern is P2. If the allocation pattern is P3, “669071030645” is obtained.

  On the other hand, the authentication speed indicates a set value of a speed for moving the authentication character. For example, if the user ID is “abc12345”, the authentication speed corresponding to the authentication character A3 is “1200”, the authentication speed corresponding to the authentication character B1 is “2000”, and the authentication speed corresponding to the authentication character A1 is “1100”. "

  When the instruction information generation unit 219 receives a request to authenticate the user of the communication terminal 10 from the communication terminal 10 or a server that provides a service to the communication terminal 10, the instruction information generation unit 219 selects one of the allocation patterns from the allocation pattern included in the allocation information. Select and generate instruction information indicating the selected allocation pattern. The allocation pattern to be selected is selected according to a predetermined method. For example, the allocation pattern may be selected in a predetermined order or may be selected at random. Then, the instruction information generation unit 219 updates the application information and changes the selected allocation pattern. In the authentication apparatus 20, when the user ID is acquired in advance from the communication terminal 10, the selected allocation pattern is stored in the storage unit 217 as application information in association with the user ID, and the user ID You may enable it to select a different allocation pattern for every.

  The transmission unit 281 transmits the instruction information generated by the instruction information generation unit 219 to the communication terminal 10. The receiving unit 282 receives an authentication request message from the communication terminal 10.

  The authentication unit 215 extracts an authentication value included in the authentication request message. The authentication unit 215 refers to the collation information stored in the storage unit 217, and acquires an authentication pattern corresponding to the user ID of the user of the communication terminal 10 that has transmitted the authentication request message. The authentication unit 215 generates an authentication value from the unique value assigned to each authentication character based on the assignment information and the application information, and the acquired authentication pattern. The authentication unit 215 collates the generated authentication value with the authentication value (specific value portion) included in the authentication request message, and determines whether the authentication characters are selected in the correct order based on the collation result.

  If they are selected in the correct order, the authentication speed specified in the verification information is verified against the authentication value (authentication speed portion) included in the authentication request message. In this example, if the setting value of the authentication speed in the verification information and the moving speed of the authentication character are not completely coincident with each other but are within a predetermined allowable range, the user is authenticated as a valid user. In other cases, the user is not authenticated as a valid user. For example, the allowable range is defined as a range of ± 100 with respect to the set value (if the set value is “1200”, “1100” to “1300” are allowable ranges), or a range of ± 10% (set value) Is “1200”, “1080” to “1320” are defined as allowable ranges). This range may be changed depending on the level of authentication. For example, the permissible range may be narrowed as the authentication is for executing a process that requires a high degree of legitimacy.

  In addition, you may make it determine with the relative speed with respect to the moving speed of the authentication character selected immediately before. For example, in the case of the user ID “abc12345”, the moving speed of the authentication character B1 is not the absolute value of the authentication speed but the moving speed of the authentication character A3, and the moving speed of the authentication character A1 is the moving speed of the authentication character B1. If it is slower than the speed, the user may be authenticated as a valid user.

  In this way, it is authenticated whether or not the user of the communication terminal 10 is a valid user. That is, as a result of the collation, if the unique value portions of the respective authentication values match and the moving speed portion is included in the authentication speed (set value and its allowable range), the user of the communication terminal 10 is authenticated as a valid user. The The authentication result by the authentication unit 215 is notified to a device that has requested to authenticate the user of the communication terminal 10, that is, the communication terminal 10 or a server that provides a service to the communication terminal 10.

[Operation of Authentication System 1]
Next, an operation realized in the functional configuration of the authentication system 1 will be described using a communication flow shown in FIG.

  FIG. 7 is a communication flow diagram showing processing of the authentication system 1 in the first embodiment of the present invention. First, the user of the communication terminal 10 applies for user authentication to receive a predetermined service (step S110). This may be applied automatically when connecting to a server providing a predetermined service and receiving the service. A request for user authentication is transmitted from the communication terminal 10 to the authentication server 20 (step S120).

  The application for user authentication is performed, for example, by accessing a server that provides a predetermined service. In this example, the server that provides the service is described as having the function of the authentication device 20. If the server providing the service and the authentication device 20 are different servers, a user authentication request may be transferred to the authentication device 20, and after the user authentication, the service is sent to the user using the authentication result. It only has to be provided.

  The authentication device 20 determines an allocation pattern used for authentication, generates instruction information (step S210), and transmits the instruction information to the communication terminal 10 (step S220). Upon receiving the instruction information, the communication terminal 10 displays an authentication screen (for example, the authentication screen shown in FIG. 3) on the display 14 (step S130).

  The communication terminal 10 accepts an authentication operation by the user (step S140), and selects an authentication character as an authentication factor based on the user's operation. As described above, in this example, when the authentication character touches the selected character by the user's operation, the authentication character is selected. When the authentication button TB1 is operated by the user, the communication terminal 10 generates an authentication value based on the authentication character selected as the authentication factor. Instead of the operation on the authentication button TB1, an operation may be performed in which a character indicating the end of the authentication operation is displayed in the window W1 and the character is brought into contact with the selected character S1.

  At this time, the user can perform the authentication operation by moving the authentication character at a predetermined speed and select it as an authentication factor, and the selection can be performed only by the user's slide operation. Easy to operate. The communication terminal 10 generates an authentication request message including the generated authentication value (specific value portion + movement speed portion) (step S150), and transmits the generated authentication request message to the authentication device 20 (step S160).

  The authentication value included in the authentication request message is used by the authentication device 20 for user authentication. On the other hand, if the above-described assignment pattern is changed, even if the user's authentication operation is the same, the unique value assigned to each authentication character is changed, so that the authentication value is also changed. Even if the selected authentication character is correct, if the moving speed of the authentication character is greatly different, the user is not authenticated as a valid user.

  Therefore, even if the authentication value included in the authentication request message is leaked to a third party, if the user's authentication operation (the operation for selecting the authentication character as an authentication factor and the moving speed of the authentication character by the selection operation) itself is not known, Also, if the third party cannot know the information necessary for user authentication if the details of the allocation pattern when performing the authentication process are not known, the information necessary for user authentication may be leaked to the third party. Can be suppressed.

  At this time, even if the authentication value is changed, it is not necessary to change the user's authentication operation. Therefore, the user may perform the normal authentication operation without being particularly conscious.

  The authentication device 20 uses an authentication value generated from the authentication pattern corresponding to the user ID of the user of the communication terminal 10 in the verification information and the unique value assigned to each authentication character based on the assignment information and application information in the authentication request message. The authentication value (specific value portion) included is collated, and if both match, the authentication speed in the collation information and the movement speed of the authentication character are further collated (step S230).

  The authentication device 20 performs user authentication based on the collation result (step S240). The authentication device 20 determines that the verification result is that both authentication values match, that is, that the eigenvalue part of the authentication value included in the authentication request message matches the verification target, and the moving speed part is the verification target If it is included in the allowable range, it is determined that the user of the communication terminal 10 is a legitimate user, and otherwise, it is determined that the user is a camouflaged user.

  The authentication device 20 transmits the user authentication result determined in this way to the communication terminal 10 (step S250). When the service that the user wants to receive is provided by a server or the like different from the authentication device 20, the authentication result may be transmitted to the communication terminal 10 via the server.

  Upon receiving the authentication result, the communication terminal 10 displays the authentication result on the display 14 and notifies the user (step S170). Note that the authentication result is not limited to the case where the content is directly displayed on the display 14, but may be notified to the user when the provision of the service is started. When the user of the communication terminal 10 is authenticated as a legitimate user, information is transmitted and received between the communication terminal 10 and the authentication device 20 (or another server that provides the service), and the service is provided to the user. It starts (Step S300). Each operation | movement in these communication flows is implement | achieved using the function structure of the authentication system 1 mentioned above, for example. The above is the description of the operation when the authentication system 1 performs user authentication.

  As described above, in the authentication system 1 according to the first embodiment, instead of the complicated operation of inputting a password composed of letters, numbers, and the like as in the past, the user moves the authentication character at a predetermined speed by a slide operation. Authentication can be requested by a simple operation of moving to a predetermined position and selecting it as an authentication factor.

  Further, in the authentication system 1 according to the first embodiment, if the assignment pattern is changed, even if the user authentication operation is the same, the unique value assigned to each authentication character is changed and the authentication value is also changed. Therefore, even if the authentication value included in the authentication request message is leaked to a third party, it is not possible to directly know information necessary for user authentication. Therefore, leakage of information necessary for user authentication to a third party can be suppressed, and man-in-the-middle attacks can be suppressed.

Second Embodiment
In the first embodiment, there is one selected character displayed on the authentication screen, but in the second embodiment, there are a plurality of selected characters. In the description of each embodiment, the description of the same configuration as that of the first embodiment will be omitted, and the description will focus on the different configuration. The same applies to the embodiments described below.

  FIG. 8 is a diagram showing an example of an authentication screen in the second embodiment of the present invention. As shown in FIG. 8, there are two selected characters S1 and S2. As in the first embodiment, selection areas SA1 and SA2 are set corresponding to each selected character. In the second embodiment, different eigenvalues are assigned depending on the selected character to be contacted when the authentication character is selected as the authentication factor. Of the two selected characters S1 and S2, the selected character S1 is arranged on the opposite side of the initial position of the authentication character such that the selected character S1 is the upper part of the window W1 and the selected character S2 is the lower part of the window W1. You may make it do. If there are four selected characters, they may be arranged at the four corners of the window W1, for example. If it does in this way, when a user moves an authentication character, it will be easy to determine a rough direction and operation will become easy. Further, even if the selected area is enlarged, it can be separated from other selected areas.

  FIG. 9 is a diagram for explaining allocation information in the second embodiment of the present invention. In the allocation information in the second embodiment, a unique value is determined for the combination of the authentication character and the selected character. For example, when the authentication character A1 is selected as an authentication factor in contact with the selected character S2, if the allocation pattern is P1, the eigenvalue is “2918”.

  FIG. 10 is a diagram for explaining collation information in the second embodiment of the present invention. In order to distinguish the selected characters S1 and S2, also in the verification information, the authentication pattern is determined by the combination of the authentication character and the selected character. For example, for the user ID “abc12345”, the authentication pattern is determined as “A3S2 → B1S1 → A1S1”. Therefore, the authentication character A3 contacts the selected character S2 and is selected as an authentication factor, the authentication character B1 contacts the selected character S1 and is selected as an authentication factor, and the authentication character A1 contacts the selected character S1 as an authentication factor. If selected, and if the moving speed of each authentication character is within the allowable range of the authentication speed, the user is authenticated as a valid user.

  In this way, by using a plurality of selected characters, it is possible to realize more combinations with less burden on the user, so it is difficult to memorize the user's operation from a side view, Even if it is appropriately input, it is difficult to obtain a correct input, so that the accuracy of user authentication can be improved.

  A fixed value is assigned to each of the selected characters S1 and S2, and in the authentication value generated by the same method as in the first embodiment, the unique value such as before or after the four-digit unique value corresponding to each authentication character. In association with this, a unique value assigned to a selected character that has selected the authentication character as an authentication factor may be arranged.

  This embodiment does not prevent realization as another embodiment by combining the configurations of the other embodiments. The same applies to the following embodiments.

<Third Embodiment>
In the third embodiment, when the user moves the authentication character displayed on the authentication screen and the authentication character touches another authentication character, the other authentication character moves under the influence of the moved authentication character. The case where it is supposed to be described will be described.

  FIG. 11 is a diagram showing an example of an authentication screen in the third embodiment of the present invention. In the example shown in FIG. 11, the screen changes when the user moves the authentication character A1 toward the top of the screen. When the authentication character A1 moves and first comes into contact with the authentication character B2, the authentication character B2 is flipped to the left side of the screen. As a result, the authentication character B2 contacts the authentication character B1, and the authentication character B1 moves. Further, when the authentication character A1 comes into contact with the authentication character C1, the authentication character C1 is flipped to the right side of the screen.

  Thus, other authentication characters may move based on the movement path of the moved authentication character. Note that the authentication character moved by the user (authentication character A1 in the above example) moves linearly in the example of FIG. 11, but the path changes due to the influence of the contacted authentication characters B2 and C1. You may do it. The influence of the movement of one authentication character on the movement of other authentication characters may be determined by a predetermined calculation method.

  Further, when the authentication character moves and touches the end of the window W1, it may be rebounded. Further, the position of the authentication character may be changed based on at least one of the posture and movement of the communication terminal 10 by detecting the posture and movement of the communication terminal 10 using the output of the acceleration sensor 12. . When the communication terminal 10 is shaken, the position of each authentication character may be switched.

<Fourth embodiment>
In the above-described embodiment, the authentication character displayed on the authentication screen is selected as an authentication element by moving it by a slide operation and bringing it into contact with the selected character. However, in the fourth embodiment, authentication is performed by another method. Select a character as an authentication factor.

  FIG. 12 is a diagram showing an example of an authentication screen in the fourth embodiment of the present invention. In the fourth embodiment, the authentication characters are aligned vertically and horizontally in the window W1. As shown in FIG. 12A, when the user inputs an operation DT (generally referred to as dragging) for moving the authentication character B2 upward, the moved authentication character B2 and the authentication character D1 at the destination are switched. To move. FIG. 12B shows a state after the authentication character B2 and the authentication character D1 are switched by the operation DT. When moved continuously, the authentication character that is the operation target of the user moves while sequentially changing the position of the authentication character that is the movement destination.

  In this example, an area (selection area SW) for selecting an authentication character as an authentication factor is determined in advance as a part of the window W1. This selection area SW may be set by the user. It is desirable that the selection area SW be remembered by the user and not be displayed on the display 14. This is because, even if a third party looks into the user's operation, it is impossible to know which authentication character is selected as the authentication factor. Note that the movement speed of the authentication character to be included in the authentication value may be calculated as, for example, the movement distance between two predetermined points on the movement route until the movement is performed in the selection area SW. Good.

  In the fourth embodiment, when the user operates the authentication button TB1, an authentication character existing in the selection area SW is selected as an authentication factor. The selection order may be determined in advance, but may be, for example, the order from the left side. In the example of FIG. 12B, authentication characters C3, A3, A2, and D1 are selected as authentication elements in order from the left of the selection area SW. The authentication value may be generated as a combination of authentication characters regardless of the order of selection. In this case, the authentication value is simply treated as a combination of eigenvalues corresponding to each authentication character, and in the above example, it is treated as a combination of eigenvalues divided every 4 digits, not a series of 16 digits. Similarly, in the first embodiment, the selected order may be irrelevant.

  In addition, although 4th Embodiment was shown as one of the examples which select an authentication character as an authentication factor without using a slide operation, it selects as an authentication factor by touching the method and the authentication character using the operation part 17. Other methods, such as a method to perform, may be used. Even if the allocation pattern is changed, the authentication value included in the authentication request message is also changed because the unique value assigned to each authentication character is changed and the authentication value is changed even if the user authentication operation is the same. Even if the value is leaked to a third party, information necessary for user authentication cannot be directly known. Therefore, leakage of information necessary for user authentication to a third party can be suppressed.

<Fifth Embodiment>
In the fifth embodiment, each of the plurality of authentication characters displayed on the authentication screen is an example in which the appearance is different with a number as a pattern. Such an authentication screen can also be used for inputting a personal identification number in an ATM (Automatic Teller Machine) or the like.

  FIG. 13 is a diagram showing an example of an authentication screen in the fifth embodiment of the present invention. The authentication characters displayed on the authentication screen shown in FIG. 13 have a rectangular outer shape and the same, and the patterns are numbers from “0” to “9”. As shown in FIG. 13 (a), when the user inputs the slide operation ST to the authentication character N7 of the number “7”, the authentication character N7 touches the selected character S1, as shown in FIG. 13 (b). To do. Thereby, the authentication character N7 is selected as an authentication factor.

  In this way, by using an authentication character including numerical information in the pattern, it can be used for inputting a personal identification number already set as a combination of numbers. For example, the communication terminal 10 can be used as a payment using an already set personal identification number for a credit card payment at a store, a payment for mail order sales such as the Internet, and the like. The communication terminal 10 can also be applied to a security device such as the above-described ATM or electronic lock door.

  If the authentication character does not contact the selected character S1 at a predetermined speed, it may not be recognized as an input of a valid password. That is, the authentication character may be treated as having no contact with the selected character S1.

<Sixth Embodiment>
In the sixth embodiment, a case will be described in which the service that the user of the communication terminal 10 intends to use is a financial transaction (balance inquiry, deposit, transfer, transfer, securities transaction, etc.) provided from a financial transaction apparatus.

  FIG. 14 is a block diagram showing a functional configuration of the financial transaction system 1B according to the sixth embodiment of the present invention. 1 C of financial transaction systems have the financial transaction apparatus 50 connected with the communication terminal 10 via the network NW. The financial transaction device 50 includes the authentication device 20 and the transaction unit 25 in each of the above-described embodiments. The transaction unit 25 uses the authentication result of the user in the authentication device 20 to execute a financial transaction process based on an instruction from the communication terminal 10 when the user of the communication terminal 10 is a valid user. At this time, the processing of the financial transaction executed by the transaction unit 25 may be an instruction for processing to an external device such as another database server. Note that the financial transaction device 50 is not limited to being realized by a single server, as with the authentication device 20, and may be realized in cooperation with a plurality of servers connected via the network NW.

<Seventh embodiment>
In the seventh embodiment, non-authenticated characters are also displayed on the authentication screen in addition to the authentication characters. The unauthenticated character has a specific appearance. For example, in FIG. 3, C2 and C3 may be unauthenticated characters. The unauthenticated character is selected as a non-authenticated element by contact with the selected character S1. The non-authentication element is assigned a specific unique value (for example, “0000”). The authentication value included in the authentication request message is generated in the same manner as the method in the first embodiment based on the authentication element and the non-authentication element. That is, an authentication value is generated with a specific value (for example, “0000”) as a specific value for the non-authentication element portion.

  In the authentication device 20, a portion where a value corresponding to a non-authentication element exists is collated without being handled as an authentication value. For example, in the example in the first embodiment, when the operation for selecting the second non-authenticated character as the non-authenticated element is interrupted, the authentication value (specific value part) is generated as “6690000071030645”. “0000” is removed and “669071030645” is treated as an authentication value (specific value part).

  Thus, since the non-authentication character does not contribute to the user authentication, it can function as a dummy character of the authentication character. In addition, when an authentication character is moved within a predetermined speed range (for example, a predetermined speed or more or less than a predetermined speed), it may function as an unauthenticated character.

  If it does in this way, many input operation will be performed by adding unnecessary operation that a user intentionally operates a dummy character in user's authentication operation. The operations necessary for authentication are a part of the operations, but the third party does not know the necessary operations. Therefore, even if a third party steals a user's operation from the side, it is difficult to remember because there are many operations.

<Eighth Embodiment>
In the eighth embodiment, non-selected characters are also displayed on the authentication screen in addition to the authentication characters. The non-selected character has a specific appearance. For example, in FIG. 3, C2 and C3 may be non-selected characters. The non-selected character is not selected as an authentication factor even by contact with the selected character S1. That is, since the non-selected character is not related to the generation of the authentication value, the unique value is not assigned.

  Thus, since the non-selected character does not contribute to the user authentication, it can function as a dummy character of the authentication character. Therefore, the same effect as the seventh embodiment can be obtained. Note that when the authentication character is moved within a predetermined speed range (for example, a predetermined speed or less, or less than a predetermined speed), it may function as a non-selection character.

<Ninth Embodiment>
In the ninth embodiment, when an authentication character to be selected as an authentication factor in the authentication operation is an authentication pattern of A3 → B1 → A1, the authentication character is selected as an authentication factor so as to include at least a part of this authentication pattern. If so, the user may be authenticated as a valid user. In this case, in the verification of the authentication value in the authentication device 20, it is only necessary to check with a part of the authentication value included in the authentication request message.

  For example, if the authentication character selected as the authentication factor by the user authentication operation is an authentication pattern of A3 → C3 → B1 → A1, even if C3 is included, an authentication pattern of A3 → B1 → A1 in the order of selection Therefore, the authentication device 20 may be authenticated as a valid user.

  Even if it does in this way, the effect similar to 7th, 8th embodiment is acquired.

<Tenth Embodiment>
In the first embodiment, the authentication apparatus 20 shares the allocation pattern used for authentication by transmitting the instruction information indicating the allocation pattern to the communication terminal 10, but in the ninth embodiment, the authentication apparatus 20 In the authentication apparatus 20 and the communication terminal 10, instruction information generated by a predetermined algorithm is used instead of the instruction information transmitted from the terminal. For example, the instruction information may be generated based on the time information.

  A predetermined unique value may be assigned to each authentication character without using the instruction information. In this case, the unique value is an identifier of the authentication character. Even in this case, as described above, the user selects an authentication character as an authentication factor by a slide operation instead of the complicated operation of inputting a password composed of characters, numbers, and the like as in the past. Authentication can be requested with a simple operation.

<Eleventh embodiment>
In the first embodiment, the authentication character moved by the slide operation comes into contact with the selected character and is selected as the authentication factor. In the eleventh embodiment, regardless of the display of the selected character, the authentication element may be selected by moving the authentication character by a slide operation. In this case, the selected character may not be displayed.

<Twelfth embodiment>
In the twelfth embodiment, an example in which user authentication is performed by moving an authentication character in a predetermined manner will be described.

  FIG. 15 is a diagram showing an example of an authentication screen in the twelfth embodiment of the present invention. In the example shown in FIG. 15, the selected character described above is not displayed on the authentication screen. The user performs an authentication operation by selecting and moving any authentication character. For example, the operation DT is input to the authentication character C1 as shown in FIG. 15A, and the authentication character C1 is moved as shown in FIG. Thereafter, when the authentication button TB1 is operated, an authentication value is generated.

  In this example, the authentication value is determined by the movement parameter indicating the movement of the authentication character from the position before the movement (FIG. 15A) to the position after the movement (FIG. 15B) and the type of the authentication character. Based on.

  FIG. 16 is a diagram illustrating movement parameters when an authentication character is selected as an authentication factor in the twelfth embodiment of the present invention. The movement source position C1b is the center position of the movement source of the authentication character C1, and the movement destination position C1t is the center position of the movement destination of the authentication character C1. In this example, the movement amount R, the movement speed V, and the movement direction AG are defined as the movement parameters. The movement amount R is the distance between the movement destination position C1t and the movement source position C1b. The movement speed V indicates the speed when moving from the movement source position C1b to the movement destination position C1t. In this example, the movement amount R is the time required to move from the movement source position C1b to the movement destination position C1t. Divided value. The moving direction AG is an angle based on the predetermined direction L. As described above, the movement parameter is determined based on at least two positions (positions in different frames) on the movement path of the authentication character.

  The authentication value generated in the communication terminal 10 is, for example, a value obtained by combining the eigenvalue corresponding to the moved authentication character and the eigenvalue corresponding to the movement parameter by the method described in the above embodiment. The eigenvalue corresponding to the movement parameter may be the value of each parameter itself, or may be another value converted according to the parameter value. In addition, when there is only one type of authentication character to be moved, or when there is only one type, that is, when there is no need to distinguish the type of authentication character to be moved, the eigenvalue corresponding to the authentication character may not be used. . In this case, movement parameters are used for user authentication.

  In addition, although three types of parameters are exemplified as the movement parameters, two types or one type of parameters may be used, and other parameters such as acceleration may be separately defined. For example, when only the movement direction AG is used as the movement parameter, the authentication value is a value (9753124) obtained by continuing the movement direction AG (angle, eg, 124 °) to the eigenvalue (eg, 9753) corresponding to the authentication character. That's fine. In generating the authentication value, a position parameter indicating the position of the authentication character on the screen (for example, coordinates on the screen before or after movement) may be used in combination with the movement parameter. In this case, when the authentication character is moved to a predetermined location (area) and moved at a predetermined speed, the user can be authenticated as a valid user. Unlike the movement parameter, the position parameter can be determined based on one position (position in one frame) on the movement path of the authentication character.

  When receiving the authentication request message including the authentication value generated in this way, the authentication device 20 performs verification of the authentication value. The eigenvalue portion corresponding to the authentication character is collated in the same manner as in the above-described embodiment, while the eigenvalue portion corresponding to the movement parameter is collated with the angle value separately determined in the collation information. The angle defined in the collation information (hereinafter referred to as collation angle) is registered in advance by the user as 120 ° or the like. If the angle of the movement direction AG obtained from the eigenvalue is included in a predetermined width (hereinafter referred to as a collation allowable range) with respect to the collation angle, it is determined that the collated angles match. The collation allowable range may also be registered in the collation information in advance by the user. That is, the collation allowable range may be different for each user.

  For the eigenvalue corresponding to the authentication character and the eigenvalue corresponding to the movement parameter (movement direction AG in this example), the authentication value included in the authentication request message and the authentication value generated for verification by the authentication device 20 are If it is determined that they match (including the range), the authentication device 20 determines that the user of the communication terminal 10 is a valid user.

  Note that an authentication value may be generated by combining not only the eigenvalue corresponding to the movement of one authentication character but also a plurality of authentication characters and the eigenvalue corresponding to the movement of each authentication character. When performing authentication by moving a plurality of authentication characters, for example, an authentication value may be generated by arranging eigenvalues corresponding to each authentication character in the order in which the authentication characters are moved. Regarding each authentication character, the matching allowable range may be different, and the movement parameter used as the eigenvalue may be different.

  Also, the authentication server 20 may include an authentication character that has been moved beyond the verification allowable range, that is, a case where it is determined that some of the authentication characters exceed the verification allowable range from the unique value included in the authentication value. is there. In this case, the authentication server 20 includes, among the authentication values received from the communication terminal 10, eigenvalues related to the authentication characters that have moved beyond the verification allowable range (eigenvalues corresponding to the authentication characters and eigenvalues corresponding to the movement parameters). A value obtained by deleting “” may be treated as a correct authentication value.

  As described above, when the authentication character exceeds the collation allowable range, the authentication character does not contribute to the user authentication. Therefore, the authentication character can be caused to function as a dummy character.

  If it does in this way, many input operation will be performed by adding unnecessary operation that a user intentionally operates a dummy character in user's authentication operation. The operations necessary for authentication are a part of the operations, but the third party does not know the necessary operations. Therefore, even if a third party steals a user's operation from the side, it is difficult to remember because there are many operations.

  Next, with respect to the matching allowable range, a first example using the movement amount R and the movement direction AG as movement parameters and a second example using only the movement direction AG will be described with reference to FIGS. 17 and 18. explain.

  FIG. 17 is a diagram illustrating the movement range of the authentication character for determining that the user is a legitimate user in the first example of the twelfth embodiment of the present invention. In this example, the movement source position C1b of the authentication character C1 moves to the movement destination position C1t when moving to the position determined in the collation information. An area AA indicates an area including a collation allowable range of the movement amount R and the movement direction AG on the basis of the movement destination position C1t. Therefore, in the authentication character C1 after movement, when the center position is included in the area AA, it is determined that the user of the communication terminal 10 is a valid user.

  FIG. 18 is a diagram illustrating the movement range of the authentication character for determining that the user is a legitimate user in the second example of the twelfth embodiment of the present invention. In this example, since only the movement direction AG is used as the movement parameter, when the movement source position C1b of the authentication character C1 moves to a position determined in the collation information, it moves to any one on the broken line arrow PD. Become. In this example, the area AA indicates an area including the matching allowable range in the moving direction AG with reference to the broken arrow PD. Therefore, in the authentication character C1 after movement, when the center position is included in the area AA, it is determined that the user of the communication terminal 10 is a valid user.

<13th Embodiment>
In the thirteenth embodiment, an example in which the authentication character is moved by a method different from the above embodiments will be described. In this example, the operation DT is performed in the direction opposite to the direction in which the authentication character is to be moved, and then the operation is stopped (if the user's finger is in contact with the touch panel, the operation is performed from the touch panel. , The authentication character is moved in the target direction. That is, parameters such as direction and speed for moving the authentication character are set by the operation DT, and the movement of the authentication character is started according to the parameters set after the setting. This will be specifically described below.

  FIG. 19 is a diagram for explaining a method of moving the authentication character in the thirteenth embodiment of the present invention. First, as shown in FIG. 19A, an operation DT is performed on the authentication character C1. The direction of this operation DT is the opposite direction to the direction in which the authentication character C1 is to be moved. By performing this operation DT, as shown in FIG. 19B, the authentication character C1 moves from the movement source position C1b to a position corresponding to the operation DT (movement destination position C1t).

  In the following description, the distance of the authentication character C1 moved by the operation DT, that is, the distance from the movement source position C1b to the movement destination position C1 is referred to as an operation distance RT. Further, the operation speed when performing the operation DT is referred to as an operation speed VD.

  When the operation DT is stopped in the state shown in FIG. 19B, as shown in FIG. 19C, the authentication character C1 moves in the direction from the movement destination position C1t to the movement source position C1b. The authentication character C1 moves at a speed VT corresponding to the operation distance RT and the operation speed VD. That is, when the moving direction and moving speed of the authentication character C1 are set, the authentication character C1 moves thereafter (after the operation DT is stopped) with the set moving direction and moving speed.

  This authentication character operation method can be applied in place of the slide operation ST in each of the above embodiments. Moreover, it can also be applied to a method of moving the authentication character by an operation (operation DT) other than the slide operation ST as in the twelfth embodiment. A unique value corresponding to the numerical value NM may be included in the authentication value. In this case, the numerical value NM used for verification in the authentication device 20 is registered in the verification information predetermined by the user.

  In this example, while this operation DT is being performed (FIG. 19B), the numerical value NM is set according to the operation distance RT. This numerical value NM is displayed at a predetermined position or a position interlocked with the movement of the authentication character. In this example, the numerical value NM takes an integer from “0” to “999”, and is set such that the speed VT increases as the numerical value NM increases. In this example, the numerical value NM is changed not only according to the operation distance RT but also according to the operation speed VD. Therefore, even if the operation distance RT is the same, if the operation speed VD is different, the numerical value NM is set as a different value. A method for setting the numerical value NM will be specifically described with reference to FIG.

  FIG. 20 is a diagram for explaining a numerical value setting method according to the thirteenth embodiment of the present invention. FIG. 20A shows the current state, and the numerical value NM is “10” at the operation distance RTa. The difference in the numerical value NM set according to the difference in the operation speed VD of the operation DT from this state will be described.

  20B-1 and 20B-2, the operation distance is RTb, and the operation distance from the operation distance RTa in FIG. 20A is the same. On the other hand, the operation speed VD1 of (b-1) is slower than the operation speed VD2 of (b-2). When the operation speed is slow, the numerical value NM is set so that the increase amount of the numerical value NM is reduced even at the same operating distance. In the example of FIGS. 20B-1 and 20B-2, the numerical value NM changes to “327” (= 10 + 317) in (b-1) even if the operation distance RTb is the same, and (b− In 2), it changes to “821” (= 10 + 811). When the numerical value NM changes, the displayed numerical value NM is sequentially updated and changed.

  Therefore, when the user wants to greatly change the numerical value NM, the user only has to increase the operation speed VD and move the authentication character. On the other hand, while confirming the displayed numerical value NM, the user moves the authentication character so as to decrease the operation speed VD when approaching the target value, and FIGS. As shown in 2), the change in the numerical value NM is reduced.

  In FIGS. 20C-1 and 20C-2, the operation distance is RTc, and the operation distance from the operation distance RTb is the same. On the other hand, the operation speed VD3 of (c-1) and (c-2) is much smaller than the operation speeds VD1 and VD2. Therefore, the numerical value NM slightly increases (+10) from the states (b-1) and (b-2). As a result, the numerical value NM changes to “347” in (c−1) and changes to “841” in (c-2). Thus, even if the operation distance RT of the authentication character is the same, the target numerical value NM can be easily set by adjusting the speed of the operation DT. The numerical value NM set in this way may be used as a personal identification number for user authentication (a three-digit number in this example). That is, an authentication value may be generated corresponding to the numerical value NM regardless of the type of authentication character.

<Fourteenth embodiment>
In the fourteenth embodiment, unlike the above-described embodiments, an example in which user authentication is performed by a method that does not use an authentication character will be described. In this example, the numerical value NM is set and used as the authentication value as in the thirteenth embodiment. However, the numerical value NM is not set by moving the authentication character by the operation DT, but by another method. Set.

  FIG. 21 is a diagram showing an example of an authentication screen in the fourteenth embodiment of the present invention. The authentication screen shown in FIG. 21 is displayed in a window W3 provided on the display 14. The window W3 is displayed at a predetermined position in the display area of the display 14. FIGS. 21A to 21F show time-series examples of user operations until the target numerical value NM (in this example, “777”) is set.

  On the authentication screen of this example, a number line image NB showing a number line, a pointer NP designating a specific position of the number line, and a numerical value NM indicating a value on the number line at the position pointed to by the pointer NP are displayed. . The user can move the position of the pointer NP along a number line by an operation. When the pointer NP moves, the display position of the numerical value NM moves in conjunction with the position of the pointer NP.

  As shown in FIG. 21A, the pointer NP points to the position “0” on the number line. The user moves the position of the pointer NP at a high speed (referred to as a first speed in this embodiment). The destination of the movement is near the target value “777”, and in this example, as shown in FIG. 21B, the pointer NP points to “750”.

  Since the user approaches the target value “777”, the user moves the speed of the pointer NP to a speed slower than the first speed and slower than the predetermined first set speed (referred to as the second speed in this embodiment). (FIG. 21B). When it is detected in the communication terminal 10 that the moving speed is slower than the first set speed, the number line image NB displayed in the window W3 is enlarged as shown in FIG. A part of the numerical value range is extracted and enlarged so that a part of the numerical value range is displayed. At this time, it is desirable that the position of the pointer NP is maintained in the user's operation, that is, the position on the number line indicated by the pointer NP is not changed.

  In the number line image NB displayed as shown in FIG. 21C, the user can easily approach the target value “777” with higher accuracy. In this example, the user further moves the pointer NP at the second speed, and at “771” close to “777”, the movement speed is lower than the predetermined second set speed (in this embodiment, the third speed). (FIG. 21 (d)).

  When it is detected in the communication terminal 10 that the moving speed is slower than the second set speed, the number line image NB is further enlarged and a part of the numerical value range is displayed as described above. (FIG. 21E). Then, in the number line image NB displayed as shown in FIG. 21E, the user can easily approach the target value “777” with higher accuracy than in the case shown in FIG. Then, the user moves the pointer NP to the target value “777” and sets “777” to the numerical value NM (FIG. 21F).

  In the above example, since the first set speed and the second set speed exist, the expansion of the numerical range is performed in two stages. However, the number range may be one stage, or more stages. It may be divided into two.

  When the operation is performed on the assumption that the user knows the target numerical value NM, the timing at which the movement speed of the pointer NP is slowed does not deviate greatly. On the other hand, if the user does not know the target numerical value NM, the user may slow down the moving speed of the pointer NP even if the pointer NP points to a remote numerical value. In this case, a number line image that does not include the target numerical value may be displayed in the window W3 due to being away from the target numerical value NM by a predetermined value or more. Since there is no need to authenticate such a user, the authentication process is stopped. On the other hand, since there may be an error in the user's operation, the re-authentication operation may be performed using another authentication method.

  FIG. 22 is a diagram for explaining an authentication operation when re-authentication is performed in the fourteenth embodiment of the present invention. In FIGS. 22A to 22C, the target numerical value NM (in this example, “777”) should be set, but the speed of the pointer NP is accidentally reduced at a position away from “777”. The user's operation example in this case is shown in time series.

  In FIG. 22A, the user moves the pointer NP, but when the user reaches “329” on the number line, the movement speed is erroneously made slower than the first set speed (FIG. 22). (B)) As shown in FIG. 22 (c), “777” is not included on the number line displayed in the window W3, and the operation toward the target value can no longer be performed. Therefore, the authentication process is stopped and the authentication operation is started again from the beginning. The user may be authenticated by another authentication method before the authentication operation is performed again. This makes it possible to determine whether the user has just made a mistake or whether the user does not know the numerical value.

  Note that the different authentication method may be the method described in another embodiment or a simpler method. In this other authentication method, it is not determined whether or not the user is a valid user shown in each embodiment, but it is only necessary to determine whether or not the authentication operation in the present embodiment may be performed again.

<Fifteenth embodiment>
In the fifteenth embodiment, the numerical value NM is set using a number line as in the fourteenth embodiment, but the setting method is different from that in the fourteenth embodiment. Specifically, the user does not move the position of the pointer NP, but sets the numerical value by moving the number line image NS.

  FIG. 23 is a diagram showing an example of an authentication screen in the fifteenth embodiment of the present invention. The authentication screen shown in FIG. 23 is displayed in a window W4 provided on the display 14. The window W4 is displayed at a predetermined position in the display area of the display 14. FIGS. 23A to 23F show user operation examples in time series until the target numerical value NM (in this example, “777”) is set.

  On the authentication screen in this example, a number line image NS indicating a number line, a pointer NA designating a specific position of the number line, and a numerical value NM indicating a value on the number line at the position indicated by the pointer NA are displayed. . The user can move the position of the number line image NS along the direction in which the number line extends by an operation. This operation may be performed by a flick operation such as the slide operation ST described above, or may be a drag operation such as the operation DT. If the operation is a flick operation, the number line image NS may continue to move due to inertia even after the end of the flick operation and gradually decelerate. When the position of the number line image NS is moved, the position on the number line indicated by the pointer NA changes, and the value of the numerical value NM changes.

  The user moves the number line image NS at a large speed (referred to as a first speed in this embodiment) (operation DS1). The destination of the movement is near the target value “777”, and in this example, as shown in FIG. 23B, the pointer NA points to “620”.

  Since the pointer NA has approached the target value “777”, the user moves the moving speed of the number line image NS slower than the first speed and slower than the predetermined first set speed (in this embodiment, the second speed (Referred to as speed) (FIG. 23B). When it is detected in the communication terminal 10 that the moving speed is slower than the first set speed, the number line image NS displayed in the window W4 is enlarged as shown in FIG. Change the value range to be displayed. At this time, it is desirable to enlarge the number line image NS so that the position on the number line indicated by the pointer NA does not change.

  In the number line image NS displayed as shown in FIG. 23C, the user can more easily approach the target value “777” with higher accuracy. In this example, the user further moves the number line image NS at the second speed (operation DS2), and at “745” close to “777”, the moving speed is slower than the predetermined second set speed (this implementation). In the embodiment, it is referred to as a third speed) (FIG. 23D).

  When it is detected in the communication terminal 10 that the moving speed is slower than the second set speed, the number line image NS is further enlarged and a part of the numerical value range is displayed as described above. (FIG. 23 (e)). Then, in the number line image NS displayed as shown in FIG. 23 (e), the user can easily approach the target value “777” with higher accuracy than in the case shown in FIG. 23 (c). Then, the user moves the number line image NS at the third speed so that the pointer NA points to the target value “777” (operation DS3), and sets “777” in the numerical value NM (FIG. 23 (f)).

  In the above example, since the first set speed and the second set speed exist, the expansion of the numerical range is performed in two stages. However, the number range may be one stage, or more stages. It may be divided into two. In addition, instead of the relationship with the moving speed due to the first set speed, the second set speed, etc., every time the moving number line image NS stops moving or changes to a predetermined speed or less, the number line image NS is gradually changed. The number line image NS may be reduced stepwise each time it is enlarged and changed to a predetermined speed or higher.

  When the operation is performed on the premise that the user knows the target numerical value NM, the timing at which the movement speed of the number line image NS is slowed does not greatly deviate. On the other hand, if the user does not know the target numerical value NM, the user slows down the movement speed of the number line image NS even if the pointer NA points to a numerical value that is far away (a predetermined value or more away from the target numerical value NM). May end up. Since it is not necessary to authenticate the user who performs such an operation, the authentication process is stopped. On the other hand, since there may be an error in the user's operation, the re-authentication operation may be performed by another authentication method as exemplified in the fifteenth embodiment.

<Sixteenth Embodiment>
In the sixteenth embodiment, unlike the above-described embodiments, an example in which user authentication is performed by a method that does not use an authentication character or a number line image will be described. In this example, the user is authenticated by changing a predetermined image.

  FIG. 24 is a diagram showing an example of an authentication screen in the sixteenth embodiment of the present invention. In this example, a pie chart DC as shown in FIG. 24 is used for the authentication screen. This pie chart DC is divided by four lines of dividing lines L12, L23, L34, and L14 (hereinafter simply referred to as dividing lines when not distinguished from each other), and is divided into four types of divided areas DC1, DC2, DC3, and DC4. (Hereinafter, simply referred to as a divided region if they are not distinguished from each other). The type of the divided area is recognized by the color, pattern, etc. in the area. Note that the number of divisions of the pie chart DC is not limited to four, and may be smaller or larger.

  The user can move the dividing line by an operation. For example, in the pie chart DC shown in FIG. 24A, by touching the portion corresponding to the dividing line L12 and dragging counterclockwise (arrow direction) as shown in FIG. 24B, This dividing line L12 can be moved. As a result, the divided area DC1 is narrowed and the divided area DC2 is expanded.

  In the sixteenth embodiment, as an authentication operation, the user moves each dividing line to change the area of the divided region. And when it becomes arrangement | positioning of the predetermined division area, it determines with the user of the communication terminal 10 being a valid user. Various input results (arrangement of divided areas) for determining a valid user can be set in various ways. Here, two examples will be described.

  FIG. 25 is a diagram illustrating a first example of an input result for determining that the user is a valid user in the sixteenth embodiment of the present invention. In this example, the arrangement is such that a predetermined type of divided area is left and other divided areas are deleted. In the example shown in FIG. 25, the divided area DC2 is left and the other divided areas DC1, DC3, and DC4 are deleted. The divided areas DC1, DC3, and DC4 to be deleted are not limited to 0% in the pie chart DC, and may be determined to be deleted if they are equal to or less than a predetermined ratio (for example, 5%). .

  Then, when the above-described authentication button TB1 is operated after moving the dividing line, an authentication value including an eigenvalue corresponding to the remaining divided area (the divided area DC2 in the example of FIG. 25) is generated.

  FIG. 26 is a diagram illustrating a second example of an input result for determining that the user is a valid user in the sixteenth embodiment of the present invention. In this example, when the divided areas are arranged in descending order of area, the arrangement is in a predetermined order. In the example shown in FIG. 26, the divided areas DC3, DC4, DC2, and DC1 are arranged in the order of increasing area.

  When the above-described authentication button TB1 is operated after moving the dividing line, an authentication value including a unique value corresponding to each divided area is generated. In this example, an authentication value including a value in which eigenvalues are arranged in descending order of area is generated.

  FIG. 27 is a diagram for explaining allocation information in the sixteenth embodiment of the present invention. As shown in FIG. 27, the eigenvalue corresponding to each divided region may be assigned a different value for each allocation pattern even for the same divided region by assignment information, as in the first embodiment.

  In this example, user authentication is performed using the result of adjusting the size of the divided area included in the pie chart DC. However, a band graph or the like divided into a plurality of areas may be used. The operation for adjusting the size or changing the shape of the figure divided into a plurality of areas in this way is used as an authentication operation, and as a result, an authentication value corresponding to the area, shape, etc. of each area is generated. You can do it.

DESCRIPTION OF SYMBOLS 1 ... Authentication system, 1B ... Financial transaction system, 10 ... Communication terminal, 11 ... Control part, 12 ... Acceleration sensor, 14 ... Display, 16 ... Touch sensor, 18 ... Communication module, 20 ... Authentication apparatus, 21 ... Control part, 28 ... Communication module 111 ... Display control unit 113 ... Selection unit 115 ... Message generation unit 117 ... Storage unit 119 ... Eigen value assignment unit 162 ... Input reception unit 181 ... Transmission unit 182 ... Reception unit 215 ... Authentication unit, 217 ... Storage unit, 219 ... Instruction information generation unit, 281 ... Transmission unit, 282 ... Reception unit, 25 ... Transaction unit, 50 ... Financial transaction apparatus, 101 ... Pointing device

Claims (12)

A display control unit for displaying an icon that can be moved according to a user operation on the display, on the display;
When a user operation on the icon is received, an authentication parameter is generated based on a movement parameter that can be calculated based on a relative position between the first position and the second position on the movement path of the icon that moves with the operation. A generation unit that generates a message including the authentication parameter;
A program for causing a computer to function as a transmission unit that transmits the message requesting authentication processing to a server.   The program according to claim 1, wherein the authentication parameter is generated based on a position parameter indicating any position on the movement route and the movement parameter.   The program according to claim 1, wherein the movement parameter includes a direction parameter indicating a direction from the first position to the second position.   The program according to any one of claims 1 to 3, wherein the movement parameter further includes a distance parameter determined based on a movement amount from the first position to the second position.   5. The speed parameter according to claim 1, wherein the movement parameter includes a speed parameter determined based on a movement amount from the first position to the second position and a time required to move the distance. program. A plurality of the icons having different appearances are displayed on the display,
The icon is assigned a unique value according to the appearance,
The program according to any one of claims 1 to 5, wherein the generation unit generates the authentication parameter based on the eigenvalue and the movement parameter assigned to the icon that moves in accordance with the operation. The movement parameter is set by the operation on the icon,
The program according to any one of claims 1 to 6, wherein after the movement parameter is set, the icon starts moving according to the movement parameter. During the setting of the movement parameter, a set value is displayed on the display,
The set value is changed based on the amount of the operation,
The program according to claim 7, wherein the amount of change of the set value is controlled to be different depending on the speed of the operation even if the amount of the operation is the same. A numerical designation image for designating a numerical value is displayed on a display, a numerical value designated by the numerical designation image is changed by a user's numerical value changing operation on the display, and the numerical value is changed by the numerical value changing operation by the user. A display control unit for continuing the change of the numerical value after enlarging a part of the numerical value designated image when the speed becomes lower than a predetermined speed;
When the numerical value is specified by the numerical value specifying image, a generation unit that generates a message based on the numerical value;
A program for causing a computer to function as a transmission unit that transmits the message requesting authentication processing to a server.   If the numerical value specified when enlarging a part of the numerical value specified image is more than a predetermined value from a predetermined numerical value, the request for authentication processing by the specified numerical value is canceled. The program according to claim 9. An icon that can be moved according to the user's operation on the display is displayed on the display.
When a user operation on the icon is received, an authentication parameter is generated based on a movement parameter that can be calculated based on a relative position between the first position and the second position on the movement path of the icon that moves with the operation. ,
Generate a message containing the authentication parameter,
A message generation method including transmitting the message requesting authentication processing to a server. Display the numerical value specification image for specifying the numerical value on the display,
The numerical value designated by the numerical designation image is changed by the user's numerical value changing operation on the display,
When the change speed of the numerical value by the numerical value change operation by the user is slower than a predetermined speed, after expanding a part of the numerical value designation image, continue the change of the numerical value,
When the numeric value is designated by the numeric designation image, a message is generated based on the numeric value,
A message generation method including transmitting the message requesting authentication processing to a server.

Images