JP2017033073A - Information processor, personal identification number input method and personal identification number input program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an information processor, a personal identification number input method and a personal identification number input program, for causing other persons to hardly recognize an inputted personal identification number.SOLUTION: An information processor being a portable terminal device includes a display processing part for making a change to a second mode that does not display candidate numbers in the case of receiving a prescribed instruction from a user in a first mode for displaying candidate numbers to be used to input a personal identification number, a reception part for receiving a first user operation for selecting a plurality of first positions at which the candidate numbers are displayed in the second mode, and a specification part for specifying a string of the candidate numbers displayed at the first positions selected by the first user operation as a personal identification number.SELECTED DRAWING: Figure 4

Description

  The present invention relates to a user interface technique for inputting a personal identification number.

  User authentication based on a personal identification number is widely used, for example, in application programs for portable terminals. However, in the operation for inputting the password, the password must not be detected by another person.

  For example, a method is known in which the numeric keypad layout is changed each time a password is entered. In this way, the personal identification number is not guessed based on the movement of the hand. However, even if the numeric keypad layout is different each time, the touched number is known when the screen is viewed.

  In addition, a certain patent document discloses a technique for preventing a touched button from being displayed for a certain period of time in a method of inputting a personal identification number by tracing the position of the button.

  Even in this method, the buttons are displayed until touched, so when looking at the screen, it is easily known which number is touched.

JP-A-6-83777 JP 2014-203187 A

  In one aspect, an object of the present invention is to make it difficult for others to detect an input password.

  An information processing apparatus according to one aspect is configured to display a candidate number used for inputting a personal identification number (A), a display processing unit that switches to a second aspect that does not display a candidate number when a predetermined instruction is received from a user. And (B) in the second mode, a receiving unit that receives a first user operation for selecting a plurality of first positions displaying candidate numbers, and (C) a display at the first position selected by the first user operation. And a specifying unit that specifies the sequence of candidate numbers that has been used as a personal identification number.

  In one aspect, it is difficult for others to detect the entered password.

FIG. 1 is a diagram showing an example of transition of a password input window. FIG. 2 is a diagram showing a transition example of the password input window. FIG. 3 is a diagram showing a transition example of the password input window. FIG. 4 is a diagram illustrating a module configuration example of the mobile terminal device. FIG. 5 is a diagram showing a main process (A) flow. FIG. 6 is a diagram illustrating an example of candidate numeral data. FIG. 7 is a diagram showing a first change processing flow. FIG. 8 is a diagram illustrating an example of changing candidate numeral data. FIG. 9 is a diagram showing a second change processing flow. FIG. 10 is a diagram showing a third change processing flow. FIG. 11 is a diagram showing a fourth change processing flow. FIG. 12 is a diagram illustrating an example of changing candidate numeral data. FIG. 13 is a diagram illustrating an example of changing candidate number data. FIG. 14 is a diagram illustrating an example of changing candidate numeral data. FIG. 15 is a diagram showing a specific processing flow. FIG. 16 is a diagram showing a subroutine processing flow. FIG. 17 is a diagram illustrating a specific example of a password. FIG. 18 is a diagram showing a subroutine processing flow. FIG. 19 is a diagram showing an example of a password input window according to the second embodiment. FIG. 20 is a diagram showing a main process (B) flow. FIG. 21 is a diagram showing a fifth change processing flow. FIG. 22 is a diagram illustrating a module configuration example of the mobile terminal device. FIG. 23 is a diagram illustrating a system configuration example. FIG. 24 is a diagram illustrating a system configuration example. FIG. 25 is a diagram illustrating a hardware configuration example of the mobile terminal device.

  FIG. 1 to FIG. 3 show transition examples of the password input window 101. The personal identification number input window 101 is a window for allowing the user to input a personal identification number. In the present embodiment, the user rearranges the randomly arranged numbers so that a number string corresponding to the personal identification number is arranged at any place in the matrix. Then, the user erases the number on the button displayed in the code number input window 101, and then slides the button so that the number corresponding to the number corresponding to the code number is traced. input. In addition, the number used for a PIN code is called a candidate number below.

  The code number input windows 101a to 101f shown in FIG. 1 show transitions until the candidate number columns corresponding to the code numbers are aligned. In the message area 103, a message prompting the user to perform an operation is displayed each time. In the message area 103 in the password input windows 101a to 101f, a message “Please slide the row or column to arrange the password numbers and touch the OK button” is displayed.

  As shown in the password input window 101a, the initial candidate numbers are arranged at random. In this example, it is assumed that the personal identification number is “2807”. Then, it is assumed that the user performs an operation of aligning the personal identification number “2807” from the bottom to the top in the range indicated by the broken line in the personal identification number input window 101f.

  The number buttons selected by the user are included in the range of the third to seventh rows and the third to seventh columns. The number buttons in the first row, second row, eighth row and ninth row and the number buttons in the first column, second column, eighth column and ninth column make it possible to recognize that there are hidden candidate numbers. This is a sham button that is displayed for this purpose. In this example, the number buttons in the first and ninth rows and the number buttons in the first and ninth columns omit the display of candidate numbers, but the candidate numbers are displayed for these number buttons. May be.

  The personal identification number input window 101b indicates that the user has touched the numeric buttons located in the third row and the fourth column with a finger and slid them to the position of the two lower numeric buttons. This operation shifts the candidate numbers included in the fourth column downward by two.

  As a result, a password input window 101c is displayed. Then, the candidate number “8” is placed in the assumed position.

  Further, the personal identification number input window 101c indicates that the user has touched the number button located in the seventh row and the fifth column with his / her finger and slid it to the position of the two left numeric buttons. By this operation, the candidate numbers included in the seventh row are shifted to the left by two.

  As a result, it is displayed as a personal identification number input window 101d. Then, the candidate number “2” is placed in the assumed position.

  Further, the personal identification number input window 101d indicates that the user has touched the numeric button located in the fifth row and seventh column with his / her finger and slid it to the position of the numeric button one left. By this operation, each candidate number included in the fifth row is shifted to the left by one.

  As a result, a password input window 101e is displayed. Then, the candidate number “0” is placed in the assumed position.

  Further, the personal identification number input window 101e indicates that the user has touched the numeric button located in the fourth row and fifth column with his / her finger and slid it to the position of the two numeric buttons to the right. By this operation, the candidate numbers included in the fourth row are shifted to the right by two.

  As a result, a password input window 101f is displayed. Then, the candidate number “7” fits in the assumed position, and the personal identification number “2807” is aligned.

  Even if another person looks into the operation shown in the code number input windows 101a to 101f, it cannot be determined in which position the code numbers are arranged in the matrix.

  The numbers are not displayed when they are arranged like the password input window 101f. FIG. 2 shows the continuation of the transition shown in FIG. When the user touches the decision button with the finger in the personal identification number input window 101f, that is, when a tap operation is performed, the candidate numerals displayed on the numeric buttons disappear as shown in the personal identification number input window 101g. That is, a button that hides the candidate number is displayed instead of the number button. Below, the button which concealed the candidate number is called a mask button.

  In the message area 103 in the personal identification number input window 101g, a message “Please trace with your finger where the personal identification number is lined up” is displayed.

  According to this message, as shown in the password input window 101h, when the user traces upward from the mask button located in the seventh row and the fourth column to the mask button located in the fourth row and the fourth column, that is, the slide When operated, the candidate numbers displayed at the positions of these mask buttons are input as passwords.

  In this example, the candidate numbers in the column are traced upward, but the candidate numbers in the column may be traced downward. In addition, the candidate numbers in the line may be traced to the right, or may be traced to the left as well.

  Further, the candidate numbers may be traced in an oblique direction. FIG. 3 shows a state in which candidate numbers are traced in an oblique direction. As shown in the personal identification number input window 101i, the personal identification number “2807” is arranged from the numeric buttons located in the seventh row and the fourth column to the upper right direction from the numeric buttons located in the fourth row and the seventh column. In this state, when a tap operation is performed on the decision button, the candidate numbers displayed on the number buttons disappear as shown in the password input window 101j. Then, in the message area 103 in the personal identification number input window 101j, a message “Please trace with your finger where the personal identification number is lined up” is displayed.

  In accordance with this message, as shown in the password input window 101k, when the user performs a slide operation from the mask button located in the seventh row and the fourth column to the mask button located in the fourth row and the seventh column in the upper right direction, these masks are displayed. The candidate number displayed at the button position is entered as the password.

  In addition to tracing in one direction, it may be traced to a key shape or may be traced to a U-shape.

  A mode in which candidate numbers are displayed like the code number input window 101a to the code number input window 101f and the code number input window 101i, that is, a mode in which number buttons are displayed is referred to as a first mode. Also, a mode in which candidate numbers disappear, that is, a mode in which a mask button is displayed, such as a password input window 101g, a password input window 101h, a password input window 101j, and a password input window 101k, is referred to as a second mode. .

  In addition, when the number button is tapped in the first mode, the candidate number indicated in the tapped number button is input according to a normal input method. Above, the description about the outline | summary of operation in this Embodiment is finished.

  Next, the operation of the apparatus will be described. FIG. 4 shows a module configuration example of the mobile terminal device 401. Here, an example using a mobile terminal device 401 such as a mobile phone terminal or a tablet terminal is shown, but the present embodiment may be applied to an information processing apparatus other than the mobile terminal device 401. For example, the present embodiment may be applied to an installation type device such as an automatic teller machine.

  The mobile terminal device 401 has a password input module 403 and an application program 405. In this example, the personal identification number input module 403 is called from the application program 405 and is activated.

  The personal identification number input module 403 displays the personal identification number input window 101 and accepts a personal identification number input by the user. The password input module 403 includes an initialization unit 411, a display processing unit 413, a reception unit 415, a change unit 417, a specifying unit 419, a control unit 421, an interface unit 423, a candidate number storage unit 431, a window data storage unit 433, and a number. A column buffer 435 is provided. The initialization unit 411 initializes candidate numeric data. The display processing unit 413 performs various displays. The accepting unit 415 accepts user operations. The changing unit 417 changes the candidate number data. The identifying unit 419 identifies the password. The control unit 421 controls processing in the personal identification number input module 403. The interface unit 423 passes the password to the authentication unit 441. The candidate number storage unit 431 stores candidate number data. The window data storage unit 433 stores data of the password input window 101, numeric buttons, and mask buttons. The number string buffer 435 stores the input candidate number string.

  The application program 405 provides a predetermined service to the authenticated user. The application program 405 has an authentication unit 441. The authentication unit 441 calls the personal identification number input module 403 and authenticates the user with the personal identification number passed from the personal identification number input module 403.

  The security code input module 403, the application program 405, the initialization unit 411, the display processing unit 413, the reception unit 415, the changing unit 417, the specifying unit 419, the control unit 421, the interface unit 423, and the authentication unit 441 described above are hardware resources. (For example, FIG. 25) and a program for causing a processor to execute the processing described below.

  The candidate number storage unit 431, the window data storage unit 433, and the number string buffer 435 described above are realized using hardware resources (for example, FIG. 25).

  Next, processing in the password input module 403 will be described. FIG. 5 shows a main process (A) flow. The initialization unit 411 sets candidate numbers generated randomly in the candidate number data (S501). Candidate numbers assigned to each number button are handled as data in a two-dimensional array format. This data is referred to as candidate numeric data.

  FIG. 6 shows an example of candidate numeral data. When the row number in the arrangement of the number buttons is represented by i (1 to 9) and the column number is represented by j (1 to 9), the candidate numbers assigned to the number buttons located in the Mth column of the Nth row are It is represented by a two-dimensional array element C [N] [M]. In step S501, the initialization unit 411 sets randomly generated candidate numbers for each element of the two-dimensional array data. The candidate numbers are integers from 0 to 9.

  Returning to the description of FIG. The display processing unit 413 displays the initial code number input window 101 and further displays numeric buttons based on the candidate numeric data (S503). Specifically, the display processing unit 413 displays the candidate numbers set for the elements of the two-dimensional array data in the number buttons corresponding to the elements. In the example shown in FIG. 1, the number buttons included in the first row, the number buttons included in the ninth row, the number buttons included in the first column, and the number buttons included in the ninth column are displayed with numbers. Omitted.

  The accepting unit 415 accepts a user operation on the touch panel (S505). Here, it is assumed that a slide operation on a row of numeric buttons, a slide operation on a row of numeric buttons, a tap operation on a numeric button, or a tap operation on a decision button is accepted.

  The accepting unit 415 determines whether or not the user operation accepted in S505 is a downward slide operation with respect to the row of numeric buttons (S507).

  When it is determined that the user operation accepted in S505 is a downward sliding operation with respect to the row of numeric buttons, the changing unit 417 executes the first changing process (S509). In the first change process, in the first mode, a process is performed in which the candidate numbers displayed on the number buttons in the row are moved downward according to the slide operation.

  FIG. 7 shows a first change processing flow. Based on the slide start position, the changing unit 417 specifies a column to move the candidate numbers (S701). Specifically, the changing unit 417 specifies the column to which the numeric buttons that overlap the slide start position belong. For example, in the example of the personal identification number input window 101b shown in FIG. 1, the fourth column is specified as the column for moving the candidate numbers.

  The changing unit 417 calculates the number of candidate numbers to move downward based on the slide distance (S703). For example, the changing unit 417 divides the slide distance by the sum of the number button height and the number button interval in the vertical direction, and rounds off the first decimal place of the quotient to obtain a candidate number in the downward direction. Find the number of moves. For example, in the example of the personal identification number input window 101 b shown in FIG. 1, the number of candidate numbers moved downward is two.

  The changing unit 417 moves the candidate numbers in the column downward by the number of movements (S705). Here, the direction is expressed so as to match the orientation in the display. Here, the downward direction means a direction in which the row number increases in the same column of the two-dimensional array in terms of data structure. That is, the changing unit 417 moves the candidate numbers set for the elements of the two-dimensional array to elements whose row numbers increase by the number of movements in the same column.

  FIG. 8 shows an example of candidate numeral data changed by the slide operation shown in the password input window 101b. The value “0” of the element C [1] [4] in FIG. 6 moves to the element C [3] [4] in FIG. Similarly, each value of element C [2] [4] to element C [7] [4] in FIG. 6 moves from element C [4] [4] to element C [9] [4] in FIG. . Then, the value “0” of the element C [8] [4] in FIG. 6 is transferred to the element C [1] [4] in FIG. 8, and the element C [2] [4] in FIG. The value “2” of the element C [9] [4] in FIG. That is, each candidate number is moved so that the candidate numbers circulate in the column. In the case of a sliding operation in the row direction, each candidate number is moved so that the candidate numbers circulate similarly.

  Returning to the description of FIG. The display processing unit 413 redisplays the numeric buttons corresponding to the row based on the changed candidate numeric data (S707). When the first change process is finished, the process returns to the process shown in S505 of FIG. 5 and the above-described process is repeated.

  Returning to the description of the processing shown in S507 of FIG. If it is determined that the user operation received in S505 is not a downward sliding operation on the numeric button row, the accepting unit 415 performs an upward sliding operation on the numeric button row. It is determined whether or not there is (S511).

  When it is determined that the user operation accepted in S505 is an upward slide operation with respect to the row of numeric buttons, the change unit 417 executes the second change process (S513). In a 2nd change process, the process which moves the number currently displayed on the number button in the said row | line | column according to a slide operation in a 1st aspect upwards is performed.

  FIG. 9 shows a second change processing flow. The changing unit 417 specifies a column to move the candidate numbers based on the slide start position (S901). As in the case of the first change process, the change unit 417 specifies the column to which the numeric buttons that overlap the slide start position belong.

  The changing unit 417 calculates the number of candidate numbers to move upward based on the slide distance (S903). As in the first change process, the change unit 417 divides the slide distance by the sum of the number button height and the number button interval in the vertical direction, and rounds off the first decimal place of the quotient. To obtain the number of candidate numbers to move downward.

  The changing unit 417 moves the candidate numbers in the row upward by the number of movements (S905). The upward direction here means a direction in which the row number decreases in the same column of the two-dimensional array in terms of data structure. That is, the changing unit 417 moves the candidate numbers set for the elements of the two-dimensional array to elements whose row numbers are reduced by the number of movements in the same column.

  The display processing unit 413 redisplays the numeric buttons corresponding to the column based on the changed candidate numeric data (S907). When the second change process is finished, the process returns to the process shown in S505 of FIG. 5 and the above-described process is repeated.

  Returning to the description of the processing shown in S511 of FIG. If it is determined that the user operation received in S505 is not an upward slide operation on the row of numeric buttons, the reception unit 415 performs a rightward slide operation on the row of numeric buttons. It is determined whether or not there is (S515).

  When it is determined that the user operation accepted in S505 is a rightward sliding operation with respect to the row of numeric buttons, the changing unit 417 executes a third changing process (S517). In a 3rd change process, the process which moves the number currently displayed on the number button in the said line to the right direction according to a slide operation in a 1st aspect is performed.

  FIG. 10 shows a third change processing flow. Based on the slide start position, the changing unit 417 specifies a line to move the candidate number (S1001). Specifically, the changing unit 417 specifies a line to which a numeric button that overlaps the slide start position belongs. For example, in the example of the personal identification number input window 101e shown in FIG. 1, the fourth line is specified as the line to which the candidate number is moved.

  The changing unit 417 calculates the number of candidate numbers moved to the right based on the slide distance (S1003). For example, the changing unit 417 divides the slide distance by the sum of the width of the numeric button and the interval between the numeric buttons in the horizontal direction, and rounds off the first decimal place of the quotient to obtain a candidate digit in the right direction. Find the number of moves. For example, in the example of the personal identification number input window 101e shown in FIG. 1, the number of candidate numbers moved to the right is two.

  The changing unit 417 moves the candidate numbers in the row to the right by the number of movements (S1005). The right direction here means the direction in which the column number increases in the same row of the two-dimensional array in terms of data structure. That is, the changing unit 417 moves the candidate numbers set for the elements of the two-dimensional array to elements whose column numbers increase by the number of movements in the same row.

  The display processing unit 413 redisplays the numeric buttons corresponding to the row based on the changed candidate numeric data (S1007). When the third change process is finished, the process returns to the process shown in S505 of FIG. 5 and the above-described process is repeated.

  Returning to the description of the process shown in S515 of FIG. If it is determined that the user operation accepted in S505 is not a slide operation to the right with respect to the number button row, the accepting unit 415 performs a slide operation to the left with respect to the number button row. It is determined whether or not there is (S519).

  If it is determined that the user operation accepted in S505 is a leftward sliding operation with respect to the row of numeric buttons, the changing unit 417 executes a fourth changing process (S521). In the fourth change process, in the first aspect, a process of moving the number displayed on the number button in the row to the left according to the slide operation is performed.

  FIG. 11 shows a fourth change processing flow. The changing unit 417 identifies a row based on the slide start position (S1101). As in the case of the third change process, the change unit 417 specifies the line to which the numeric button that overlaps the slide start position belongs.

  The changing unit 417 calculates the number of candidate numbers moved to the left based on the slide distance (S1103). As in the case of the third change process, the change unit 417 divides the slide distance by the sum of the numeric button width and the horizontal numeric button interval and rounds off the first decimal place of the quotient. To find the number of candidate numbers to move to the left.

  The changing unit 417 moves the candidate numbers in the row to the left by the number of movements (S1105). The left direction here means the direction in which the column number decreases in the same row of the two-dimensional array in terms of data structure. That is, the changing unit 417 moves the candidate numbers set for the elements of the two-dimensional array to elements whose column numbers are reduced by the number of movements in the same row.

  The display processing unit 413 redisplays the number buttons corresponding to the row based on the changed candidate number data (S1107). When the fourth change process is finished, the process returns to the process shown in S505 of FIG. 5 and the above-described process is repeated.

  Here, the change of the candidate number data in the transition example shown in FIG. 1 will be described. FIG. 12 shows an example of candidate numeral data changed by the slide operation shown in the password input window 101c. In this example, the candidate numbers in the seventh row are shifted to the left by two.

  FIG. 13 shows an example of candidate number data changed by the slide operation shown in the personal identification number input window 101d. In this example, the candidate numbers in the fifth row are moved one place to the left.

  FIG. 14 shows an example of candidate number data changed by the slide operation shown in the password input window 101e. In this example, the candidate numbers in the fourth row are shifted to the right by two.

  Returning to the description of the process shown in S519 of FIG. If it is determined that the user operation received in S505 is not a leftward sliding operation with respect to the number button row, the receiving unit 415 determines whether or not the user operation is a tap operation on the number button. Determination is made (S523).

  If it is determined that the user operation received in S505 is a tap operation on the numeric buttons, the specifying unit 419 executes a specifying process (S525). In the specific process, in the first mode, a personal identification number is input by a normal input method.

  FIG. 15 shows a specific processing flow. The specifying unit 419 specifies a candidate number corresponding to the tapped number button based on the candidate number data (S1501). That is, the specifying unit 419 reads the value of the element corresponding to the position of the numeric button from the candidate numeric data.

  The identifying unit 419 adds the candidate number to the number string buffer 435 (S1503). In this example, the specifying unit 419 sets candidate numbers from the top of the number string buffer 435. When the specific process is finished, the process returns to the process shown in S505 of FIG. 5 and the above-described process is repeated.

  Returning to the description of the process shown in S523 of FIG. When it is determined that the user operation received in S505 is not a tap operation on the number buttons, the reception unit 415 determines whether the user operation is a tap operation on the determination button (S527). .

  If it is determined that the user operation accepted in S505 is a tap operation on the enter button, the control unit 421 executes a subroutine process (S529). In the subroutine processing, processing is performed when the enter button is tapped. If it is determined that the user operation is not a tap operation on the enter button, the process returns to S505 and the above-described process is repeated.

  FIG. 16 shows a subroutine processing flow. The identifying unit 419 determines whether the numeric string buffer 435 is full (S1601). In this example, when four candidate numbers are set in the number string buffer 435, it is determined that the number string buffer 435 is full. On the other hand, when the number of candidate numbers set in the number string buffer 435 is three or less, it is determined that the number string buffer 435 is not full.

  If it is determined that the numeric string buffer 435 is full, the identifying unit 419 sets the candidate numeric string set in the numeric string buffer 435 as a personal identification number (S1603). The interface unit 423 passes the password to the authentication unit 441 (S1605). Then, the control unit 421 sets “finished” in the status (S1607). The status is a control parameter indicating the result of the subroutine processing. In the status, “continuation” or “end” is set. When the subroutine processing is completed, the processing moves to S531 in FIG.

  Returning to the description of the processing shown in S1601 of FIG. If it is determined that the numeric string buffer 435 is not full, the display processing unit 413 displays a mask button instead of the numeric button (S1609). The mask button is a button that does not indicate a number. Therefore, the process of displaying the mask button is equivalent to deleting the candidate number.

  The accepting unit 415 accepts an event (S1611). In this example, it is assumed that an event corresponding to a touch on a mask button or a touch on an area other than the mask button is received.

  The receiving unit 415 determines whether or not the user's finger has touched the mask button (S1613). When it is determined that the user's finger touches a button other than the mask button, the control unit 421 sets “continuation” in the status (S1615). The display processing unit 413 displays a numeric button based on the candidate numeric data (S1616). Then, the subroutine processing is finished, and the processing moves to S531 in FIG.

  On the other hand, if it is determined in this example that the user's finger has touched the mask button, the candidate digit string input partway through the normal input method is discarded. Therefore, the specifying unit 419 clears the numeric string buffer 435 (S1617).

  The specifying unit 419 specifies candidate numbers corresponding to the mask buttons (S1619). That is, the specifying unit 419 reads the value of the element corresponding to the position of the mask button from the candidate numeric data.

  The specifying unit 419 adds the candidate number to the number string buffer 435 (S1621). In the process of S1621, the first candidate number is set. Then, the process proceeds to the process shown in FIG.

  FIG. 17 shows the personal identification number specified when the number buttons in the fourth column are traced from the bottom to the top as shown in the personal identification number input window 101h of FIG. In the process shown in S1621 of FIG. 16, the value “2” set in the element in the seventh row and the fourth column is the first number in the personal identification number. In the process shown in FIG. 18, the value “8” set for the element in the sixth row and the fourth column, the value “0” set for the element in the fifth row and the fourth column, and the fourth row and the fourth column. The value “7” set in the element is sequentially set.

  Turning to the description of FIG. The accepting unit 415 accepts an event (S1801). Here, it is assumed that an event corresponding to an operation of sliding a finger while touching or an operation of releasing a finger is accepted.

  When the finger touched by the user is slid as it is, the touch position moves. When the finger is traced to another mask button, the touch position overlaps with another mask button. Therefore, the reception unit 415 determines whether or not the touch position is overlapped with another mask button (S1803).

  If it is determined that the touch position overlaps with another mask button, the specifying unit 419 specifies a candidate number corresponding to the mask button (S1805). That is, the specifying unit 419 reads the value of the element corresponding to the position of the mask button from the candidate numeric data.

  The identifying unit 419 adds the candidate number to the number string buffer 435 (S1807). In the processing of S1807, the second and subsequent candidate numbers are set.

  The identifying unit 419 determines whether or not the numeric string buffer 435 is full (S1809). Specifically, when the fourth candidate number is set, it is determined that the number string buffer 435 is full. On the other hand, when the second or third candidate number is set, it is determined that the number string buffer 435 is not full.

  If it is determined that the numeric string buffer 435 is not full, the process returns to the process shown in S1801 and the above-described process is repeated.

  On the other hand, if it is determined that the numeric string buffer 435 is full, the specifying unit 419 sets the candidate numeric string set in the numeric string buffer 435 as a password (S1811). The interface unit 423 passes the password to the authentication unit 441 (S1813). The control unit 421 sets “finished” in the status (S1815). Then, the subroutine processing is finished, and the processing moves to S531 in FIG.

  Returning to the description of the processing shown in S1803 of FIG. If it is determined that the touch position does not overlap another mask button, the reception unit 415 determines whether the user's finger has been released (S1817).

  If it is determined that the user's finger is not separated, the process returns to the process shown in S1801 and the above-described process is repeated.

  On the other hand, if it is determined that the user's finger has been removed, the specifying unit 419 clears the numeric string buffer 435 (S1819). The control unit 421 sets “continuation” in the status (S1821). The display processing unit 413 displays a numeric button based on the candidate numeric data (S1823). Then, the subroutine processing is finished, and the processing moves to S531 in FIG.

  Returning to the description of the flow of the main process (A) shown in FIG. When returning from the subroutine processing, the control unit 421 determines whether or not the status is “end” (S531). If it is determined that the status is not “end”, that is, if the status is “continuation”, the processing returns to the processing shown in S505 and the above-described processing is repeated.

  On the other hand, if it is determined that the status is “end”, the password input window 101 is closed and the main process (A) is completed. This is the end of the description of the processing in the present embodiment.

  According to the present embodiment, it becomes difficult for others to detect the entered password.

  In addition, the candidate numbers can be rearranged so that the user can easily select a password.

  In addition, since operations are accepted in units of rows and columns of the matrix, operations for changing the arrangement of candidate numbers and operations for selecting a mask button on which candidate numbers are displayed are easy.

  Further, it is possible to save the trouble of switching to the normal input method for directly selecting the password.

[Embodiment 2]
In the above-described embodiment, an example in which the arrangement of candidate numbers is changed by a slide operation has been described. In the present embodiment, an example in which the arrangement of candidate numbers is changed by a button operation will be described.

  In the case of the first embodiment, when the user repeatedly touches and slides the candidate number to be moved, the personal identification number to be aligned is easily guessed by others. In the present embodiment, candidate numbers are shifted by button operations. Therefore, other people do not know which candidate numbers are to be moved.

  FIG. 19 shows an example of a password input window 101 according to the second embodiment. In this example, the numeric buttons in the first column and the ninth column shown in the example of the first embodiment are omitted. Similarly, the numeric buttons in the first and ninth lines are omitted.

  On the left side of the matrix, a left button is provided for giving an instruction to shift the number button in the same row to the left by one. Similarly, on the right side, a right button is provided for giving an instruction to shift the number buttons on the same line to the right by one. Similarly, an upper button is provided on the upper side for giving an instruction to shift the number buttons in the same row upward by one. Similarly, a lower button is provided on the lower side for giving an instruction to shift the numeric buttons in the same row downward by one. In the message area 103, “Please arrange the numbers of the PIN numbers by operating the upper, lower, left, and right buttons and touch the enter button” is displayed.

  In the present embodiment, a main process (B) flow is executed instead of the main process (A) flow shown in FIG. FIG. 20 shows a main process (B) flow. The processing shown in S501 to S505 is the same as in the case of FIG.

  The accepting unit 415 determines whether or not the user operation accepted in S505 is a tap operation on the down button (S2001). If it is determined that the user operation is a tap operation on the down button, the changing unit 417 executes a fifth changing process (S2003). In the fifth change process, in the first mode, a process is performed in which only one candidate number displayed on the number button in the column corresponding to the lower button is moved downward in accordance with the tap operation on the lower button.

  FIG. 21 shows a fifth change processing flow. The changing unit 417 identifies a column based on the tapped lower button (S2101). The changing unit 417 moves the candidate number in the column downward by one (S2103). Except for the fact that the number of movements is a fixed value 1, the method of moving candidate numbers is the same as in the first embodiment. The display processing unit 413 redisplays the numeric buttons corresponding to the column (S2105). When the fifth change process is finished, the process returns to the process shown in S505 and the above-described process is repeated.

  Returning to the description of the process shown in S2001 of FIG. When it is determined that the user operation received in S505 is not a tap operation to the lower button, the reception unit 415 determines whether or not the user operation is a tap operation to the upper button (S2005). .

  If it is determined that the user operation is a tap operation on the up button, the changing unit 417 executes a sixth changing process (S2007). In the sixth change process, in the first mode, a process is performed in which only one candidate number displayed on the number buttons in the column corresponding to the up button is moved upward in accordance with the tap operation on the up button.

  The difference between the sixth change process and the fifth change process will be described based on the fifth change process flow shown in FIG.

  In a step corresponding to S2101, a column is specified based on the tapped upper button. In a step corresponding to S2103, only one candidate number in the column is moved upward. Steps corresponding to S2105 are the same as those in S2105.

  Returning to the description of the process shown in S2005 of FIG. When it is determined that the user operation received in S505 is not a tap operation to the upper button, the reception unit 415 determines whether or not the user operation is a tap operation to the right button (S2009). .

  If it is determined that the user operation is a tap operation on the right button, the changing unit 417 executes a seventh changing process (S2011). In the seventh change process, in the first mode, a process is performed in which only one candidate number displayed on the number button in the row corresponding to the right button is moved rightward in accordance with the tap operation on the right button.

  The difference between the seventh change process and the fifth change process will be described based on the fifth change process flow shown in FIG.

  In a step corresponding to S2101, a row is specified based on the tapped right button. In a step corresponding to S2103, only one candidate number in the row is moved rightward. In the step corresponding to S2105, the display processing unit 413 redisplays the numeric buttons corresponding to the row.

  Returning to the description of the processing shown in S2009 of FIG. If it is determined that the user operation received in S505 is not a tap operation to the right button, the receiving unit 415 determines whether or not the user operation is a tap operation to the left button (S2013). .

  If it is determined that the user operation is a tap operation on the left button, the changing unit 417 executes an eighth changing process (S2015). In the eighth change process, in the first mode, a process is performed in which only one candidate number displayed on the number button in the row corresponding to the left button is moved leftward in accordance with the tap operation on the left button.

  The difference between the eighth change process and the fifth change process will be described based on the fifth change process flow shown in FIG.

  In a step corresponding to S2101, a row is specified based on the tapped left button. In a step corresponding to S2103, only one candidate number in the row is moved leftward. In the step corresponding to S2105, the display processing unit 413 redisplays the numeric buttons corresponding to the row.

  Returning to the description of the processing shown in S2013 of FIG. When it is determined that the user operation received in S505 is not a tap operation to the left button, the reception unit 415 determines whether or not the user operation is a tap operation to a number button (S523). . The processing shown in S523 to S531 is the same as in the case of FIG.

  According to this embodiment, it is difficult for others to guess the number to be input.

  In the example shown in FIG. 4, the personal identification number input module 403 is called from the authentication unit 441 and is activated. In this example, the password input module 403 may be called from various programs. That is, the password input module 403 may be a shared module.

  FIG. 22 shows another module configuration example of the mobile terminal device 401. In this example, the password input module 403 is included in the application program 405. Also in this case, the password input module 403 is called from the authentication unit 441 and is activated. Then, the personal identification number input module 403 passes the input personal identification number to the authentication unit 441. However, in this example, the personal identification number input module 403 is dedicated to the application program 405.

  Moreover, you may make it provide a personal identification number to the authentication part 441 in the apparatus which the portable terminal device 401 connects via a network. FIG. 23 shows a system configuration example. In this example, the mobile terminal device 401 is connected to the server device 2301 via a network (for example, the Internet or a local area network) and uses a service provided by the service unit 2303. The service unit 2303 includes an authentication unit 2305 that performs user authentication.

  On the other hand, the application program 405 includes a request unit 2307 that requests user authentication from the service unit 2303. The personal identification number input module 403 is called by the request unit 2307 and is activated. Then, the personal identification number input module 403 passes the personal identification number to the request unit 2307. For example, the request unit 2307 transmits an account name and a personal identification number to the authentication unit 2305 to request user authentication.

  When the user authentication by the authentication unit 2305 is successful, the application program 405 uses the service by the service unit 2303. In this case, as in the case of FIG. 4, the password input module 403 may be a shared module.

  Further, in the form of requesting external user authentication, as shown in FIG. 24, the personal identification number may be received by the personal identification number input module 403 dedicated to the application program 405. The operations of the password input module 403, the request unit 2307, and the authentication unit 2305 are the same as in the case of FIG.

  Finally, a hardware configuration example of the mobile terminal device 401 will be described. FIG. 25 shows a hardware configuration example of the mobile terminal device 401. The mobile terminal device 401 includes, for example, a CPU (Central Processing Unit) 2501, a storage circuit 2503, a wireless communication antenna 2511, a wireless communication control circuit 2513, an LCD (Liquid Crystal Display) control circuit 2523, an LCD 2525, a touch pad 2527, and a key group 2529. , A GPS (Global Positioning System) device 2531 and a timer circuit 2533.

  The CPU 2501 executes a program stored in the storage circuit 2503. The storage circuit 2503 includes, for example, a ROM (Read Only Memory) 2505, a RAM (Random Access Memory) 2507, and a flash memory 2509. The ROM 2505 stores basic programs and initial data, for example. The RAM 2507 includes an area for expanding a program. The RAM 2507 also includes an area for storing temporary data. The flash memory 2509 stores programs such as applications and user data, for example.

  The LCD control circuit 2523 operates the clock circuit at a predetermined operating frequency to drive the LCD 2525. The LCD 2525 displays various screens. The touch pad 2527 is, for example, a panel-like sensor disposed on the display surface of the LCD 2525, and receives an instruction by a touch operation. Specifically, it is used as a touch panel in which an LCD 2525 and a touch pad 2527 are integrated. Each hard key of the key group 2529 is provided in a part of the housing.

  The wireless communication antenna 2511 receives a radio wave by, for example, a cellular system, a wireless LAN (Local Area Network) system, or a near field communication system. The wireless communication control circuit 2513 controls wireless communication according to the frequency used in each method. The timer circuit 2533 measures time.

  The mobile terminal device 401 is an aspect of a computer.

  Although the embodiment of the present invention has been described above, the present invention is not limited to this. For example, the functional block configuration described above may not match the program module configuration.

  Further, the configuration of each storage area described above is an example, and the above configuration is not necessarily required. Further, in the processing flow, if the processing result does not change, the processing order may be changed or a plurality of processes may be executed in parallel.

  The embodiment described above is summarized as follows.

  An information processing apparatus according to one aspect is configured to display a candidate number used for inputting a personal identification number (A), a display processing unit that switches to a second aspect that does not display a candidate number when a predetermined instruction is received from a user. And (B) in the second mode, a receiving unit that receives a first user operation for selecting a plurality of first positions displaying candidate numbers, and (C) a display at the first position selected by the first user operation. And a specifying unit that specifies the sequence of candidate numbers that has been used as a personal identification number.

  In this way, it becomes difficult for others to detect the entered password.

  Furthermore, in the first aspect, a change unit that changes the arrangement of the candidate numbers in accordance with the second user operation may be provided.

  In this way, the candidate numbers can be rearranged so that the user can easily select a password.

  Furthermore, in the first aspect, the display processing unit may display the candidate numbers on a matrix having a row having a number of digits of the personal identification number and a column having the number of digits or more. In the first aspect, the changing unit may change the arrangement of candidate numbers in units of rows or columns in accordance with a second user operation. Further, the first user operation may be an operation for selecting a plurality of first positions in succession.

  If it does in this way, the 1st user operation and the 2nd user operation will become easy.

  Furthermore, in the first aspect, the reception unit may repeatedly receive a third user operation for selecting the second position displaying the candidate number. The identifying unit may identify a string of candidate numbers displayed at the second position selected by the third user operation as a personal identification number.

  In this way, it is possible to save the trouble of switching to a method of directly selecting a personal identification number.

  Furthermore, the second user operation may be an operation on a button corresponding to a row or a column.

  This makes it difficult for others to guess the number to be entered.

  Note that a program for causing a computer to perform the processing of the information processing apparatus described above can be created. The program can be read by a computer such as a flexible disk, a CD-ROM, a magneto-optical disk, a semiconductor memory, and a hard disk. It may be stored in a possible storage medium or storage device. Note that intermediate processing results are generally temporarily stored in a storage device such as a main memory.

  The following supplementary notes are further disclosed with respect to the embodiments including the above examples.

(Appendix 1)
In a first mode for displaying candidate numbers used for password input, a display processing unit that switches to a second mode that does not display the candidate numbers when a predetermined instruction is received from a user;
In the second aspect, a reception unit that receives a first user operation for selecting a plurality of first positions where the candidate numbers are displayed;
An information processing apparatus comprising: a specifying unit that specifies, as a code number, the string of candidate numbers displayed at the first position selected by the first user operation.

(Appendix 2)
The information processing apparatus according to claim 1, further comprising: a changing unit that changes the arrangement of the candidate numbers in response to a second user operation.

(Appendix 3)
In the first aspect, the display processing unit displays the candidate numbers in a matrix having a row having more than the number of digits of the personal identification number and a column having more than the number of digits.
In the first aspect, the changing unit changes the arrangement of the candidate numbers in units of the row or the column according to the second user operation,
The information processing apparatus according to appendix 1 or 2, wherein the first user operation is an operation of selecting a plurality of the first positions in succession.

(Appendix 4)
In the first aspect, the reception unit repeatedly receives a third user operation for selecting a second position displaying the candidate number,
The information processing apparatus according to any one of appendices 1 to 3, wherein the specifying unit specifies the string of candidate numbers displayed at the second position selected by the third user operation as the personal identification number.

(Appendix 5)
The information processing apparatus according to claim 3, wherein the second user operation is an operation on a button corresponding to the row or the column.

(Appendix 6)
In the first mode for displaying candidate numbers used for password input, when a predetermined instruction is received from the user, the mode is switched to the second mode in which the candidate numbers are not displayed.
In the second aspect, a first user operation for selecting a plurality of first positions where the candidate numbers are displayed is received,
A personal identification number input method executed by a processor or a computer, including a process of specifying, as a personal identification number, the sequence of candidate numbers displayed at the first position selected by the first user operation.

(Appendix 7)
In the first mode for displaying candidate numbers used for password input, when a predetermined instruction is received from the user, the mode is switched to the second mode in which the candidate numbers are not displayed.
In the second aspect, a first user operation for selecting a plurality of first positions where the candidate numbers are displayed is received,
A personal identification number input program for causing a processor or a computer to execute a process of specifying, as a personal identification number, the string of candidate numbers displayed at the first position selected by the first user operation.

DESCRIPTION OF SYMBOLS 101 Security code input window 103 Message area 401 Portable terminal device 403 Security code input module 405 Application program 411 Initialization unit 413 Display processing unit 415 Reception unit 417 Change unit 419 Identification unit 421 Control unit 423 Interface unit 431 Candidate number storage unit 433 Window Data storage unit 435 Number string buffer 441 Authentication unit 2301 Server device 2303 Service unit 2305 Authentication unit 2307 Request unit

Claims (7)

In a first mode for displaying candidate numbers used for password input, a display processing unit that switches to a second mode that does not display the candidate numbers when a predetermined instruction is received from a user;
In the second aspect, a reception unit that receives a first user operation for selecting a plurality of first positions where the candidate numbers are displayed;
An information processing apparatus comprising: a specifying unit that specifies, as a code number, the string of candidate numbers displayed at the first position selected by the first user operation. The information processing apparatus according to claim 1, further comprising: a changing unit that changes the arrangement of the candidate numbers in response to a second user operation. In the first aspect, the display processing unit displays the candidate numbers in a matrix having a row having more than the number of digits of the personal identification number and a column having more than the number of digits.
In the first aspect, the changing unit changes the arrangement of the candidate numbers in units of the row or the column according to the second user operation,
The information processing apparatus according to claim 1, wherein the first user operation is an operation of continuously selecting a plurality of the first positions. In the first aspect, the reception unit repeatedly receives a third user operation for selecting a second position displaying the candidate number,
The information processing apparatus according to any one of claims 1 to 3, wherein the specifying unit specifies the sequence of the candidate numbers displayed at the second position selected by the third user operation as the personal identification number. . The information processing apparatus according to claim 3, wherein the second user operation is an operation on a button corresponding to the row or the column. In the first mode for displaying candidate numbers used for password input, when a predetermined instruction is received from the user, the mode is switched to the second mode in which the candidate numbers are not displayed.
In the second aspect, a first user operation for selecting a plurality of first positions where the candidate numbers are displayed is received,
A personal identification number input method executed by a processor or a computer, including a process of specifying, as a personal identification number, the sequence of candidate numbers displayed at the first position selected by the first user operation. In the first mode for displaying candidate numbers used for password input, when a predetermined instruction is received from the user, the mode is switched to the second mode in which the candidate numbers are not displayed.
In the second aspect, a first user operation for selecting a plurality of first positions where the candidate numbers are displayed is received,
A personal identification number input program for causing a processor or a computer to execute a process of specifying, as a personal identification number, the string of candidate numbers displayed at the first position selected by the first user operation.

Images