JP2017138840A - Information processing device and portable terminal - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an information processing device capable of preventing the device from being used by an unintended user even when a password is leaked, and a portable terminal.SOLUTION: The information processing device comprises reception means, first determination means, input means, second determination means, and permission means. The reception means receives a first password transmitted from a portable terminal through short-range radio communication. The first determination means determines whether the reception means has received a correct first password. The input means accepts an input of a second password for authenticating a user. The second determination means determines whether the input means has accepted a correct second password. On the condition that the first determination means determines the correct first password has been received and the second determination means determines the correct second password has been input, the permission means permits the execution of processing related to an authority imparted to the user.SELECTED DRAWING: Figure 4

Description

  Embodiments described herein relate generally to an information processing apparatus and a mobile terminal.

  In recent years, more robust information security measures are required for information processing apparatuses. For example, the information processing apparatus performs user authentication based on a password input immediately before the information processing apparatus is used. The information processing apparatus permits its own use and the use of a specific function on the condition that user authentication is performed.

  However, the password for user authentication may be unintentionally leaked. If the password is leaked, the information processing apparatus may be used by an unintended user.

  The problem to be solved by the present invention is to provide an information processing apparatus and a portable terminal that can prevent use by an unintended user even when a password is leaked.

  The information processing apparatus according to the embodiment includes a reception unit, a first determination unit, an input unit, a second determination unit, and a permission unit. The receiving means receives a first password transmitted from a portable terminal by short-range wireless communication. The first determination unit determines whether the reception unit has received the proper first password. The input means receives an input of a second password for authenticating the user. The second determination unit determines whether the input unit has received an appropriate second password. The permission means determines that the first determination means has received the appropriate first password, and the second determination means has determined that the appropriate second password has been input. In addition, the execution of the process related to the authority given to the user is permitted.

FIG. 1 is an explanatory diagram showing an example of the configuration of the information security system. FIG. 2 is a block diagram illustrating an example of a hardware configuration of the payment terminal. FIG. 3 is a block diagram illustrating an example of a hardware configuration of the wearable terminal. FIG. 4 is a block diagram showing a functional configuration of each device of the information security system. FIG. 5 is a sequence diagram illustrating an example of the authentication process.

  Hereinafter, embodiments of an information processing device and a mobile terminal will be described in detail with reference to the accompanying drawings. In addition, embodiment described below is one Embodiment of an information processing apparatus and a portable terminal, Comprising: The structure, a specification, etc. are not limited. In the following description, a case where the information processing apparatus is applied to a payment terminal used in the case of card payment will be described as an example.

  FIG. 1 is an explanatory diagram showing an example of the configuration of the information security system 1. The information security system 1 includes a payment terminal 10 and a wearable terminal 20.

  The payment terminal 10 is an information processing apparatus that performs payment related to one transaction using a payment card. Here, the payment card is a card used for payment by a credit card, a debit card, or a contactless IC card.

  The payment terminal 10 includes a power switch 12 on the side of the main body 11. Further, the payment terminal 10 includes an upper panel 13 at the top of the main body 11 that covers the opening at the top of the main body 11. The settlement terminal 10 includes a storage unit that stores roll-shaped receipt paper inside the main body 11 when the top panel 13 is opened. The top panel 13 includes a display unit 15 provided with a touch panel as the operation unit 14. The display unit 15 is, for example, a liquid crystal display.

  The payment terminal 10 includes a card reading unit 16 that reads information stored in the payment card from the payment card for payment on the upper side of the main body 11.

  The payment terminal 10 includes a printing unit 110 (see FIG. 2) that prints information related to payment, a sales report, and the like on the above-described receipt paper. The printed receipt paper is issued from a receipt issuing port 17 provided between the main body 11 and the upper panel 13.

  The wearable terminal 20 is a portable terminal that can be worn and worn by a user having specific authority. The wearable terminal 20 shown in FIG. 1 has the shape of a wristwatch and can be worn on the arm. The wearable terminal 20 includes a display unit 22 provided with a touch panel that is an operation unit 21. The display unit 22 is, for example, a liquid crystal display. The operation unit 21 is not limited to a touch panel, and may be an operation button or the like. Note that the shape of the wearable terminal 20 is an example, and may be another shape.

  The payment terminal 10 authenticates a user who uses the payment terminal 10 in two stages, a first authentication process and a second authentication process. In the first authentication process, the wearable terminal 20 generates a first authentication password used in the first authentication process based on a predetermined rule. The wearable terminal 20 transmits the generated first authentication password to the payment terminal 10. The settlement terminal 10 determines whether the first authentication password received from the wearable terminal 20 is appropriate. In the second authentication process, the payment terminal 10 determines whether the second authentication password input by the user via the operation unit 14 or the like is appropriate. The payment terminal 10 authenticates the user on the condition that the first authentication password transmitted from the wearable terminal 20 is determined to be appropriate and the second authentication password input by the user is determined to be appropriate. The payment terminal 10 permits execution of functions that can be executed with the authority given to the authenticated user.

  Next, the hardware configuration of each device included in the information security system 1 will be described.

  FIG. 2 is a block diagram illustrating an example of a hardware configuration of the payment terminal 10. The settlement terminal 10 includes a control unit 100 for controlling each unit. The control unit 100 includes a CPU (Central Processing Unit) 101, a ROM (Read Only Memory) 102, and a RAM (Random Access Memory) 103. The CPU 101 is connected to the ROM 102 and the RAM 103 via a bus line 104 such as an address bus or a data bus. The CPU 101 expands the program stored in the ROM 102 or the storage unit 105 in the RAM 103. The CPU 101 controls the payment terminal 10 by operating according to a program developed in the RAM 103.

  The control unit 100 is connected to the storage unit 105, the controller 107, the first communication interface 108, and the second communication interface 109 via the bus line 104.

  The storage unit 105 is a nonvolatile memory such as a flash memory that retains stored information even when the power is turned off. The storage unit 105 stores a program including the control program 106. The control program 106 is a program for exerting functions provided in the payment terminal 10.

  The controller 107 is connected to the operation unit 14, the display unit 15, the card reading unit 16, and the printing unit 110. The controller 107 controls various connected hardware based on a command from the control unit 100.

  The printing unit 110 includes a platen roller and a print head. The platen roller pulls out and conveys the receipt paper stored inside the main body 11. The print head is, for example, a thermal head. The print head prints the details of the product purchased by the customer on the receipt paper conveyed by the platen roller.

  The first communication interface 108 is an interface for communicating with each device via a network such as the Internet. The second communication interface 109 is an interface for communicating with the wearable terminal 20 by short-range wireless communication. For example, the second communication interface 109 performs communication using a wireless communication technology such as Bluetooth (registered trademark).

  FIG. 3 is a block diagram illustrating an example of a hardware configuration of the wearable terminal 20. The wearable terminal 20 includes a control unit 200 for controlling each unit. The control unit 200 includes a CPU 201, a ROM 202, and a RAM 203. The CPU 201 is connected to the ROM 202 and the RAM 203 via a bus line 204 such as an address bus or a data bus. The CPU 201 expands the program stored in the ROM 202 or the storage unit 205 in the RAM 203. The CPU 201 controls the payment terminal 10 by operating according to the program developed in the RAM 203.

  The control unit 200 is connected to the storage unit 205, the controller 207, and the communication interface 208 via the bus line 204.

  The storage unit 205 is a non-volatile memory such as a flash memory that retains stored information even when the power is turned off. The storage unit 205 stores a program including the control program 206 and the like. The control program 206 is a program for exhibiting the functions provided in the wearable terminal 20.

  The controller 207 is connected to the operation unit 21 and the display unit 22. The controller 207 controls various connected hardware based on a command from the control unit 200.

  The communication interface 208 is an interface for communicating with the payment terminal 10 by short-range wireless communication. For example, the communication interface 208 performs communication using a wireless communication technology such as Bluetooth (registered trademark).

  Next, characteristic functions of each device of the information security system 1 will be described. Here, FIG. 4 is a block diagram showing a functional configuration of each device of the information security system 1.

  First, the functional configuration of the payment terminal 10 will be described. The CPU 101 of the control unit 100 generates the functional units shown in FIG. 4 on the RAM 103 by expanding the control program 106 of the storage unit 105 in the RAM 103 and operating according to the control program 106. Specifically, the control unit 100 includes, as function units, a first communication control unit 1001, a second communication control unit 1002, an operation control unit 1003, a password generation unit 1004, an authentication control unit 1005, and display control. Unit 1006 and a settlement control unit 1007.

  The first communication control unit 1001 controls the first communication interface 108 to communicate with each device connected to the network.

  The second communication control unit 1002 controls the second communication interface 109 to communicate with the wearable terminal 20.

  The operation control unit 1003 controls the operation unit 14 to accept various operations from the user. For example, the operation control unit 1003 accepts operations for executing various functions. The operation control unit 1003 accepts input of a user code and a second authentication password in order to authenticate whether the user has the authority to execute the function. The user code is identification information that can identify the user. Functions that can be executed by a user having a predetermined authority include, for example, a manufacturing process test function, a serviceman test function, a serviceman setting function, a predetermined function, etc. A user having the right to perform various settings.

  The password generation unit 1004 generates a first authentication password. For example, the password generation unit 1004 as the first generation means has a rule for generating a first authentication password on the condition that the operation control unit 1003 accepts an operation for executing a function that requires user authentication. Rule information is generated. For example, the rule information includes dummy dummy data, basic data serving as a basis for the first authentication password, and algorithm identification data capable of identifying the type of algorithm for generating the first authentication password. For example, there is an algorithm for generating a first authentication password by SHA-256 (Secure Hash Algorithm 256-bit) using basic data and a numerical value of the year. Alternatively, there is an algorithm for generating a first authentication password by MD5 (Message Digest Algorithm 5) using basic data and a numerical value indicating the payment terminal 10.

  Here, a case where the rule information is 8-digit data will be described as an example. The first digit and the eighth digit are dummy data. The 2nd digit, the 3rd digit, the 4th digit, and the 6th digit are assumed to be data serving as a basis for the first authentication password. The fifth digit and the sixth digit are data that can identify the algorithm. Thus, the rule information is difficult to analyze because it is arranged in an irregular order including dummy data.

  The password generation unit 1004 generates different rule information each time the operation control unit 1003 receives an operation. A password generation unit 1004 that is a second generation unit generates a first authentication password that is a third password based on the generated rule information. The rule information may be a fixed value, but is preferably a different value every time it is generated. This is because changing the rule information makes it difficult to analyze even if the rule information is intercepted, and forges the first authentication password.

  The authentication control unit 1005 controls authentication of a user who uses the payment terminal 10. The authentication control unit 1005 authenticates a user who uses the payment terminal 10 in two stages of a first authentication process and a second authentication process. The first authentication process is a process for determining whether or not the first authentication password transmitted from the wearable terminal 20 is appropriate. The second authentication process is a process for determining whether the second authentication password accepted by the operation control unit 1003 is appropriate.

  The authentication control unit 1005 performs the first authentication toward the unspecified wearable terminal 20 on the condition that the operation control unit 1003 accepts an operation for executing a function executable by a user having a predetermined authority. The password transmission request signal is transmitted to the second communication control unit 1002 which is a transmission unit. Here, the transmission request signal has rule information generated by the password generation unit 1004. Not only when the operation control unit 1003 accepts an operation for executing a function that can be executed by a user having a predetermined authority, but the authentication control unit 1005 receives the first authentication password every time a predetermined time elapses. May be transmitted to the second communication control unit 1002.

  The authentication control unit 1005 causes the second communication control unit 1002 that is a receiving unit to receive the first authentication password from the wearable terminal 20 as a response to the transmission request signal. As the first determination unit, the authentication control unit 1005 determines whether an appropriate first authentication password has been received as the first authentication process. Specifically, the authentication control unit 1005 determines whether or not the first authentication password that is the received first password and the first authentication password generated by the password generation unit 1004 match as the first authentication processing. Based on this, it is determined whether an appropriate first authentication password has been received. The authentication control unit 1005 determines that an inappropriate first authentication password has been received on condition that the received first authentication password and the first authentication password generated by the password generation unit 1004 do not match. That is, the authentication control unit 1005 determines that an appropriate first authentication password has not been received. On the other hand, the authentication control unit 1005 determines that the proper first authentication password has been received on the condition that the received first authentication password and the first authentication password generated by the password generation unit 1004 are matched.

  Further, the authentication control unit 1005 may add the radio wave intensity of the received first authentication password to the determination criterion in the first authentication process. That is, the authentication control unit 1005 may add an estimated distance calculated based on the radio wave intensity from the wearable terminal 20 that has transmitted the first authentication password to the payment terminal 10 that has received the first authentication password as a criterion. . As a result, when a user who does not have the wearable terminal 20 is about to input the second authentication password, the user who has the wearable terminal 20 passes by and prevents the user from being unintentionally authenticated. can do. In this case, the authentication control unit 1005 determines that the proper first authentication password has been received on the condition that the radio wave intensity of the received first authentication password is equal to or greater than the threshold value and the first authentication password has been adapted. To do. On the other hand, the authentication control unit 1005 sets an inappropriate first authentication password regardless of the contents such as whether or not the received first authentication password is suitable on the condition that the radio wave intensity of the received first authentication password is less than the threshold value. It is determined that the authentication password has been received.

  As the second determination unit, the authentication control unit 1005 determines whether or not the operation control unit 1003 has received an appropriate second authentication password as the second authentication process. The authentication control unit 1005 can determine whether or not the second authentication password that is the second password is appropriate by various methods. For example, the authentication control unit 1005 determines whether the second authentication password received by the operation control unit 1003 that is an input means matches the second authentication password stored in advance in the storage unit 105 or the like. 2. Determine whether the authentication password is appropriate. Alternatively, the authentication control unit 1005 generates a password every time a predetermined time elapses. The authentication control unit 1005 determines whether or not the second authentication password is appropriate based on whether or not the generated password matches the second authentication password received by the operation control unit 1003. Alternatively, the authentication control unit 1005 causes the first communication control unit 1001 to transmit the second authentication password received by the operation control unit 1003 toward the server device or the like. The authentication control unit 1005 causes the first communication control unit 1001 to receive a determination result indicating the suitability of the second authentication password determined by the server device or the like from the server device or the like. The authentication control unit 1005 determines whether or not the second authentication password is appropriate based on the determination result.

  The authentication control unit 1005 authenticates the user related to the user code on the condition that it is determined that the proper first authentication password has been received and that the proper second authentication password has been input. In other words, the authentication control unit 1005 serving as a permission unit permits execution of processing related to the authority granted to the authenticated user. On the other hand, the authentication control unit 1005 does not authenticate the user related to the user code, regardless of whether the second authentication password is appropriate or not, on the condition that the first authentication password is not received properly.

  The authentication control unit 1005 invalidates the first authentication process and the second authentication process on the condition that the logout process is executed. That is, the authentication control unit 1005 invalidates reception of a proper first authentication password. Also, the authentication control unit 1005 invalidates the input of an appropriate second authentication password. For example, the authentication control unit 1005 executes the logout process on condition that an operation requesting the logout process has been received. Alternatively, the authentication control unit 1005 executes logout processing on the condition that no operation is received within a certain time.

  The display control unit 1006 controls the display unit 15 to display various screens. For example, the display control unit 1006 displays that the authentication control unit 1005 is not authenticated on the condition that the user is not authenticated. Alternatively, the display control unit 1006 displays a second authentication password input screen for inputting a user code and a second authentication password in the second authentication process. Alternatively, the display control unit 1006 displays an error screen indicating that the second authentication password input in the second authentication process is inappropriate.

  The settlement control unit 1007 executes settlement related to one transaction. For example, the payment control unit 1007 executes a payment process related to the authority given to the user authenticated by the authentication control unit 1005.

  Next, the functional configuration of the wearable terminal 20 will be described. The CPU 201 of the control unit 200 develops the control program 206 of the storage unit 205 in the RAM 203 and operates according to the control program 206, thereby generating each functional unit shown in FIG. Specifically, the control unit 200 includes a communication control unit 2001 and a password generation unit 2002 as functional units.

  The communication control unit 2001 controls the communication interface 208 to communicate with the payment terminal 10.

  The password generation unit 2002 generates a first authentication password. For example, the password generation unit 2002 generates the first authentication password on the condition of the first authentication password transmission request signal. The password generation unit 2002 generates a first authentication password based on the rule information included in the transmission request signal. The password generation unit 2002 causes the communication control unit 2001 serving as a transmission unit to transmit the generated first authentication password to the payment terminal 10.

  Next, an authentication process executed by each device of the information security system 1 according to the present embodiment will be described. Here, FIG. 5 is a sequence diagram illustrating an example of an authentication process executed by the payment terminal 10 according to the present embodiment.

  The operation control unit 1003 of the payment terminal 10 accepts an operation for executing a function that can be executed by a user having a predetermined authority (step S1). Next, the password generation unit 1004 of the payment terminal 10 generates rule information indicating a rule for generating the first authentication password (step S2).

  Next, the second communication control unit 1002 of the payment terminal 10 transmits a transmission request signal that requests transmission of the first authentication password (step S3). The transmitted transmission request signal has the generated rule information. Next, the password generation unit 1004 of the payment terminal 10 generates a first authentication password based on the generated rule information (step S4).

  On the other hand, the password generation unit 2002 of the wearable terminal 20 generates a first authentication password based on the rule information included in the transmission request signal (step S5). Next, the communication control unit 2001 of the wearable terminal 20 transmits the generated first authentication password to the payment terminal 10 (step S6).

  Next, the authentication control unit 1005 of the payment terminal 10 determines whether or not an appropriate first authentication password has been received by the first authentication process (step S7). That is, the authentication control unit 1005 of the payment terminal 10 determines whether or not the first authentication password generated by the password generation unit 1004 matches the received first authentication password.

  On condition that the proper first authentication password has been received, the display control unit 1006 of the payment terminal 10 displays a second authentication password input screen (step S8). Next, the operation control unit 1003 of the payment terminal 10 receives an input of the second authentication password (step S9). Next, the authentication control unit 1005 of the payment terminal 10 determines whether or not the second authentication password input by the second authentication process is appropriate (step S10).

  On the condition that an appropriate second authentication password has been input, the display control unit 1006 of the payment terminal 10 permits the execution of the function related to the operation input in step S1 (step S11).

  On the other hand, on the condition that an appropriate second authentication password has not been input in the second authentication process, the display control unit 1006 of the payment terminal 10 displays an error screen indicating that an inappropriate second authentication password has been input. Etc. are displayed (step S12).

  On the other hand, in the first authentication process, the payment terminal 10 does not execute a special process on condition that an appropriate first authentication password is not received. That is, the display control unit 1006 of the payment terminal 10 does not display the first authentication password input screen. Accordingly, the user cannot cause the payment terminal 10 to execute the process input in step S1.

  Thus, the authentication process executed by each device of the information security system 1 according to the present embodiment is completed.

  As described above, in the payment terminal 10 according to the present embodiment, the second communication control unit 1002 transmits a transmission request signal for the first authentication password on condition that an operation for requesting user authentication is accepted. The authentication control unit 1005 determines whether an appropriate first authentication password has been received on the condition that the first authentication password has been received from the wearable terminal 20. Further, the authentication control unit 1005 determines whether or not an appropriate second authentication password has been input on the condition that the second authentication password has been input. The authentication control unit 1005 permits execution of processing related to the authority granted to the user on the condition that it is determined that an appropriate first authentication password has been received and that an appropriate second authentication password has been input. To do. Therefore, the payment terminal 10 according to the present embodiment can prevent being used by an unintended user even when the second authentication password input by the user has been leaked.

  Although several embodiments of the present invention have been described, these embodiments are presented by way of example and are not intended to limit the scope of the invention. These novel embodiments can be implemented in various other forms, and various omissions, replacements, and changes can be made without departing from the scope of the invention. These embodiments and modifications thereof are included in the scope and gist of the invention, and are included in the invention described in the claims and the equivalents thereof.

  In the above embodiment, the information security system 1 performs the second authentication process after the first authentication process. However, the order of the first authentication process and the second authentication process is not limited to this. For example, the payment terminal 10 may execute the second authentication process simultaneously with the first authentication process. Alternatively, the payment terminal 10 may execute the first authentication process using the first authentication password transmitted from the wearable terminal 20 after the second authentication process. Then, the payment terminal 10 permits the execution of the process related to the authority given to the user on the condition that the authentication is performed in both the first authentication process and the second authentication process.

  In the above embodiment, the case where the information processing apparatus is applied to the payment terminal 10 is described as an example. However, the information processing apparatus can be applied to various apparatuses that require user authentication. For example, the information processing apparatus includes a POS (Point Of Sales) terminal that executes merchandise sales data processing, a self-POS terminal that the customer himself executes merchandise sales data processing, office equipment that is maintained and managed by a service person, and a personal computer Etc. can be applied.

  Moreover, in the said embodiment, the payment terminal 10 has demonstrated that the operation control part 1003 receives a 2nd authentication password via the operation part 14. FIG. However, the method for accepting the input of the second authentication password is not limited to this. For example, the payment terminal 10 may accept an input of the second authentication password by reading a card or the like in which the second authentication password is stored.

  The program executed by each device of the above-described embodiment or modification is provided by being incorporated in advance in a storage medium (ROM or storage unit) included in each device, but is not limited thereto. For example, an installable or executable file is recorded on a computer-readable recording medium such as a CD-ROM, a flexible disk (FD), a CD-R, or a DVD (Digital Versatile Disk). You may comprise. Furthermore, the storage medium is not limited to a medium independent of a computer or an embedded system, but also includes a storage medium that downloads and stores or temporarily stores a program transmitted via a LAN, the Internet, or the like.

  Further, the program executed by each device of the above-described embodiment or modification may be stored on a computer connected to a network such as the Internet and provided by being downloaded via the network, or the Internet It may be configured to be provided or distributed via a network.

DESCRIPTION OF SYMBOLS 1 Information security system 10 Payment terminal 1001 1st communication control part 1002 2nd communication control part 1003 Operation control part 1004 Password generation part 1005 Authentication control part 1006 Display control part 1007 Payment control part 20 Wearable terminal 2001 Communication control part 2002 Password generation part

JP 2010-278652 A

Claims (5)

Receiving means for receiving the first password transmitted from the portable terminal by short-range wireless communication;
First determination means for determining whether the receiving means has received the proper first password;
Input means for accepting input of a second password for authenticating the user;
Second determination means for determining whether the input means has accepted the appropriate second password;
On the condition that the first determination means determines that the proper first password has been received, and the second determination means determines that the proper second password has been input, to the user Permission means for permitting execution of the processing relating to the granted authority;
An information processing apparatus comprising: First generation means for generating rule information indicating a rule for generating a password;
A transmission means for transmitting a transmission request signal for the first password having the rule information generated by the first generation means;
The information processing apparatus according to claim 1. Based on the rule information generated by the first generation means, further comprising second generation means for generating a third password;
The first determining means determines whether the first password received by the receiving means and the third password generated by the second generating means are appropriate. Determine if the password of 1 was received,
The information processing apparatus according to claim 2. The first generation means generates the different rule information every time an operation for executing a predetermined process is received,
The transmission means transmits the transmission request signal having the rule information generated each time the first generation means accepts the operation to the portable terminal.
The information processing apparatus according to claim 2 or 3.   A portable terminal provided with a transmission means for transmitting the first password generated based on a rule included in a first password transmission request signal by short-range wireless communication.

Images