JP2019075173A - Program and telegram message generation method - Google Patents

Abstract

To facilitate operation for authenticating a user.SOLUTION: A program causes a computer to function as: a display control unit which displays a numerical value specifying image for specifying a numerical value on a display, modifies a numerical value specified by the numerical specifying image through numerical value modification operation by a user on the display, and continues modifying the numerical value after enlarging a part of the numerical value specifying image when the speed of modifying the numerical value through the numerical value modification operation by the user is slower than a predetermined speed; a generation unit which generates a telegram message on the basis of a numerical value when the numerical value is specified by the numerical value specifying image; and a transmission unit which transmits the telegram message for requesting authentication processing to a server.SELECTED DRAWING: Figure 21

Description

  The present invention relates to a technology for authenticating a user.

  Electronic transactions such as Internet banking are conducted. Such an electronic transaction is performed using a communication terminal, and generally, an ID and a password for identifying the user are used to authenticate the user of the communication terminal. The password is often a combination of characters such as alphanumeric characters. While it is required to use very complex combinations of passwords so that others can not easily guess them, it is very difficult to remember such passwords. Therefore, an authentication method using an image instead of using characters has been developed (for example, Patent Document 1).

JP 2007-264929 A

  According to the technique disclosed in Patent Document 1, in order to authenticate the user, the character displayed on the display is moved by the operation of the user and collated with the movement registered in advance. However, the user needs to register a complex movement so that the registered movement can not be inferred by other users. However, registering a complex movement makes it difficult to remember the movement. Even if it is remembered, the operation for adding movement to the character becomes complicated.

  Furthermore, according to the technology disclosed in Patent Document 1, since the ATM terminal transmits the motion information as it is to the host computer, there is a possibility that the contents of the transmission may leak to a third party. Can lead to the attack of

  One of the objects of the present invention is to easily perform an operation for authenticating a user.

  Another object of the present invention is to suppress leakage of information necessary for authenticating a user to a third party.

  According to an embodiment of the present invention, an icon movable in response to a user operation on the display is moved along with the display control unit that displays the display on the display and a user operation on the icon is received. A generation unit that generates an authentication parameter based on a movement parameter that can be calculated based on the relative position of the first position and the second position on the movement path of the icon, and generates a message including the authentication parameter; There is provided a program for causing a computer to function as a transmitting unit that transmits the requested electronic message to a server.

Further, according to an embodiment of the present invention, a numerical value designation image for specifying a numerical value is displayed on a display, and the numerical value designated by the numerical value designation image is changed by a user's numerical value change operation on the display. When a speed of change of the numerical value by the numerical value change operation by the user becomes slower than a predetermined speed, a part of the numerical value designated image is enlarged;
When the numerical value is specified by the display control unit that continues changing the numerical value and the numerical value designation image, a generation unit that generates a electronic message based on the numerical value and the electronic message that requests authentication processing are transmitted to the server A program for causing a computer to function as a transmission unit is provided.

  Further, according to an embodiment of the present invention, an icon movable in response to a user operation on the display is displayed on the display, and the icon moved according to the operation when the user operation on the icon is accepted. Generating an authentication parameter on the basis of the movement parameter which can be calculated based on the relative position of the first position and the second position on the movement route, generating a message including the authentication parameter, and requesting the authentication process A message generation method is provided that includes sending to a server.

  Further, according to an embodiment of the present invention, a numerical value designation image for specifying a numerical value is displayed on a display, and the numerical value designated by the numerical value designation image is changed by a user's numerical value change operation on the display. When the change speed of the numerical value by the numerical value change operation by the user becomes slower than a predetermined speed, after a part of the numerical value designation image is enlarged, the change of the numerical value is continued, and the value designation image When a numerical value is designated, a telegram is generated based on the numerical value, and a telegram generation method including transmitting the telegram requiring authentication processing to the server is provided.

  According to an embodiment of the present invention, an operation for authenticating a user can be easily performed.

  Furthermore, according to an embodiment of the present invention, it is possible to suppress the leakage of information necessary for authenticating a user to a third party.

It is a block diagram showing composition of attestation system 1 in a 1st embodiment of the present invention. It is the schematic which shows the external appearance of the communication terminal 10 in 1st Embodiment of this invention. It is a figure which shows the example of the authentication screen in 1st Embodiment of this invention. It is a block diagram which shows the function of the authentication system 1 in 1st Embodiment of this invention. It is a figure explaining the allocation information in a 1st embodiment of the present invention. It is a figure explaining collation information in a 1st embodiment of the present invention. It is a communication flow figure showing processing of attestation system 1 in a 1st embodiment of the present invention. It is a figure which shows the example of the authentication screen in 2nd Embodiment of this invention. It is a figure explaining the allocation information in a 2nd embodiment of the present invention. It is a figure explaining collation information in a 2nd embodiment of the present invention. It is a figure which shows the example of the authentication screen in 3rd Embodiment of this invention. It is a figure which shows the example of the authentication screen in 4th Embodiment of this invention. It is a figure which shows the example of the authentication screen in 5th Embodiment of this invention. It is a block diagram which shows the function of financial transaction system 1B in 6th Embodiment of this invention. It is a figure which shows the example of the authentication screen in 12th Embodiment of this invention. It is a figure explaining a movement parameter when an attestation character in a 12th embodiment of the present invention is chosen as an attestation element. It is a figure explaining the movement range of the attestation character in order to be judged as a valid user in the 1st example of a 12th embodiment of the present invention. It is a figure explaining the movement range of the attestation character in order to be judged as a valid user in the 2nd example of a 12th embodiment of the present invention. It is a figure explaining the method to which the authentication character in a 13th embodiment of the present invention is moved. It is a figure explaining the method of the numerical value setting in 13th Embodiment of this invention. It is a figure which shows the example of the authentication screen in 14th Embodiment of this invention. It is a figure explaining authentication operation in the case of making re-authentication in a 14th embodiment of the present invention. It is a figure which shows the example of the authentication screen in 15th Embodiment of this invention. It is a figure which shows the example of the authentication screen in 16th Embodiment of this invention. FIG. 51 is a diagram for describing a first example of input results for determining a valid user in the sixteenth embodiment of the present invention. It is a figure explaining the 2nd example of the input result for determining with being a valid user in 16th Embodiment of this invention. It is a figure explaining the allocation information in 16th Embodiment of this invention.

  Hereinafter, an authentication system according to an embodiment of the present invention will be described in detail with reference to the drawings. The embodiment shown below is an example of the embodiment of the present invention, and the present invention is not limited to these embodiments.

First Embodiment
An authentication system according to a first embodiment of the present invention will be described in detail with reference to the drawings.

[Overview]
FIG. 1 is a block diagram showing the configuration of an authentication system 1 according to a first embodiment of the present invention. The authentication system 1 includes a communication terminal 10 and an authentication device 20 connected to a network NW such as the Internet or a communication line. The communication terminal 10 in the first embodiment is a smartphone. The communication terminal 10 may be a portable terminal capable of connecting to the network NW and communicating with another device, and may be, for example, a portable telephone, a portable game machine, or the like. The authentication device 20 is a server or the like.

  A user may operate the communication terminal 10 to connect to another device via the network NW and receive a service provided by the other device. Authentication system 1 is a system for authenticating the user of communication terminal 10 in authentication device 20 in such a case. In the authentication system 1 according to the first embodiment, when a predetermined authentication operation is input to the communication terminal 10 by the user, a message (hereinafter referred to as an authentication request message) for requesting an authentication process on the authentication device 20 is generated. Used for authentication of Hereinafter, the operation of the user for generating the authentication request message is referred to as an authentication operation. Hereinafter, a method of authenticating a user in the authentication system 1 and a configuration for realizing the method will be described.

[Hardware configuration of communication terminal 10]
FIG. 2 is a schematic view showing the appearance of the communication terminal 10 in the first embodiment of the present invention. The communication terminal 10 has a main body 100. A control unit 11, an acceleration sensor 12, and a communication module 18 are provided inside the main body 100, and a display 14 and an operation button 17 are provided on one surface side of the main body 100. The display 14 is provided with a touch sensor 16 on its surface side, and the display 14 and the touch sensor 16 constitute a touch panel. The acceleration sensor 12 and the operation button 17 may not be provided. Although not shown in FIG. 2, the communication terminal 10 may have another configuration such as a microphone, a speaker, a headphone terminal, and a memory card slot.

  The control unit 11 includes an arithmetic processing circuit such as a CPU, and a storage device such as a non-volatile memory and a hard disk. The control unit 11 causes the CPU to execute the program stored in the storage device, and causes the communication terminal 10 to realize various functions. Depending on the implemented functions, signals and the like output from the components of the communication terminal 10 are used.

  In this example, the acceleration sensor 12 measures accelerations in three axial directions caused by the motion given to the main body 100, and outputs a measurement signal indicating the measurement result.

  The communication module 18 is connected to the network NW under the control of the control unit 11 to transmit / receive information to / from another device such as the authentication device 20 connected to the network NW.

  The display 14 is a display device such as a liquid crystal display or an organic EL display, and displays various screens such as an authentication screen (details will be described later) under the control of the control unit 11.

  The touch sensor 16 is a device that receives an input operation (including an authentication operation) from a user and outputs a signal according to the input operation. The input operation from the user is received by the touch sensor 16 by the touch of a pointing device 101 called a stylus pen or the finger of the user. Therefore, as the touch sensor 16, a sensor of a resistive film type, a capacitance type, an ultrasonic type, a surface acoustic wave type or the like is used.

  Note that the present invention is not limited to the case where the input operation from the user is received by the touch panel, and a sensor that receives the input operation of the user may be used by a non-contact operation pointing the position of the display 14 with the finger of the user. That is, it is only necessary for the user to specify an icon (an authentication character or the like and the details will be described later) displayed on the display 14 and perform an operation on the icon.

  Similar to the touch sensor 16, the operation button 17 receives an input operation from the user, and outputs a signal corresponding to the input operation.

[Authentication screen]
An example of a screen (hereinafter referred to as an authentication screen) displayed on the display 14 when accepting an authentication operation by the user and an example of the authentication operation will be described. As described above, this authentication operation is an operation input by the user to generate an authentication request message.

  FIG. 3 is a diagram showing an example of an authentication screen in the first embodiment of the present invention. As shown in FIG. 3A, the display 14 displays a window W1 for receiving an authentication operation, a window W2 for receiving an input of a user ID, and an authentication button TB1. The authentication button TB1 is a button that the user should operate when the authentication operation is completed.

  The user ID for the window W2 can be input, for example, when the user touches a portion of the window W2. At the time of input, for example, software keyboard input, handwriting input, voice input and the like are used. When the user ID is input when the service is provided, the user ID may be displayed.

A plurality of characters are displayed in the window W1 in this example. In the example of FIG. 3, the plurality of characters include authentication characters A1 to B3, B1 to B3, and C1 to C3 corresponding to icons, and a selected character S1. In the codes of authentication characters, alphabetic differences like A, B and C indicate differences in outlines, and numerical differences like 1, 2 and 3 show differences in patterns. Thus, in the example of FIG. 3, nine types of authentication characters exist by combining three types of outlines and three types of patterns. In a smart phone or the like, when the display 14 is small and the software keyboard is displayed to input the personal identification number as in the prior art, the respective keys become very small and the input is difficult. On the other hand, if such an authentication character for use in authentication is used, it can be displayed relatively large on the display, and input operation becomes easy.

  It should be noted that a plurality of authentication characters having at least different appearances may be displayed in the window W1, and authentication characters having the same appearance may be displayed. Further, the case where the appearance is different may be the case where the outer shape or the pattern is different as in the case described above, or the case where the color is different. When characters, numbers, patterns, etc. are drawn on the character, the drawn contents correspond to a pattern. Therefore, for example, the authentication character in which the number "1" is drawn and the authentication character in which the number "2" is drawn have different appearances even if the other elements such as the outer shape are the same. It shall be.

  Further, the arrangement of the characters on the authentication screen is not limited to the example shown in FIG. 3A, but may be various arrangements. Then, when an authentication process is requested next and an authentication screen is displayed, a character different from the authentication screen displayed immediately before may be arranged. In order to make the arrangement of each character different, a table defining a plurality of arrangement patterns is stored in communication terminal 10 or authentication device 20, and one of the arrangement patterns is selected for each authentication process using this table. The arrangement of each character may be determined. Also, the arrangement pattern may be determined randomly. In this case, a table for recording past arrangement patterns may be stored.

  The authentication character is movable by the user's input operation. For example, as shown in FIG. 3 (a), when the user touches a portion where the authentication character A3 is displayed and inputs the slide operation ST, the authentication character A3 slides as shown in FIG. 3 (b). Move towards the direction along the ST (arrow AR). By this slide operation ST, the authentication character A3 does not move by an amount corresponding to the sliding length, but it moves inertially along the arrow AR even after the slide operation, and in this example, it gradually decelerates Move to As described above, if the authentication character is moved based on the input operation after the user's input operation, the operation for moving the authentication character is not limited to the slide operation.

  Here, with the slide operation ST, for example, while the user's finger is in contact with the touch panel, it is moved substantially linearly from the portion of the operation target character (for example, the authentication character A3) and stopped at the end portion It is an operation of releasing so as not to maintain for a predetermined time or more. That is, the user performs the operation in the sense that the authentication character A3 is flipped in the sliding direction. This operation is also generally referred to as flick operation. Then, by this operation, after the slide operation, the authentication character A3 moves in the sliding direction at a speed corresponding to the sliding speed. For example, the faster the slide is, the faster the authentication character moves. However, the present invention is not limited to this. The faster the slide, the slower the authentication character may move, and the correlation between the slide speed and the authentication character. As long as you have As another example (for example, an embodiment described later), regardless of the slide speed, the moving speed of the authentication character may be predetermined by operation.

  The selected character S1 is a character whose display position is fixed in the window W1 in this example. The selected character S1 may be movable by the user's input operation.

  A selection area SA1 is set around the selected character S1. Although the selection area SA1 is shown for convenience in FIG. 3 and is not actually displayed on the display 14, it may be displayed. Further, the selection area SA1 may exist as a range not surrounding the selected character S1 as well as when the selection area SA1 exists as a range surrounding the selected character S1.

  When the authentication character reaches the selection area SA1, the authentication character is selected as an authentication factor. That is, in this example, just the finger of the user touching the portion corresponding to the authentication character is not selected as the authentication element. For example, as shown in FIG. 3B, as a result of the inertial movement of the authentication character A3 in the arrow AR direction from the original position shown by the broken line by the slide operation ST, the authentication character A3 is selected as the authentication element when it reaches the selected area SA1. Be done. At this time, when the movement path of the authentication character A3 passes through the selection area SA1 on display but does not touch the selection character S1, the movement path may be corrected to touch the selection character S1. . The authentication character may be erased from the display of the display 14 when the selected character is touched. In the example shown in FIG. 3B, the authentication character moves linearly along the same direction as the direction of the slide operation ST, but may move to bend or violate the physical law. It may move (eg, move in a zigzag manner, etc.). In the case of bending and moving, for example, the bending may be made larger based on the signal from the acceleration sensor 12 obtained as a result of tilting the communication terminal 10.

  The timing at which the authentication character A3 is selected as the authentication factor may be the timing at which the authentication character A3 is displayed as if it has actually reached the selected area SA1, or by calculation of the path by the slide operation ST, etc. It may be timing when it is predicted that attestation character A3 will reach selection field SA1.

  The authentication element is one of a plurality of authentication characters selected as an authentication character used for user authentication by the user's input operation. For example, when the user of the user ID “abc 12345” selects an authentication element according to a pattern of A3 → B1 → A1 (hereinafter referred to as an authentication pattern), an authentication request message is generated based on the pattern. At this time, the authentication request message is generated to also include an authentication parameter determined based on the moving speed of the authentication character selected as the authentication factor. This authentication parameter may be determined based on the moving direction of the authentication character selected as the authentication factor (in the above example, the arrow AR direction). In the embodiment described below, an example in the case of using a moving speed will be described. In the case of the movement direction, for example, the movement direction AG shown in FIG. 16 described later may be set.

  Here, as described above, the authentication character is selected as an authentication factor when any position on the movement path is included in a predetermined area. Therefore, it can be said that the position on the movement path of the authentication character is used as one of the parameters for authentication. That is, the fact that the unique value described later is included in the authentication value indicates that the authentication character to which the unique value has been assigned has moved to a specific position. The parameter indicating the position is a parameter that changes for each frame (corresponding to the still image of each frame constituting the moving image), and can be specified in each frame. On the other hand, the above-mentioned parameters indicating the moving speed and the moving direction are all moving parameters that can be calculated from the relationship between the relative positions of two points on the moving path of the authentication character, and can not be specified in each frame. It is derived using parameters in one frame.

  The authentication request message is sent to the authentication device 20, and the authentication device 20 executes verification for user authentication using the verification information (see FIG. 6). The authentication device 20 authenticates the user according to the comparison result. Details of the authentication pattern will be described later.

[Hardware Configuration of Authentication Device 20]
The authentication device 20 is a server or the like as described above, and as shown in FIG. 1, the control device 21 and the communication module 28 are provided. The control unit of the authentication device 20 has an arithmetic processing circuit such as a CPU, and a storage device such as a non-volatile memory and a hard disk, and the CPU executes programs stored in the storage device by the CPU to realize various functions in the authentication device 20 Let The communication module of the authentication device 20 is connected to the network NW under the control of the control unit of the authentication device 20 to transmit and receive information with another device such as the communication terminal 10 connected to the network NW.

  The program executed by the communication terminal 10 or the authentication device 20 may be provided in a state of being stored in a computer readable recording medium such as a magnetic recording medium, an optical recording medium, a magneto-optical recording medium, or a semiconductor memory. In this case, the communication terminal 10 or the authentication device 20 may be provided with a device for reading a recording medium. Also, each program may be downloaded via the network NW.

[Functional configuration of authentication system 1]
FIG. 4 is a block diagram showing the function of the authentication system 1 in the first embodiment of the present invention. In the authentication system 1, the configuration for realizing the authentication function is realized by the function realized in the communication terminal 10 and the function realized in the authentication device 20. The communication terminal 10 includes a display control unit 111, a selection unit 113, a message generation unit 115, a storage unit 117, a unique value assignment unit 119, an input reception unit 162, a transmission unit 181, and a reception unit 182. The authentication device 20 includes an authentication unit 215, a storage unit 217, an instruction information generation unit 219, a transmission unit 281, and a reception unit 282.

[Functional Configuration of Communication Terminal 10]
First, the functional configuration of the communication terminal 10 will be described.

  The input receiving unit 162 receives an input operation on the touch sensor 16 by the user. The input operation here is, for example, the authentication operation described above.

  The display control unit 111 causes the display 14 to display an authentication screen. The authentication screen is a screen as exemplified in FIG. 3 as described above, and the authentication character and the selected character are displayed. The authentication character or the like displayed on the authentication screen moves on the display 14 based on the input operation accepted by the input acceptance unit 162.

  When the selection area is included in the movement path of the authentication character moved by the user's input operation, the selection unit 113 selects the authentication character as an authentication factor. Multiple authentication characters may be selected as an authentication factor. In this example, the authentication factor selected before the authentication button TB1 is operated is used to generate an authentication request message.

  The storage unit 117 stores assignment information.

  FIG. 5 is a view for explaining allocation information in the first embodiment of the present invention. The allocation information is information for allocating unique values for each authentication character for each allocation pattern (P1, P2, P3,...). When the assignment pattern is designated from the authentication device 20, the correspondence between each authentication character and the unique value is defined corresponding to the assignment pattern. A unique value is assigned to each authentication character by this correspondence. For example, in the case of the assignment pattern P2, “9152” is assigned to the authentication character A1, and “0235” is assigned to A2. Note that this allocation information is also stored in the authentication device 20. The assignment information stored in the communication terminal 10 and the authentication device 20 may be periodically updated, and the unique value assigned to each authentication character may be changed. The unique value is not limited to four-digit numbers, and may have fewer or more digits, or characters other than numbers may be used. Also, a value different from the value recalled from the appearance of the authentication character (a value with low relevance) may be assigned as the unique value of the authentication character. For example, when the pattern of the authentication character represents “5”, another number other than “5” may be assigned as the unique value.

  Returning to FIG. 4, the description will be continued. The receiving unit 182 receives instruction information from the authentication device 20. The instruction information is information for instructing an assignment pattern to be used in the present authentication process.

  Based on the assignment pattern indicated by the instruction information, the unique value assignment unit 119 assigns, to each authentication pattern, a unique value used to generate a present authentication request message.

  The message generation unit 115 further generates an authentication value based on the authentication factor selected by the selection unit 113 and, in the case where a plurality of authentication factors are selected, based on the selected order. This utilizes a parameter related to position that any position on the movement path of the authentication character has reached the selected area, and an authentication value related to the unique value is generated. That is, the inclusion of the unique value in the authentication value can be said to include the parameter related to the position. In addition, when generating the authentication value, the message generation unit 115 also uses an authentication parameter according to the moving speed of the selected authentication element (authentication character). In this example, the message generating unit 115 detects the position when the authentication character is selected as the authentication element (the position in the first frame) and a predetermined time before the selected timing (for example, one before the first frame). The distance to the position in the frame) is calculated, and the moving speed is calculated from the distance and the predetermined time (time of one frame).

  Since the moving speed corresponds to the distance per unit time, the message generating unit 115 may acquire the distance as the moving speed. Further, the moving speed is not limited to the case of being calculated from the above two points, and may be calculated from the relationship of the relative position of another two points on the moving path of the authentication character. Also, the present invention is not limited to the case of calculating in real time using actual coordinates on the screen. For example, immediately after the authentication character starts moving, the moving speed when the authentication character is selected as the authentication factor may be calculated as a predicted value in calculation.

  A method of generating an authentication value will be described for an example in the case where authentication characters A3, B1, and A1 are selected in this order as an authentication factor. It is assumed that P3 is designated for the assignment pattern at this time.

  Referring to FIG. 5, the unique values corresponding to the authentication characters A1, A3 and B1 in the allocation pattern P3 are "0645", "6690" and "7103". In this case, the authentication value is a value in which the authentication characters are arranged in the order of selection as the authentication factor, that is, “669071030645”. In addition, it is not necessarily arranged in the selected order, but may be arranged in the reverse order. That is, the unique values may be arranged based on the order in which the authentication characters are selected as the authentication factor. In addition, if the movement speed of the authentication characters A1, A3 and B1 is 1207, 2001, and 1109 (the higher the numerical value, the higher the speed), in this example, the movement speed is further arranged in the unique value portion of the authentication value. A moving speed portion which is "120720011109" is given. As a result, the entire authentication value (eigen value part + moving speed part) including the information of moving speed is generated as “669071030645120720011109”. On the other hand, the user may store the order in which the authentication character is selected as the authentication factor and the speed at which the user selects the authentication character, and does not need to know the generated authentication value. When the message generation unit 115 generates an authentication value, the message generation unit 115 generates an authentication request message including the authentication value.

  The authentication value is not limited to the case of being generated by this method, and for example, a dummy value may be included between each unique value. Also, the next eigenvalue may be changed based on the first eigenvalue. For example, “1” which is the first digit of the sum (21 = 6 + 6 + 9 + 0) of the first unique value “6690” may be added to each digit of the subsequent unique values, and “669082141756” may be used as the authentication value. Thus, the authentication value may be generated in any manner as long as it is generated in a predetermined manner using the unique value assigned to the authentication character selected as the authentication factor.

  The transmission unit 181 transmits the authentication request message generated by the message generation unit 115 to the authentication device 20. The authentication value contained in the authentication request message is used in the authentication device 20 for authenticating the user. At this time, a user ID for identifying the user, another password, or the like may be transmitted from the communication terminal 10 in association with the authentication request message. Note that the user ID may be transmitted at a timing different from the transmission / reception of the authentication request message including the authentication value.

[Functional Configuration of Authentication Device 20]
Subsequently, the functional configuration of the authentication device 20 will be described. The functional configuration described below is not limited to the case of being realized by one server, and may be realized by cooperation among a plurality of servers connected via the network NW. For example, the storage unit 217 may be realized by another server different from the server that realizes the other functional configuration.

  The storage unit 217 stores collation information and assignment information for authenticating the user. In addition, the storage unit 217 stores application information that specifies an assignment pattern applied to authentication in the current authentication device 20. The assignment information is the same as the assignment information (see FIG. 5) stored in the storage unit 117, so the description will be omitted.

  FIG. 6 is a diagram for explaining collation information in the first embodiment of the present invention. In the verification information, a user ID is associated with an authentication pattern and an authentication speed. For example, the authentication pattern “A3 → B1 → A1” is associated with the user ID “abc12345”. The authentication pattern may be changeable by the user. The change of the authentication pattern may be performed by the user operating the communication terminal 10. Also, the authentication pattern is not limited to the sequence of three authentication characters, and may be one or more, and may be smaller or larger.

  The authentication pattern indicates an authentication character to be selected by the user as an authentication factor in order to authenticate the user corresponding to the user ID, and in the above example, the authentication characters A3, B1 and A1 are in this order as an authentication factor. If selected, the user is authenticated as a valid user. From the authentication pattern and the allocation information (see FIG. 5), the authentication value corresponding to the user ID “abc12345” becomes “773913088154” when the allocation pattern is P1, and becomes “119257119152” when the allocation pattern is P2 If the allocation pattern is P3, it will be "669071030645".

  On the other hand, the authentication speed indicates the setting value of the speed at which the authentication character is moved. For example, if the user ID is "abc12345", the authentication speed corresponding to the authentication character A3 is "1200", the authentication speed corresponding to the authentication character B1 is "2000", and the authentication speed corresponding to the authentication character A1 is "1100". It becomes ".

  When the instruction information generation unit 219 receives a request for authenticating the user of the communication terminal 10 from the communication terminal 10 or a server providing a service to the communication terminal 10, the instruction information generation unit 219 selects one of the allocation patterns from the allocation pattern included in the allocation information. It selects and produces | generates the instruction information which shows the selected allocation pattern. The assignment pattern to be selected is selected according to a predetermined method, and may be selected in a predetermined order, for example, or may be selected randomly. Then, the instruction information generation unit 219 updates the application information and changes it to the selected allocation pattern. In addition, when the user ID is acquired in advance from the communication terminal 10 in the authentication device 20, the selected allocation pattern is stored in the storage unit 217 as application information in association with the user ID, Different allocation patterns may be selected for each.

  The transmission unit 281 transmits the instruction information generated by the instruction information generation unit 219 to the communication terminal 10. The receiving unit 282 receives an authentication request message from the communication terminal 10.

  The authentication unit 215 extracts the authentication value included in the authentication request message. The authentication unit 215 refers to the verification information stored in the storage unit 217, and acquires an authentication pattern corresponding to the user ID of the user of the communication terminal 10 that has transmitted the authentication request message. The authentication unit 215 generates an authentication value from the unique value assigned to each authentication character based on the assignment information and the application information, and the acquired authentication pattern. The authentication unit 215 collates the generated authentication value with the authentication value (eigen value part) included in the authentication request message, and determines whether the authentication characters are selected in the correct order based on the collation result.

  If the correct order is selected, the authentication speed specified in the collation information is collated with the authentication value (authentication speed part) included in the authentication request message. In this example, if the setting value of the authentication speed in the collation information and the moving speed of the authentication character do not only completely match, but are included in the predetermined allowable range, the user is authenticated as a valid user. Otherwise, the user is not authenticated as a valid user. The allowable range is defined as, for example, a range of ± 100 with respect to the set value (if the set value is “1200”, “1100” to “1300” is an allowable range) or a range of ± 10% (set value If “1” is “1200”, “1080” to “1320” may be defined as an allowable range). This range may be changed according to the level of authentication. For example, the tolerance may be narrowed as the authentication is performed to execute a process that requires a strict determination of the legitimacy.

  Note that the velocity may be determined as a relative velocity to the movement velocity of the authentication character selected immediately before. For example, if the user ID "abc12345" is not the absolute value of the authentication speed, the movement speed of the authentication character B1 is faster than the movement speed of the authentication character A3, and the movement speed of the authentication character A1 is the movement of the authentication character B1. If it is slower than the speed, it may be authenticated as a valid user.

  In this way, it is authenticated whether the user of the communication terminal 10 is a valid user. That is, if the unique value part of each authentication value matches as a result of collation and the moving speed part is included in the authentication speed (setting value and its allowable range), the user of the communication terminal 10 is authenticated as a valid user. Ru. The authentication result by the authentication unit 215 is notified to the device that has made a request to authenticate the user of the communication terminal 10, that is, the communication terminal 10 or a server that provides the communication terminal 10 with a service.

[Operation of authentication system 1]
Subsequently, an operation implemented in the functional configuration of the authentication system 1 will be described using a communication flow shown in FIG.

  FIG. 7 is a communication flow diagram showing processing of the authentication system 1 in the first embodiment of the present invention. First, the user of the communication terminal 10 applies for authentication of the user for receiving a predetermined service (step S110). This may be applied to a server providing a predetermined service and automatically applied when receiving the service. The communication terminal 10 transmits a request for user authentication to the authentication server 20 (step S120).

  The application for user authentication is performed, for example, by accessing a server that provides a predetermined service, and in this example, the server that provides the service will be described as having the function of the authentication device 20. If the server providing the service and the authentication device 20 are different servers, a request for user authentication may be transferred to the authentication device 20, and after user authentication, the service is sent to the user using the authentication result. It should be provided.

  The authentication device 20 determines an assignment pattern to be used for authentication, generates instruction information (step S210), and transmits the instruction information to the communication terminal 10 (step S220). When the communication terminal 10 receives the instruction information, the communication terminal 10 displays an authentication screen (for example, an authentication screen shown in FIG. 3) on the display 14 (step S130).

  The communication terminal 10 receives an authentication operation by the user (step S140), and selects an authentication character as an authentication element based on the user's operation. As described above, in this example, when the authentication character touches the selected character by the operation of the user, the authentication character is selected. When the authentication button TB1 is operated by the user, the communication terminal 10 generates an authentication value based on the authentication character selected as the authentication element. In place of the operation to the authentication button TB1, a character indicating the end of the authentication operation may be displayed in the window W1, and the character may be brought into contact with the selected character S1.

  At this time, the user can perform the authentication operation by moving the authentication character at a predetermined speed and selecting it as an authentication element, and the selection can be performed only by the slide operation by the user. Operation becomes easy. The communication terminal 10 generates an authentication request message including the generated authentication value (eigen value portion + moving speed portion) (step S150), and transmits the generated authentication request message to the authentication device 20 (step S160).

  The authentication value contained in the authentication request message is used in the authentication device 20 for authenticating the user. On the other hand, if the assignment pattern described above is changed, the unique value assigned to each authentication character is changed even if the authentication operation of the user is the same, so the authentication value is also changed. Also, even if the authentication character to be selected is correct, if the moving speed of the authentication character is largely different, the user is not authenticated as a valid user.

  Therefore, even if the authentication value contained in the authentication request message leaks to a third party, if the authentication operation of the user (the operation of selecting the authentication character as an authentication factor and the moving speed of the authentication character by the selection operation) is unknown, In addition, since the third party can not know the information necessary for authenticating the user if the content of the assignment pattern when performing the authentication process is not known, leakage of the information necessary for authenticating the user to the third party is required. It can be suppressed.

  At this time, even if the authentication value is to be changed, it is not necessary to change the authentication operation of the user, so the user may perform the normal authentication operation without being particularly aware.

  The authentication device 20 converts the authentication value generated from the authentication pattern corresponding to the user ID of the user of the communication terminal 10 in the collation information and the unique value assigned to each authentication character based on the assignment information and the application information into an authentication request message. The authentication value (eigen value part) contained is collated, and when both are in agreement, the authentication speed in collation information and the moving speed of an authentication character are further collated (step S230).

  The authentication device 20 authenticates the user based on the comparison result (step S240). As a result that the verification device 20 can determine that both verification values match, that is, the unique value portion of the verification value included in the verification request message matches the verification target, and the movement speed portion is verification target If the user of the communication terminal 10 is determined to be a valid user if it is included in the allowable range of (2), it is determined that the user is a disguised user otherwise.

  The authentication device 20 transmits the authentication result of the user thus determined to the communication terminal 10 (step S250). When the service to be received by the user is provided by a server or the like different from the authentication device 20, the authentication result may be transmitted to the communication terminal 10 via the server.

  When receiving the authentication result, the communication terminal 10 displays the authentication result on the display 14 and notifies the user (step S170). The authentication result may be notified to the user not only when the content is directly displayed on the display 14 but also when the provision of the service is started. When the user of the communication terminal 10 is authenticated as a valid user, the information is transmitted / received between the communication terminal 10 and the authentication device 20 (or other server providing a service) to provide the service to the user. It is started (step S300). Each operation in these communication flows is realized, for example, using the functional configuration of the authentication system 1 described above. The above is the description of the operation when authenticating the user in the authentication system 1.

  As described above, in the authentication system 1 according to the first embodiment, the user moves the authentication character at a predetermined speed by the slide operation instead of the complicated operation of inputting the password composed of characters, numbers, etc. as in the prior art. Authentication can be requested by a simple operation of moving to a predetermined position and selecting it as an authentication factor.

  Further, in the authentication system 1 according to the first embodiment, if the assignment pattern is changed, the unique value assigned to each authentication character is changed and the authentication value is also changed even if the authentication operation of the user is the same. Therefore, even if the authentication value contained in the authentication request message leaks to a third party, it is not possible to directly know the information necessary for the user authentication. Therefore, it is possible to suppress leakage of information necessary for user authentication to a third party and to suppress man-in-the-middle attacks.

Second Embodiment
In the first embodiment, one selected character is displayed on the authentication screen, but in the second embodiment, there are a plurality of selected characters. In the description of each embodiment, the description of the same configuration as that of the first embodiment will be omitted, and the description will focus on a different configuration. The same applies to the embodiments described below.

  FIG. 8 is a diagram showing an example of an authentication screen in the second embodiment of the present invention. As shown in FIG. 8, two selected characters S1 and S2 exist. As in the first embodiment, selection areas SA1 and SA2 are set corresponding to the respective selected characters. In the second embodiment, different unique values are assigned by selected characters brought into contact when an authentication character is selected as an authentication factor. Of the two selected characters S1 and S2, the selected character S1 is located on the upper side of the window W1, the selected character S2 is located on the lower side of the window W1, etc. You may If there are four selected characters, for example, they may be arranged at the four corners of the window W1. In this way, when the user moves the authentication character, it is easy to set the rough direction and the operation becomes easy. Also, even if the selection area is enlarged, it can be separated from other selection areas.

FIG. 9 is a view for explaining allocation information in the second embodiment of the present invention. In the assignment information in the second embodiment, unique values are determined for the combination of the authentication character and the selected character. For example, when the authentication character A1 contacts the selected character S2 and is selected as the authentication element, if the assignment pattern is P1, the unique value is "2918".

  FIG. 10 is a diagram for explaining collation information in the second embodiment of the present invention. In order to distinguish the selected characters S1 and S2, the authentication pattern is determined by the set of the authentication character and the selected character also in the collation information. For example, in the user ID “abc 12345”, the authentication pattern is determined as “A3S2 → B1S1 → A1S1”. Therefore, authentication character A3 contacts selected character S2 and is selected as an authentication element, authentication character B1 contacts selected character S1 and is selected as an authentication element, and authentication character A1 contacts selected character S1 as an authentication element. If the moving speed of each authentication character is included in the allowable range of the authentication speed, the user is authenticated as a valid user.

  As described above, by setting a plurality of selected characters, more combinations can be realized with less burden on the user, making it difficult to remember even if the user's operation is stolen from the side, and Since it becomes difficult to obtain correct input even if input is appropriate, it is possible to improve the accuracy of user authentication.

  Note that fixed values are assigned to the selected characters S1 and S2, respectively, and in the authentication value generated in the same manner as in the first embodiment, the unique value, such as before or after the 4-digit unique value corresponding to each authentication character. , And the unique value assigned to the selected character whose authentication character is selected as the authentication factor may be arranged.

  The present embodiment does not prevent a combination of the configurations in the other embodiments to be realized as another embodiment. The same applies to the following embodiments.

Third Embodiment
In the third embodiment, when the user moves the authentication character displayed on the authentication screen and the authentication character contacts another authentication character, the other authentication character moves under the influence of the moved authentication character. The case where it is made to do will be described.

  FIG. 11 is a diagram showing an example of an authentication screen in the third embodiment of the present invention. The example shown in FIG. 11 shows the change of the screen when the user moves the authentication character A1 toward the top of the screen. First, when the authentication character B2 is touched by the movement of the authentication character A1, the authentication character B2 is flipped to the left side of the screen. As a result, the authentication character B2 contacts the authentication character B1, and the authentication character B1 moves. When the authentication character A1 contacts the authentication character C1, the authentication character C1 is flipped to the right of the screen.

  In this manner, another authentication character may move based on the movement path of the moved authentication character. Note that although the authentication character (the authentication character A1 in the above example) moved by the user moves linearly in the example of FIG. 11, the path changes due to the influence of the authentication characters B2 and C1 touched. You may do so. The influence of the movement of one authentication character on the movement of another authentication character may be determined by a predetermined calculation method.

  In addition, the authentication character may move and bounce back when it contacts the end of the window W1. Also, by detecting the attitude and movement of the communication terminal 10 using the output of the acceleration sensor 12, the position of the authentication character may be changed based on at least one of the attitude and movement of the communication terminal 10. . When the communication terminal 10 is shaken, the positions of the respective authentication characters may be switched.

Fourth Embodiment
In the embodiment described above, the authentication character displayed on the authentication screen is moved by slide operation and is selected as an authentication element by bringing it into contact with the selected character, but in the fourth embodiment, authentication is performed by another method Select a character as an authentication factor.

  FIG. 12 is a diagram showing an example of an authentication screen in the fourth embodiment of the present invention. In the fourth embodiment, authentication characters are aligned vertically and horizontally in the window W1. As shown in FIG. 12A, when the user inputs an operation DT (an operation generally referred to as a drag) for moving the authentication character B2 to the upper part, the moved authentication character B2 and the authentication character D1 at the movement destination are switched. To move. FIG. 12B shows the state after the authentication character B2 and the authentication character D1 are replaced by the operation DT. When the user moves continuously, the authentication character which the user is trying to operate moves while exchanging positions with the authentication character of the movement destination one after another.

  In this example, an area (selection area SW) for selecting an authentication character as an authentication factor is determined in advance as a part of the window W1. The selection area SW may be set by the user. It is desirable that the user remembers the range and does not display this selection area SW on the display 14. In this way, even if the third party looks into the user's operation, it is difficult to know which authentication character is selected as the authentication factor. Note that the movement speed of the authentication character to be included in the authentication value may be calculated as, for example, the movement distance between two predetermined points on the movement route until it is arranged in the selection area SW divided by the movement time. Good.

  In the fourth embodiment, when the user operates the authentication button TB1, an authentication character present in the selection area SW is selected as an authentication element. The order to be selected may be determined in advance, but may be, for example, from the left side. In the example of FIG. 12B, the authentication characters C3, A3, A2, and D1 are selected as an authentication element in order from the left of the selection area SW. Note that the authentication value may be generated as a combination of authentication characters regardless of the selected order. In this case, the authentication value is treated simply as a combination of unique values corresponding to each authentication character, and in the above example, not as a series of 16 digits but as a combination of unique values separated by 4 digits. Also in the first embodiment, the selected order may be irrelevant.

  Although the fourth embodiment is shown as one example of selecting the authentication character as the authentication element without using the slide operation, the method using the operation unit 17 selects the authentication element by touching the authentication character. It may be another method such as Also by this, if the assignment pattern is changed, the unique value assigned to each authentication character is changed and the authentication value is also changed even if the authentication operation of the user is the same, so the authentication included in the authentication request message Even if the value leaks to a third party, it is not possible to directly know the information necessary for authenticating the user. Therefore, it is possible to suppress the leakage of information necessary for authenticating the user to a third party.

Fifth Embodiment
The fifth embodiment is an example in which each of a plurality of authentication characters displayed on the authentication screen has a different appearance as a pattern of numbers. Such an authentication screen can also be used to input a personal identification number in an ATM (Automatic Teller Machine) or the like.

  FIG. 13 is a diagram showing an example of an authentication screen in the fifth embodiment of the present invention. The authentication characters displayed on the authentication screen shown in FIG. 13 have a square outer shape and are the same in all cases, and the pattern is a number from "0" to "9". As shown in FIG. 13 (a), when the user inputs a slide operation ST to the authentication character N7 of the number "7", as shown in FIG. 13 (b), the authentication character N7 contacts the selected character S1. Do. Thereby, the authentication character N7 is selected as an authentication factor.

  As described above, by using an authentication character including numerical information in a pattern, it can also be used to input a password, which has already been set as a combination of numerals. For example, the communication terminal 10 can be used for settlement of a credit card at a store, settlement when mail-ordering such as the Internet is performed, etc., as settlement using an already-set password. The communication terminal 10 can also be applied to a security device such as the above-described ATM or a door with an electronic lock.

  If the authentication character does not touch the selected character S1 at a predetermined speed, it may not be recognized as an input of a valid password. That is, it may be treated as if the authentication character did not touch the selected character S1.

Sixth Embodiment
In the sixth embodiment, the case where the service that the user of the communication terminal 10 intends to use is a financial transaction (balance inquiry, deposit, transfer, transfer, securities transaction, etc.) provided by the financial transaction device will be described.

  FIG. 14 is a block diagram showing a functional configuration of the financial transaction system 1B in the sixth embodiment of the present invention. The financial transaction system 1C has a financial transaction device 50 connected to the communication terminal 10 via the network NW. The financial transaction device 50 includes the authentication device 20 and the transaction unit 25 in each of the above-described embodiments. When the user of the communication terminal 10 is a valid user using the authentication result of the user in the authentication device 20, the transaction unit 25 executes a financial transaction process based on an instruction from the communication terminal 10. At this time, the processing of the financial transaction performed by the trading unit 25 may be to instruct the external device such as another database server. The financial transaction apparatus 50 is not limited to the case where it is realized by one server like the authentication apparatus 20, but may be realized by cooperation among a plurality of servers connected via the network NW.

Seventh Embodiment
In the seventh embodiment, the authentication screen also displays non-authentication characters separately from the authentication characters. The non-authentication character has a specific appearance, and for example, in FIG. 3, C2 and C3 may be non-authentication characters. The non-authentication character is selected as a non-authentication element by contact with the selected character S1. And, the non-authentication element is assigned a specific unique value (for example, "0000"). The authentication value included in the authentication request message is generated similarly to the method in the first embodiment based on the authentication factor and the non-authentication factor. That is, in the part of the non-authentication element, the authentication value is generated as the unique value is a specific value (for example, "0000").

  In the authentication device 20, a portion where a value corresponding to a non-authentication element exists is compared without being treated as an authentication value. For example, when an operation in which the second non-authentication character is selected as the non-authentication element in the example in the first embodiment is interrupted, the authentication value (eigen value portion) is generated as “6690000071030645”. Treat "669071030645" as an authentication value (eigen value part) by removing "0000".

  As described above, since the non-authentication character does not contribute to the authentication of the user, it can function as a dummy character of the authentication character. When the authentication character is moved at a predetermined speed range (for example, above a predetermined speed or below a predetermined speed), it may function as a non-authentication character.

  In this way, in the authentication operation of the user, many input operations are performed by adding an unnecessary operation that the user intentionally operates the dummy character. Although the operation required for authentication is a part of it, the third party does not know the part of the required operation. Therefore, even if a third party steals a user's operation from the side, it is difficult to remember because there are many operations.

Eighth Embodiment
In the eighth embodiment, the authentication screen also displays non-selected characters in addition to the authentication characters. The non-selected characters have a specific appearance, and for example, in FIG. 3, C2 and C3 may be non-selected characters. The non-selected character is not selected as an authentication factor even by contact with the selected character S1. That is, since the non-selected character is not related to the generation of the authentication value, the unique value is not assigned.

  Thus, since the non-selected character does not contribute to the authentication of the user, it can function as a dummy character of the authentication character. Therefore, the same effect as that of the seventh embodiment can be obtained. When the authentication character is moved at a predetermined speed range (for example, above a predetermined speed or below a predetermined speed), it may function as a non-selection certificate character.

The Ninth Embodiment
In the ninth embodiment, when the authentication character to be selected as the authentication element in the authentication operation is the authentication pattern of A3 → B1 → A1, the authentication character is selected as the authentication element so that the authentication pattern is at least partially included. If so, the user may be authenticated as a valid user. In this case, in the verification of the authentication value in the authentication device 20, a part of the authentication value contained in the authentication request message may be compared.

  For example, if the authentication character selected as the authentication factor by the user's authentication operation is the authentication pattern of A3 → C3 → B1 → A1, the authentication pattern will be A3 → B1 → A1 even if C3 is included. And the authentication device 20 may authenticate as a valid user.

  Even in this case, the same effects as in the seventh and eighth embodiments can be obtained.

Tenth Embodiment
In the first embodiment, the authentication device 20 shares the assignment pattern used for authentication by transmitting instruction information for instructing the assignment pattern to the communication terminal 10. However, in the ninth embodiment, the authentication device 20 shares the assignment pattern. In the authentication device 20 and the communication terminal 10, instruction information generated by a predetermined algorithm is used instead of the instruction information transmitted from the above. For example, the instruction information may be generated based on the time information.

  A predetermined unique value may be assigned to each authentication character without using the instruction information. In this case, the unique value is the identifier of the authentication character. Even in this case, as described above, the user is made to select the authentication character as the authentication element by the slide operation instead of the complicated operation of inputting the password composed of characters, numbers, etc. as in the prior art. Authentication can be requested with a simple operation.

Eleventh Embodiment
In the first embodiment, the authentication character moved by the slide operation contacts the selected character and is selected as the authentication element. In the eleventh embodiment, regardless of the display of the selected character, the authentication character may be selected as the authentication element by the movement of the authentication character by the slide operation. In this case, the selected character may not be displayed.

Twelfth Embodiment
In the twelfth embodiment, an example in which user authentication is performed by moving an authentication character in a predetermined manner will be described.

  FIG. 15 is a view showing an example of the authentication screen in the twelfth embodiment of the present invention. In the example shown in FIG. 15, the selected character described above is not displayed on the authentication screen. The user performs an authentication operation by selecting and moving any authentication character. For example, as shown in FIG. 15 (a), the operation DT is input to the authentication character C1, and the authentication character C1 is moved as shown in FIG. 15 (b). Thereafter, when the authentication button TB1 is operated, an authentication value is generated.

  In this example, the authentication value includes the movement parameter indicating the movement of the authentication character from the position before movement (FIG. 15 (a)) to the position after movement (FIG. 15 (b)) and the type of this authentication character. Generated based on.

  FIG. 16 is a diagram for explaining movement parameters when an authentication character is selected as an authentication element in the twelfth embodiment of the present invention. The movement source position C1b is the center position of the movement source of the authentication character C1, and the movement destination position C1t is the center position of the movement destination of the authentication character C1. In this example, the movement amount R, the movement speed V, and the movement direction AG are defined as movement parameters. The movement amount R is the distance between the movement destination position C1t and the movement source position C1b. The moving speed V indicates the speed when moving from the movement source position C1b to the movement destination position C1t. In this example, the movement amount R is the time taken to move from the movement source position C1b to the movement destination position C1t. It is the divided value. The movement direction AG is an angle based on the predetermined direction L. Thus, the movement parameter is determined based on at least two positions (positions in different frames) on the movement path of the authentication character.

  The authentication value generated in the communication terminal 10 is, for example, a value obtained by combining the unique value corresponding to the moved authentication character and the unique value corresponding to the movement parameter by the method described in the above embodiment. The unique value corresponding to the movement parameter may be the value itself of each parameter or may be another value converted according to the value of the parameter. If there is only one type or one authentication character to be moved, that is, there is no need to distinguish the type of authentication character to be moved, the unique value corresponding to the authentication character may not be used. . In this case, mobility parameters are used to authenticate the user.

  Moreover, although three types of parameters were illustrated about a movement parameter, two types or one type of parameter may be used, and other parameters, such as an acceleration, may be prescribed | regulated separately. For example, when only the movement direction AG is used as the movement parameter, the authentication value is a value (9753124) obtained by continuing the movement direction AG (angle, for example, 124 °) to the unique value (for example, 9753) corresponding to the authentication character. Just do it. Further, in the generation of the authentication value, a position parameter indicating the position on the screen of the authentication character (for example, the coordinates on the screen before or after the movement) may be used in combination with the movement parameter. In this case, when the authentication character is moved to a predetermined place (area) and moved at a predetermined speed in the movement, the user can be authenticated as a valid user. The position parameter can be determined based on one position (position in one frame) on the movement path of the authentication character, unlike the movement parameter.

  When the authentication request message including the authentication value generated in this manner is received, the authentication device 20 collates the authentication value. The part of the unique value corresponding to the authentication character is compared in the same manner as in the above embodiment, while the part of the unique value corresponding to the movement parameter is compared with the value of the angle separately determined in the comparison information. The angle defined in the collation information (hereinafter referred to as the collation angle) is registered in advance by the user as 120 degrees or the like. Then, if the angle of the movement direction AG obtained from the unique value is included in a predetermined width (hereinafter referred to as a collation allowable range) with respect to the collation angle, it is determined that the collated angles coincide. The collation allowable range may also be registered in the collation information in advance by the user. That is, the matching allowable range may be different for each user.

  For the unique value corresponding to the authentication character and the unique value corresponding to the movement parameter (in this example, the movement direction AG), the authentication value included in the authentication request message and the authentication value generated for verification in the authentication device 20 If it is determined that the ranges match, the authentication device 20 determines that the user of the communication terminal 10 is a valid user.

  The authentication value may be generated by combining unique values corresponding to the movement of each authentication character using not only unique values corresponding to the movement of one authentication character but also a plurality of authentication characters. When performing authentication by moving a plurality of authentication characters, for example, the authentication value may be generated by arranging unique values corresponding to each authentication character in the order in which the authentication characters are moved. The verification tolerance range may be different for each authentication character, or the movement parameters used as the unique value may be different.

  In addition, the authentication server 20 may include an authentication character moved beyond the matching allowable range, that is, it may determine from the unique value included in the authentication value that part of the authentication characters exceeds the matching allowable range. is there. In this case, among the authentication values received from the communication terminal 10, the authentication server 20 is a unique value (a unique value corresponding to the authentication character and a unique value corresponding to the movement parameter) related to the authentication character which has moved beyond the matching allowable range. You may treat the value from which you removed as the correct authentication value.

  As described above, when the authentication character exceeds the allowable matching range, the authentication character does not contribute to the authentication of the user, so that the authentication character can function as a dummy character.

  In this way, in the authentication operation of the user, many input operations are performed by adding an unnecessary operation that the user intentionally operates the dummy character. Although the operation required for authentication is a part of it, the third party does not know the part of the required operation. Therefore, even if a third party steals a user's operation from the side, it is difficult to remember because there are many operations.

  Subsequently, for the above-described allowable matching range, a first example using the movement amount R and the movement direction AG as movement parameters and a second example using only the movement direction AG will be described with reference to FIGS. 17 and 18. explain.

  FIG. 17 is a diagram for explaining the movement range of the authentication character for determining that the user is a valid user in the first example of the twelfth embodiment of the present invention. When the movement source position C1b of the authentication character C1 moves to the position defined in the collation information, the case of moving to the movement destination position C1t is shown. An area AA indicates an area including the matching allowable range of the movement amount R and the movement direction AG with reference to the movement destination position C1t. Therefore, when the center position of the authentication character C1 after movement is included in the area AA, it is determined that the user of the communication terminal 10 is a valid user.

  FIG. 18 is a view for explaining the movement range of the authentication character for determining that the user is a valid user in the second example of the twelfth embodiment of the present invention. In this example, only the movement direction AG is used as the movement parameter, so when the movement source position C1b of the authentication character C1 moves to the position defined in the collation information, it moves to any one on the dashed arrow PD. Become. In this example, the area AA indicates an area including the matching allowable range of the movement direction AG based on the dashed arrow PD. Therefore, when the center position of the authentication character C1 after movement is included in the area AA, it is determined that the user of the communication terminal 10 is a valid user.

13th Embodiment
In the thirteenth embodiment, an example in which the authentication character is moved by a method different from each of the above embodiments will be described. In this example, the operation DT is performed in the direction opposite to the direction in which the authentication character is to be moved, and then the operation is stopped (if the user's finger is operated by touching the touch panel, To move the authentication character in the desired direction. That is, parameters such as the direction and speed for moving the authentication character are set by the operation DT, and movement of the authentication character is started according to the parameters set after the setting. The details will be described below.

  FIG. 19 is a view for explaining the method of moving the authentication character in the thirteenth embodiment of the present invention. First, as shown in FIG. 19A, the operation DT is performed on the authentication character C1. The direction of the operation DT is opposite to the direction in which the authentication character C1 is to be moved. By performing this operation DT, as shown in FIG. 19B, the authentication character C1 moves from the movement source position C1b to a position (movement destination position C1t) according to the operation DT.

  In the following description, the distance of the authentication character C1 moved by the operation DT, that is, the distance from the movement source position C1b to the movement destination position C1 is referred to as an operation distance RT. Further, the speed of the operation when performing the operation DT is referred to as the operation speed VD.

  When the operation DT is stopped in the state shown in FIG. 19B, as shown in FIG. 19C, the authentication character C1 moves in the direction from the movement destination position C1t to the movement source position C1b. The authentication character C1 moves at a speed VT according to the operation distance RT and the operation speed VD. That is, when the movement direction and the movement speed of the authentication character C1 are set, after that (after the operation DT is stopped), the authentication character C1 moves in the set movement direction and the movement speed.

  The operation method of the authentication character can be applied instead of the slide operation ST in each of the above embodiments. Also, as in the twelfth embodiment, the present invention can be applied to a method of moving an authentication character by an operation (operation DT) other than the slide operation ST. A unique value corresponding to this numerical value NM may be included in the authentication value. In this case, the numerical value NM used for collation in the authentication device 20 is registered in collation information predetermined by the user.

  In this example, while the operation DT is performed (FIG. 19B), the numerical value NM is set according to the operation distance RT. This numerical value NM is displayed at a predetermined position or a position interlocked with the movement of the authentication character. In this example, the numerical value NM is an integer from "0" to "999", and the larger the numerical value NM, the larger the speed VT is set. In this example, the numerical value NM is changed according to not only the operation distance RT but also the operation speed VD. Therefore, even if the operation distance RT is the same, the numerical value NM is set as a different value if the operation speed VD is different. The setting method of the numerical value NM will be specifically described with reference to FIG.

  FIG. 20 is a view for explaining a method of setting numerical values in the thirteenth embodiment of the present invention. The current state is shown in FIG. 20A, and the numerical value NM is “10” in the operation distance RTa. The difference in the numerical value NM set by the difference in the operation speed VD of the operation DT from this state will be described.

  In both FIGS. 20 (b-1) and 20 (b-2), the operation distance is RTb, and the operation distance from the operation distance RTa in FIG. 20 (a) is the same. On the other hand, the operation speed VD1 of (b-1) is slower than the operation speed VD2 of (b-2). When the operation speed is slow, the numerical value NM is set so that the increment of the numerical value NM is small even if the operation distance is the same. In the example of FIG. 20 (b-1) and (b-2), even if the operation distance RTb is the same, the numerical value NM changes to “327” (= 10 + 317) in (b-1), and (b− In 2), it changes to “821” (= 10 + 811). When the numerical value NM changes, the displayed numerical value NM is sequentially updated and changes.

  Therefore, the user may move the authentication character by increasing the operation speed VD when it is desired to greatly change the numerical value NM. On the other hand, the user moves the authentication character so as to reduce the operation speed VD when approaching the target value while confirming the displayed numerical value NM, as shown in FIG. As in 2), make the change in the numerical value NM smaller.

  As for FIG. 20 (c-1) and (c-2), the operation distance is RTc in all, and the operation distance from the operation distance RTb is the same. On the other hand, the operation speed VD3 of (c-1) and (c-2) is very small compared with the operation speed VD1 and VD2. Therefore, the numerical value NM slightly increases (+10) from the states of (b-1) and (b-2). As a result, the numerical value NM changes to "347" in (c-1) and changes to "841" in (c-2). As described above, even if the operation distance RT of the authentication character is the same, the target numerical value NM can be easily set by adjusting the speed of the operation DT. Note that the numerical value NM set in this manner may be used as a personal identification number (three-digit number in this example) for user authentication. That is, regardless of the type of authentication character, an authentication value may be generated corresponding to the numerical value NM.

Fourteenth Embodiment
In the fourteenth embodiment, unlike the above embodiments, an example in which user authentication is performed by a method not using an authentication character will be described. In this example, the numerical value NM is set as in the thirteenth embodiment and used as an authentication value. However, instead of setting the numerical value NM by moving the authentication character by the operation DT, the numerical value NM is set by another method. Set

  FIG. 21 is a view showing an example of the authentication screen in the fourteenth embodiment of the present invention. The authentication screen shown in FIG. 21 is displayed on the window W3 provided on the display 14. The window W3 is displayed at a predetermined position of the display area of the display 14. FIGS. 21 (a) to 21 (f) show time-series operation examples of the user until setting a target numerical value NM ("777" in this example).

  The authentication screen of this example displays a number line image NB indicating a number line, a pointer NP for specifying a specific position of the number line, and a numerical value NM indicating a value on the number line of the position pointed by the pointer NP. . The user can move the position of the pointer NP along the number line by the operation. When the pointer NP moves, the display position of the numerical value NM moves in conjunction with the position of the pointer NP.

  As shown in FIG. 21A, the pointer NP points to the position of “0” on the number line. The user moves the position of the pointer NP at a high speed (in this embodiment, referred to as the first speed). The destination of the movement is near the target value "777", and in this example, as shown in FIG. 21 (b), the pointer NP points to "750".

  Since the user moves the pointer NP closer to the target value “777”, the moving speed is set to a speed lower than the first speed and lower than a predetermined first set speed (referred to as a second speed in this embodiment). (FIG. 21 (b)). When it is detected in the communication terminal 10 that the moving speed has become slower than the first set speed, the number straight line image NB displayed in the window W3 is enlarged, as shown in FIG. 21 (c). Change so that some numerical ranges are displayed by extracting and expanding some of the numerical ranges. At this time, it is desirable that the position of the pointer NP is maintained while the position of the pointer NP is maintained, that is, the position on the number line pointed by the pointer NP does not change.

  In the number straight line image NB displayed as shown in FIG. 21C, the user can more easily approach the target value “777”. In this example, the user further moves the pointer NP at the second speed, and at “771” closer to “777”, the moving speed is slower than the predetermined second set speed (in this embodiment, the third speed (See FIG. 21 (d)).

  When it is detected in the communication terminal 10 that the moving speed has become slower than the second set speed, the number straight line image NB is further enlarged and changed so that a part of the numerical range is displayed as described above. (FIG. 21 (e)). Then, in the number straight line image NB displayed as shown in FIG. 21 (e), the user can more easily approach the target value “777” more accurately than in the case shown in FIG. 21 (c). Then, the user moves the pointer NP to the target value “777”, and sets “777” to the numerical value NM (FIG. 21 (f)).

  In the above example, although the first set speed and the second set speed exist, the expansion of the numerical range is implemented in two steps, but it may be one step or more steps. It may be divided into

  When the user operates on the premise that the target numerical value NM is known, the timing at which the moving speed of the pointer NP is delayed does not greatly shift. On the other hand, if the user does not know the target value NM, the user may slow down the moving speed of the pointer NP even if the pointer NP points away. In this case, by being separated from the target numerical value NM by a predetermined value or more, a number straight line image not including the target numerical value may be displayed in the window W3. Since it is not necessary to authenticate such a user, the authentication process is aborted. On the other hand, it may be merely an error of the user's operation, so that the re-authentication operation may be performed by another authentication method.

  FIG. 22 is a diagram for explaining an authentication operation in the case of causing re-authentication in the fourteenth embodiment of the present invention. In FIGS. 22 (a) to 22 (c), although the target numerical value NM (in this example, "777") should be set, the speed of the pointer NP has been slowed down at a position away from "777" by mistake. The user's operation example of the case is shown in time series.

  In FIG. 22A, the user moves the pointer NP, but when the user reaches “329” on the number line, the movement speed is mistakenly made slower than the first set speed (FIG. 22). (B), as shown in FIG. 22 (c), the operation directed to the target value can not be performed any more by not including "777" on the number line displayed in the window W3. Therefore, the authentication process is aborted, and the authentication operation is restarted from the beginning. Before redoing the authentication operation, the user may be authenticated by another authentication method. By this, it is also possible to determine whether the user is the only user who made the mistake or the user who does not know the above-mentioned numerical value.

  Note that another authentication method may be the method described in the other embodiments, or may be simpler. And in this another authentication method, it does not necessarily judge whether it is a valid user shown in each embodiment, but may just judge whether authentication operation in this embodiment may be performed again.

The fifteenth embodiment
In the fifteenth embodiment, setting of the numerical value NM using number lines is performed as in the fourteenth embodiment, but the setting method is different from that of the fourteenth embodiment. Specifically, the user does not move the position of the pointer NP, but moves the number line image NS to set a numerical value.

  FIG. 23 is a diagram showing an example of the authentication screen in the fifteenth embodiment of the present invention. The authentication screen shown in FIG. 23 is displayed on the window W4 provided on the display 14. The window W4 is displayed at a predetermined position of the display area of the display 14. FIGS. 23A to 23F show time-series operation examples of the user until setting a target numerical value NM (“777” in this example).

  On the authentication screen of this example, a number line image NS indicating a number line, a pointer NA specifying a specific position of the number line, and a numerical value NM indicating a value on the number line of the position pointed by the pointer NA are displayed. . The user can move the position of the number line image NS along the direction in which the number line extends. This operation may be performed by a flick operation such as the slide operation ST described above, or may be a drag operation such as the operation DT. In the case of the flick operation, the several straight line image NS may continue to move by inertia even after the flick operation is finished and may be decelerated gradually. When the position of the number line image NS is moved, the position on the number line pointed by the pointer NA changes, and the value of the numerical value NM changes.

  The user moves the number linear image NS at a high speed (in this embodiment, referred to as a first speed) (operation DS1). The destination of the movement is near the target value "777", and in this example, as shown in FIG. 23 (b), the pointer NA is a position pointing to "620".

  The user moves the number linear image NS at a moving speed slower than the first speed and slower than a predetermined first set speed (in this embodiment, the second speed) because the pointer NA approaches the target value “777”. It is called speed) (FIG. 23 (b)). When it is detected in the communication terminal 10 that the moving speed has become slower than the first set speed, the number linear image NS displayed in the window W4 is enlarged as shown in FIG. Change so that the numerical range of is displayed. At this time, it is desirable to expand the number line image NS so that the position on the number line pointed by the pointer NA does not change.

  The user can more closely approach the target value “777” with higher accuracy in the number straight line image NS displayed as shown in FIG. 23C. In this example, the user further moves the number linear image NS at the second speed (operation DS2), and at “745” close to “777”, the moving speed is slower than the predetermined second set speed (this implementation In the form, it is referred to as the third speed) (FIG. 23 (d)).

  When it is detected in the communication terminal 10 that the moving speed has become slower than the second set speed, the number straight line image NS is further enlarged and changed so that a part of the numerical range is displayed as described above. (FIG. 23 (e)). Then, in the number straight line image NS displayed as shown in FIG. 23 (e), the user can more easily approach the target value “777” with higher accuracy than in the case shown in FIG. 23 (c). Then, the user moves the number straight line image NS at the third speed so that the pointer NA points to the target value “777” (operation DS3), and sets “777” to the numerical value NM (FIG. 23 (f)).

  In the above example, although the first set speed and the second set speed exist, the expansion of the numerical range is implemented in two steps, but it may be one step or more steps. It may be divided into In addition, the number linear image NS is stepped stepwise every time the moving number linear image NS stops moving or changes to a predetermined velocity or lower, not in relation to the moving velocity by the first setting velocity, the second setting velocity, etc. The number straight line image NS may be reduced stepwise each time it expands and changes to a predetermined speed or more.

  When operating on the premise that the user knows the target numerical value NM, there is no large shift in the timing to slow the moving speed of the number linear image NS. On the other hand, when the user does not know the target numerical value NM, the user moves the moving speed of the number linear image NS even if the pointer NA points to a distant numerical value (a predetermined value or more away from the target numerical value NM). You may Since it is not necessary to authenticate the user who performs such an operation, the authentication process is stopped. On the other hand, since there may be a case where the user's operation is simply an error, the re-authentication operation may be performed by another authentication method as exemplified in the above-mentioned fifteenth embodiment.

Sixteenth Embodiment
In the sixteenth embodiment, unlike the above embodiments, an example in which user authentication is performed by a method not using an authentication character or a number line image will be described. In this example, the user is authenticated by changing a predetermined image.

  FIG. 24 is a view showing an example of the authentication screen in the sixteenth embodiment of the present invention. In this example, a circle graph DC as shown in FIG. 24 is used for the authentication screen. The pie chart DC is divided by four lines of dividing lines L12, L23, L34, and L14 (hereinafter referred to simply as dividing lines when not distinguished from one another), and four types of divided areas DC1, DC2, DC3, DC4 (Hereafter, they are simply referred to as divided areas when they are not distinguished from each other). The type of divided area is recognized by the color, pattern, etc. in the area. The number of division of the pie chart DC is not limited to four, and may be smaller or larger.

  The user can move the dividing line by the operation. For example, in the circle graph DC shown in FIG. 24A, a portion corresponding to the dividing line L12 is touched and drag operation is performed counterclockwise (in the direction of the arrow) as shown in FIG. This dividing line L12 can be moved. As a result, the divided region DC1 is narrowed and the divided region DC2 is expanded.

  In the sixteenth embodiment, the user moves each dividing line as an authentication operation to change the area of the divided area. And when it becomes arrangement of a division field decided beforehand, it is judged that a user of communication terminal 10 is a valid user. Various input results (arrangement of divided areas) can be set as an input result for determining a valid user. Here, two examples will be described.

FIG. 25 is a diagram for explaining a first example of input results for determining that the user is a valid user in the sixteenth embodiment of the present invention. In this example, division areas of a predetermined type are left and other division areas are deleted. In the example shown in FIG. 25, the division area DC2 is left and the other division areas DC1, DC3 and DC4 are deleted. The divided areas DC1, DC3, and DC4 to be deleted are not limited to 0% in the circle graph DC, and may be determined as deleted if they are equal to or less than a predetermined ratio (for example, 5%). .

  Then, after moving the dividing line, when the above-described authentication button TB1 is operated, an authentication value including a unique value corresponding to the remaining divided area (divided area DC2 in the example of FIG. 25) is generated.

  FIG. 26 is a view for explaining a second example of the input result for determining that the user is a valid user in the sixteenth embodiment of the present invention. In this example, when the divided areas are arranged in descending order of area, they are arranged in a predetermined order. In the example shown in FIG. 26, the divided areas DC3, DC4, DC2, and DC1 are arranged in the order of increasing area.

  Then, after moving the dividing line, when the above-described authentication button TB1 is operated, an authentication value including unique values corresponding to each divided area is generated. In this example, an authentication value including values obtained by arranging the eigenvalues in descending order of area is generated.

  FIG. 27 is a view for explaining allocation information in the sixteenth embodiment of the present invention. As shown in FIG. 27, as in the first embodiment, different values may be allocated to the same divided area for each allocation pattern according to the allocation information, as in the first embodiment.

  In this example, the user authentication is performed using the result of adjusting the size of the divided area included in the pie chart DC, but a band graph or the like divided into a plurality of areas may be used. An operation for adjusting the size or changing the shape of the area of the figure divided into a plurality of areas in this way is an authentication operation, and as a result, an authentication value corresponding to the area, shape, etc. of each area is generated You should do it.

DESCRIPTION OF SYMBOLS 1 ... Authentication system, 1B ... Financial transaction system, 10 ... Communication terminal, 11 ... Control part, 12 ... Acceleration sensor, 14 ... Display, 16 ... Touch sensor, 18 ... Communication module, 20 ... Authentication device, 21 ... Control part, 28: communication module, 111: display control unit, 113: selection unit, 115: message generation unit, 117: storage unit, 119: unique value assignment unit, 162: input reception unit, 181: transmission unit, 182: reception unit, 215 ... authentication unit 217 storage unit 219 instruction information generation unit 281 transmission unit 282 reception unit 25 transaction unit 50 financial transaction apparatus 101 pointing device

Claims (3)

A numerical designation image for specifying a numerical value is displayed on a display, and a numerical value designation operation of the numerical designation image is changed by a user's numerical value change operation on the display, and the numerical value is changed by the numerical value change operation by the user A display control unit that continues changing the numerical value after expanding a part of the numerical value designation image when the speed is lower than a predetermined speed;
A generation unit that generates a message based on the numerical value when the numerical value is specified by the numerical value specifying image;
The program for making a computer function as a transmission part which transmits the said message which requests | requires an authentication process to a server. When the numerical value designated when expanding a part of the numerical value designation image is separated from a predetermined numerical value by a predetermined value or more, the request for the authentication process by the designated numerical value is canceled. The program according to claim 1. Display a numerical specification image for specifying a numerical value on the display,
Changing a numerical value designated by the numerical value designation image by a user's numerical value change operation on the display;
When the rate of change of the numerical value by the numerical value change operation by the user becomes slower than a predetermined speed, after changing a part of the numerical value designation image, the change of the numerical value is continued.
When the numerical value is designated by the numerical value designation image, a message is generated based on the numerical value,
A message generation method including transmitting the message for requesting an authentication process to a server.

Images