JP2020201595A - Program of login authentication system, and login authentication system - Google Patents

Abstract

To provide a program of a login authentication system capable of increasing a security level as compared with a configuration having only an input of an ID and a password.SOLUTION: The program of a login authentication system includes a photographing step S1 for performing photographing by using a camera of a user terminal, an ID and password determination step S2 for determining whether a user ID and a login password inputted in a user terminal are registered, a probability value acquisition step S3 for comparing photographed image data with face photograph data registered in advance by image authentication means to acquire a possibility of the same person as a numeric value, a user determination step S4 for determining whether the numeric value of the possibility of the same person is equal to or more than a prescribed value, and a login permission step S5 for permitting a requirement determination step for determining whether to satisfy both a prescribed requirement of S2 and a prescribed requirement of S4, and a login when satisfying both.SELECTED DRAWING: Figure 2

Description

The present invention relates to a login authentication system that permits login when input data satisfies a predetermined requirement when a user terminal accesses a server, and a login authentication system program.

Conventionally, it is provided with a takeover information storage unit that stores takeover information and a control unit connected to a user terminal and a related server. When the control unit receives a login request from the user terminal, the authentication information acquired from the user terminal is stored. When the first authentication process is executed to allow login and a transition request from the logged-in user terminal to the related server is acquired, the takeover information is generated, recorded in the takeover information storage unit, and sent to the related server. When the takeover information is provided and the takeover information is acquired from the related server, a password is generated and recorded in the takeover information storage unit, provided to the related server, and a re-login request is received from the user terminal. Login management characterized in that the takeover information and password are acquired from the related server, and the second authentication process is executed using the takeover information and password recorded in the takeover information storage unit and the acquired takeover information and password. The system is known (eg, Patent Document 1).

Japanese Patent No. 6495996 (see in particular, claims 1 and 11).

However, the conventional login management system described above has a problem that the security level is not sufficient because it is configured to execute the first authentication process and allow login.
For example, even if the login password is valid for only one hour, there is a problem that it cannot be dealt with when the user ID and the login password are stolen and used within one hour.

Therefore, the present invention solves the problems of the prior art as described above, that is, the object of the present invention is a login authentication system capable of increasing the security level as compared with the configuration of only ID / password input. Program and login authentication system.

The invention according to claim 1 is a program of a login authentication system that permits login when the input data meets a predetermined requirement when the user terminal accesses the server, and the user uses the camera of the user terminal. The shooting step of shooting the face of the person, the probability value acquisition step of comparing the shot image data and the face photo data of the user registered in advance by the image authentication means to obtain the possibility of the same person numerically, and the same person When the user determination step of determining whether or not the photographed user is a registered user by determining whether or not the numerical value of the possibility of the same person is equal to or more than the predetermined value and the numerical value of the possibility of the same person is equal to or more than the predetermined value. , The above-mentioned problem is solved by providing the login permission step for permitting the login of the user terminal.

The invention according to claim 2 is a login authentication system program that permits login when the input data meets a predetermined requirement when the user terminal accesses the server, and the user uses the camera of the user terminal. A shooting step for photographing the face of the user, and an ID / password determination step for determining whether or not the user-specific information and the user login password information input on the user terminal are the user-specific information and the user login password information registered in advance. , The probability value acquisition step of comparing the captured image data and the user's face photo data registered in advance by the image authentication means to obtain the possibility of the same person numerically, and the numerical value of the possibility of the same person are predetermined values. A user determination step for determining whether or not the photographed user is a registered user by determining whether or not the above is true, a predetermined requirement for user-specific information and a user login password in the ID / password determination step, and user determination. It includes a requirement determination step for determining whether or not both of the predetermined requirements for face authentication of the registered user in the step are satisfied, and a login permission step for permitting login of the user terminal when both of the above are satisfied. This solves the above-mentioned problems.

According to the third aspect of the present invention, in addition to the configuration of the login authentication system program according to the first or second aspect, the image data in which the image data photographed in the photographing step is discarded after the login permission step. By further providing a discard step, the above-mentioned problems are further solved.

In the invention according to claim 4, in addition to the configuration of the login authentication system program according to any one of claims 1 to 3, a predetermined value in the user determination step is set by the system administrator. The flexible configuration further solves the above-mentioned problems.

The invention according to claim 5 is a login authentication system program that permits login when the input data satisfies a predetermined requirement when the user terminal accesses the server, and the user uses the camera of the user terminal. A reading step for reading the two-dimensional code of the above, a two-dimensional code determination step for determining whether or not the read two-dimensional code information is user information registered in advance, and the read two-dimensional code information are registered in advance. The above-mentioned problem is solved by providing a login permission step for permitting login of the user terminal when it is determined that the user information has been obtained.

The invention according to claim 6 is a login authentication system program that permits login when the input data satisfies a predetermined requirement when the user terminal accesses the server, and the user uses the camera of the user terminal. A reading step for reading the two-dimensional code of the above, and an ID / password determination step for determining whether the user-specific information and the user login password information entered in the user terminal are the user-specific information and the user login password information registered in advance. A two-dimensional code determination step for determining whether or not the read two-dimensional code information is pre-registered user information, a predetermined requirement for user-specific information and a user login password in the ID / password determination step, and 2. A requirement determination step for determining whether or not both predetermined requirements for user information in the two-dimensional code determination step are satisfied, and a login permission step for permitting login of the user terminal when both of the above are satisfied are provided. By doing so, the above-mentioned problems are solved.

The invention according to claim 7 is a login authentication system that permits login when input data satisfies a predetermined requirement when a user terminal accesses a server, and the control unit of the user terminal or the server is the same. The user's face is photographed using the camera of the user terminal, and the photographed image data and the user's face photograph data registered in advance are compared by an image authentication means to obtain the possibility of the same person numerically and the same. It is determined whether or not the photographed user is a registered user by determining whether or not the numerical value of the possibility of the person is equal to or more than the predetermined value, and when the numerical value of the possibility of the same person is equal to or more than the predetermined value, the user terminal The above-mentioned problem is solved by the configuration that allows login.

The invention according to claim 8 is a login authentication system that permits login when the input data satisfies a predetermined requirement when the user terminal accesses the server, and the control unit of the user terminal or the server is the same. The user's face is photographed using the camera of the user terminal, and it is determined whether the user-specific information and user login password information entered on the user terminal are pre-registered user-specific information and user login password information, and then photographed. The logged-in image data and the user's face photo data registered in advance are compared by an image authentication means to obtain the possibility of the same person numerically, and it is determined whether or not the numerical value of the possibility of the same person is equal to or higher than a predetermined value. By doing so, it is determined whether or not the photographed user is a registered user, and whether or not both the predetermined requirements for user-specific information and user login password and the prescribed requirements for face authentication of registered users are satisfied. , The above-mentioned problems are solved by the configuration that allows the login of the user terminal when both are satisfied.

The invention according to claim 9 is a login authentication system that permits login when the input data satisfies a predetermined requirement when the user terminal accesses the server, and the control unit of the user terminal or the server is the same. The user's 2D code is read using the camera of the user terminal, it is determined whether the read 2D code information is the user information registered in advance, and when it is determined that it is the user information, the login of the user terminal is performed. By having a configuration that allows the above-mentioned problems, the above-mentioned problems are solved.

The invention according to claim 10 is a login authentication system that permits login when the input data satisfies a predetermined requirement when the user terminal accesses the server, and the control unit of the user terminal or the server is the same. The user's two-dimensional code is read using the camera of the user terminal, and it is determined whether the user-specific information and user login password information entered in the user terminal are pre-registered user-specific information and user login password information. It is determined whether or not the read two-dimensional code information is user information registered in advance, and whether or not both the predetermined requirements for user-specific information and user login password and the predetermined requirements for user information are satisfied. The above-mentioned problem is solved by the configuration in which the login of the user terminal is permitted when the determination is made and both are satisfied.

According to the login authentication system program of the invention according to claim 1, since input of face image data is required, the security level can be enhanced as compared with a configuration in which only ID / password input is performed.

According to the login authentication system program of the invention according to claim 2, the input of face image data is required in addition to the ID / password input, resulting in so-called two-factor authentication. Therefore, only the ID / password input is configured. The security level can be increased compared to.
For example, if the login password is valid for only one hour and the user ID and login password are stolen and used within one hour, image authentication is performed unless the person trying to log in (the stolen person) is the registered user. Because it is judged by, it is possible to block unauthorized login by the thief.

According to the login authentication system program of the invention according to claim 3, in addition to the effect of the invention according to claim 1 or 2, the image data used for login is destroyed after login, so that the image data used for login is destroyed again. It is possible to prevent unauthorized login by being used.
That is, the security level can be further increased by inputting the face image data as a one-time so-called one-time authentication code, and stronger security can be realized.

According to the login authentication system program of the invention according to claim 4, in addition to the effect of the invention according to any one of claims 1 to 3, a predetermined value is set relatively high. Since face recognition is performed only when the photographed user's face has a relatively high probability (probability) of being the same person as the face of the registered user's face photo data, the security level can be relatively high.

According to the login authentication system program of the invention according to claim 5, since the user is required to input the two-dimensional code, the security level can be enhanced as compared with the configuration of only inputting the ID and password.

According to the login authentication system program of the invention according to claim 6, the user is required to input a two-dimensional code in addition to the ID / password input, which is so-called two-factor authentication. Therefore, only the ID / password input is required. The security level can be increased compared to the configuration.

According to the login authentication system of the invention of claim 7, the input of face image data is required as in the effect of the invention of claim 1, so that the security is compared with the configuration of only ID / password input. You can raise the level.

According to the login authentication system of the invention of claim 8, similar to the effect of the invention of claim 2, input of face image data is required in addition to ID / password input, so-called two-factor authentication. Therefore, the security level can be increased as compared with the configuration in which only the ID / password is input.

According to the login authentication system of the invention of claim 9, similar to the effect of the invention of claim 5, the user is required to input the two-dimensional code. Therefore, as compared with the configuration of only inputting the ID and password. The security level can be increased.

According to the login authentication system of the invention of claim 10, as in the effect of the invention of claim 6, the user is required to input a two-dimensional code in addition to the ID / password input, so-called two-factor authentication. Therefore, the security level can be increased as compared with the configuration in which only the ID / password is input.

The figure which shows the outline of the login authentication system which is 1st Example of this invention. The chart which shows the operation of the program of the login authentication system which is 1st Example of this invention. (A) is image data taken at the time of login of the login authentication system according to the first embodiment of the present invention, (B) is user's face photograph data registered in advance, and (C) is an image. The figure which shows the example of the probability of being the same person calculated by the authentication means. The figure which shows the outline of the login authentication system which is 2nd Example of this invention. The chart which shows the operation of the program of the login authentication system which is 2nd Embodiment of this invention. The figure which shows the outline of the login authentication system which is 3rd Example of this invention. The chart which shows the operation of the program of the login authentication system which is the 3rd Example of this invention. The figure which shows the outline of the login authentication system which is 4th Example of this invention. The chart which shows the operation of the program of the login authentication system which is 4th Embodiment of this invention.

The program of the login authentication system of the present invention compares the shooting step of shooting the user's face using the camera of the user terminal with the shot image data and the user's face photo data registered in advance by the image authentication means. A user judgment that determines whether or not the photographed user is a registered user by determining whether or not the numerical value of the possibility of the same person is equal to or higher than a predetermined value and the probability value acquisition step of obtaining the possibility of the same person numerically. By providing a step and a login permission step that permits login of the user terminal when the numerical value of the possibility of the same person is equal to or higher than a predetermined value, the security level can be improved as compared with the configuration in which only ID / password input is performed. Any specific embodiment thereof may be used as long as it can be enhanced.
Further, the program of the login authentication system of the present invention has a reading step of reading the user's two-dimensional code using the camera of the user terminal, and determines whether or not the read two-dimensional code information is user information registered in advance. The ID is provided by providing a two-dimensional code determination step to be performed and a login permission step that permits login of the user terminal when it is determined that the read two-dimensional code information is the user information registered in advance. -Any specific embodiment may be used as long as the security level can be increased as compared with the configuration of only password input.
The login authentication system has a user terminal and a server, and the control unit of the user terminal or the server photographs the user's face using the camera of the user terminal, and the photographed image data and the user's face registered in advance are used. Whether or not the photographed user is a registered user by comparing the photo data with the image authentication means to obtain the possibility of the same person numerically and determining whether or not the numerical value of the possibility of the same person is equal to or higher than a predetermined value. When the value of the possibility of the same person is equal to or higher than the predetermined value, the security level can be increased as compared with the configuration in which only the ID / password is input by the configuration that allows the user terminal to log in. As long as it is, the specific embodiment may be any.
Further, the login authentication system has a user terminal and a server, and the control unit of the user terminal or the server reads the user's two-dimensional code using the camera of the user terminal, and the read two-dimensional code information is obtained in advance. When it is determined whether it is registered user information or not, and when it is determined that it is user information, the security level can be increased compared to the configuration in which only ID / password input is performed by the configuration that allows login of the user terminal. Any specific embodiment may be used as long as it can be used.
The present invention is not limited to the so-called one authentication of the user's face authentication or the user's two-dimensional code authentication, but may be a so-called two-authentication configuration in which the face authentication or the user's two-dimensional code authentication and the ID / password authentication are used together. ..

For example, a user terminal has a camera, a display unit, and an operation unit, such as a desktop personal computer terminal, a notebook personal computer terminal, a smartphone terminal, and a tablet terminal, and transmits / receives information on the so-called Internet. Any communication network including a wide area network, a local network, a telephone line, etc. may be used as long as it can be connected to a server.
Further, the server may be one server or a plurality of servers on the cloud.
In addition, the concept of the login authentication system program includes not only the application software of the login authentication system itself, but also an add-on program for adding the login authentication system (application software) that extends the functions of the login authentication system (application software) (hereinafter referred to as "application software"). An additional add-on program) shall be included.

The program of the login authentication system 100, which is the first embodiment of the present invention, will be described below with reference to FIGS. 1 to 3 (C).
Here, FIG. 1 is a diagram showing an outline of the login authentication system 100 which is the first embodiment of the present invention, and FIG. 2 is a diagram showing the operation of the program of the login authentication system 100 which is the first embodiment of the present invention. 3 (A) is an image data PT1 taken by the camera 114 when logging in to the login authentication system 100 according to the first embodiment of the present invention, and FIG. 3 (B) is a preliminary chart. It is the face photograph data PT2 of the user registered in, and FIG. 3C is a diagram showing an example of the probability of being the same person calculated by the image authentication means.

As shown in FIG. 1, the login authentication system 100 according to the first embodiment of the present invention includes a computer terminal 110, which is an example of a user terminal, and a server 120.
Then, when the user's computer terminal 110 accesses the server 120, it is determined whether or not the input data satisfies a predetermined requirement, and if the input data is satisfied, login is permitted.
The computer terminal 110 includes a display unit 111, an operation unit 113, and a camera 114.
Of these, the display unit 111 displays the browser and displays the login screen 112 on the browser when the user logs in.
As an example, the login screen 112 is configured to display a user ID input field 112a, a password input field 112b, a camera shooting video field 112c, a shooting button 112d, and a login button 112e.

The user operates the keyboard of the operation unit 113 to input the e-mail address registered in advance as an example of the user-specific information which is the user ID in the user ID input field 112a.
Similarly, the user login password information registered in advance is input in the password input field 112b.
Here, when the login screen 112 is displayed, the camera 114 is activated and the user sitting in front of the computer terminal 110 is projected on the camera shooting image field 112c.
When the user operates the shooting button 112d by clicking the mouse or the like, the camera 114 shoots the user as a still image, and the shot image data PT1 is displayed in the camera shooting video field 112c.
Then, when the user confirms the camera-captured image field 112c and determines that the image data PT1 is sufficient, he / she operates the login button 112e by clicking the mouse or the like.

Here, in this embodiment, the control unit of the user's computer terminal 110 or the server 120 photographs the user's face using the camera 114 of the user's computer terminal 110.
Further, it is determined whether or not the user-specific information and the user login password information input in the user's computer terminal 110 are the user-specific information and the user login password information registered in advance.
Further, the photographed image data PT1 and the user's face photograph data PT2 registered in advance are compared with each other by, for example, an image authentication means on a cloud server to obtain the possibility of the same person numerically, and the possibility of the same person is obtained. It is determined whether or not the photographed user is a registered user by determining whether or not the numerical value of is equal to or greater than a predetermined value.

Then, it is determined whether or not both the predetermined requirements for the user-specific information and the user login password and the predetermined requirements for the face authentication of the registered user are satisfied, and when both are satisfied, the user's computer terminal 110 is logged in. It is configured to allow.
As a result, in addition to the ID / password input, the input of the face image data PT1 is required, resulting in so-called two-factor authentication.
As a result, the security level can be increased as compared with the configuration in which only the ID / password is input.

Subsequently, the operation of the program of the login authentication system 100 will be described in more detail.
As shown in FIG. 2, in step S1, as a shooting step, the user's face is photographed using the camera 114 of the user's computer terminal 110.
For example, as shown in FIG. 3A, the photographed image data PT1 shows the user's face.
Although it has been explained that the user operates the shooting button 112d as a trigger to shoot, the shooting may be performed as a still image every 2 seconds as an example of a predetermined time without the user's operation, or a moving image is shot. It may be configured to be used.

In step S2, as an ID / password determination step, whether or not the user-specific information and the user login password information input in the user's computer terminal 110 are the user-specific information and the user login password information registered in advance is determined by the computer terminal 110. Alternatively, the control unit of the server 120 (program of the login authentication system 100) determines.
If it is determined that it is registered, the process proceeds to step S3, and if it is determined that it is not registered, the process proceeds to step S7.

For example, suppose that the user who wants to log in is Mr. Suzuki, and Mr. Suzuki, who is the user, inputs Mr. Suzuki's ID (user-specific information) and password (user login password information) registered in advance.
Then, when the login button 112e is operated, whether or not the entered ID (user-specific information) and password (user login password information) match the user-specific information and user login password registered in advance, respectively. , The control unit (program of the login authentication system 100) of the computer terminal 110 or the server 120 determines.

In step S3, as a probability value acquisition step, the photographed image data PT1 and the user's face photograph data PT2 registered in advance are compared by an image authentication means, and the possibility of the same person is obtained numerically.
The image authentication means is provided on, for example, a cloud server (server 120), and the captured image data PT1 (see FIG. 3 (A)) uploaded from the user's computer terminal 110 and the user's face registered in advance. It is configured to numerically calculate the possibility of the same person by comparing with the photographic data PT2 (see FIG. 3B).
For example, as shown in FIG. 3B, it is assumed that the face photo data PT2 showing the face of the user: Mr. Suzuki is registered in advance in the login authentication system 100.

As an example, the image authentication means identifies the position of the eyes of the face, the position of the nose, the position of the mouth, and the position of the eyebrows in each data.
Next, the shape of the eyes (including the eyelids), the shape of the nose, the shape of the mouth, the shape of the eyebrows, the contour of the face, and the like are specified.
It is determined how much these elements are common, and the uploaded photographed image data PT1 (see FIG. 3 (A)) is the face photograph data PT2 of the user registered in advance (FIG. 3 (Fig. 3 (A)). B) Calculate the possibility of the same person as Mr. Suzuki).
For example, as shown in FIG. 3 (C), it is calculated as "the probability that the photographed person is a registered user: Mr. Suzuki".
Then, the control unit (program of the login authentication system 100) of the computer terminal 110 or the server 120 acquires the value "91" of this probability.

In step S4, as a user determination step, the control unit of the computer terminal 110 or the server 120 determines whether or not the photographed user is a registered user by determining whether or not the numerical value of the possibility of the same person is equal to or greater than a predetermined value. The program of the login authentication system 100) determines.
If it is determined that the value is equal to or greater than the predetermined value, the process proceeds to step S5, and if it is determined that the value is not equal to or more than the predetermined value, the process proceeds to step S7.
For example, it is assumed that the acquired probability value is "91" and the predetermined value registered in advance is "90".
In this case, the acquired probability value "91" is compared with the pre-registered predetermined value "90", and the acquired probability value "91" is greater than or equal to the pre-registered predetermined value "90". Judgment is made, and it is determined that the photographed user is the registered user: Mr. Suzuki himself.

In step S5, as a requirement determination step, whether or not both the predetermined requirements for the user-specific information and the user login password in the ID / password determination step S2 and the predetermined requirements for the face authentication of the registered user in the user determination step S4 are satisfied. The control unit (program of the login authentication system 100) of the computer terminal 110 or the server 120 determines whether or not.
Then, when both are satisfied, the login of the user's computer terminal 110 is permitted as a login permission step.
As a result, as described above, in addition to the ID / password input, the input of the face image data PT1 is required, resulting in so-called two-factor authentication.
As a result, the security level can be increased as compared with the configuration in which only the ID / password is input.

In step S6, as an image data destruction step, the control unit (program of the login authentication system 100) of the computer terminal 110 or the server 120 discards the image data PT1 captured in the shooting step S1.
As a result, after login, the image data PT1 used for login is destroyed.
As a result, it is possible to prevent the user from being reused and being logged in illegally.
That is, the security level can be further increased by inputting the face image data PT1 as a one-time so-called one-time authentication code, and stronger security can be realized.
In step S7, the control unit (program of the login authentication system 100) of the computer terminal 110 or the server 120 rejects the login of the user's computer terminal 110.
Then, the process proceeds to step S6, and the image data PT1 is discarded.

The predetermined value in the user determination step S4 is freely set by the system administrator.
For example, on an administrator screen (not shown), a predetermined value in the user determination step S4 is freely changed.
As a result, for example, only when the probability (probability) that the user's face taken by setting a predetermined value to be relatively high is the same person as the face of the registered user's face photo data PT2 is relatively high. Face recognition.
As a result, the security level can be reasonably relatively high.
For example, if one of the twins of an identical twin tries to impersonate the other and tries to log in, in addition to not knowing the password of the other of the twins in the first place, the probability of being the same person is less than a predetermined value and trying to log in. It is determined that the user who is present is not the same person as the registered user.
On the other hand, by setting the predetermined value to a relatively low value, the makeup is darker than the face shown in the user's face photo data PT2 registered in advance, the makeup is changed, or the contact lens is changed. Even if the person is changed, the probability of being the same person is equal to or higher than a predetermined value, and the user who is trying to log in is determined to be a registered user.

In this embodiment, in order to make the invention easier to understand, the configuration in which the ID / password determination step S2, which is the authentication by the ID / password, is first performed, and then the user determination step S4, which is the face authentication, is performed. It is not limited to this order.
The order of the ID / password determination step S2 and the user determination step S4 may be reversed, or the ID / password determination step S2 and the user determination step S4 may be performed at the same time.

The program of the login authentication system 100, which is the first embodiment of the present invention thus obtained, includes a shooting step S1 of shooting a user's face using a camera 114 of a computer terminal 110, which is an example of a user terminal. ID / password determination step S2 for determining whether the user-specific information and user login password information input on the user's computer terminal 110 are pre-registered user-specific information and user login password information, and captured image data PT1. And the probability value acquisition step S3 in which the user's face photo data PT2 registered in advance is compared by an image authentication means to obtain the possibility of the same person numerically, and whether or not the numerical value of the possibility of the same person is equal to or higher than a predetermined value. A user determination step S4 for determining whether or not the photographed user is a registered user, a predetermined requirement for user-specific information and a user login password in the ID / password determination step S2, and a user determination step S4. Includes a requirement determination step S5 for determining whether or not both of the predetermined requirements for face authentication of the registered user in the above are satisfied, and a login permission step S5 for permitting the user to log in to the computer terminal 110 when both are satisfied. As a result, the security level can be increased as compared with the configuration in which only the ID / password is input.

Further, after the login permission step S5, the image data discard step S6 for discarding the image data PT1 captured in the shooting step S1 is further provided, so that the face image is used as a one-time so-called one-time authentication code. By inputting the data PT1, the security level can be further increased and stronger security can be realized.

Further, since the predetermined value in the user determination step S4 has a configuration that can be freely set by the system administrator, the security level can be appropriately adjusted.

Further, the login authentication system 100 according to the first embodiment of the present invention includes the user's computer terminal 110 and the server 120, and the control unit of the user's computer terminal 110 or the server 120 is the camera 114 of the user's computer terminal 110. The user's face was photographed using, and it was determined whether or not the user-specific information and the user login password information entered in the user's computer terminal 110 were the user-specific information and the user login password information registered in advance, and the photograph was taken. The image data PT1 and the user's face photo data PT2 registered in advance are compared by an image authentication means to obtain the possibility of the same person numerically, and whether or not the numerical value of the possibility of the same person is equal to or higher than a predetermined value. By determining, it is determined whether or not the photographed user is a registered user, and whether or not both the predetermined requirements for user-specific information and user login password and the predetermined requirements for face authentication of registered users are satisfied. However, when both are satisfied, the configuration that allows the user to log in to the computer terminal 110 can increase the security level as compared with the configuration that only inputs the ID and password, and the effect is enormous.

Subsequently, the login authentication system 100, which is the second embodiment of the present invention, will be described with reference to FIGS. 4 and 5.
Here, FIG. 4 is a diagram showing an outline of the login authentication system 100 which is the second embodiment of the present invention, and FIG. 5 is a diagram showing the operation of the program of the login authentication system 100 which is the second embodiment of the present invention. It is a chart diagram which shows.
The login authentication system 100 of the second embodiment is obtained by changing the two-element authentication of ID / password authentication and face authentication in the login authentication system 100 of the first embodiment to one-element authentication of face authentication only, and for many elements. Since it is common to the login authentication system 100 of the first embodiment, detailed description of common matters will be omitted.

As shown in FIG. 4, the login authentication system 100 according to the second embodiment of the present invention includes a computer terminal 110, which is an example of a user terminal, and a server 120.
Then, the control unit of the user's computer terminal 110 or the server 120 takes a picture of the user's face using the camera 114 of the user's computer terminal 110.
Further, the captured image data PT1 and the user's face photograph data PT2 registered in advance are compared by an image authentication means to obtain the possibility of the same person numerically, and the numerical value of the possibility of the same person is equal to or more than a predetermined value. By determining whether or not the photographed user is a registered user or not.
Then, when the numerical value of the possibility of the same person is equal to or more than a predetermined value, the user is configured to allow the login of the computer terminal 110.
As a result, input of face image data PT1 is required.
As a result, the security level can be increased as compared with the configuration in which only the ID / password is input.

Subsequently, the operation of the program of the login authentication system 100 will be described in more detail.
As shown in FIG. 5, in step S11, as a shooting step, the user's face is photographed using the camera 114 of the user's computer terminal 110 as in step S1 described above.
In step 12, as the probability value acquisition step, as in step S3 described above, the photographed image data PT1 and the user's face photograph data PT2 registered in advance are compared by the image authentication means, and the possibility of the same person is numerically calculated. Get in.

In step S13, as a user determination step, as in S4 described above, the computer terminal 110 or the computer terminal 110 determines whether or not the photographed user is a registered user by determining whether or not the numerical value of the possibility of the same person is equal to or more than a predetermined value. The control unit of the server 120 (program of the login authentication system 100) determines.
If it is determined that the value is equal to or greater than the predetermined value, the process proceeds to step S14, and if it is determined that the value is not equal to or greater than the predetermined value, the process proceeds to step S16.
In step S14, the login of the user's computer terminal 110 is permitted as a login permission step.

In step S15, as an image data destruction step, the control unit (program of the login authentication system 100) of the computer terminal 110 or the server 120 discards the image data PT1 captured in the photographing step S11, as in the above-described step S6.
In step S16, the control unit (program of the login authentication system 100) of the computer terminal 110 or the server 120 rejects the login of the user's computer terminal 110.
Then, the process proceeds to step S15, and the image data PT1 is discarded.

The program of the login authentication system 100, which is the second embodiment of the present invention thus obtained, includes a shooting step S11 for shooting the user's face using the camera 114 of the user's computer terminal 110, and the shot image data. Probability value acquisition step S12 in which PT1 and the user's face photo data PT2 registered in advance are compared by an image authentication means to obtain the possibility of the same person numerically, and whether the numerical value of the possibility of the same person is equal to or higher than a predetermined value. User determination step S13, which determines whether or not the photographed user is a registered user by determining whether or not the image is taken, and when the numerical value of the possibility of the same person is equal to or greater than a predetermined value, the user is allowed to log in to the computer terminal 110. By providing the login permission step S14 to be performed, the security level can be increased as compared with the configuration in which only the ID / password is input.

Further, the login authentication system 100 according to the second embodiment of the present invention includes the user's computer terminal 110 and the server 120, and the control unit of the user's computer terminal 110 or the server 120 is the camera 114 of the user's computer terminal 110. The user's face is photographed using, and the photographed image data PT1 and the user's face photograph data PT2 registered in advance are compared by an image authentication means to obtain the possibility of the same person numerically, and the same person's face is obtained. It is determined whether or not the photographed user is a registered user by determining whether or not the numerical value of the possibility is equal to or greater than the predetermined value, and when the numerical value of the possibility of the same person is equal to or greater than the predetermined value, the user's computer terminal 110 The effect is enormous, such as the security level can be increased as compared with the configuration in which only the ID / password is input by the configuration that allows the login of the computer.

Subsequently, the login authentication system 100, which is the third embodiment of the present invention, will be described with reference to FIGS. 6 and 7.
Here, FIG. 6 is a diagram showing an outline of the login authentication system 100 which is the third embodiment of the present invention, and FIG. 7 is a diagram showing the operation of the program of the login authentication system 100 which is the third embodiment of the present invention. It is a chart diagram which shows.
The login authentication system 100 of the third embodiment is a modification of the face authentication in the login authentication system 100 of the second embodiment to two-dimensional code authentication, and the login authentication system 100 and the first embodiment of the first embodiment have many elements. Since it is common to the login authentication system 100 of the two examples, detailed description of common matters will be omitted.

As shown in FIG. 6, the login authentication system 100 according to the third embodiment of the present invention includes a computer terminal 110 and a server 120, which are examples of user terminals.
Then, the control unit of the user's computer terminal 110 or the server 120 reads the user's two-dimensional code CD using the camera 114 of the user's computer terminal 110.
Here, the control unit of the user's computer terminal 110 or server 120 has a program for reading a two-dimensional code CD.
The user's two-dimensional code CD may be, for example, one displayed on the user's smartphone terminal or may be written on a name holder hung from the user's neck.
Further, it is determined whether or not the information of the read two-dimensional code CD is the user information registered in advance.

Then, when it is determined that the information is user information, it is configured to allow the user to log in to the computer terminal 110.
As a result, the user is required to input the two-dimensional code CD.
As a result, the security level can be increased as compared with the configuration in which only the ID / password is input.

Subsequently, the operation of the program of the login authentication system 100 will be described in more detail.
As shown in FIG. 7, in step S21, as a reading step, the user's two-dimensional code CD is read using the camera 114 of the user's computer terminal 110.
In step S22, as a two-dimensional code determination step, the control unit (program of the login authentication system 100) of the computer terminal 110 or the server 120 determines whether or not the read two-dimensional code CD information is user information registered in advance. judge.
If it is determined that the information is user information, the process proceeds to step S23, while if it is determined that the information is not, the process proceeds to step S24.
In step S23, the login of the user's computer terminal 110 is permitted as a login permission step.
In step S24, the control unit (program of the login authentication system 100) of the computer terminal 110 or the server 120 rejects the login of the user's computer terminal 110.

The program of the login authentication system 100, which is the third embodiment of the present invention thus obtained, was read in the reading step S21 for reading the user's two-dimensional code CD using the camera 114 of the user's computer terminal 110. When the 2D code determination step S22 for determining whether or not the information on the 2D code CD is pre-registered user information and when it is determined that the read 2D code CD information is pre-registered user information. By providing the login permission step S23 for permitting the login of the user's computer terminal 110, the security level can be increased as compared with the configuration in which only the ID / password is input.

Further, the login authentication system 100 according to the third embodiment of the present invention includes the user's computer terminal 110 and the server 120, and the control unit of the user's computer terminal 110 or the server 120 is the camera 114 of the user's computer terminal 110. The user's two-dimensional code CD is read using, and it is determined whether or not the information of the read two-dimensional code CD is the user information registered in advance. When it is determined that the user information is the user information, the user's computer terminal 110 Since the configuration allows login, the security level can be increased as compared with the configuration in which only the ID / password is input, and the effect is enormous.

Subsequently, the login authentication system 100, which is the fourth embodiment of the present invention, will be described with reference to FIGS. 8 and 9.
Here, FIG. 8 is a diagram showing an outline of the login authentication system 100 according to the fourth embodiment of the present invention, and FIG. 9 shows the operation of the program of the login authentication system 100 according to the fourth embodiment of the present invention. It is a chart diagram which shows.
The login authentication system 100 of the fourth embodiment is a modification of the face authentication in the login authentication system 100 of the first embodiment to two-dimensional code authentication, and the login authentication system 100 to the first of the first embodiment for many elements. Since it is common to the login authentication system 100 of the third embodiment, detailed description of common matters will be omitted.

As shown in FIG. 8, the login authentication system 100 according to the third embodiment of the present invention includes a computer terminal 110, which is an example of a user terminal, and a server 120.
Then, the control unit of the user's computer terminal 110 or the server 120 reads the user's two-dimensional code CD using the camera 114 of the user's computer terminal 110.
Further, it is determined whether or not the user-specific information and the user login password information input in the user's computer terminal 110 are the user-specific information and the user login password information registered in advance.

Further, it is determined whether or not the information of the read two-dimensional code CD is the user information registered in advance.
Then, it is determined whether or not both the predetermined requirements for the user-specific information and the user login password and the predetermined requirements for the user information are satisfied, and when both are satisfied, the login of the user's computer terminal 110 is permitted. It is configured in.
As a result, in addition to the ID / password input, the user is required to input the two-dimensional code CD, resulting in so-called two-factor authentication.
As a result, the security level can be increased as compared with the configuration in which only the ID / password is input.

Subsequently, the operation of the program of the login authentication system 100 will be described in more detail.
As shown in FIG. 9, in step S31, as a reading step, the user's two-dimensional code CD is read using the camera 114 of the user's computer terminal 110, as in step S21 described above.

In step S32, as the ID / password determination step, as in step S2 described above, whether the user-specific information and user login password information entered in the user's computer terminal 110 are the user-specific information and user login password information registered in advance. Whether or not it is determined by the control unit (program of the login authentication system 100) of the computer terminal 110 or the server 120.
If it is determined that it is registered, the process proceeds to step S33, and if it is determined that it is not, the process proceeds to step S35.

In step S33, as the two-dimensional code determination step, as in step S22 described above, the control unit (login) of the computer terminal 110 or the server 120 determines whether or not the read two-dimensional code CD information is user information registered in advance. The program of the authentication system 100) determines.
If it is determined that the information is user information, the process proceeds to step S34, and if it is determined that the information is not, the process proceeds to step S35.

In step S34, as the requirement determination step, as in step S5 described above, the predetermined requirements for the user-specific information and the user login password in the ID / password determination step S32 and the predetermined requirements for the user information in the two-dimensional code determination step S33. The control unit (program of the login authentication system 100) of the computer terminal 110 or the server 120 determines whether or not both of the above conditions are satisfied.
Then, when both are satisfied, the login of the user's computer terminal 110 is permitted as a login permission step.
As a result, as described above, the user is required to input the two-dimensional code CD in addition to the ID / password input, resulting in so-called two-factor authentication.
As a result, the security level can be increased as compared with the configuration in which only the ID / password is input.
In step S35, the control unit (program of the login authentication system 100) of the computer terminal 110 or the server 120 rejects the login of the user's computer terminal 110.

In this embodiment, in order to make the invention easier to understand, the configuration is such that the ID / password determination step S32, which is the authentication by the ID / password, is first performed, and then the two-dimensional code determination step S33, which is the two-dimensional code authentication, is performed. As explained, the order is not limited to this.
The order of the ID / password determination step S32 and the two-dimensional code determination step S33 may be reversed, or the ID / password determination step S32 and the two-dimensional code determination step S33 may be performed at the same time.
Further, the order of the reading step S31 may be before the two-dimensional code determination step S33, and may be after the ID / password determination step S32.

The program of the login authentication system 100, which is the fourth embodiment of the present invention thus obtained, includes a reading step S31 for reading the user's two-dimensional code CD using the camera 114 of the user's computer terminal 110, and the user's program. ID / password determination step S32 for determining whether the user-specific information and user login password information input in the computer terminal 110 are the user-specific information and user login password information registered in advance, and the read two-dimensional code CD. The two-dimensional code determination step S33 for determining whether or not the information is pre-registered user information, the predetermined requirements for the user-specific information and the user login password in the ID / password determination step S32, and the two-dimensional code determination step S33. The requirement determination step S34 for determining whether or not both of the predetermined requirements for the user information in the above are satisfied, and the login permission step S34 for permitting the user to log in to the computer terminal 110 when both are satisfied are provided. Therefore, the security level can be increased as compared with the configuration in which only the ID / password is input.

Further, the login authentication system 100 according to the fourth embodiment of the present invention includes the user's computer terminal 110 and the server 120, and the control unit of the user's computer terminal 110 or the server 120 is the camera 114 of the user's computer terminal 110. Is used to read the user's two-dimensional code CD, determine whether the user-specific information and user login password information entered in the user's computer terminal 110 are pre-registered user-specific information and user login password information. Whether or not the read two-dimensional code CD information is pre-registered user information is determined, and whether or not both the predetermined requirements for the user-specific information and the user login password and the predetermined requirements for the user information are satisfied. By allowing the user to log in to the computer terminal 110 when both are satisfied, the security level can be increased compared to the configuration in which only the ID and password are entered, and the effect is enormous. is there.

100 ・ ・ ・ Login authentication system 110 ・ ・ ・ Computer terminal (user terminal)
111 ・ ・ ・ Display unit 112 ・ ・ ・ Login screen 112a ・ ・ ・ User ID input field 112b ・ ・ ・ Password input field 112c ・ ・ ・ Camera shooting video field 112d ・ ・ ・ Shooting button 112e ・ ・ ・ Login button 113 ・ ・・ Operation unit 114 ・ ・ ・ Camera 120 ・ ・ ・ Server PT1 ・ ・ ・ Image data PT2 (taken when logging in) ・ ・ ・ Face photo data CD (of pre-registered user) ・ ・ ・ 2D code

Claims (10)

A login authentication system program that allows login when the input data meets certain requirements when the user terminal accesses the server.
The shooting step of shooting the user's face using the camera of the user terminal,
Probability value acquisition step to obtain the possibility of the same person numerically by comparing the captured image data and the face photo data of the user registered in advance by the image authentication means,
A user determination step that determines whether or not the photographed user is a registered user by determining whether or not the numerical value of the possibility of the same person is equal to or greater than a predetermined value.
A program of a login authentication system comprising a login permission step for permitting login of a user terminal when the numerical value of the possibility of the same person is equal to or higher than a predetermined value. A login authentication system program that allows login when the input data meets certain requirements when the user terminal accesses the server.
The shooting step of shooting the user's face using the camera of the user terminal,
An ID / password determination step for determining whether the user-specific information and user login password information entered in the user terminal are pre-registered user-specific information and user login password information.
Probability value acquisition step to obtain the possibility of the same person numerically by comparing the captured image data and the face photo data of the user registered in advance by the image authentication means,
A user determination step that determines whether or not the photographed user is a registered user by determining whether or not the numerical value of the possibility of the same person is equal to or greater than a predetermined value.
A requirement determination step for determining whether or not both the predetermined requirements for user-specific information and user login password in the ID / password determination step and the predetermined requirements for face authentication of a registered user in the user determination step are satisfied, and
A program of a login authentication system including a login permission step that permits login of a user terminal when both of the above conditions are satisfied. The program of the login authentication system according to claim 1 or 2, further comprising an image data discarding step of discarding the image data captured in the photographing step after the login permission step. The program for a login authentication system according to any one of claims 1 to 3, wherein a predetermined value in the user determination step has a configuration that can be freely set by a system administrator. A login authentication system program that allows login when the input data meets certain requirements when the user terminal accesses the server.
A reading step of reading the user's two-dimensional code using the camera of the user terminal,
A two-dimensional code determination step that determines whether the read two-dimensional code information is pre-registered user information, and
A program of a login authentication system, characterized in that it includes a login permission step that permits login of a user terminal when it is determined that the read two-dimensional code information is user information registered in advance. A login authentication system program that allows login when the input data meets certain requirements when the user terminal accesses the server.
A reading step of reading the user's two-dimensional code using the camera of the user terminal,
An ID / password determination step for determining whether the user-specific information and user login password information entered in the user terminal are pre-registered user-specific information and user login password information.
A two-dimensional code determination step that determines whether the read two-dimensional code information is pre-registered user information, and
A requirement determination step for determining whether or not both the predetermined requirements for the user-specific information and the user login password in the ID / password determination step and the predetermined requirements for the user information in the two-dimensional code determination step are satisfied, and
A program of a login authentication system including a login permission step that permits login of a user terminal when both of the above conditions are satisfied. A login authentication system that allows login when the input data meets certain requirements when the user terminal accesses the server.
The control unit of the user terminal or the server photographs the user's face using the camera of the user terminal, compares the photographed image data with the user's face photograph data registered in advance by an image authentication means, and is the same. By obtaining the possibility of a person numerically and determining whether the numerical value of the possibility of the same person is equal to or higher than a predetermined value, it is determined whether or not the photographed user is a registered user, and the numerical value of the possibility of the same person is determined. A login authentication system characterized in that it is configured to allow login of a user terminal when is greater than or equal to a predetermined value. A login authentication system that allows login when the input data meets certain requirements when the user terminal accesses the server.
The control unit of the user terminal or the server photographs the user's face using the camera of the user terminal, and the user-specific information and the user login password information entered in the user terminal are registered in advance as the user-specific information and the user. It is determined whether or not it is login password information, and the photographed image data and the user's face photo data registered in advance are compared by an image authentication means to obtain the possibility of the same person numerically, and the possibility of the same person is obtained. By determining whether or not the numerical value of is equal to or greater than a predetermined value, it is determined whether or not the photographed user is a registered user, and predetermined requirements for user-specific information and user login password, and predetermined for face authentication of registered users. A login authentication system characterized in that it determines whether or not both of the requirements are met, and when both are met, the user terminal is allowed to log in. A login authentication system that allows login when the input data meets certain requirements when the user terminal accesses the server.
The control unit of the user terminal or the server reads the user's two-dimensional code using the camera of the user terminal, determines whether the read two-dimensional code information is the user information registered in advance, and determines whether the user information is the user information. A login authentication system characterized in that it is configured to allow login of a user terminal when it is determined to be. A login authentication system that allows login when the input data meets certain requirements when the user terminal accesses the server.
The control unit of the user terminal or the server reads the user's two-dimensional code using the camera of the user terminal, and the user-specific information and the user login password information entered in the user terminal are registered in advance. It is determined whether or not it is user login password information, and it is determined whether or not the read two-dimensional code information is user information registered in advance, and the predetermined requirements for user-specific information and user login password, and user information. A login authentication system characterized in that it is configured to allow login of a user terminal when it is determined whether or not both of the predetermined requirements are satisfied and both are satisfied.