JP4093170B2 - Access authentication apparatus and authentication method thereof - Google Patents

Description

  The present invention relates to authentication of access permission to a terminal or a computer to which the terminal is connected, and more particularly to a technique for simplifying an operation for authentication and preventing unauthorized access while an operator is away.

  Conventionally, when logging in to a terminal or logging into a server from a terminal, an access permission authentication process has been performed to prevent unauthorized access. The access permission authentication process has been conventionally performed by a method in which each terminal or server receives an input of a unique password for each operator. Such password input has generally been performed by operating a keyboard.

However, it is troublesome to input a password from the keyboard, and there is a risk that the password will be known to others at the time of input. Another problem is that the security is low because the password depends on personal memory.
On the other hand, recently, access control based on authentication using a contact IC card has begun to be adopted. However, this method also has a problem that the IC card may be misplaced when the operator temporarily leaves the personal computer, and unauthorized access is received using the IC card that was misplaced while leaving the desk.
JP 2001-318864 A

  The present invention has been made to solve such problems of the prior art, and the problem relates to authentication of access permission to a terminal or a computer to which the terminal is connected. An object of the present invention is to provide an access permission authentication technique capable of preventing unauthorized access while away from the desk.

The invention according to claim 1 for solving the above-mentioned problem authenticates access permission to a terminal to which a mouse having means for communicating with an IC card storing authentication information is connected, or to a computer to which the terminal is connected. A first determination unit for determining whether to authenticate the access permission based on the authentication information received by the mouse, and the access permission is authenticated by the first determination unit. A second determination means for determining whether or not the mouse is in a non-operable state, and when the second determination means determines that the mouse is in a non-operable state, and a cancellation means for canceling the permission by the first determining means, the mice receiving a reflected light illumination light from the light emitting element and the light-emitting element is reflected by the object which faces Light-receiving element is provided that, the second determination means, the received light intensity of said light receiving element in the case where more than a predetermined value, wherein said mouse is determined to be non-operational.
According to this, since the authentication information can be read by communicating the IC card with the mouse, it is not necessary to input the password from the keyboard, and the operation is simplified. In addition, access can be revoked with simple operations such as placing the mouse at an angle or turning it upside down. Can be easily prevented.
In addition, this can also obtain the same effect also in the invention of Claim 5.

The invention according to claim 2 is an apparatus for authenticating access permission to a terminal to which a mouse having means for communicating with an IC card storing authentication information is connected, or to a computer to which the terminal is connected, First determination means for determining whether to authenticate the access permission based on the authentication information received by the mouse, and when the access permission is authenticated by the first determination means, the mouse A second determining means for determining whether or not the mouse is in a non-operable state; and when the second determining means determines that the mouse is in a non-operable state, the first determining means The mouse is provided with an inclination detecting means for detecting whether the mouse is inclined beyond a predetermined angle with respect to a horizontal direction. The second determining means determines that the mouse is in a non-operable state when the inclination detecting means detects that the angle exceeds the predetermined angle. To do.
According to this, since the authentication information can be read by communicating the IC card with the mouse, it is not necessary to input the password from the keyboard, and the operation is simplified. In addition, access can be revoked with simple operations such as placing the mouse at an angle or turning it upside down. Can be easily prevented.
In addition, this can also obtain the same effect also in the invention of Claim 6.

The invention according to claim 3 is the invention according to claim 1 or 2 , wherein the communication means of the mouse is a non-contact type IC card reader, and the IC card is used for communication with the IC card. It is performed in the state close to the mouse.

  Therefore, it is not necessary to install the IC card reader as a separate device, and the operator only needs to bring the IC card closer to the mouse, thereby simplifying the operation.

According to a fourth aspect of the present invention, in the third aspect of the present invention, the mouse is further configured to be operated on a mouse pad that stores specific information. When the specific information of the mouse pad cannot be read from the non-contact type IC card reader, it is determined that the mouse is in a non-operable state.

Therefore, it is possible to revoke access permission with a simple operation such as placing the mouse outside the mouse pad, so that unauthorized access during the absence period can be prevented by leaving the mouse in a non-operable state when leaving the seat. It can be easily prevented.
In addition, this can also obtain the same effect also in the invention of Claim 7.

(First embodiment)
A first embodiment of an apparatus for authenticating access permission to a terminal or a computer connected to the terminal according to the present invention will be described with reference to FIG.
The authentication system 1 in this embodiment has a configuration in which an access authentication device is built in a personal computer 2 as a terminal. The mouse 3 and the IC card reader / writer connected to the personal computer 2 and a mouse pad 4 to be described later are configured. In the case of the present embodiment, the IC card reader / writer does not appear in the figure because the IC card reader / writer employs a configuration built in the mouse 3. This IC card reader / writer can perform data communication with the non-contact type IC card 5 by radio.

FIG. 2 shows a schematic electrical configuration of the IC card reader / writer 6, the IC card 5, and the mouse pad 4 and the connection relationship among the personal computer 2, the IC card reader / writer 6, the IC card 5, and the mouse pad 4. is there.
The IC card 5 includes an antenna coil 51, a capacitor 52, and a control unit 53. The antenna coil 51 and the capacitor 52 constitute a resonance circuit. The power source of the IC card 5 is obtained by receiving a radio wave transmitted from the IC card reader / writer 6 with a resonance circuit and rectifying the induced high-frequency voltage in the control unit 53.

  Since data is superimposed on the radio wave transmitted from the IC card reader / writer 6, the control unit 53 decodes the contents. Then, according to the instruction of the received transmission information, the ID information for identifying the IC card 5 stored in a memory (not shown) in the control unit 53 is specified in some cases, and in other cases, the received information is set to a predetermined value. The result of the calculation process is transmitted to the IC card reader / writer 6 through the antenna coil 51 of the resonance circuit.

  The IC card reader / writer 6 includes an antenna coil 61, a transmission unit 62, a reception unit 63, and a control unit 64. The power is supplied from the personal computer 2. The data is transmitted by the control unit 64 creating necessary transmission information in accordance with an instruction from the personal computer 2 and transmitting it through the transmission unit 62 and the antenna coil 61. At the time of data reception, the radio wave transmitted by the antenna coil 61 and the receiving unit 63 is received and the content is decoded by the control unit 64. Then, predetermined processing is performed and the result is transmitted to the personal computer 2.

  Next, the mouse pad 4 will be described. The mouse pad 4 of the present embodiment has the same configuration as the non-contact type IC card 5 electrically, and includes an antenna coil 41, a capacitor 42, and a control unit 43. In terms of mechanism, the antenna coil 41 and the integrated circuit 45 are mounted on a large flexible wiring board 44 as shown in FIG. 3, and these are sealed with a predetermined protective sheet (not shown) to form the shape of the mouse pad. It is a thing. A capacitor 42 and a control unit 43 are accommodated in the integrated circuit 45. The mouse pad 4 can perform data communication with the IC card reader / writer 6 built in the mouse 3 in the same manner as the IC card 5.

  Note that the original mouse function of the mouse 3 in this embodiment, that is, the function of detecting the direction in which the mouse 3 is operated and the movement distance is mechanical or optically detected by detecting the rotation of the ball. It may be realized by employing a conventionally known mechanism such as an equation.

Next, a procedure for permitting access to the personal computer 2 under such a configuration will be described with reference to FIG.
The access authentication device built in the personal computer 2 first prohibits access to the personal computer 2 (S100), and then waits for input of authentication information of the IC card 5 acquired by the IC card reader / writer 6 (S101).
Therefore, when the operator brings the IC card 5 holding the authentication information close to the IC card reader / writer 6, the IC card reader / writer 6 and the IC card 5 communicate with each other, and when the IC card reader / writer 6 obtains the authentication information, the access is made. The authentication device determines whether it is valid (S102).
If this is invalid, access to the personal computer 2 is not permitted, and the process again waits for input of authentication information. If valid, access to the personal computer 2 is permitted (S103). This step S120 corresponds to a first determination means.

Subsequently, the access authentication device checks the operable state of the mouse 3 (S104).
It is determined whether or not this is an operable state (S105). If it is in an operable state, confirmation of the operable state of the mouse 3 is repeatedly executed. If the mouse 3 is in a non-operable state, access permission is canceled. (In other words, access is prohibited) (S106), the process again waits for input of authentication information (S101). This step S105 corresponds to the second determination means, and step S106 corresponds to the cancellation means.

By repeatedly checking the operable state of the mouse 3 in this way, the access to the personal computer 2 is immediately prohibited if the mouse 3 is brought into the non-operable state when a legitimate operator leaves the seat. As a result, unauthorized use of the personal computer 2 by another person while away from the desk can be prevented.
Next, a communication procedure between the IC card reader / writer 6 and the IC card 5 in steps S101 and S102 will be described with reference to FIG. 5A.

The IC card reader / writer 6 transmits a polling signal at a predetermined cycle ((a) in FIG. 5A), and when the operator brings the IC card 5 close to the IC card reader / writer 6, the control unit 53 of the IC card 5 The polling signal is received. Then, the self ID information stored in the memory in the control unit 53 is returned ((b) of FIG. 5A).
The IC card reader / writer 6 checks the received ID information and confirms whether it is pre-registered ID information. If it can be confirmed correctly, IC card authentication information (usually a random number) is generated and transmitted to the IC card 5 in order to further authenticate the IC card 5 ((c) in FIG. 5A). After receiving the sent IC card authentication information, the IC card 5 reads out the authentication information stored in the memory in the control unit 53 for authenticating itself, and is predetermined based on the two pieces of information. Perform the calculation. Then, the calculation result and the IC card reader / writer authentication information (usually a random number) for the IC card 5 to authenticate the IC card reader / writer 6 are generated, and the two numerical values are generated as the IC card reader / writer. 6 is returned ((d) of FIG. 5A).

  The IC card reader / writer 6 first verifies the calculation result in the sent numerical value. In the verification, it is determined whether the sent calculation result is a result of a predetermined calculation using predetermined authentication information for the IC card authentication information sent earlier. If the determination result is positive (OK), the IC card 5 that transmitted the information is provisionally determined to be authenticated.

Subsequently, the IC card reader / writer 6 reads authentication information for authenticating itself from the memory of the control unit 64. Then, a predetermined calculation is performed based on the authentication information and IC card reader / writer authentication information (usually a random number) in the numerical values sent earlier. Then, the calculation result is transmitted to the IC card 5 ((e) in FIG. 5A).
The IC card 5 determines whether or not the received calculation result is a result of a predetermined calculation using predetermined authentication information for the previously sent information for IC card reader / writer authentication. If the determination result is positive (OK), the IC card 5 returns an authentication result to the IC card reader / writer 6 indicating that the IC card reader / writer 6 that has transmitted the information is to be authenticated. ((F) of FIG. 5A).

The IC card reader / writer 6 officially authenticates the IC card 5 only after receiving an authentication result from the IC card 5 that it should be authenticated.
As described above, in this embodiment, when both the authentication of the IC card 5 by the IC card reader / writer 6 and the authentication of the IC card reader / writer 6 by the IC card 5 are established, the mutual authentication of the IC card 5 is officially performed for the first time. An authentication method is adopted.

Next, the communication procedure between the IC card reader / writer 6 and the mouse pad 4 in steps S104 and S105 will be described with reference to FIG. 5B.
The IC card reader / writer 6 transmits a polling signal to the mouse pad 4 at a predetermined cycle ((g) in FIG. 5B). For this polling signal, a modulation method different from the polling signal transmitted to the IC card 5 described above is employed.

ID information for specifying the mouse pad 4 is stored in the memory of the control unit 43 of the mouse pad 4. When receiving the polling signal transmitted via the antenna coil 41, the corrector 43 reads the ID information and returns it to the IC card reader / writer 6 via the antenna coil 41 ((h) in FIG. 5B). ).
When the control unit 43 returns the ID information, the control unit 43 returns the ID information with an anti-collision function (interference prevention function). This enables the IC card reader / writer 6 to accurately receive ID information even when a plurality of control units 45A to 45D exist as shown in FIG. Details of the mouse pad 40 having the plurality of control units 45A to 45D will be described later.
As a specific example of the anti-collision function, it is known that the response timing is changed based on internally generated random numbers so that communication does not collide with time. ((I) of FIG. 5B).

  The IC card reader / writer 6 receives the returned ID information and determines whether the ID information is predetermined ID information (specific information) registered in advance. When it is determined that the ID information (specific information) is predetermined, the mouse is normally placed on the mouse pad 4 that has transmitted the ID information (specific information), and the mouse 3 is operated. Judge that it is in a possible state.

The feature of this embodiment is that the authentication process is performed by a simple operation of bringing the IC card 5 close to the mouse 3 while the mouse 3 is normally placed on the mouse pad 4 as described above. Another point is that the access permission is canceled when a specific condition is not satisfied.
The condition for canceling the access permission is that the mouse 3 is no longer operable. That is, the access permission state continues only during the period in which the mouse 3 is operable, and is canceled when the mouse 3 is no longer operable. Whether or not the mouse 3 is in an operable state is determined by returning a predetermined ID information (FIG. 5B) in response to a polling signal ((g) in FIG. 5B) transmitted to the mouse pad 4 at a predetermined cycle. Whether or not (h)) is received from the mouse pad 4 is determined.

  Therefore, when the operator leaves the seat while operating the personal computer with access permission, the mouse 3 is moved away from the mouse pad 4, that is, the mouse pad 4 is moved from the IC card reader / writer 6. Place it in a position where it cannot receive the polling signal. If the user leaves the seat in this state, the access permission is cancelled, so that the personal computer 2 is prevented from being illegally accessed while the user is away. When returning to the seat and continuing the work, the authentication is re-authenticated by a simple operation of placing the mouse 3 on the mouse pad 4 and bringing the IC card 5 closer to the mouse 3 as described above.

  As described above, according to the apparatus for authenticating access permission to the terminal or the computer to which the terminal is connected, authentication can be performed with a simple operation, and authentication can be canceled with a simple operation even when leaving the desk. Can receive. Therefore, it is effective to prevent unauthorized access while away from the desk.

  In the present embodiment, the determination as to whether or not the mouse 3 is operable and the authentication processing of the IC card 5 are all performed by an access authentication device built in the personal computer 2 as shown in FIG. However, these processes may be performed by the IC card reader / writer 6 or the server to which the personal computer 2 is connected. Further, it may be configured as an access authentication device separate from the personal computer 2 and the mouse 3. The determination as to whether or not the mouse 3 can be operated may be shared by the personal computer 2 and the authentication of the IC card 5 may be performed by the server or the IC card reader / writer 6.

Further, as shown in FIG. 3, the mouse pad 4 may be composed of a plurality of IC card components instead of a set of IC card components composed of an antenna coil 41 and an integrated circuit 45.
That is, as shown in FIG. 6, the mouse pad 40 may be composed of four IC card components (antenna coils 41 </ b> A to 41 </ b> D and control units 45 </ b> A to 45 </ b> D).
By doing so, in the IC card component shown in FIG. 3, as shown in FIG. 7A, the antenna coil 41 can be communicated with the mouse 3 at a position A1 in the vicinity of the antenna coil 41, but away from the antenna coil 41. While there is a problem that communication is impossible at the center position A2 of the mouse pad 40, the antenna coil 41A to the antenna coil 41A are formed in the case where the four IC card components shown in FIG. Although communication is possible at a position B1 in the vicinity of 41D, communication at the center position B2 of the mouse pad 40 is possible at the antenna coils 41C and 41D even though communication at the antenna coils 41A and 41B is not possible. The possible positions can be increased.

  However, in such a case, when communicating between the IC card reader / writer 6 and the mouse pad 40, the ID information is simultaneously transmitted from each card component and the IC card reader / writer 6 receives the ID information. Since it may be impossible to receive, the above-described anti-collision function may be used.

(Second Embodiment)
With reference to FIG. 8, a second embodiment of an apparatus for authenticating access permission to a terminal or a computer connected to the terminal according to the present invention will be described. The authentication system 1 according to the present embodiment includes a personal computer 2 (with built-in access authentication device), a mouse 3 and an IC card reader / writer 6 connected to the personal computer 2. The IC card reader / writer 6 is not shown in the figure because it is built in the mouse 3 as in the first embodiment.

  In the present embodiment, a mouse pad incorporating an IC card function as in the first embodiment is not used. The mouse 3 is an optical mouse. There are various types of optical mice, such as those that require a mouse pad with a specific pattern on the surface, and those that do not require a mouse pad and function on the surface of a desk. Therefore, when a specific mouse pad is required by the method, the designated mouse pad is used.

In the case of this embodiment, the operation method when receiving authentication is the same as in the case of the first embodiment. That is, after the optical mouse 3 is made operable, the IC card 5 is brought close to the mouse 3 incorporating the IC card reader / writer 6 for authentication. The internal processing performed for authentication is the same as in the first embodiment.
The difference between this embodiment and the first embodiment regarding authentication is in a method for determining whether or not the mouse 3 is in an operable state. In this embodiment, when the light intensity captured by the light receiving element in the optical mouse 3 is equal to or higher than a predetermined level (first level), the mouse 3 is determined to be operable, and the light intensity is at a predetermined level. It is determined that the operation is no longer possible when (second level) or less. This determination is made by the personal computer 2.

  FIG. 9 schematically shows an example of the internal cross-sectional configuration of the optical mouse 3. The control unit 31 receives power from the personal computer 2 and causes the light emitting element 32 to emit light and irradiate the opposing object 33 such as the surface of the mouse pad or the desk surface under the mouse 3. The reflected light reflected by the facing object 33 is collected by the condenser lens 34, then reflected by the upper mirror 35 and incident on the light receiving element 36. As the light receiving element 36, for example, a CCD is used. The image captured by the light receiving element 36 is analyzed by the control unit 31 and the moving direction and moving distance of the mouse 3 are calculated and transmitted to the personal computer 2.

  When the optical mouse 3 is placed on the opposing object 33 and is in an operable state, reflected light with sufficient intensity enters the light receiving element 36. On the other hand, when the optical mouse 3 is not in an operable state such as when it is placed upside down, the reflected light does not enter the light receiving element 36. Therefore, whether or not the mouse 3 is in an operable state can be determined based on the intensity of reflected light captured by the light receiving element 36. In the present embodiment, such a system is adopted that the control unit 31 determines the level of such reflected light and informs the personal computer 2 of the result.

  Accordingly, authentication determination processing is performed when the IC card 5 is brought close to the mouse 3 in a state where the optical mouse 3 receives reflected light having an intensity of a predetermined level or higher. Once it is determined that authentication is possible (access permission), while the optical mouse 3 is receiving reflected light of a predetermined level or higher, the authentication is continued and access to the personal computer 2 is permitted. It is. Thereafter, when the operator leaves the table, the mouse 3 is left in an inoperable state by placing the optical mouse 3 upside down. Then, the authentication permission is canceled at that time, and access to the personal computer 2 is prohibited until the authentication is received again.

  As described above, also in the present embodiment, an operation of receiving authentication and an operation of canceling authentication can be easily performed. This produces an effect of effectively preventing unauthorized access to the personal computer 2.

(Third embodiment)
Next, a description will be given of a third embodiment of an apparatus for authenticating access permission to a terminal or a computer to which the terminal is connected. The overall configuration of this embodiment is the same as that of the second embodiment shown in FIG. The mouse 3 incorporates an IC card reader / writer 6. The difference from the second embodiment is that the mouse 3 is a mechanical mouse instead of an optical one.

The operation method when receiving authentication is the same as in the first and second embodiments. That is, after the mechanical mouse 3 is made operable, the IC card 5 is brought close to the mouse 3 incorporating the IC card reader / writer 6 for authentication. The internal processing performed for authentication is the same as in the first and second embodiments.
The only difference between this embodiment and the first and second embodiments regarding authentication is the method for determining whether or not the mouse 3 is in an operable state. In the present embodiment, a detection switch for detecting the tilt angle of the mouse 3 from the horizontal direction is provided in the mechanical mouse 3, and it is determined whether or not it is operable by a signal from the detection switch. This determination is made by the personal computer 2.

  FIG. 10 schematically shows an example of the internal cross-sectional configuration of the mechanical mouse 3. A ball 37 that freely rotates in contact with a mouse pad or a desk surface is attached to the lower portion of the mouse 3. The rotation direction and the rotation amount of the ball 37 are detected by the upper momentum detection mechanism 38, the signal is analyzed by the control unit 39, the movement direction and movement distance of the mouse 3 are calculated and transmitted to the personal computer 2.

  In addition to the configuration that realizes the original function of the mouse, the mechanical mouse 3 of the present embodiment includes a detection switch 40 that detects the tilt angle of the mouse 3 from the horizontal direction. This detection switch 40 has, for example, two electrode rods inserted horizontally at the bottom of a cylindrical sealed container as shown in FIG. 10, and has a conductivity of 1/3 to 1/2 of the internal volume. This switch is filled with liquid. When the mouse 3 is in an upright state, the two electrodes are short-circuited by the conductive liquid. On the contrary, when the mouse 3 is inclined more than a predetermined angle from the horizontal direction, or when it is placed upside down as shown in FIG. 11, the electrical connection between the two electrodes is cut off. This state is detected by the control unit 39 and a detection signal is transmitted to the personal computer 2.

The personal computer 2 determines that the mouse 3 is in an operable state when the two electrodes are short-circuited, and determines that the mouse 3 is in an inoperable state when in the open state.
Therefore, in the present embodiment, authentication determination processing is performed when the detection switch 40 is short-circuited and the IC card 5 is brought close to the mouse 3. Once it is determined that the authentication is possible, the authentication state is continued until the short circuit of the detection switch 40 is released, and access to the personal computer 2 is permitted.

Thereafter, when the operator leaves the seat, he leaves the seat with the mechanical mouse 3 turned over, for example. Then, it is determined that the mouse 3 is in an inoperable state. At that time, the authentication is canceled, and access to the personal computer 2 is prohibited until the authentication is received again.
As described above, also in the present embodiment, an operation of receiving authentication and an operation of canceling authentication can be easily performed. As a result, unauthorized access to the personal computer 2 can be effectively prevented.

(Other embodiments)
In the second and third embodiments, the IC card reader / writer 6 is built in the mouse 3. However, in these embodiments, a mouse pad having an IC card function is not used as in the first embodiment. Therefore, the IC card reader / writer 6 is not necessarily built in the mouse 3 and may be connected to the personal computer 2 as an independent device. Further, it may be mounted in the keyboard or near the surface of the main body case of the personal computer 2.

In the third embodiment, a mechanical mouse is used and the detection switch 40 is mounted therein. However, the detection switch 40 is mounted inside the optical mouse, and the mouse is detected by a signal from the detection switch 40. It may be determined whether or not it is in an operable state.
Further, in each of the above embodiments, the IC card reader / writer 6 having both the reading function and the writing function is adopted, but an IC card reader having only the reading function may be adopted.

1 is an overall configuration of an authentication system according to a first embodiment. It is an electrical configuration according to the first embodiment. It is an example of composition of a mouse pad in a 1st embodiment. It is a figure explaining an authentication procedure. It is a figure explaining the communication procedure between the IC card reader / writer and the IC card in the authentication procedure. It is a figure explaining the communication procedure between the IC card reader / writer and the mouse pad in the authentication procedure. It is another example of composition of a mouse pad in a 1st embodiment. It is a figure explaining the communicable position of the mouse pad in 1st Embodiment. It is the whole structure of the authentication system which concerns on 2nd, 3rd embodiment. It is an example of composition of an optical mouse concerning a 2nd embodiment. It is a figure which shows the erect state of the mechanical mouse | mouth which concerns on 3rd Embodiment. It is a figure which shows the inverted state of the mechanical mouse | mouth which concerns on 3rd Embodiment.

Explanation of symbols

In the drawings, 1 is an authentication system for accessing a personal computer, 2 is a personal computer, 3 is a mouse, 4 is a mouse pad, 4 is a non-contact IC card, 6 is an IC card reader / writer, 32 is a light emitting element, Reference numeral 36 denotes a light receiving element, and 40 denotes a detection switch.

Claims (7)

A terminal to which a mouse having means for communicating with an IC card storing authentication information is connected, or an apparatus for authenticating access permission to a computer to which the terminal is connected,
First determination means for determining whether to authenticate the access permission based on the authentication information received by the mouse;
Second determination means for determining whether or not the mouse is in a non-operable state when the access permission is authenticated by the first determination means;
If this the mice is determined to be non-operational state by the second determination means, and a cancellation means for canceling the permission by the first determination means,
The mouse is provided with a light-emitting element and a light-receiving element that receives reflected light reflected by an object opposed to the light emitted from the light-emitting element, and the second determination means has a predetermined light-receiving intensity of the light-receiving element. An access authentication device that determines that the mouse is in a non-operable state when the value is equal to or less than a value . A terminal to which a mouse having means for communicating with an IC card storing authentication information is connected, or an apparatus for authenticating access permission to a computer to which the terminal is connected,
First determination means for determining whether to authenticate the access permission based on the authentication information received by the mouse;
Second determination means for determining whether or not the mouse is in a non-operable state when the access permission is authenticated by the first determination means;
A canceling means for canceling the access permission by the first determination means when the second determination means determines that the mouse is in a non-operable state;
The mouse is provided with an inclination detection means for detecting whether the mouse is inclined beyond a predetermined angle with respect to a horizontal direction, and the second determination means is configured such that the inclination detection means An access authentication apparatus that determines that the mouse is in a non-operable state when it is detected that a predetermined angle is exceeded . Communication means included in the mouse is a non-contact type IC card reader, the communication with the IC card, according to claim 1 or 2, wherein the access authentication, characterized in that is carried out in a state where the IC card brought close to the mouse apparatus. The mouse is configured to be operated on a mouse pad that stores specific information, and the second determination unit reads the specific information of the mouse pad from the non-contact IC card reader. 4. The access authentication apparatus according to claim 3 , wherein if the control cannot be performed, it is determined that the mouse is in a non-operable state . A method of authenticating access permission to a terminal to which a mouse having means for communicating with an IC card storing authentication information is connected, or to a computer to which the terminal is connected,
A first step of determining whether to authenticate the access permission based on the authentication information received by the mouse ;
A second step of determining whether or not the mouse is in a non-operable state when the access permission is authenticated in the first step;
A third step of revoking the access permission according to the first step when the second step determines that the mouse is in a non-operable state;
The mouse is provided with a light emitting element and a light receiving element that receives reflected light reflected by an object opposed to the light emitted from the light emitting element, and the second step has a predetermined light receiving intensity of the light receiving element. An access authentication method comprising: determining that the mouse is in a non-operable state when the value is equal to or less than a value. A method of authenticating access permission to a terminal to which a mouse having means for communicating with an IC card storing authentication information is connected, or to a computer to which the terminal is connected,
A first step of determining whether to authenticate the access permission based on the authentication information received by the mouse;
A second step of determining whether or not the mouse is in a non-operable state when the access permission is authenticated in the first step;
If this the mice by the second step is determined to be non-operational state, and a third step of canceling the permission by the first step,
The mouse is provided with inclination detecting means for detecting whether or not the mouse is inclined beyond a predetermined angle with respect to a horizontal direction. In the second step, the inclination detecting means is provided with the predetermined angle. And determining that the mouse is in a non-operable state when it is detected that the angle is exceeded . The communication means included in the mouse is a non-contact type IC card reader, and the mouse is configured to be operated on a mouse pad that stores specific information. The second step includes the IC card reader. The access authentication method according to claim 5 , further comprising a step of determining that the mouse is in a non-operable state when the specific information of the mouse pad cannot be read.

Images