JP4272459B2 - Personal authentication device, personal authentication method, and personal authentication program - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to a personal authentication device, a personal authentication method, and a personal authentication program that perform personal authentication based on a human behavior pattern.
[0002]
[Prior art]
2. Description of the Related Art Conventionally, in order to contribute to security, a technique using an electronic key for locking and unlocking of an automobile and the like, and a technique for inputting a password when using an apparatus are known (for example, see Patent Document 1). As an example of the electronic key, there is one that transmits / receives an encrypted signal, determines whether or not the person is registered in advance, and uses it for locking / unlocking of an automobile or the like. On the other hand, a technique for contributing to security by inputting a password is used when using a personal computer or the like, and is a well-known technique. However, the technology using an electronic key cannot use an automobile or device when the user does not have the electronic key, and the technology using a password cannot use an automobile or device when the password is forgotten. Development of a technique for performing personal authentication using biometric information instead of an electronic key or a password is underway (see, for example, Patent Document 2). As biometric information, for example, voice, fingerprint, iris, vein pattern, etc. are used, and these are not possessed or forgotten.
[0003]
[Patent Document 1]
Japanese Patent Laid-Open No. 10-169273 (see paragraphs [0020] to [0022], FIG. 1)
[Patent Document 2]
JP 2002-279426 A (see paragraphs [0006] to [0008], FIG. 1)
[0004]
[Problems to be solved by the invention]
However, the conventional personal authentication technology has a problem that it is difficult to prevent unauthorized use of a device that should be protected by the personal authentication technology once it is simulated and simulated.
[0005]
The present invention has been made to solve the above problems, and provides means for using personal action pattern information for personal authentication instead of biometric information.
[0006]
[Means for Solving the Problems]
  In consideration of the above problems, the personal authentication device according to claim 1 isWith regard to the action history information in which the time information acquired at a predetermined time interval is associated with the position information at the time when the time information is acquired, and a series of actions of the user are stored.A user storage unit that stores past action history information in advance and further stores newly input action history information, and a past action history information stored in advance in the user storage unit is used for verification for personal authentication.Multiple action history informationExtracted cumulative informationAsAn extraction unit that extracts input information for collation used for collation for personal authentication from the newly input action history information, and the extracted cumulative informationThe required time is calculated by subtracting the initial time from the end time of the series of user actions stored in the action history information constituting the average of the plurality of action history information based on the calculated required time Calculating a required time, scaling time information of each of the plurality of behavior history information so that a required time of the plurality of behavior history information becomes the average required time, and the plurality of scaled behavior history information By calculating the average value for each position information associated with each time informationA collation unit that generates collation reference information, collates the generated collation reference information with the collation input information, and the newly input action history information based on a collation result performed by the collation unit And a determination unit that determines whether or not it belongs to the person having the past action history information and outputs a signal indicating the result of the determination to the first external device.
  The user registers his / her own action history information in the personal authentication device as past information, and before using what is actually subject to security management by the personal authentication device, Input to the authentication device. The personal authentication device having the above configuration compares the input action history information with the past action history information already registered, and the input action history information and the past action are compared based on the comparison result. It is determined whether or not the history information belongs to the same person, and the result of the determination is output to the first external device. The first external device controls access to devices subject to security management according to the result of the determination. For example, the first external device permits or prohibits the use of a personal computer or the like.
  The “first external device” in claim 1 is a device that performs personal authentication, and corresponds to a “user information processing device” in the first embodiment to be described later. The “personal authentication device” in claim 1 corresponds to a “route information verification device” in a first embodiment to be described later.
  A personal authentication device according to a second aspect of the present invention is the personal authentication device according to the first aspect, wherein the verification unit performs the verification for a feature position designated in advance as a position where a user passes. Whether the arrival time, departure time, and stay time of the feature position in the input information are within a predetermined range with respect to the arrival time, departure time, and stay time of the feature position in the reference information It is characterized by performing collation.
  The personal authentication device according to a third aspect of the present invention is the personal authentication device according to the first aspect, wherein the collation unit includes each position information acquired from a series of user actions in the collation input information, and Each position information within the required time in the verification reference information is regarded as a path of two-dimensional information, and the consistency of the path is determined.
[0007]
  Claim4The personal authentication device according to the present invention is claimed in claim 1.Any one of Claim 3In addition to the configuration of the personal authentication device according to the invention, the communication unit that communicates with the second external device, the information stored in the user storage unit and the information input via the communication unit And a coincidence verification unit for performing the above.
  The user possesses the second external device, and can transmit predetermined information to the personal authentication device using the second external device. The personal authentication device having the above configuration compares and collates the already registered information with the predetermined information received from the second external device, and determines the already registered information and the first information from the comparison and collation result. It is determined whether or not the predetermined information received from the second external device belongs to the same person, and the result of the determination is output to the first external device.
  Claims4The “second external device” in FIG. 3 is a device that uses a device that is subject to security management upon receiving personal authentication, and corresponds to a “user response terminal” in a second embodiment to be described later. The “personal authentication device” in claim 2 corresponds to a “route information matching device” in a second embodiment to be described later.
[0009]
  Claim5The personal authentication method in the personal authentication device according to the invention is as follows:A personal authentication method in a personal authentication device for performing personal authentication on a person who intends to access a security management target, wherein the personal authentication device acquires time information acquired at predetermined time intervals, and With respect to the action history information in which a series of actions of the user are stored in association with the position information at the time when the time information is acquired, the past action history information is stored in advance, and the newly input action history information is further stored. A plurality of action history information used for collation for personal authentication is extracted from the past action history information stored in advance in the user storage section as extracted cumulative information, and the newly input Extracting collation input information to be used for collation for personal authentication from the obtained action history information;The extracted cumulative informationThe required time is calculated by subtracting the initial time from the end time of the series of user actions stored in the action history information constituting the average of the plurality of action history information based on the calculated required time Calculating a required time, scaling time information of each of the plurality of behavior history information so that a required time of the plurality of behavior history information becomes the average required time, and the plurality of scaled behavior history information By calculating the average value for each position information associated with each time informationGenerating collation reference information, and collating the generated collation reference information with the collation input information;Based on the result of collation performed by the collation unit, it is determined whether or not the newly input action history information belongs to a person having the past action history information, and the result of the determination is shown. Outputting a signal to a first external device;It is the method of performing including.
  In this method, the behavior history of the original user, which is subject to security management, is compared with the behavior history of the person who wants to access it, and based on the result, the person who wants to access is the original user. And the result of the determination is output to a predetermined external device. The predetermined external device controls access to the security management target according to the determination result.
[0010]
  The personal recognition method according to claim 5, which is the invention according to claim 6, wherein the personal authentication device is configured so that the verification input information in the collation input information is a pre-designated characteristic position as a position where a user passes. Check whether the arrival time, departure time, and stay time of the feature position are within a predetermined range with respect to the arrival time, departure time, and stay time of the feature position in the reference information. It is characterized by.
  The personal recognition method according to claim 5, wherein the personal authentication device is an invention according to claim 7.  Each position information acquired from a series of user actions in the verification input information and each position information within the required time in the verification reference information are regarded as a path of two-dimensional information, and the consistency of the path is determined. It is characterized by doing.
[0011]
  The personal recognition method according to any one of claims 5 to 7, wherein the personal authentication device further includes a communication unit that communicates with a second external device. A step of collating the information stored in the user storage unit with the information input via the communication unit.
[0012]
  Claim9The personal authentication program according to the invention is claimed in a computer.5To claims8One of1It is a program for realizing the personal authentication method which is the invention according to the item.
[0013]
DETAILED DESCRIPTION OF THE INVENTION
Hereinafter, embodiments of the present invention will be described with reference to the drawings.
<< First Embodiment >>
The personal authentication system according to the first embodiment of the present invention includes a path information accumulating apparatus 100 shown in FIG. 1 and a path information collating apparatus 400 shown in FIG. The route information accumulating device 100 is a device that accumulates action history information of a user when the user carries it. The route information matching device 400 is a device that accompanies a security management target of the personal authentication system (for example, a personal computer, a car, etc.) and stores and checks the action history information. When a user registers his / her action history information as past information, and when he / she wants to use what is subject to security management by the personal authentication system, the route information accumulating device he / she carries 100 or a part thereof is connected to the route information matching device 400.
In the following description, first, the configuration and operation of the path information accumulating apparatus will be described. Next, the configuration and operation of the route information matching device will be described. In particular, in the description of the configuration of the route information matching device, a specific example of generation and matching of matching reference information will be described.
[0014]
FIG. 1 is a diagram showing a block configuration of a path information accumulating apparatus 100 constituting the personal authentication system according to the first embodiment of the present invention. The route information accumulating device 100 includes an operation unit 110 that allows a user to operate the route information accumulating device 100, a clock 120 that outputs current time information (hereinafter simply referred to as “time information”), and a position from which position information is acquired. The acquisition unit 130 includes an acquisition information storage unit 140 that stores the time information output from the clock 120 and the position information output from the position acquisition unit 130 in association with each other, and a control unit 150 that controls the operation of each unit. The
The operation unit 110 is for setting and inputting the route information accumulating apparatus 100, and may be configured by, for example, a touch button. Specifically, it is used for the user to perform initial setting of the route information accumulating device 100, instruct the start and end of the action history information accumulation process, and to specify the action history information.
The time information output from the clock 120 includes, for example, year, month, day, hour, minute, and second information, and may be output at predetermined time intervals.
The position acquisition unit 130 detects the current position information and outputs the detected position information to the acquisition information storage unit 140. The position acquisition unit 130 has, for example, a GPS (Global Positioning System) reception function and a signal processing function, and may process a signal received by the GPS reception function to detect a current position, or may detect the detected position. The position information may be expressed as latitude and longitude.
The acquisition information storage unit 140 is configured by a nonvolatile memory or the like, and stores action history information obtained by associating position information and time information. Here, the action history information may be, for example, information on the latitude and longitude in a table format corresponding to the time. Further, the acquired information storage unit 140 is configured to be detachable from the route information accumulating device 100, and is also connectable to or detachable from the route information collating device 400, and the information stored in the acquired information storage unit 140 is stored as route information. It can be output to the verification device 400.
Note that the path information accumulating apparatus is configured such that a communication unit 310 is added to the path information accumulating apparatus 100 instead of the operation unit 110 as in the path information accumulating apparatus 300 shown in FIG. The path information collating device 400 may be connected to be communicable. Communication may be wired or wireless. However, in the case of wired communication, it is possible to eliminate the leakage of information to the outside.
The control unit 150 includes a CPU (Central Processing Unit) and may include a ROM (Read Only Memory), a RAM (Random Access Memory), and the like. Then, the control unit 150 instructs the position acquisition unit 130 to acquire position information, and performs the operation of each unit such as writing the position information output from the position acquisition unit 130 to the acquisition information storage unit 140 in association with the time information. It comes to control. The control unit 150 may perform these operations based on a program recorded in the ROM. The RAM temporarily stores data such as parameters necessary for execution of processing.
[0015]
The operation of the route information accumulating apparatus 100 according to the first embodiment of the present invention will be described below. FIG. 2 is a flowchart showing the flow of processing in the path information accumulating apparatus 100 according to the first embodiment of the present invention. Here, it is assumed that the route information accumulating apparatus 100 is in an operating state, and the clock 120 outputs time information at predetermined time intervals. This operating state refers to a state in which the route information accumulating apparatus 100 starts accumulation processing of action history information in accordance with a user instruction.
First, time information is generated by the clock 120 and output to the control unit 150 at predetermined time intervals (S210). Also, position information is generated by the position detector 130 and output to the controller 150 at predetermined time intervals (S220). Here, it is assumed that the time interval for generating position information is equal to or longer than the time interval for generating time information. Next, the time information and the position information output to the control unit 150 in each step are stored in the acquired information storage unit 140 in association with each other by the control unit 150 (S230). Next, it is determined whether or not a signal indicating the end of the process has been input from the user via the operation unit 110. If it is determined that the signal has been input, the process ends. Returning to step S210, the processing of each step is repeated.
[0016]
Hereinafter, the operation of the route information accumulating device 100 will be described by taking as an example the behavior of the user who has the route information accumulating device 100 from leaving home in the morning until reaching the work place. Here, it is assumed that the route information accumulating apparatus 100 is in an operating state in advance.
When the user leaves home for work in the morning, position information and time information on a route taken by the user at predetermined time intervals are recorded in the acquired information storage unit 140. At that time, when the vehicle travels at a constant speed, the position changes every moment with the passage of time. On the other hand, when entering a store and shopping on the way, the change in position is small with time. Even when waiting for a signal, waiting for a train at the station platform, arriving at the office, etc., the change in position over time is small. The action history information including the time information and the position information is information specific to the user, and it is difficult for a person other than the user to accumulate and hold it.
In this way, when the user of the route information accumulating apparatus 100 leaves his home in the morning and goes to work, the user normally passes the route that the user normally takes with a behavior pattern unique to the user. Here, the “user-specific behavior pattern” means, for example, when to go to the station from the home, at what time, at what speed, and at what speed, stop by on the way Something that characterizes the user's behavior, such as
[0017]
FIG. 4 is a diagram showing a block configuration of the path information matching device 400 constituting the personal authentication system according to the first embodiment of the present invention. The route information matching device 400 inputs the action history information generated by the route information accumulating device 100, and performs personal authentication as to whether or not the person is the person based on the inputted action history information. Therefore, it is assumed that the route information matching device 400 can be used by being mounted on an information processing device such as a computer, for example. Hereinafter, an information processing apparatus equipped with the route information matching apparatus 400 is referred to as a user information processing apparatus.
In FIG. 4, the route information matching device 400 includes behavior history information acquired in the past by the route information accumulating device 100 (hereinafter simply referred to as “past behavior history information”) and currently unstored behavior history information (hereinafter simply referred to as “past behavior history information”). A collation information storage unit 410 for storing “unstored behavior history information”, an extraction unit 420 for extracting a collation target portion from unstored behavior history information and past behavior history information stored in the collation information storage unit 410, Using the collation unit 430 for collating the collation target part of the unstored behavior history information extracted by the unit 420 with the collation target part of the past behavior history information stored in advance, and the result of the collation performed by the collation unit 430 It is comprised including the judgment part 440 which judges whether it is the person. Note that the extraction unit 420 includes processing for reading the unstored behavior history information from the acquired information storage unit 140 (see FIG. 1) and storing it in the verification information storage unit 410. The determination by the determination unit 440 as to whether or not the person is the person is to determine whether or not the unstored action history information belongs to a person having the past action history information.
[0018]
Here, the verification information storage unit 410 stores a first storage area that stores and holds action history information read from the acquired information storage unit 140, and information necessary for personal authentication processing such as verification described later. A storage area divided into a second storage area is included. However, the number of storage areas of the collation information storage unit 410 is not limited to two, and may be divided into three or more.
The extraction unit 420 extracts action history information used for verification performed by the verification unit 430 from unstored behavior history information and past behavior history information stored in the verification information storage unit 410. The details will be described with reference to FIG. FIG. 5 is a diagram conceptually showing the action history information stored in the verification information storage unit 410. Here, the action history information for the current day is indicated by “0”, the previous day is indicated by “1”, the previous day is indicated by “2”, and the previous day is indicated by “j”.
As illustrated in FIG. 4, the extraction unit 420 includes, for example, a plurality of predetermined days of the unstored behavior history information and past behavior history information stored in the verification information storage unit 410. Action history information is extracted from departure from the entrance to the office seat. Here, “a plurality of predetermined days” refers to, for example, work days for the past year. Further, a plurality of days may be designated as the password. By making it designated as a personal identification number, confidentiality is further improved. In addition, you may extract the action history information of another area.
Hereinafter, the action history information extracted from the past action history information is referred to as “extraction cumulative information”. The extracted cumulative information is a collection of information on a plurality of days. Of the action history information extracted from the unstored action history information, the latest date is referred to as “matching input information”.
The collation unit 430 generates “collation reference information” to be described later based on the extracted cumulative information, and collates the generated collation reference information with the collation input information generated by the extraction unit 420. ing. Below, the production | generation of collation reference information is demonstrated.
[0019]
First, for each history 520 (see FIG. 5) constituting the extracted cumulative information, a required time obtained by subtracting the first time from the time at the end of the history (in the above example, the user has changed from “the entrance of the user's house” to “ And the average value of these required times (hereinafter simply referred to as “average required time”). FIG. 6 is a graph showing one history constituting the extracted cumulative information corresponding to a curve in a three-dimensional space.
In FIG. 6, the start point of the history is represented as S, the end point thereof is represented as E, the time of the start point S of the history is represented as ts, the time of the end point E is represented as te, the x coordinate of the start point S of the history is xs, and the x coordinate of the end point E. Is expressed as xe, the y coordinate of the start point S of the history is expressed as ys, and the y coordinate of the end point E is expressed as ye. Here, the difference between the time ts at the start point S of the history and the time te at the end point E is the required time. When the required time and the average required time are calculated, a variance of the required time is calculated based on the required time and the average required time. Here, the x coordinate may be latitude and the y coordinate may be longitude.
Next, for each history constituting the extracted cumulative information, the time coordinates of each history are scaled so that the required time becomes the average required time. That is, when the required time of an arbitrary history i is Ti and the average required time is To, the time between the time ts and the time te of the history i is multiplied by (To / Ti), and the required time of the history i is Convert to be To. As a result, the time required for each history after scaling is the same value.
Hereinafter, each piece of history information generated in this way is referred to as a “normalized element history”. Then, as described with reference to FIG. 6, each normalized element history is regarded as a curve in a three-dimensional space, and an average value and a variance value are obtained to generate normalized reference history information. These averages are performed for every t time coordinate, x coordinate, and y coordinate. Information including the average required time, the variance of the required time, and the standardized reference history information generated in this way is the verification reference information.
[0020]
Next, the collation performed by the collation unit 430 (see FIG. 4) will be described with a specific example.
First, “feature matching” will be described as a first method. In this method, prior to collation, at least one or more positions (hereinafter simply referred to as “characteristic positions”) through which the user passes, times at which each characteristic position is reached (hereinafter simply referred to as “characteristic position arrival time”), and The time to leave the feature position (hereinafter simply referred to as “feature position departure time”) is designated in advance. Hereinafter, the difference between the feature position arrival time and the feature position departure time is referred to as feature position stay time, and information including the feature position arrival time, feature position departure time, and feature position stay time is referred to as feature position time information.
In the feature matching, first, it is checked whether or not the feature position is included in the matching input information, and if the result of the check is that the feature position is included in the matching input information, the matching input information It is checked whether or not the feature position time information matches the feature position time information in the standardized reference history information, and whether or not the required time in the matching input information matches the average required time. .
Here, “whether or not the feature position is included in the input information for verification” is for verification within a predetermined range including the feature position (for example, the standard deviation range of the action range centering on the feature position). When the position in the input information is included, it corresponds to “included”. Regarding “whether the feature position time information in the matching input information matches the feature position time information in the standardized reference history information”, the feature position time in the matching input information is included in the feature position time information. If they are within a predetermined range (for example, these standard deviations) centering on the time or time to be read, they are matched. As to “whether or not the required time in the input information for verification matches the average required time”, it is one if the required time is within a predetermined range (for example, a standard deviation of the required time). Suppose you are doing it.
[0021]
As a second method, “path verification” will be described. In route verification, in addition to the consistency between the required time obtained from the input information for verification and the average required time, information on the route (hereinafter simply referred to as “reference route”) included in the standardized reference history information; The consistency (hereinafter simply referred to as “path matching”) with the information of the path (hereinafter simply referred to as “matching input path”) specified by the verification input information is checked. With regard to this path matching, for example, it may be checked whether or not the input path for verification is within a range in which the standard path has a standard deviation width.
As a third method, “route profile matching” will be described. In the route profile verification, in addition to the consistency between the required time and the average required time, the consistency between the standardized reference history information and the input information for verification is checked.
[0022]
Here, a route matching evaluation method in the route matching as the second method will be described.
First, the “separation distance summation method” will be described. In this method, the reference path and the input path for verification are divided by a certain length, and the distance between the midpoints of the sections obtained by dividing the reference path and the input path for verification is calculated. The sum is used as an index of consistency. This will be specifically described with reference to FIG. First, the reference path 710 and the verification input path 720 are equally divided into the same number of sections. Next, the midpoint of the i-th interval in the reference path 710 and the verification input path 720 is determined. Subsequently, the distance li between the respective midpoints of the i-th section in the reference path 710 and the verification input path 720 is calculated for each section, and the sum of the distances li is calculated for the section i. The separation distance summation method uses the sum of the distances li as an evaluation index. Although the section is “equally divided” to generate the section, the section is not necessarily divided equally, and other division methods may be used.
Next, the “correlation method” will be described. In this method, as shown in FIG. 8, when the reference path 810 and the matching input path 820 are represented on two-dimensional coordinates, one coordinate axis is considered as an independent variable and the other coordinate axis is considered as a dependent variable. Specifically, when the x coordinate axis is an independent variable, the y coordinate axis is a dependent variable when the reference path 810 and the matching input path 820 are regarded as functions. In the correlation method, the dependent variable components of the reference path 810 and the collation input path 820 are extracted in this way, their cross correlation is taken, and the correlation value is used as an evaluation index.
Next, the “surrounding area method” will be described. In this method, for example, as shown in FIG. 8, the area of a portion surrounded by a reference path 810 and a matching input path 820 is calculated, and the area value is used as an evaluation index.
Further, the “allowable error method” will be described. In this method, for example, as shown in FIG. 9, a reference path included in the standardized reference history information and its variance value are used, an area 830 having an allowable error width is provided in the reference path 810, and an input path for verification 820 is provided. It is calculated whether or not it is included in this area 830, or how much it deviates from this area 830, and those calculated values are used as evaluation indices.
[0023]
As described above, the route matching evaluation method in the second method of route matching has been described. However, the route is two-dimensional information and has been described assuming a two-dimensional space, but the standardized reference history information is three-dimensional information. The evaluation method can be applied by extending to the case of a three-dimensional space in correspondence with the above. For example, in the correlation method, if the time (for example, the scaled time) is an independent variable and the position coordinates (for example, latitude and longitude) are two dependent variables, the correlation between the two dependent variables is obtained. The calculation method of the two-dimensional evaluation index can be extended to the calculation of the three-dimensional evaluation index.
In the above, the collation method performed by the collation unit 430 (see FIG. 4) has been described with three specific examples. However, the present invention is not limited to these methods, and other methods may be used. In addition, the matching evaluation method has been described with four specific examples. However, the method is not limited to these methods, and other methods may be used.
[0024]
As illustrated in FIG. 4, the determination unit 440 determines whether or not the latest action history information input is the person's action history information based on the result obtained by the verification by the verification unit 430. I do. The determination performed by the determination unit 440 differs depending on the verification method performed by the verification unit 430, and it is assumed that a determination criterion is set in advance for each verification method. For example, a value obtained by multiplying a standard deviation by a constant may be set as a matching range, and the constant may be changed by each method. As a method of changing the constant, for example, when using feature matching, the number of coordinate points to be matched is limited. Therefore, the constant is reduced (for example, 1 or less) to increase the accuracy of matching, and the path profile matching is performed. Is used, the object to be collated is specified by three-dimensional coordinates, and high-precision matching is not always required. Therefore, it is conceivable to increase the constant (for example, 3 or more). In addition, when route verification is used, a constant may be set as an intermediate value thereof.
[0025]
Hereinafter, the operation of the route information matching apparatus 400 according to the first embodiment of the present invention will be described. FIG. 10 is a flowchart showing a process flow in the route information matching apparatus 400 according to the first embodiment of the present invention. Prior to the description, it is assumed that past action history information is stored in advance in the first storage area of the verification information storage unit 410 (see FIG. 4 as appropriate).
First, when action history information is newly input by a user who wants to receive personal authentication, the input action history information is stored in the second storage area of the verification information storage unit 410 (S1010). Next, the extraction unit 420 extracts the extracted cumulative information from the action history information stored in the first storage area, and the collation input information is selected from the action history information stored in the second storage area. Extracted (S1020). Since the extraction accumulated information and the extraction of the collation input information have already been described, the description thereof will be omitted. When the extracted cumulative information and the collation input information are extracted, collation unit 430 generates collation reference information based on the extracted cumulative information, and collates the generated collation reference information with the collation input information. (S1030). Since the verification method has already been described, the description thereof will be omitted. When the collation is performed, the determination unit 440 determines whether or not the person is the person based on the collation result (S1040). If it is determined in step S1040 that the user is the person, the determination unit 440 outputs a signal indicating the person (hereinafter simply referred to as “authentication signal”) to the user information processing apparatus (S1050), and is determined not to be the person. In this case, a signal indicating that the user is not the person (hereinafter simply referred to as “authentication impossible signal”) is output to the user information processing apparatus (S1060). When the process of step S1050 is completed, the action history information stored in the second storage area in step S1010 is moved to the first storage area.
[0026]
As described above, the route information matching device according to the first embodiment of the present invention acquires a user-specific behavior history, and makes a collation determination as to whether or not the user is the person based on the acquired behavior history information. Therefore, personal authentication can be performed based on the user's behavior pattern instead of biometric information.
As shown in FIG. 1, information specifying predetermined action history information among the action history information stored in the acquisition information storage unit 140 is stored in the acquisition information storage unit 140 via the operation unit 110. You may keep it. The information specifying the action history information may be appropriately changed by the user, or may be used as a personal identification number.
[0027]
<< Second Embodiment >>
FIG. 11 is a diagram showing a block configuration of a path information matching device according to the second embodiment of the present invention. The route information verification device 1100 is a device that includes not only verification of information input from the route information accumulation device 100 but also verification for information input via the communication unit 1150 in order to perform personal authentication. is there.
In FIG. 11, a route information matching device 1100 includes a communication unit 1150 for communicating with an external device to the route information matching device 400 (see FIG. 4) according to the first embodiment of the present invention, and The communication unit 1150 has a configuration in which a matching verification unit 1160 that performs verification based on information obtained through communication is added. Here, among the components of the route information matching device 1100, the same components as those of the route information matching device 400 (see FIG. 4) according to the first embodiment of the present invention are denoted by the same reference numerals. A description thereof will be omitted.
When it is determined by the determination unit 440 that the communication unit 1150 is not the person, the communication unit 1150 transmits predetermined information to a predetermined external device, and a signal transmitted from the external device (hereinafter, simply referred to as “external device”). "Response information") is received and output to the matching unit 1160. Here, examples of the “predetermined external device” include a communication device and a portable information terminal owned by the user of the route information accumulating device 100, and these are referred to as a user response terminal. The “predetermined information” includes, for example, that the route information collating apparatus 1100 has been accessed by a person who is not authenticated as the principal, the identification number of the user information processing apparatus that has made the access, and the time at which the access has been made. Etc.
The response information includes, for example, a predetermined personal identification number, collation input information (hereinafter simply referred to as “matching collation input history information”), and information specifying the extracted cumulative information in the collation information storage unit 410 (hereinafter referred to as “matching collation input history information”). Simply referred to as “collation target designation information”). Information such as a personal identification number, input history information for matching / matching, and information to be matched / designated is information used for matching matching described later performed by the matching / matching unit 1160.
These pieces of information may be stored in advance in a user response terminal owned by the user of the route information accumulating apparatus 100, or a plurality of pieces of such information are stored in the user response terminal. May be selected by the user using a selection button or the like. The personal identification number, the matching history input history information, and the verification target designation information are information that only the person who has the user response terminal can know.
[0028]
The matching collation unit 1160 collates the personal identification number included in the response information input via the communication unit 1150 with the personal identification number stored in advance in the collation information storage unit 410 (hereinafter simply referred to as “personal identification number verification”). When the two match, the action history information in the matching information storage unit 410 is extracted by the extraction unit 420 based on the matching target designation information, and the extracted action history information and the matching matching input history information Are matched (hereinafter, simply referred to as “history matching check”). A combination of password verification and history matching verification is called matching verification. When it is determined that the match is confirmed, the match verification unit 1160 outputs a signal indicating that the user has been authenticated to the determination unit 440.
[0029]
Next, the operation of the route information matching apparatus 1100 according to the second embodiment of the present invention will be described. FIG. 12 is a flowchart showing the flow of processing in the route information matching device 1100. Of the steps in the flowchart shown in FIG. 12, the same steps as those in the flowchart shown in FIG.
Here, it is assumed that a predetermined personal identification number is stored in the collation information storage unit 410 (see FIG. 11) in advance.
If it is determined in step S1040 that the person is not the person, the matching process is performed (S1260). FIG. 13 is a flowchart showing the flow of the matching process. Hereinafter, the matching process will be described in detail with reference to FIG. 13 (see FIG. 11 as appropriate).
If it is determined that the user is not the person himself / herself, an unrecognizable signal is transmitted to the user response terminal via the communication unit 1150 (S1261). Next, it waits for the user who has received the unrecognizable signal to send response information, and receives the response information if it is sent (S1262, S1263). When the response information is received, the personal identification number included in the response information and the personal identification number stored in the verification information storage unit 410 are collated (S1264), and it is determined whether or not they match (S1265). If it is determined that they match, the process proceeds to step S1266. If it is determined that they do not match, the process proceeds to S1270. In step S1266, the action history information stored in the collation information storage unit 410 is extracted via the extraction unit 420 and is designated based on the collation target designation information included in the response information (S1266). History matching is performed between the received information and the matching matching input history information (S1267), and it is determined whether or not they match (S1268). If it is determined in step S1268 that they match, a match verification signal indicating that the match is matched is output to the determination unit 440 (S1269). If it is determined that there is no match in the password verification (S1265) or the history match verification (S1268), a match verification impossible signal indicating that the match verification cannot be performed is output to the determination unit 440 (S1270).
[0030]
Returning to FIG. 12, when the match verification process is completed, it is determined whether the signal output from the match verification unit 1160 is a match verification signal or a match verification failure signal (S1280). If the signal is determined to be a coincidence verification signal, the authentication signal is output to the user information processing apparatus by the determination unit 440 (S1050). If the signal is determined to be a coincidence verification impossible signal, the authentication failure signal is transmitted via the determination unit 440. In addition to being transmitted to the user information processing apparatus, an unrecognizable signal is transmitted to the user response terminal via the communication unit 1150 (S1290), and the process ends. When the process of step S1050 is completed, the action history information stored in the second storage area in step S1010 is moved to the first storage area.
[0031]
As described above, the route information matching device according to the second exemplary embodiment of the present invention is configured such that the password and the action history stored in the route information matching device are stored even if the user is not authenticated by the first matching. Since the information is checked against the password and the action history information transmitted from the user response terminal, personal authentication can be performed based on the user's action pattern.
[0032]
<< Third Embodiment >>
FIG. 14 is a diagram showing a block configuration of a personal authentication apparatus according to the third embodiment of the present invention. The personal authentication device 1400 can be mounted on a vehicle such as an automobile and used for driver personal authentication. Further, when the vehicle engine is turned on in a state where personal authentication has not been performed, a warning message can be issued. Hereinafter, a vehicle equipped with the personal authentication device 1400 is referred to as a user-mounted vehicle.
In FIG. 14, the personal authentication device 1400 associates a clock 1410 that outputs time information, a position acquisition unit 1420 that acquires position information, and time information output from the clock 1410 with position information output from the position acquisition unit 1420. The storage unit 1430 to be stored, the extraction unit 1440 for extracting predetermined information from the action history information stored in the storage unit 1430, the predetermined information extracted by the extraction unit 1440 and an external device (hereinafter simply referred to as “specific response”). A matching / collating unit 1450 that performs collation with information input from the terminal) and a specific response terminal, receives predetermined information including the information for collation from the specific response terminal, and other predetermined information The communication unit 1460 for transmitting to the specific response terminal, the drive state detection unit 1470 for detecting the on / off of the drive unit of the user-equipped vehicle, and each Configured to include a control unit 1480 for controlling.
Here, the specific response terminal is not limited to one device, and may be a plurality of devices or a plurality of types of devices, and includes an information terminal owned by the user. Further, the time information output from the clock 1410 may include, for example, year, month, day, hour, minute, and second information, and may be output at predetermined time intervals.
[0033]
The position acquisition unit 1420 may have, for example, a GPS (Global Positioning System) reception function and a signal processing function, and may perform signal processing based on a signal received by the GPS reception function to detect a current position. The information on the current position detected by the position acquisition unit 1420 is expressed as, for example, latitude and longitude information and is output to the storage unit 1430. Further, the current position may be detected using a gyro sensor, or other methods may be applied.
The storage unit 1430 is configured by a non-volatile memory or the like, and stores action history information and other information obtained by associating position information and time information. Here, the action history information may be, for example, a table format in which latitude and longitude information is associated with time, or may be specified based on time information. Note that the storage unit 1430 stores a password including a password for collation performed by the match collation unit 1450.
The extraction unit 1440 is a means for extracting a personal identification number and action history information, and the extracted personal identification number and behavior history information can be used in the matching verification performed by the matching verification unit 1450. Further, part or all of the extracted action history information may be transmitted to the specific response terminal via the communication unit 1460. This is because the driving of the engine by a person who cannot obtain matching is an event to be monitored, and the action history information after driving the engine is transmitted to the specific response terminal to provide information useful for the monitoring. .
[0034]
The communication unit 1460 receives a signal transmitted from the specific response terminal (hereinafter simply referred to as “response information”) and outputs the signal to the control unit 1480. Here, in the response information, a predetermined personal identification number, input information for verification (hereinafter simply referred to as “matching verification input history information”), and information (hereinafter referred to as matching verification input history information in the storage unit 1430). Simply referred to as “collation target designation information”). The personal identification number, the input history information for matching / matching, the verification target designation information, and the like are information used by the matching / matching unit 1450 for the later-described matching.
The communication unit 1460 is configured to transmit predetermined information to the specific response terminal when the current position has changed by a predetermined range or more before the match verification is performed by the match verification unit 1450. Here, the “predetermined information” includes, for example, that the personal authentication device 1400 has been accessed by a person who has not been authenticated, the identification number of the user-equipped vehicle that has made the access, the time that the access has been made, etc. Action history information, current position, time, and the like after the current position of the user is changed.
The matching verification unit 1450 uses the personal identification number read by the extraction unit 1440 and the information extracted from the action history information based on the verification designation information by the extraction unit 1440 and the response information received by the communication unit 1460. I do. That is, the read password number and the password number included in the response information are collated, and the extracted information is matched with the matching verification input history information included in the response information. It is assumed that the response information is from the principal, and is not the response information from the principal at other times. Here, the “principal” refers to a person having a personal identification number and action history information stored in the storage unit 1430.
[0035]
For example, when the user-equipped vehicle is an automobile having an engine, the driving state detection unit 1470 detects that the automobile is in a movable state by turning on an ignition switch of the engine, and performs predetermined information (hereinafter simply referred to as “predetermined information”). On the other hand, when the ignition switch is turned off, it is detected that the vehicle has stopped and predetermined information (hereinafter simply referred to as “off information”) is output. You may output to the control part 1480. The driving state including the movable state and the stopped state may be determined by detecting the rotational speed of the engine, for example.
The control unit 1480 includes a CPU (Central Processing Unit) and may include a ROM (Read Only Memory), a RAM (Random Access Memory), and the like. Then, the control unit 1480 instructs the position acquisition unit 1420 to acquire position information, and controls the operation of each unit such as writing the position information output from the position acquisition unit 1420 to the storage unit 1430 in association with time information. To do. These operations may be performed based on a program recorded in the ROM. The RAM temporarily stores data such as parameters necessary for execution of processing.
In addition, when a match is not obtained by match check unit 1450, control unit 1480 associates the time information output from clock 1410 with the position information output from position acquisition unit 1420, and outputs the information to communication unit 1460. Then, it is transmitted to the specific response terminal via the communication unit 1460. The action history information after the current position has changed may be transmitted via the communication unit 1460. Here, the specific response terminal may be an apparatus of a user or an administrator of the user-equipped vehicle, or may be another predetermined apparatus.
[0036]
The operation of the personal authentication device 1400 according to the third embodiment of the present invention will be described below. FIG. 15 is a flowchart showing a flow of processing in the personal authentication device 1400. In the third embodiment of the present invention, the user transmits the response information to the personal authentication device 1400 prior to driving the vehicle, and when the user is not recognized as the user by transmitting inappropriate response information, the specific response terminal A description will be given of a case where action history information is transmitted in order to alert the user of the vehicle when the engine of the vehicle is driven without transmitting the stop signal by transmitting the stop signal from the vehicle and driving the engine of the vehicle. (See FIG. 14 as appropriate). Here, the stop signal is a signal input to the personal authentication device 1400 in order to stop the authentication operation.
First, it is determined whether or not there is an input to the control unit 1480, and this process is repeated until there is an input (S1501). When it is determined that there is an input to the control unit 1480, the input information is received (S1502). Next, it is determined whether the input information is response information or on-information (S1503). If the input information is response information, the process proceeds to step S1504. If the input information is ON information, the process proceeds to step S1509. If the input information is not any information, the process proceeds to step S1509. It returns to step S1501 and repeats the process of each said step.
If it is determined in step S1503 that it is response information, a matching process is performed. That is, the personal identification number stored in the storage unit 1430 and the personal identification number included in the response information are collated and designated based on the collation target designation information in the action history information stored in the storage unit 1430. The part and the matching matching input history information included in the response information are collated (S1504). If both match, the person is identified, and otherwise the person is not identified (S1505).
[0037]
If it is determined in step S1505 that the matching is matched, the process ends. On the other hand, if it is determined in step S1505 that they do not match, the personal authentication device 1400 has been accessed by a person who has not been authenticated, the identification number of the user-equipped vehicle that has made the access, the time that the access has been made, etc. (Hereinafter, simply referred to as “non-collation information”) is transmitted to the specific response terminal (S1506).
When the non-verification information is transmitted, it is determined whether or not a stop signal is input via the communication unit 1460 (S1507). If it is determined in step S1507 that a stop signal has been received, the process ends. If it is determined that a stop signal has not been received, it is determined whether or not on-information has been input from the drive state detector 1470 ( S1508). If it is determined in step S1508 that ON information has been input, the process proceeds to step S1509. If it is determined that ON information has not been input, the process returns to step S1506, and the above process is repeated. If a stop signal is received in step S1507, a process for stopping the engine may be performed thereafter.
Next, when it is determined in step S1503 or S1508 that ON information is input, the action history information is transmitted to the specific response terminal via the communication unit 1460 (S1509). Note that the information transmitted to the specific response terminal in step S1509 is not limited to the action history information, and the current position information and time information may be transmitted. The process of step S1509 is continued until a stop signal is input (S1510).
[0038]
As described above, the personal authentication device according to the third embodiment of the present invention stores the user's action history information and passwords accumulated in the past in the storage unit, and based on the response information. Therefore, in addition to collating passwords with each other, the degree of freedom to be collated can be increased in collating behavior history information, and personal authentication can be performed based on the user's behavior pattern.
[0039]
In the first to third embodiments of the present invention described above, the personal authentication method for performing each process using the route information accumulating device, the route information matching device, and the personal authentication device has been described. It is also possible to carry out each process using a predetermined computer in which a personal authentication program is installed. The personal authentication program can be recorded on a predetermined recording medium. Besides the method of loading the personal authentication program from the predetermined recording medium into a computer, the personal authentication program can be connected to a network from a predetermined server or the like. The same effect can be obtained by a method of obtaining the file format via the computer and executing the file format on the computer. Furthermore, using a network makes it easy to update and distribute the personal authentication program.
[0040]
<< Other embodiments >>
The preferred embodiments of the present invention have been described above, but the present invention is not limited to the above-described embodiments, and various modifications can be made without departing from the spirit of the present invention. For example, the following embodiments can be considered.
(1) In the first embodiment, as shown in FIG. 3, the configuration in which the communication unit 310 is added to the path information accumulating device instead of the operation unit 110 has been described. It is not limited to setting and inputting via the unit 310, and a person other than the user may operate via the communication unit 310. For example, in order to realize strict personal authentication, a person who performs personal authentication makes only the action history information on a specific day, a specific time zone, the target of collation as past action history information. It may be used to collect action history information for that time zone on that day.
(2) In the first embodiment, it has been described that “predetermined days” used when extracting action history information is specified as a password, but compression logic such as a hash function is used. Then, a code obtained by compressing the data of the plurality of days may be used as the personal identification number. Thereby, the length of the personal identification number can be shortened, and the user can easily store the personal identification number.
[0041]
【The invention's effect】
According to the first aspect of the invention, the past action history information and the latest action history information are compared and collated, and based on the result of the comparison and collation, it is determined whether or not they belong to the same person. Therefore, personal authentication based on the action history information of the user is possible.
[0042]
According to the second aspect of the present invention, the information that has already been registered and the predetermined information received from the second external device are compared and collated, and based on the result of the comparison and collation, they are those of the same person. Since it is determined whether or not there is, it is possible to diversify information input for the verification in the verification for personal authentication.
[0043]
According to the invention of claim 3, since it is mounted on the vehicle and performs personal authentication, the state of the drive unit of the vehicle is monitored, and those results are transmitted to the third external device on the user side. Can know the result of personal authentication and the state of the vehicle.
[0044]
According to the invention according to claim 4, the past action history and the latest action history are compared and collated, and based on the result of the comparison collation, it is determined whether or not they belong to the same person. Personal authentication based on the user's behavior history is possible.
[0045]
According to the invention according to claim 5, since personal authentication is performed based on information input by another device called the second external device once personal authentication fails, in verification for personal authentication, It is possible to diversify information input for the verification. In addition, since the information includes a code number and information designating a target to be verified, it is possible to increase the degree of freedom of the verification target in verification for personal authentication.
[0046]
According to the invention which concerns on Claim 6, the ON state of the drive part of a vehicle, the input state of a user's response information, and a collation state are monitored, and the result of personal authentication and the alerting | reporting for warning according to the state Is transmitted to the third external device, so that the original user having the third external device can know the result of the personal authentication and the use state of the vehicle by the non-user.
[0047]
According to the seventh aspect of the invention, the personal authentication method according to any one of the fourth to sixth aspects can be realized by causing the computer to execute the personal authentication program. It is possible to realize personal authentication based on the action history of the person.
[0048]
As described above, the present invention can realize a means for performing personal authentication based on information of a behavior pattern unique to a user, not biometric information.
[Brief description of the drawings]
FIG. 1 is a diagram showing a block configuration of a path information accumulating apparatus according to a first embodiment of the present invention.
FIG. 2 is a flowchart showing a flow of processing in the path information accumulating apparatus according to the first embodiment of the present invention.
FIG. 3 is a diagram showing a block configuration of a path information accumulating apparatus according to the first embodiment of the present invention.
FIG. 4 is a diagram showing a block configuration of a route information matching device according to the first embodiment of the present invention.
FIG. 5 is a diagram conceptually showing action history information according to the first exemplary embodiment of the present invention.
FIG. 6 is a diagram showing one history constituting extracted cumulative information according to the first embodiment of the present invention in association with a curve in a three-dimensional space.
FIG. 7 is an explanatory diagram illustrating an example of a method for evaluating route matching in route matching according to the first embodiment of the present invention.
FIG. 8 is an explanatory diagram showing an example of a method for evaluating route matching in route matching according to the first embodiment of the present invention.
FIG. 9 is an explanatory diagram showing an example of a method for evaluating route matching in route matching according to the first embodiment of the present invention;
FIG. 10 is a flowchart showing a flow of processing in the path information matching apparatus according to the first embodiment of the present invention.
FIG. 11 is a diagram showing a block configuration of a path information matching device according to a second embodiment of the present invention.
FIG. 12 is a flowchart showing a flow of processing in the path information matching apparatus according to the second embodiment of the present invention.
FIG. 13 is a flowchart showing a flow of a matching process according to the second embodiment of the present invention.
FIG. 14 is a diagram showing a block configuration of a personal authentication apparatus according to a third embodiment of the present invention.
FIG. 15 is a flowchart showing a flow of processing in the personal authentication apparatus according to the third embodiment of the present invention.
[Explanation of symbols]
100, 300 Route information accumulator
110 Operation unit
120, 1410 clock
130, 1420 Position acquisition unit
140, 1430 Storage unit
150, 350, 1480 control unit
310, 1050, 1460 communication unit
400, 1100 Route information verification device
410 User storage
420, 1440 extraction unit
430 verification unit
440, 1040 judgment part
510 Input information for verification on the day
520 Past extracted cumulative information
710, 810 Reference route
720, 820 Input path for verification
830 Tolerance range of reference path
1060, 1450 Match matching part
1400 Personal authentication device
1470 Drive state detector
S Start point of history
E End of history
ts Start time
te End time
xs x coordinate of start point
xe x coordinate of the end point
ys y-coordinate of start point
ye y coordinate of the end point

Claims (9)

Time history information acquired at a predetermined time interval is associated with position information at the time when the time information is acquired, and past behavior history information is previously stored with respect to behavior history information in which a series of user actions are stored. A user storage unit for storing and further storing newly input action history information;
A plurality of behavior history information used for collation for personal authentication is extracted as extracted cumulative information from past behavior history information stored in advance in the user storage unit, and personal authentication is performed from the newly input behavior history information. An extraction unit that extracts input information for collation used for collation for
The required time is calculated by subtracting the initial time from the end time of the series of user actions stored in the action history information constituting the extracted cumulative information, and the plurality of actions are calculated based on the calculated required time. An average required time of history information is calculated, time information of each of the plurality of action history information is scaled so that a required time of the plurality of action history information becomes the average required time, and the scaled plurality The collation part which produces | generates collation reference | standard information by calculating | requiring the average value for every said positional information matched with the time information of each action history information, and collates the produced | generated collation reference | standard information and the said input information for collation When,
Based on the result of collation performed by the collation unit, it is determined whether or not the newly input action history information belongs to a person having the past action history information, and the result of the determination is shown. A determination unit for outputting a signal to the first external device;
A personal authentication device comprising: The collation unit
As a position where the user passes,
Whether the arrival time, departure time, and stay time of the feature position in the verification input information are within a predetermined range with respect to the arrival time, departure time, and stay time of the feature position in the verification reference information To check whether or not
The personal authentication device according to claim 1. The collation unit
Each position information acquired from a series of user actions in the verification input information and each position information within the required time in the verification reference information are regarded as a path of two-dimensional information, and the consistency of the path is determined. To do
The personal authentication device according to claim 1. The personal authentication device includes:
Together with each of the above parts
A communication unit for communicating with the second external device;
A matching collation unit for collating the information stored in the user storage unit with the information input via the communication unit;
The personal authentication device according to any one of claims 1 to 3, further comprising: A personal authentication method in a personal authentication device for performing personal authentication on a person who is trying to access a security management target,
The personal authentication device is:
Time history information acquired at a predetermined time interval is associated with position information at the time when the time information is acquired, and past behavior history information is previously stored with respect to behavior history information in which a series of user actions are stored. A user storage unit for storing and further storing newly input action history information;
Is extracted as the extracted accumulated information a plurality of action history information are use in collation for from past behavior history information stored in advance in the user storage unit personal authentication individual from the newly inputted action history information Extracting verification input information used for verification for authentication;
The required time is calculated by subtracting the initial time from the end time of the series of user actions stored in the action history information constituting the extracted cumulative information, and the plurality of actions are calculated based on the calculated required time. An average required time of history information is calculated, time information of each of the plurality of action history information is scaled so that a required time of the plurality of action history information becomes the average required time, and the plurality of scaled plural Generating collation reference information by obtaining an average value for each of the position information associated with the time information of each of the action history information, and collating the generated collation reference information with the collation input information; ,
Based on the result of collation performed by the collation unit, it is determined whether or not the newly input action history information belongs to a person having the past action history information, and the result of the determination is shown. Outputting a signal to a first external device;
A personal authentication method comprising: The personal authentication device includes:
As a position where the user passes,
Whether the arrival time, departure time, and stay time of the feature position in the verification input information are within a predetermined range with respect to the arrival time, departure time, and stay time of the feature position in the verification reference information To check whether or not
The personal authentication method according to claim 5. The personal authentication device includes:
Each position information acquired from a series of user actions in the verification input information and each position information within the required time in the verification reference information are regarded as a path of two-dimensional information, and the consistency of the path is determined. To do
The personal authentication method according to claim 5. The personal authentication device includes:
Furthermore, a communication unit that performs communication with the second external device is provided,
Collating the information stored in the user storage unit with the information input via the communication unit,
The personal authentication method according to any one of claims 5 to 7, wherein the personal authentication method is executed by being included. The computer, personal authentication program characterized by realizing the personal authentication method according to any one of claims 5 to 8.

Images