JP4690264B2 - Authentication apparatus and program - Google Patents

Description

  The present invention relates to an authentication device and a program, and more particularly to an authentication device for generating an authentication element group used for authentication of a person to be authenticated, and an authentication program for causing a computer to function as the authentication device.

  For example, when a user who purchases goods on a website is instructed to perform a settlement via a terminal to a settlement agency, or a financial transaction such as a transfer is performed from the user to a financial institution via a terminal (including ATM). When instructed, in order to prevent a third party from impersonating a legitimate user and performing goods purchases or financial transactions, when the payment or financial transaction is instructed, the user is a legitimate user. Electronic authentication is performed to confirm whether or not. This electronic authentication is generally performed by allowing the person to be authenticated to input an ID and a password and confirming whether or not the input password is registered in association with the input ID. However, authentication strength (probability that a randomly generated character string does not match a regular password) in electronic authentication using ID and password depends on the password length (number of password combinations), so the authentication strength is high. In order to realize electronic authentication, the user needs to store a long password, which is a great burden on the user.

  For this reason, a candidate presentation / selection method has been proposed as another authentication method applicable to electronic authentication. This candidate presentation / selection method presents a plurality of options (for example, images, etc.) to the person to be authenticated, and causes the person to be authenticated to select an option that has been set as a correct answer from among the plurality of presented options, and sets it as a correct answer. The authenticated person is authenticated by determining whether the selected option is correctly selected by the authenticated person. The candidate presentation / selection method can also reduce the burden on the user by appropriately determining the type of option.

In relation to the above, Non-Patent Document 1 sets the correct answer based on the difference in appearance frequency by measuring the appearance frequency of each option presented to the person to be authenticated as an issue of the candidate presentation / selection method It is described that there is a vulnerability that makes it possible to perform so-called “development” in which a third party other than a legitimate user can discriminate between the selected option and other options (decoy candidates).
“Reserch Survey Blog” JANUARY 06,2006, [online], [Search May 23, 2006], Internet <URL: http://netaro.ddo.jp/~sec/survey/archives/cat_ee.html>

  As for the above candidate presentation / selection methods, the authentication strength is limited, and as with authentication methods using ID and password, if a third party other than a legitimate user tries to authenticate many times, it will eventually reach the correct answer. Although there are vulnerabilities, this vulnerability can be improved by setting authentication environment conditions such as the number of options to be presented so that the number of combinations of answers is sufficiently large.

  Specifically, for example, in the candidate presentation / selection method authentication, a plurality of options presented to the person to be authenticated (authentication element group consisting of jn elements) may be used as correct elements in the authentication element group. Jn from a plurality of preselected elements (correct answer candidate elements) and a plurality of elements (incorrect answer candidate elements) selected in advance to be used as elements other than correct elements (incorrect answer elements) in the authentication element group It can be generated by selecting a number of elements, but if the number of elements jn, the number of correct candidate elements tn, and the number of incorrect answer candidate elements dn are increased, the set of answers Since the number of combinations, that is, the number of combinations of authentication element groups presented to the person to be authenticated can be increased, the authentication strength can be improved. In addition, the number of correct elements included in the authentication element group is not constant, and a range is given (the number of correct elements included in the authentication element group is set to a minimum number jb or more and a maximum number jt or less (provided that jb < In the case of jt <jn, jn is the number of elements constituting the authentication element group)), the authentication strength can be improved by increasing the number of combinations of the authentication element groups.

  However, in the candidate presentation / selection method authentication, it is necessary for a legitimate user to memorize all correct candidate elements. For example, various users having different memory skills and proficiency levels for the candidate presentation / selection method authentication. If the number jn of elements constituting the authentication element group and the number tn of correct answer candidate elements are increased in an environment where the authentication is received, authentication may become a heavy burden for some users. Therefore, the number jn of elements constituting the authentication element group, the number tn of correct candidate elements, the number dn of incorrect answer candidate elements, the maximum number jt and the minimum number jb of correct elements in the authentication element group (where jb ≦ Authentication environment conditions such as jt <jn) are set for each user according to the attributes of each user, and at the time of authentication, the authentication environment conditions are set according to the authentication user (authenticated user). Authentication elements are generated and presented to the person to be authenticated to prevent an excessive burden on individual users, while authentication is performed by combining other methods such as limiting the number of authentication attempts. It is desirable to configure so as to ensure strength.

  As described above, there are several methods for generating an authentication element group according to the authentication environment conditions set for each individual user. For example, tn correct answer candidate elements and dn misunderstandings can be considered at the time of authentication. After randomly extracting jn elements from the candidate elements, it is determined whether the number of correct candidate elements included in the extracted jn elements is not more than the maximum number of correct elements jt and not less than the minimum number of correct elements jb. If the determination is negative, jn elements are extracted again, and if the determination is affirmative, the extracted jn elements may be used as an authentication element group (referred to as a first generation method). . The first generation method does not need to generate and store the authentication element group in advance, and can reduce the storage capacity of the storage device that stores the authentication element group. Since it is necessary to repeat selection of jn elements until the condition that the number of correct elements included in jn elements is the maximum number jt or less and the minimum number jb or more is satisfied, the time required to generate the authentication element group Is not constant, and there is a problem that processing delay may occur due to the long time required for generating the authentication element group.

  As a second generation method, for example, for each individual user, the first generation method is applied to generate a plurality of authentication element groups that satisfy the above conditions in advance (for example, the same number as the number of combinations). The generated authentication element groups are stored in the storage device in association with individual user identification information, and at the time of authentication, among the plurality of authentication element groups associated with the user identification information. Therefore, a method of randomly selecting an authentication element group to be used for authentication, reading it from a storage device, and using it can be considered. In the second creation method, it is not necessary to generate an authentication element group at the time of authentication, and an authentication element group used for authentication can be obtained simply by selecting and reading the authentication element group. Although it can be surely generated in almost constant time, it is necessary to store a plurality of authentication element groups for each individual user. Therefore, although it depends on the number of users, the authentication element group is stored. Therefore, there is a problem that a huge storage area is required.

The present invention has been made in consideration of the above facts, and even when authentication environment conditions are set for each individual person to be authenticated, the correct answer element is revealed by the third party while reducing the storage capacity of the storage means. It is an object of the present invention to provide an authentication apparatus and an authentication program capable of generating an authentication element group that is not discriminated in an almost constant time and authenticating a person to be authenticated .

In order to achieve the above object, an authentication apparatus according to the invention described in claim 1 includes a first storage unit that stores a plurality of pieces of information of elements that can be used as constituent elements of an authentication element group used for authentication of a person to be authenticated; The number tn of correct candidate elements to be used as correct answer elements in the authentication element group, which defines the authentication environment conditions for authentication of the authentication subject, the incorrect answer candidate elements to be used as incorrect answer elements in the authentication element group Number dn, number jn of elements constituting the authentication element group (where jn is determined according to the authentication strength required in the corresponding authentication environment condition), maximum number jt of correct answer elements in the authentication element group, and A component of an authentication element group in which at least one of each parameter of the minimum number jb (where jb ≦ jt <jn) is generated based on each of a plurality of types of authentication environment conditions different from other authentication environment conditions Tn correct candidate elements and dn The pattern of the authentication element group that defines which one of the correct candidate elements is used for each of the first to jn elements constituting the authentication element group is set for each authentication environment condition. Authentication environment for acquiring a plurality of types of second storage means for storing, and attribute information of a person to be authenticated from attribute information registered in advance for each individual person to be authenticated, and applying it to authentication of the person to be authenticated to be processed As a condition, a detection unit that detects an authentication environment condition according to an attribute of the authentication target person represented by the acquired attribute information, and a pattern of the authentication element group stored in the second storage unit A single authentication element group pattern that matches the authentication environment condition detected by the detection means is selected at random, and information is stored in the first storage means based on the selected authentication element group pattern. Has been multiple The authentication comprising selecting or extracting a total of jn elements including maximum jt and minimum jb correct elements from tn correct answer candidate elements and dn incorrect answer candidate elements selected or extracted from the elements. A generating means for generating a group of elements, and jn elements constituting the authentication element group generated by the generating means are each presented to the person to be authenticated, and correct elements among the jn elements presented only contains an authentication means for performing authentication of the person to be authenticated by causing specified person to be authenticated, said corresponding individual the pattern of the authentication element group is stored in the second storage means authentication environmental conditions The number of correct answer candidate elements tn and the number of incorrect answer candidate elements dn are determined or obtained after determining or acquiring one of the number tn of correct answer candidate elements and the number dn of correct answer candidate elements.

The other value out of the number tn of correct candidate elements and the number dn of incorrect answer candidate elements satisfying the condition is calculated, and the value obtained by the operation is calculated from the number tn of correct candidate elements and the number dn of incorrect answer candidate elements. By making it an integer as the other value, the appearance frequency of each of tn correct candidate elements in the authentication element group and the appearance frequency of each of dn incorrect answer candidate elements in the authentication element group The pattern of the authentication element group corresponding to each individual authentication environment condition, which is preset so as to minimize the difference between the two, and stored in the second storage unit, A plurality of types are generated in advance for each authentication environment condition and stored in the second storage means.

In the first aspect of the invention, a plurality of pieces of information on elements that can be used as constituent elements of the authentication element group used for authenticating the person to be authenticated are stored in the first storage means. The element stored in the first storage means may be information that can be presented to the person to be authenticated (information that the person to be authenticated can recognize visually or audibly). For example, the content is displayed during presentation to the person to be authenticated. there (specifically, for example, a character string or a still image, etc.) does not change information may be a, information (specifically the contents provided to the person to be authenticated during presentation to the person to be authenticated is changed in time series For example, it may be a moving image or music. Further, in the invention described in claim 1, as the correct answer candidate element and the incorrect answer candidate element, individual elements whose information is stored in the first storage means may be used as they are, or information is stored in the storage means. and the individual elements are found in the case of the equivalent content provided to the person to be authenticated during presentation to the person to be authenticated is a time-series information that changes in time series, of the individual information in the storage means is stored Elements extracted from the elements may be used as correct candidate elements and incorrect candidate elements. In addition, when elements extracted from individual elements whose information is stored in the storage means are used as correct candidate elements and incorrect answer candidate elements, the number of elements extracted from the individual elements whose information is stored in the storage means is One may be sufficient and plural may be sufficient.

  Here, the authentication environment conditions for the authentication subject (the number tn of correct candidate elements used as correct elements in the authentication element group, the number tn of correct candidate elements used as incorrect elements in the authentication element group dn Even if the number of elements constituting the authentication element group jn and the maximum number jt and minimum number jb of correct elements in the authentication element group are set for each individual user, It is unlikely that the authentication environment conditions for authentication of different authentication persons are different from each other, and there may be multiple authentication persons for each authentication environment condition to which the same authentication environment condition is set. high. Then, the authentication environment condition for the authentication subject (the number tn of correct candidate elements used as correct elements in the authentication element group tn, the number dn of incorrect answer candidate elements used as incorrect elements in the authentication element group, If the number jn of elements constituting the authentication element group and the parameters of the maximum number jt and the minimum number jb of correct elements in the authentication element group) are the same, the individual elements in the generated authentication element group Even if they are different, the patterns of authentication element groups that can be generated are the same.

In the first aspect of the invention, this is used, and the number tn of correct candidate elements to be used as correct elements in the authentication element group that defines authentication environment conditions for authentication to the authenticated person in the second storage means, authentication The number of incorrect answer candidate elements used as incorrect elements in the element group dn, the number of elements constituting the authentication element group jn (where jn is determined according to the authentication strength required under the corresponding authentication environment conditions) Each of a plurality of types of authentication environment conditions in which at least one of the parameters of the maximum number jt and the minimum number jb (where jb ≦ jt <jn) of correct elements in the authentication element group is different from other authentication environment conditions The first to jnth elements constituting the authentication element group, which of tn correct answer candidate elements and dn incorrect answer candidate elements are used as the constituent elements of the authentication element group generated in units of The pattern of authentication element group that defines each element of A plurality of types are stored for each individual authentication environment condition. In addition, as the pattern of the authentication element group stored in the second storage means, for example, as the information indicating the first to jn elements constituting the authentication element group, the first to jn elements are directly used. Instead of the identification information to point to, pointer information (for example, what number element) that indirectly indicates which element from the first to jn-th elements is tn correct answer candidate elements or dn incorrect answer candidate elements The information in which the pointer information) is set can be used.

According to the first aspect of the present invention, the attribute information of the authentication target person to be processed is acquired from the attribute information registered in advance for each individual user to be authenticated by the detecting means, and applied to the authentication of the user to be processed. As an authentication environment condition to be performed, an authentication environment condition corresponding to the attribute of the person to be authenticated represented by the acquired attribute information is detected, and the generation unit stores the pattern of the authentication element group stored in the second storage unit A single authentication element group pattern that matches the authentication environment condition detected by the detection means is randomly selected, and information is stored in the first storage means based on the selected authentication element group pattern. Select or extract a total of jn elements including maximum jt and minimum jb correct elements from tn correct candidate elements and dn incorrect candidate elements selected or extracted from a plurality of stored elements Authentication element extracted Create a group. Note that generating an authentication element group used for authentication from the selected authentication element group pattern replaces the pointer information set in the selected authentication element group pattern with the identification information, for example. Can be done by. Then, the authentication unit presents jn elements constituting the authentication element group generated by the generation unit to the person to be authenticated, and causes the person to be authenticated to specify the correct element among the jn elements presented. In this way, the person to be authenticated is authenticated.

As described above, in the invention described in claim 1, among the authentication element group patterns stored in the second storage unit, a single authentication element group pattern that matches the detected authentication environment condition is randomly selected. Since the authentication element group is generated from the pattern of the selected authentication element group, the authentication element group can be generated in a substantially constant time. In addition, since a plurality of patterns of authentication element groups generated in units of each of a plurality of types of authentication environment conditions are stored in the second storage means, a plurality of authentication element groups that may be used for authentication are stored. as compared to the case where stored for each individual person to be authenticated, Ru can be reduced storage capacity required for storing the authentication element group (patterns).

  By the way, the vulnerability unique to the candidate presentation / selection method that enables the above-mentioned revealing is possible, if a malicious third party uses this vulnerability, it is a combination of authentication elements that are presented. There is a problem that there is a possibility that the correct answer may be reached with the number of trials much smaller than the average number of trials that can be calculated from the number of trials.

  As an example, there are 2 to 5 correct characters each time out of a total of 20 characters including 5 characters used as correct answers (correct candidate characters) and 15 characters used as incorrect answers (confused candidates). 10 characters are selected so that they are included, an authentication character string consisting of the selected 10 characters is presented to the person to be authenticated, and the correct character in the authentication character string is designated by the person to be authenticated. Consider a case in which a person to be authenticated is authenticated based on whether or not characters are correctly specified. Specifically, for example, there are five correct candidate characters A, B, C, D, and E, and misleading candidate characters are f, g, h, i, j, k, l, m, n, o, p, and q. , r, s, t = 15 "A, B, f, g, h, i, j, k, l, m", "n, o, p, q, r, s, t, C, D, E "," A, B, f, g, h, C, D, i, j, k "," A, l, B, m, C, n, D, o, E, p " Such an authentication character string is generated and presented every time.

In this example, the ratio between the appearance probability of each correct candidate character on the authentication character string and the appearance probability of each confusing candidate character on the authentication character string is calculated as follows. First, when the number of combinations (total number of patterns) of authentication character strings generated in this example is obtained, in the case where two correct characters are included in the authentication character string consisting of 10 characters. The number of combinations of authentication character strings (number of patterns) is ₅ C ₂ representing the number of combinations when two correct characters are selected from five correct candidate characters, and 15 misappropriate candidate characters. Is represented by a product of ₁₅ C ₈ representing the number of combinations in the case of selecting the remaining 8 characters. In addition, the number of combinations of authentication character strings in other cases in which 3 to 5 correct characters are included in the authentication character string can be obtained in the same manner, and the authentication characters generated in this example The number of combinations of columns (total number of patterns) can be obtained as the sum of the number of combinations of authentication character strings in each case as follows.
_{5 C 2 × 15 C 8 +} 5 C 3 × 15 C 7 + 5 C 4 × 15 C 6 + 5 C 5 × 15 C 5 = 156728

On the other hand, regarding the number of combinations of authentication character strings (total number of patterns) in which a specific correct candidate character is included as a correct character, two correct characters are included in the authentication character string consisting of 10 characters. The number of combinations of authentication character strings in the included case is the remaining number when a specific correct candidate character is selected as one of the correct characters in the authentication character string consisting of 10 characters. ₄ C ₁ representing the number of combinations in the case of selecting one correct character from four correct candidate characters, corresponding to the number of combinations of character strings consisting of 9 characters It is represented by a product of ₁₅ C ₈ representing the number of combinations when the remaining 8 characters are selected from the candidate characters. In addition, since the number of combinations of authentication character strings in other cases in which 3 to 5 correct characters are included in the authentication character string can be obtained in the same manner, a specific correct candidate character is a correct character. The number of combinations of the authentication character strings included as can be obtained as follows.
_{4 C 1 × 15 C 8 +} 4 C 2 × 15 C 7 + 4 C 3 × 15 C 6 + 4 C 4 × 15 C 5 = 87373

Similarly, the number of combinations of authentication character strings (total number of patterns) in which a specific confusing candidate character is included as a confusing character can be obtained as follows.
₅ C ₂ x ₁₄ C ₇ + ₅ C ₃ x ₁₄ C ₆ + ₅ C ₄ x ₁₄ C ₅ + ₅ C ₅ x ₁₄ C ₄ = 75361
From the above results, the probability that a specific correct candidate character appears on the authentication string is:
87373/156728 ≒ 55.7%
On the other hand, the probability that a specific confusing candidate character appears on the authentication string is
75361/156728 ≒ 48.1%
It becomes. The probability of occurrence of individual correct candidate characters on the authentication string is uniform (≒ 55.7%), and the probability of occurrence of individual misappropriate candidate characters on the authentication string is also uniform (≒ 48.1%). In this example, the appearance ratio of each correct candidate character and each confusing candidate character on the authentication string is
55.7: 48.1 ≒ 7: 6
It becomes. Therefore, in this example as well, if a malicious third party obtains multiple authentication character strings and measures the frequency of occurrence of individual characters on the obtained authentication character strings, Based on the difference in the appearance frequency of individual characters, it becomes possible to identify the correct candidate characters among the individual characters.

  On the other hand, in order to authenticate the authenticated person by presenting each element of the authenticating element group to the authenticated person and let the authenticated person specify the correct element in the authenticating element group, any number of elements When selecting a correct candidate from a correct candidate element group consisting of correct candidate elements and generating an authentication element group by selecting an incorrect answer candidate element group consisting of an arbitrary number of incorrect candidate candidates The appearance ratio (difference in appearance probability) of each correct answer candidate element and each incorrect answer candidate element on the element group is the number of correct answer candidate elements constituting the correct answer candidate element group and the uncertainties constituting the incorrect answer candidate element group. It varies depending on the number of correct answers. For example, in the example described above, if 100 misleading candidate characters are provided for five correct candidate characters, the appearance of individual correct candidate characters and individual incorrect candidate character strings on the authentication character string It has been confirmed by the inventor's trial calculation that the ratio increases to 5: 1 or more. Thus, the appearance ratio of each correct candidate element and each incorrect answer candidate element in the authentication element group changes according to the number of correct candidate elements and incorrect candidate elements used for generating the authentication element group. Therefore, the number of correct answer candidate elements and incorrect answer candidate elements used for generating the authentication element group is determined so that the appearance ratios of individual correct answer candidate elements and individual incorrect answer candidate elements in the authentication element group are equal. By adjusting the numbers of correct answer candidate elements and incorrect answer candidate elements, it is possible to prevent the correct answer elements from being discriminated by a third party due to the appearance.

  In addition, in order to authenticate the authenticated person by presenting each element of the authenticating element group to the authenticated person and causing the authenticated person to specify the correct element in the authenticating element group, a predetermined number ( Select up to jt and minimum jb correct answer elements from correct answer candidate elements consisting of (tn) correct answer candidate elements, and select a correct answer candidate element group consisting of a preset number (dn) of correct answer candidates. Accordingly, when generating an authentication element group by selecting incorrect elements such that the total number of selected elements is jn, jt to jb different correct numbers of correct answers are generated in the generated authentication element group. The appearance ratio of each case that contains elements usually matches the ratio of the number of combinations of authentication elements for each case (total number of patterns). Cases where the number of correct elements included in the element group is larger (the number of incorrect elements is smaller) If the appearance ratio of case) is relatively high, the probability of appearance of individual correct answer candidate elements in the authentication element group increases while the probability of appearance of individual incorrect answer candidate elements in the authentication element group If the appearance ratio of the case where the number of correct elements included in the authentication element group is smaller (the case where there are more incorrect elements) is relatively high, While the appearance probability in the authentication element group decreases, the appearance probability of each incorrect answer candidate element in the authentication element group increases.

  In this way, when the maximum number of correct elements included in the authentication element group is jt and the minimum is jb, the generated authentication element group has jt to jb as described above. By adjusting the appearance ratio of each case containing different numbers of correct answer elements, the probability of appearance of each correct candidate element and the probability of appearance of each incorrect answer candidate element in the authentication element group (ie, authentication The occurrence ratio of individual correct answer candidate elements and individual incorrect answer candidate elements in the authentication element group), and thus the appearance of individual correct answer candidate elements and individual incorrect answer candidate elements in the authentication element group By determining the appearance ratio of each case so that the ratio is equal, and generating the authentication element group according to the determined appearance ratio of each case, the correct element is prevented from being discriminated by a third party due to the appearance. it can.

Conditions for the number of correct candidate elements tn and the number of incorrect answer candidate elements dn to minimize the difference between the appearance frequency of each correct answer candidate element and the appearance frequency of each incorrect answer candidate element in the authentication element group Find below. Generate a group of authentication elements by selecting a total of jn elements, including a maximum of jt and a minimum of jb (jb ≦ jt <jn) correct elements from tn correct candidate elements and dn incorrect candidate elements In this case, the number of authentication element group combinations (total number of patterns) is expressed by the following equation (1).

The number of combinations of authentication element groups that include specific correct candidate elements as correct elements is expressed by the following equation (2):

The number of combinations of authentication element groups in which a specific incorrect answer candidate element is included as an incorrect answer element is expressed by the following equation (3).

Therefore, the number tn of correct candidate elements and the number dn of incorrect answer candidate elements are set so that the difference between the number of combinations represented by equation (2) and the number of combinations represented by equation (3) is minimized. If determined, the difference between the appearance frequency of each correct answer candidate element and the appearance frequency of each incorrect answer candidate element in the authentication element group can be minimized. The equation with the left side of equation (2) and the right side of equation (3) is the following formula:

Can be simplified as in the following equation (4).

In the first aspect of the present invention based on the above, the number tn and incorrect candidate elements of the correct candidate elements in each authentication environmental conditions which the pattern of the authentication element group is stored in the second storage means that correspond The number dn of correct answer candidate elements is determined or obtained after determining or acquiring one of the number tn of correct answer candidate elements and the number dn of incorrect answer candidate elements. The other value of the number dn is calculated, and the value obtained by the calculation is converted to an integer (for example, rounded off) as the other value of the number tn of correct candidate elements and the number dn of incorrect answer candidate elements So that the difference between the appearance frequency of each of the tn correct answer candidate elements in the authentication element group and the appearance frequency of each of the dn incorrect answer candidate elements in the authentication element group is minimized. The individual authentication environment set in advance and stored in the second storage means Wherein the authentication element group pattern corresponding to the condition in accordance with corresponding authentication environmental conditions that have been stored in advance, each generated more per individual authentication environmental conditions in the second storage means.

As a result, the number of correct answer candidate elements tn and the number of incorrect answer candidate elements are set so that the difference between the appearance frequency of each correct answer candidate element and the appearance frequency of each incorrect answer candidate element in the authentication element group is minimized. The number of correct candidate elements tn so that the difference between the appearance frequency of each correct answer candidate element and the appearance frequency of each incorrect answer candidate element in the authentication element group can be minimized while dn can be determined by a simple calculation. And a pattern corresponding to the result of adjusting the number dn of incorrect answer candidate elements is stored in the second storage means, and the frequency of appearance of each correct answer candidate element in the authentication element group and each incorrect answer candidate By generating the authentication element group so that the difference in the appearance frequency of the element is minimized, each element of the authentication element group is presented to the person to be authenticated, and the correct element is designated by the person to be authenticated. When authenticating a person to be authenticated, there is a correct element It can be prevented from being discriminated by any third party out. Therefore, according to the first aspect of the present invention, even when the authentication environment condition is set for each individual person to be authenticated, the correct element is discriminated by a third party by reducing the storage capacity of the storage means and by extracting the correct element. An authentication element group that never occurs can be generated in a substantially constant time to authenticate the person to be authenticated.

In the invention described in claim 1 , the authentication element group pattern corresponding to each authentication environment condition stored in the second storage means is, for example, the corresponding authentication environment as described in claim 2. Each of the combinations can be generated so as to cover all combinations of authentication element groups when jn elements are selected from tn correct answer candidate elements and dn incorrect answer candidate elements according to the conditions.

In the first aspect of the present invention, the authentication element group includes a plurality of patterns of authentication element groups stored in the second storage means, and the authentication element group includes jt to jb different numbers of correct answer elements. By making the pattern corresponding to the result of adjusting the appearance ratio of each case, the difference between the appearance frequency of each correct answer candidate element and the appearance frequency of each incorrect answer candidate element in the authentication element group is minimized. Specifically, for example, as described in claim 3 , for each authentication environment condition in which the pattern of the corresponding authentication element group is stored in the second storage unit, tn is determined according to the authentication environment condition. A total of jn elements including a maximum of jt and a minimum of jb (however, jb ≦ jt <jn) correct elements are selected from the correct answer candidate elements and dn incorrect answer candidate elements to generate an authentication element group If the generated authentication elements are jt to jb, Each p (i) the frequency of occurrence of each case where the number of correct answers contains elements that are made (where, i = jb, jb + 1, ..., jt) when a,

The appearance frequency p (i) of each case where the deviation S is minimized is obtained, the obtained appearance frequency p (i) of each case is set as the appearance ratio of each case, and stored in the second storage means. Each case in which the ratio of the number of authentication element groups corresponding to each authentication environment condition is set for the corresponding authentication environment condition This can be realized by generating a pattern of authentication element groups for each case so as to match the appearance ratio.

As a result, a pattern corresponding to the result of adjusting the appearance ratio of each case so that the difference between the appearance frequency of each correct answer candidate element and the appearance frequency of each incorrect answer candidate element in the authentication element group is minimized. Is stored in the second storage means, and the authentication element group is such that the difference between the appearance frequency of each correct answer candidate element and the appearance frequency of each incorrect answer candidate element in the authentication element group is minimized. When the authentication target is authenticated by presenting each element of the authentication element group to the person to be authenticated and specifying the correct element to the person to be authenticated, Discrimination between the three parties can be prevented.

The authentication device according to the invention described in claim 4 includes a first storage means for storing a plurality of pieces of information of elements that can be used as constituent elements of an authentication element group used for authentication of a person to be authenticated, and individual persons to be authenticated. The attribute information of the subject to be processed is acquired from the attribute information registered in advance, and the subject to be authenticated represented by the acquired attribute information as an authentication environment condition to be applied to the authentication of the subject to be processed Detecting means for detecting an authentication environment condition according to the attribute of the authentication, and the number tn of correct candidate elements to be used as correct elements in the authentication element group that defines the authentication environment condition for authentication of the person to be authenticated, for the authentication Number of incorrect answer candidate elements dn used as incorrect answer elements in the element group, number jn of elements constituting the authentication element group (where jn is determined according to the authentication strength required in the corresponding authentication environment condition) , Correct element in the authentication element group Wherein at least one of the parameters of the maximum number jt and the minimum number jb (where jb ≦ jt <jn) is set in units of each of a plurality of types of authentication environment conditions different from other authentication environment conditions Among the appearance ratios of each case in which a different number of correct elements from jt to jb are included in the element group for use, according to the appearance ratio of each case in the authentication environment condition detected by the detection means, A number line corresponding to a numerical range of a random number to be generated (≧ 0) is divided into a plurality of sections respectively corresponding to any of the cases according to the appearance ratio of the cases in the detected authentication environment condition, Authentication for generating a random number within the numerical range, determining which of the plurality of sections the generated random number belongs to, and generating the number of correct elements in a case corresponding to the section to which the generated random number belongs for The number i of correct answer elements in the element group is determined, and i correct answer elements are selected from tn correct answer candidate elements selected or extracted from the plurality of elements stored in the first storage means. The authentication element is selected by selecting (jn-i) incorrect answer elements from dn incorrect answer candidate elements selected or extracted from a plurality of elements whose information is stored in the first storage means. A generation unit for generating a group, jn elements constituting the authentication element group generated by the generation unit are respectively presented to the person to be authenticated, and a correct answer element among the presented jn elements is received. seen containing an authentication unit, the performing authentication of the person to be authenticated by causing specified authenticator, individual authentication environmental conditions appearing ratio of the respective casing is set, the number tn and incorrect answers correct candidate elements After determining or obtaining one value of the number of candidate elements dn In addition,
The other value out of the number tn of correct candidate elements and the number dn of incorrect answer candidate elements satisfying the condition is calculated, and the value obtained by the operation is calculated from the number tn of correct candidate elements and the number dn of incorrect answer candidate elements. By making it an integer as the other value, the appearance frequency of each of tn correct candidate elements in the authentication element group and the appearance frequency of each of dn incorrect answer candidate elements in the authentication element group The number of correct answer candidate elements tn and the number of incorrect answer candidate elements dn are set so that the difference between the cases is the tn according to the corresponding authentication environment condition. When jn elements are selected from the correct answer candidate elements and dn incorrect answer candidate elements, the number i of correct answer elements included in the selected jn elements is set for each case of jt to jb. Find the number of combinations, and make sure that each combination matches the ratio of the number of combinations for each case. Is set .

The invention described in claim 4 includes the same first storage means and detection means as those of the invention described in claim 1. In the invention according to claim 5, the number tn of correct candidate elements to be used as correct elements in the authentication element group, which defines the authentication environment conditions for authentication of the person to be authenticated, as incorrect elements in the authentication element group Number of incorrect answer candidate elements to use dn, number of elements constituting authentication element group jn (where jn is determined according to the authentication strength required under the corresponding authentication environment condition), correct element in authentication element group The authentication element group includes at least one of a plurality of authentication environment conditions in which at least one of the maximum number jt and the minimum number jb (where jb ≦ jt <jn) is different from other authentication environment conditions. An appearance ratio of each case including different numbers of correct answer elements among jt to jb is set, and the generation unit according to the invention described in claim 4 is an authentication environment detected by the detection unit. According to the appearance ratio of each case in the condition, A number line corresponding to a numerical range of random numbers to be generated (≧ 0) is divided into a plurality of sections corresponding to any of the cases according to the appearance ratio of each case in the detected authentication environment condition, and the numerical range A group of authentication elements for generating a random number in the group, determining which of the plurality of sections the generated random number belongs to, and generating the number of correct elements in a case corresponding to the section to which the generated random number belongs The number i of correct answer elements is determined, and i correct answer elements are selected from tn correct answer candidate elements selected or extracted from a plurality of elements whose information is stored in the first storage means, An authentication element group is generated by selecting (jn-i) incorrect answer elements from dn incorrect answer candidate elements selected or extracted from a plurality of elements whose information is stored in the storage means.

Thus, in the invention described in claim 4, as in the invention described in claim 1, a plurality of patterns of authentication element groups generated for each of a plurality of authentication environment conditions are stored in the second storage means. Since it is not necessary, the storage capacity of the storage means can be reduced even when compared with the invention according to claim 1. In the invention according to claim 4 , the number i of correct elements is determined according to the appearance ratio of each case in the detected authentication environment condition, i correct elements are selected from tn correct candidate elements, and dn Since the authentication element group is generated by selecting (jn-i) incorrect answer elements from the incorrect answer candidate elements, the time required for generating the authentication element group compared to the invention according to claim 1 Although there is a possibility that it will be slightly longer, the number i of correct elements included in the generated authentication element group is always used for authentication by selecting the correct element and the incorrect element after determining the number i of correct elements. becomes a factor maximum number jt less and a minimum number jb more correct elements in groups, Ru eliminates takes a long time possibilities for the generation of the authentication element group as in the first production method described above.

Further, in the invention according to claim 4 , each authentication environment condition in which the appearance ratio of each case is set determines one value of the number tn of correct candidate elements and the number dn of incorrect candidate elements. After getting

The other value out of the number tn of correct candidate elements and the number dn of incorrect answer candidate elements satisfying the condition is calculated, and the value obtained by the operation is calculated from the number tn of correct candidate elements and the number dn of incorrect answer candidate elements. The difference between the appearance frequency of each of the tn correct answer candidate elements in the authentication element group and the appearance frequency of each of the dn incorrect answer candidate elements in the authentication element group by converting it into an integer as the other value. The number of correct answer candidate elements tn and the number of incorrect answer candidate elements dn are set in such a way that the occurrence ratio of each case in each authentication environment condition is tn according to the corresponding authentication environment condition. When jn elements are selected from the correct answer candidate elements and dn incorrect answer candidate elements, the number i of correct answer elements included in the selected jn elements is combined for each case of jt to jb And set each to match the ratio of the number of combinations for each case. Re that.

As a result, the number of correct candidate elements set for each authentication environment condition so that the difference between the appearance frequency of each correct answer candidate element and the appearance frequency of each incorrect answer candidate element in the authentication element group is minimized. In accordance with tn and the number of incorrect answer candidate elements dn, an authentication element group is generated so that the difference between the appearance frequency of each correct answer candidate element and the appearance frequency of each incorrect answer candidate element in the authentication element group is minimized. Therefore, when each element of the authentication element group is presented to the person to be authenticated and the correct element is designated by the person to be authenticated to authenticate the person to be authenticated, Can be prevented from being discriminated by a person. Therefore, according to the invention described in claim 4, as in the invention described in claim 1, even when the authentication environment condition is set for each individual person to be authenticated, the correct answer can be obtained while saving the storage capacity of the storage means. An authentication element group in which elements are not discriminated by a third party by being exposed can be generated in a substantially constant time to authenticate the person to be authenticated.

The authentication device according to the invention described in claim 5 includes a first storage means for storing a plurality of pieces of information of elements that can be used as constituent elements of an authentication element group used for authentication of a person to be authenticated, and individual persons to be authenticated. The attribute information of the subject to be processed is acquired from the attribute information registered in advance, and the subject to be authenticated represented by the acquired attribute information as an authentication environment condition to be applied to the authentication of the subject to be processed Detecting means for detecting an authentication environment condition according to the attribute of the authentication, and the number tn of correct candidate elements to be used as correct elements in the authentication element group that defines the authentication environment condition for authentication of the person to be authenticated, for the authentication Number of incorrect answer candidate elements dn used as incorrect answer elements in the element group, number jn of elements constituting the authentication element group (where jn is determined according to the authentication strength required in the corresponding authentication environment condition) , Correct element in the authentication element group Wherein at least one of the parameters of the maximum number jt and the minimum number jb (where jb ≦ jt <jn) is set in units of each of a plurality of types of authentication environment conditions different from other authentication environment conditions Among the appearance ratios of each case in which a different number of correct elements from jt to jb are included in the element group for use, according to the appearance ratio of each case in the authentication environment condition detected by the detection means, A number line corresponding to a numerical range of a random number to be generated (≧ 0) is divided into a plurality of sections respectively corresponding to any of the cases according to the appearance ratio of the cases in the detected authentication environment condition, Authentication for generating a random number within the numerical range, determining which of the plurality of sections the generated random number belongs to, and generating the number of correct elements in a case corresponding to the section to which the generated random number belongs for The number i of correct answer elements in the element group is determined, and i correct answer elements are selected from tn correct answer candidate elements selected or extracted from the plurality of elements stored in the first storage means. The authentication element is selected by selecting (jn-i) incorrect answer elements from dn incorrect answer candidate elements selected or extracted from a plurality of elements whose information is stored in the first storage means. A generation unit for generating a group, jn elements constituting the authentication element group generated by the generation unit are respectively presented to the person to be authenticated, and a correct answer element among the presented jn elements is received. An authentication means for authenticating the person to be authenticated by causing the certifier to designate the appearance ratio of each case set in units of each of the plurality of types of authentication environment conditions, according to the authentication environment conditions tn correct answer candidate elements and dn incorrect answer candidates When the authentication element group is generated by selecting a total of jn elements including a maximum of jt and minimum jb (jb ≦ jt <jn) correct elements from the elements, the generated authentication element group When the appearance frequency of each case including jt to jb different numbers of correct elements is p (i) (where i = jb, jb + 1,..., jt),
The appearance frequency p (i) of each case having the minimum deviation S is obtained, and the obtained appearance frequency p (i) of each case is set as the appearance ratio of each case.

The invention described in claim 5 includes the same first storage means, detection means, generation means and authentication means as those of the invention described in claim 4. For this reason, the invention described in claim 5 needs to store a plurality of patterns of authentication element groups generated for each of a plurality of authentication environment conditions in the second storage means, similarly to the invention described in claim 4. Even when compared with the first aspect of the invention, the storage capacity of the storage means can be reduced. Further, the invention according to claim 5 is similar to the invention according to claim 4, although the time required for generating the authentication element group may be slightly longer than that of the invention according to claim 1. The possibility that it takes a long time to generate the authentication element group as in the first generation method can be eliminated.

In the invention according to claim 5, the appearance ratio of each case set in units of each of the plurality of types of authentication environment conditions is tn correct answer candidate elements and dn incorrect answers according to the authentication environment conditions. When the authentication element group is generated by selecting a total of jn elements including a maximum of jt and minimum jb (jb ≦ jt <jn) correct elements from the candidate elements, the generated authentication element group is generated. P (i) (where i = jb, jb + 1,..., Jt), where the appearance frequency of each case where jt to jb different numbers of correct elements are included in ,

The appearance frequency p (i) of each case having the minimum deviation S is obtained, and the obtained appearance frequency p (i) of each case is set as the appearance ratio of each case.

Thus, the appearance ratio of each case set for each authentication environment condition so that the difference between the appearance frequency of each correct candidate element and the appearance frequency of each incorrect answer candidate element in the authentication element group is minimized. Therefore, the authentication element group is generated so that the difference between the appearance frequency of each correct answer candidate element and the appearance frequency of each incorrect answer candidate element in the authentication element group is minimized. When authenticating a person to be authenticated by presenting each element of the element group to the person to be authenticated and specifying the correct element to the person to be authenticated, the correct element is prevented from being discriminated by a third party due to exposure. be able to. Therefore, in the invention described in claim 5, as in the invention described in claim 4, even when the authentication environment condition is set for each individual person to be authenticated, the correct answer element is reduced while saving the storage capacity of the storage means. It is possible to authenticate the person to be authenticated by generating an authentication element group that is not discriminated by a third party due to the appearance in a substantially constant time.

In the invention of claim 1 or claim 4 or claim 5, for example, as described in claim 6 , each element whose information is stored in the first storage means is being presented to the person to be authenticated. The contents given to the person to be authenticated are time-series information that changes in time series, and the authentication means presents the individual elements constituting the authentication element group to the person to be authenticated in order, and the correct answer among the individual elements. Authenticate the authenticated person by determining whether or not the correct answer element presentation period is properly specified by letting the authenticated person perform an operation that clearly indicates the period during which the recognized element is presented It is preferable to configure. For example, if the correct element of individual elements constituting the authentication element group is simply designated by the person to be authenticated, the number of combinations of the answers (authentication strength) depends on the number of elements constituting the authentication element group. Therefore, in order to secure the authentication strength, it is necessary to increase the number of elements constituting the authentication element group to some extent, and accordingly, the number of correct answer elements and the number of correct candidate elements tn included in the authentication element group As a result, the burden on the authorized person also increases.

On the other hand, in the invention according to claim 6 , an operation to specify the period during which the element recognized by the person to be authenticated as the correct element is presented is performed, and the period specified by the person to be authenticated is also considered. As a result, the number of combinations of responses can be greatly increased compared to the number of elements constituting the authentication element group, and the individual elements constituting the authentication element group The authentication strength can be significantly increased while suppressing an increase in the burden on the authorized person by changing the time during which (time-series information) is presented to the person to be authenticated.

In the invention described in claim 6 , for example, as described in claim 7 , the time-series information is music information, and each element constituting the authentication element group is a part of the music extracted from the music Preferably, the authentication means is configured to sequentially present jn phrases to the person to be authenticated by sequentially reproducing jn phrases constituting the authentication element group. The time-series information according to claim 6 includes a moving image and the like in addition to the music, but it is easy to reduce the storage capacity for storing the music as compared with the moving image and the like, and some phrases are extracted. It is easy to be recognized as a part of the source song, and when the phrases extracted from different songs are played continuously, the human ear can easily distinguish the boundary of the phrase, In order to mechanically recognize the boundary of a phrase, it has the characteristic that advanced technology is required. Therefore, by using music as time-series information, highly accurate authentication can be realized while avoiding complication of the apparatus configuration.

Incidentally, in the invention of claim 7 wherein, the music for extracting phrase to use as the correct element may automatically be selected so as to be presented to the person to be authenticated the normal, but for example, set forth in claim 8 As described above, the ID of the music selected in advance by the authorized person and registered by the authorized person is registered in the table, and is referred to when generating the authentication music data as the authentication element group. It is preferable to do so. Thereby, it is possible to reduce the burden on the authorized person for storing the music for extracting the phrase used as the correct element.

An authentication program according to the invention described in claim 9 includes a first storage means for storing a plurality of pieces of information of elements that can be used as constituent elements of an authentication element group used for authentication of a person to be authenticated, and authentication in authentication of the person to be authenticated. The number tn of correct candidate elements to be used as correct answer elements in the authentication element group that defines environmental conditions, the number dn of incorrect answer candidate elements to be used as incorrect answer elements in the authentication element group, and the authentication element The number jn of elements constituting the group (where jn is determined according to the authentication strength required in the corresponding authentication environment condition), the maximum number jt and the minimum number jb of correct elements in the authentication element group (where jb ≦ jn <jn) tn correct candidate elements as constituent elements of the authentication element group, each of which is generated with each of a plurality of types of authentication environment conditions different from other authentication environment conditions And dn incorrect answer candidate elements A plurality of types of patterns of the authentication element group that define each of the first to jn elements constituting the authentication element group for each authentication environment condition. And authentication means for acquiring attribute information of the subject to be processed from attribute information registered in advance for each individual person to be authenticated and applying the computer to the authentication of the subject person to be processed. As an environmental condition, from a pattern of the authentication element group stored in the detecting means for detecting the authentication environmental condition corresponding to the attribute of the authentication target person to be processed represented by the acquired attribute information, the second storage means Generating means for randomly selecting a single authentication element group pattern that matches the authentication environment condition detected by the detection means, and generating an authentication element group used for authentication from the selected authentication element group pattern ,as well as The jn elements constituting the authentication element group generated by the generating means are each presented to the person to be authenticated, and the correct element of the jn elements presented is specified by the person to be authenticated. An authentication program for functioning as an authentication means for authenticating the person to be authenticated, the correct candidate element in each authentication environment condition in which the corresponding pattern of the authentication element group is stored in the second storage means After determining or obtaining one of the number tn of correct candidate elements and the number dn of incorrect answer candidate elements,

The other value out of the number tn of correct candidate elements and the number dn of incorrect answer candidate elements satisfying the condition is calculated, and the value obtained by the operation is calculated from the number tn of correct candidate elements and the number dn of incorrect answer candidate elements. By making it an integer as the other value, the appearance frequency of each of tn correct candidate elements in the authentication element group and the appearance frequency of each of dn incorrect answer candidate elements in the authentication element group The pattern of the authentication element group corresponding to each individual authentication environment condition, which is preset so as to minimize the difference between the two, and stored in the second storage unit, A plurality of types are generated in advance for each authentication environment condition and stored in the second storage means .
An authentication program according to a ninth aspect of the invention is a program for causing a computer including the first storage unit and the second storage unit to function as the detection unit, the generation unit, and the authentication unit. The number of correct answer candidate elements tn and the number of incorrect answer candidate elements dn in the authentication environment condition are preset in the same manner as in the invention of claim 1, and the pattern of the authentication element group corresponding to each authentication environment condition is: Since a plurality of types are generated in advance for each individual authentication environment condition and stored in the second storage means in the same manner as in the first aspect of the invention, the computer executes the authentication program according to the ninth aspect of the invention. When executed, the computer functions as the authentication device according to claim 1, and, similarly to the invention according to claim 1, authentication environment conditions are set for each individual person to be authenticated. Even if it is determined, authentication elements can be authenticated by generating a group of authentication elements that are not discriminated by a third party due to the appearance of correct elements while reducing the storage capacity of the storage means. It can be carried out.

An authentication program according to the invention of claim 10 is a computer program comprising: a first storage means for storing a plurality of pieces of information of elements that can be used as constituent elements of an authentication element group used for authenticating a person to be authenticated; The attribute information of the subject to be processed is acquired from the attribute information registered in advance for each certifier, and the processing target to be represented by the acquired attribute information is obtained as an authentication environment condition applied to the authentication of the subject to be authenticated. A detecting means for detecting an authentication environment condition according to an attribute of the authenticator, a number tn of correct candidate elements to be used as correct elements in the authentication element group that defines an authentication environment condition for authentication of the user to be authenticated, the authentication The number of incorrect answer candidate elements dn used as incorrect answer elements in the element group, the number jn of elements constituting the authentication element group (where jn is determined according to the authentication strength required in the corresponding authentication environment condition) ), The authentication Each of a plurality of types of authentication environment conditions in which at least one of the parameters of the maximum number jt and the minimum number jb (where jb ≦ jt <jn) of correct elements in the element group is different from other authentication environment conditions Set in the authentication element group in the authentication environment condition detected by the detection means out of the appearance ratios of the cases where the authentication element group includes different numbers of correct elements among jt to jb. According to the appearance ratio of each case, a number line corresponding to the numerical range of the random number to be generated (≧ 0) corresponds to each of the cases according to the appearance ratio of each case in the detected authentication environment condition. The correct element in the case corresponding to the section to which the generated random number belongs, is divided into a plurality of sections to generate a random number within the numerical range, determines which of the plurality of sections the generated random number belongs to of The number is determined as the number i of correct answer elements in the authentication element group to be generated, and i pieces are selected from tn correct answer candidate elements selected or extracted from a plurality of elements whose information is stored in the first storage means. And (jn-i) incorrect answer elements are selected from dn incorrect answer candidate elements selected or extracted from a plurality of elements whose information is stored in the first storage means. The generation means for generating the authentication element group, and jn elements constituting the authentication element group generated by the generation means are respectively presented to the person to be authenticated, and jn An authentication program for functioning as an authentication means for authenticating the authenticated person by causing the authenticated person to specify a correct element of the elements, and each authentication in which the appearance ratio of each case is set The environmental condition is the number of correct candidate elements tn One value of the number dn beauty incorrect candidate elements after determining or acquisition,

The other value out of the number tn of correct candidate elements and the number dn of incorrect answer candidate elements satisfying the condition is calculated, and the value obtained by the operation is calculated from the number tn of correct candidate elements and the number dn of incorrect answer candidate elements. By making it an integer as the other value, the appearance frequency of each of tn correct candidate elements in the authentication element group and the appearance frequency of each of dn incorrect answer candidate elements in the authentication element group The number of correct answer candidate elements tn and the number of incorrect answer candidate elements dn are set so that the difference between the cases is the tn according to the corresponding authentication environment condition. When jn elements are selected from the correct answer candidate elements and dn incorrect answer candidate elements, the number i of correct answer elements included in the selected jn elements is set for each case of jt to jb. Find the number of combinations, and make sure that each combination matches the ratio of the number of combinations for each case. Is set .
An authentication program according to a tenth aspect of the invention is a program for causing a computer including the first storage means to function as the detection means, the generation means, and the authentication means. The number tn of candidate elements and the number dn of incorrect answer candidate elements are set in the same manner as in the invention described in claim 4, and the appearance ratio of each case in each authentication environment condition is also set in the same manner as in the invention described in claim 4. Therefore, when the computer executes the authentication program according to the invention according to claim 10, the computer functions as the authentication device according to claim 4, and the invention according to claim 4 Similarly, even when authentication environment conditions are set for each individual person to be authenticated, the correct element is discriminated by a third party by reducing the storage capacity of the storage means and by revealing it. An authentication element group that never occurs can be generated in a substantially constant time to authenticate the person to be authenticated.

According to an eleventh aspect of the present invention, there is provided an authentication program comprising: a computer having a first storage unit that stores a plurality of pieces of information of elements that can be used as constituent elements of an authentication element group used for authenticating a user to be authenticated The attribute information of the subject to be processed is acquired from the attribute information registered in advance for each certifier, and the processing target to be represented by the acquired attribute information is obtained as an authentication environment condition applied to the authentication of the subject to be authenticated. A detecting means for detecting an authentication environment condition according to an attribute of the authenticator, a number tn of correct candidate elements to be used as correct elements in the authentication element group that defines an authentication environment condition for authentication of the user to be authenticated, the authentication The number of incorrect answer candidate elements dn used as incorrect answer elements in the element group, the number jn of elements constituting the authentication element group (where jn is determined according to the authentication strength required in the corresponding authentication environment condition) ), The authentication Each of a plurality of types of authentication environment conditions in which at least one of the parameters of the maximum number jt and the minimum number jb (where jb ≦ jt <jn) of correct elements in the element group is different from other authentication environment conditions Set in the authentication element group in the authentication environment condition detected by the detection means out of the appearance ratios of the cases where the authentication element group includes different numbers of correct elements among jt to jb. According to the appearance ratio of each case, a number line corresponding to the numerical range of the random number to be generated (≧ 0) corresponds to each of the cases according to the appearance ratio of each case in the detected authentication environment condition. The correct element in the case corresponding to the section to which the generated random number belongs, is divided into a plurality of sections to generate a random number within the numerical range, determines which of the plurality of sections the generated random number belongs to of The number is determined as the number i of correct answer elements in the authentication element group to be generated, and i pieces are selected from tn correct answer candidate elements selected or extracted from a plurality of elements whose information is stored in the first storage means. And (jn-i) incorrect answer elements are selected from dn incorrect answer candidate elements selected or extracted from a plurality of elements whose information is stored in the first storage means. The generation means for generating the authentication element group, and jn elements constituting the authentication element group generated by the generation means are respectively presented to the person to be authenticated, and jn An authentication program for functioning as an authentication means for authenticating the authenticated person by causing the authenticated person to specify a correct element of the elements, wherein each of the plurality of types of authentication environment conditions is set as a unit The appearance ratio of each case is According to the authentication environment condition, a total of jn elements including maximum jt and minimum jb (jb ≦ jt <jn) correct elements are selected from tn correct answer candidate elements and dn incorrect answer candidate elements. When the authentication element group is generated, the appearance frequency of each case in which the generated authentication element group includes different numbers of correct elements among jt to jb is represented by p (i) (however, , I = jb, jb + 1,..., Jt)

The appearance frequency p (i) of each case having the minimum deviation S is obtained, and the obtained appearance frequency p (i) of each case is set as the appearance ratio of each case .
An authentication program according to an eleventh aspect of the invention is a program for causing a computer including the first storage means to function as the detection means, the generation means, and the authentication means. Since the appearance ratio of each case set as a unit is set in the same manner as in the invention described in claim 5, the computer executes the authentication program according to the invention described in claim 11, thereby The computer functions as the authentication device according to claim 5. Similarly to the invention according to claim 5, when the authentication environment condition is set for each individual person to be authenticated, the storage capacity of the storage means is reduced. It is possible to authenticate the person to be authenticated by generating a group of authentication elements in a substantially constant time so that the correct elements are not discriminated by a third party due to outflow while saving.

Authentication program according to the invention of claim 1 wherein the computer having a first memory means of the said detection means, since it is a program to function as a generator and an authentication means, said computer claims by executing the authentication program according to the invention of claim 1 wherein, will be above the computer functions as an authentication device according to claim 5, in the same manner as the invention of claim 5, each of the person to be authenticated Even when the authentication environment condition is set for each time, while saving the storage capacity of the storage means, an authentication element group in which correct elements are not discriminated by a third party due to the appearance is generated in a substantially constant time. The person to be authenticated can be authenticated .

The present invention described above, in units of each of a plurality of types of authentication environmental conditions at least one different from the other authentication environmental conditions of the respective parameters defining the authentication environmental conditions in the authentication person to be authenticated, authentication any or use of tn pieces of the correct candidate elements and dn number of incorrect candidate elements as a component of use element group, defined respectively for each first ~jn th respective elements constituting the authentication element group the pattern of the authentication element group, each leave more memory, acquires attribute information of the person to be authenticated to be processed from pre-registered attribute information for each individual person to be authenticated for each individual authentication environmental conditions, single, as the authentication environmental condition applied to the authentication of the person to be authenticated to be processed, the authentication and detecting environmental conditions according to the person to be authenticated attributes to be processed acquired attribute information indicates, to conform to the detected authentication environmental conditions Pattern of authentication element group With the down select randomly generates an authentication element groups based on the pattern of the authentication element group selected, each of which presents the generated jn number of elements constituting the authentication element group has to be authenticated; presentation The authentication means is authenticated by letting the person to be authenticated specify the correct answer element among the jn elements that have been processed . Even if the authentication environment condition is set for each person to be authenticated, the storage means It is possible to authenticate the person to be authenticated by generating a group of authentication elements in almost a certain time without the correct element being discriminated by a third party while saving the storage capacity of Has an effect.

Further, the present invention acquires the attribute information of the processing subject to be authenticated from the attribute information registered in advance for each individual user to be authenticated, and acquires the authentication environment condition to be applied to the authentication of the processing target user . A number line corresponding to a numerical range of random numbers (≧ 0) to be generated in accordance with the appearance ratio of each case in the detected authentication environment condition by detecting the authentication environment condition according to the attribute of the authentication target person to be processed represented by the attribute information Is divided into a plurality of sections corresponding to any of the cases according to the appearance ratio of the cases in the detected authentication environment condition, and a random number within the numerical range is generated. It is determined which value belongs to the plurality of sections, the number of correct elements in the case corresponding to the section to which the generated random number belongs is determined as the number i of correct elements in the authentication element group to be generated, and tn Correct answer By selecting i correct answer elements from complementary elements and selecting (jn-i) incorrect answer elements from dn incorrect answer candidate elements, the authentication element group is generated and the generated authentication element is generated . The jn elements that make up the element group are each presented to the person to be authenticated, and the person to be authenticated is authenticated by specifying the correct element of the jn elements presented to the person to be authenticated . Even when authentication environment conditions are set for each person to be authenticated, a group of authentication elements in which correct elements are not discriminated by a third party due to spilling while reducing the storage capacity of the storage means can be obtained in a substantially constant time. It has the outstanding effect that it can produce | generate and authenticate a to-be-authenticated person .

  Hereinafter, an example of an embodiment of the present invention will be described in detail with reference to the drawings.

[First Embodiment]
FIG. 1 shows a computer system 10 according to the first embodiment. The computer system 10 is configured by connecting a service providing system 16 to a network 14 to which a large number of terminal devices 12 are connected. The service providing system 16 includes an authentication server 18 and a service providing server 20 in an intranet (LAN). 22 are connected to each other via 22. The terminal device 12 includes a display device such as a display capable of displaying arbitrary information, an input device such as a keyboard capable of inputting arbitrary information, and an audio reproducing device capable of reproducing music data as music. For example, a PC (Personal Computer), a mobile phone, a PDA, or an ATM (Automatic Teller Machine) may be used.

  Of the users who have accessed the service providing system 16 by operating the terminal device 12, the service providing system 16 applies to regular users who have been given a user ID by applying for the use of the service providing system 16 in advance. Only the service providing organization provides a predetermined service, and the authentication server 18 determines whether or not the user (authenticated person) accessing the service providing system 16 via the terminal device 12 is an authorized user. The service providing server 20 is configured to provide a predetermined service only to a user who is determined to be a legitimate user by the authentication server 18.

  Note that a financial institution is suitable as the service providing organization. In this case, the predetermined service is a service provided to the service providing system 16 via the Internet or the like as the network 14 from a PC, mobile phone, PDA or the like as the terminal device 12. For the authorized user who accessed or the authorized user who accessed the service providing system 16 from the ATM as the terminal device 12 via the dedicated communication line as the network 14, the balance inquiry of the deposit according to the instruction of the user It is possible to apply a financial transaction service for performing various financial transactions such as deposit / withdrawal inquiry, account transfer, transfer, etc., but the present invention is not limited to this, and the present invention provides various modes that require user authentication. It is applicable to.

The authentication server 18 includes a CPU 18A, a memory 18B including a RAM, a hard disk drive (HDD) 18C, and a network interface (I / F) unit 18D. The network I / F unit 18D includes the network 14 and an intranet (LAN). ) 22 respectively. In addition, a user authentication program including a music registration program for performing music registration processing and an authentication program for performing authentication processing is installed in the HDD 18C. The user authentication program corresponds to the authentication program according to claim 9 , and the authentication server 18 functions as the authentication device according to claim 1 when the CPU 18 </ b> A executes the authentication program.

  Although details will be described later, the authentication server 18 includes a plurality of pieces of authentication processing using music, that is, a plurality of correct answer songs set in advance, as authentication processing for a user (authenticated person) who has accessed the service providing system 16. Play the song (part of the phrases) in order, and let the person to be authenticated perform an operation to specify (specify) the period during which the correct song is being played out of the multiple songs played. An authentication process for determining whether the person to be authenticated is an authorized user based on the above is performed. The HDD 18C of the authentication server 18 stores a music DB (database), an authentication information table, a candidate phrase number table, and music list information as information for performing authentication processing using the music.

In the music DB, music data of a large number of music that can be used for authentication processing using music is registered. In addition, the music for which music data is registered in the music DB covers a plurality of genres, a plurality of artists for each genre, and a plurality of albums for each artist. As shown in FIG. Attribute information such as a song ID, a genre name, an artist name, an album name, a release year, a song name, and phrase extraction position information for identifying individual songs is added to the music data of each song. Music data stored in the music DB corresponds to "information that can be used as a component of the authentication element group element" according to claim 1 (and claim 4, 5) (according to claim 6 time-series information, and corresponds to the information of the music according to claim 7), HDD18C corresponds to the first memory means according to the present invention. The authentication information table, candidate phrase number table, and song list information will be described later.

  Next, the operation of the first embodiment will be described. In this embodiment, when performing an authentication process using a music piece, an authorized user selects in advance a music piece to be used as a correct song (correct phrase) in the authentication process, and an incorrect song (incorrect phrase), that is, a misleading song. A music registration process is also performed in which music used as a (confused phrase) is also selected. Hereinafter, the music registration process will be described with reference to the flowchart of FIG. Note that this song registration process is performed when, for example, the terminal device 12 is operated by a new user and the use of the service providing system 16 is applied via the network 14, the attribute information (name of the new user) Or an address, a contact address, an age, etc.) can be registered and a user ID (authentication ID) can be assigned and registered.

  In the music registration process shown in FIG. 2, first, in step 50, an authentication ID input screen in which a message requesting input of an authentication ID is displayed and an authentication ID input field is provided is distributed to the terminal device 12. By displaying the authentication ID input screen on the display device, the user who registers the correct song (the user to be processed: a regular user) inputs the authentication ID and associates it with the input authentication ID. The attribute information of the user to be processed is acquired by searching and reading the attribute information (for example, age etc.) stored. In the next step 52, the total number of phrases jn constituting the song list used for authentication as the authentication environment condition in the authentication using the music according to the attribute of the user to be processed represented by the attribute information acquired in step 50, The maximum number jt and minimum number jb of correct phrases included in the song list (this correct phrase is extracted from the correct answer song selected later), the number of phrases rn extracted from a single song, and the list of songs The number tn of correct candidate phrases used for generation is determined.

  The song list is a list in which the ID of each phrase to be played back at the time of authentication and the playback order are set. In the authentication according to this embodiment, a plurality (jn) phrases set in the song list are registered in the song list. Are played back by the terminal device 12 in the order in which they are displayed. Here, the total number of phrases jn constituting the song list is related to the authentication strength (the authentication strength increases as the value of the total number of phrases jn increases), and appropriate values of the maximum number jt and the minimum number jb of correct phrases. Of the correct phrase varies depending on the maximum number jt and the minimum number jb of correct phrases. If the total number of phrases jn is increased, the authentication strength is improved. Accordingly, the maximum number of correct phrases jt and the minimum number jb, the number of correct candidate phrases tn (and the misleading candidate phrases used for generating the song list) Since the value of several dn) also increases, there is a possibility that the storage area necessary for storing the song list and the like increases, which may press the storage area of the storage device (HDD 18C), and the correct song to be stored by the user Since the number of songs increases, the burden on the user may increase.

  Therefore, in step 52, for example, if the age of the user to be processed is equal to or greater than a threshold value, the total phrase number jn is slightly reduced, and the maximum number jt and minimum number jb of correct phrases and the number of correct candidate phrases are accordingly set. By reducing the tn value slightly, the burden on the user to store the correct song is reduced. On the other hand, if the age of the user to be processed is less than the threshold, the total phrase number jn is slightly increased. Accordingly, the authentication environment according to the user's attributes is achieved by performing processing such as improving the authentication strength by slightly increasing the maximum number jt and minimum number jb of correct phrases and the number of correct candidate phrases tn slightly. Set conditions. In the present embodiment, in the authentication process using music, the correct phrase of jn phrases that are reproduced in sequence is specified by specifying (clearly) the period during which the correct phrase is being reproduced. Since the number of combinations of responses by the person to be authenticated increases dramatically compared to the case of simply specifying them, even if the total number of phrases jn is slightly reduced as described above, the total number of phrases jn Compared to the above, it is possible to ensure a certain level of authentication strength.

  Further, if a plurality of phrases are extracted from a single music (number of extracted phrases rn ≧ 2), the number of correct songs to be stored by the user can be reduced (the number of correct songs to be stored = The number of correct candidate phrases tn ÷ the number of extracted phrases rn (however, if a fraction is given, the number of correct songs is rounded up)), but in this case, different phrases extracted from the same correct song are each correct phrases Therefore, users who are not proficient in authentication using music may be confused during authentication. The music registration process shown in FIG. 2 is a process that is executed when a new user applies for the use of the service providing system 16. In consideration of the above, for example, the person to be authenticated is authenticated by authentication using music. Each time it is determined that the user is a regular user, the number of times the user has been authenticated using the music is updated, and the number of times after the update is a threshold value (this threshold is also varied depending on the age of the user, etc. If the number of times after the update reaches a threshold value, it can be determined that the user is proficient in authentication using music, so the number of extracted phrases rn is incremented. The correct song may be re-registered (a part of the correct songs registered in the past may be deleted).

  Further, for example, the value of the number of extracted phrases rn set in step 52 may be switched depending on whether the age of the user to be processed is equal to or higher than a threshold (for example, the age of the user to be processed is equal to or higher than the threshold). If so, the number of extracted phrases rn = 1, and if the age of the user to be processed is less than a threshold, the number of extracted phrases rn ≧ 2 may be set, or vice versa.

  The authentication information table stored in the HDD 18C of the authentication server 18 is provided for each user, and the individual authentication information table corresponding to each user includes an authentication environment as shown in FIG. There are provided an area for registering information, an area for registering correct answer information, and an area for registering information on fraud (incorrect answer). In the next step 54, the authentication ID input by the user to be processed and the authentication environment condition determined in step 52 are registered as authentication environment information in the authentication environment information registration area of the authentication information table. Steps 50 to 54 described above also correspond to the detection means described in claim 1.

  Further, in the next step 56 and subsequent steps, processing for allowing the user to be processed to select the correct song is performed. That is, in step 56, the information on the correct song registration page corresponding to the authentication environment condition determined in step 52 is read from the HDD 18C and distributed to the terminal device 12 operated by the user to be processed through the network 14. Thereby, the correct song registration page as shown in FIG. 4 is displayed on the display device of the terminal device 12 as an example.

  The correct song registration page shown in FIG. 4 includes a designation field 80A for designating the name of the artist who plays the correct song, and a designation for designating the name of the album that contains the correct song and the name of the correct song. Column 80B, designation columns 80C and 80D for designating the genre of the correct song, designation column 80E for designating the announcement date of the correct song, display for displaying the range of the announcement year of the currently designated correct song Column 80F, a display column 80G for displaying a list of artist names, a display column 80H for displaying a list of album names, a display column 80J for displaying a list of song names, and a list of correct songs selected by the user A display field 80K for displaying and a button 80M for notifying completion of selection and selection of the correct song are provided. Although not shown in the figure, the message for requesting selection of (tn ÷ rn) correct songs corresponding to the authentication environment condition determined in step 52 is displayed on the correct song registration page. Is provided with a display column of (tn ÷ rn) lines so that (tn ÷ rn) correct songs can be displayed. As a result, the user to be processed can recognize the number of correct songs to be selected.

  In step 58, it is determined whether or not any instruction information has been received from the terminal device 12 operated by the user to be processed, and step 58 is repeated until the determination is affirmed. If the determination in step 58 is affirmative, the process proceeds to step 60 where the instruction information received from the terminal device 12 operated by the user to be processed is displayed by the button 80M in the correct song registration page by the user to be processed. It is determined whether or not the selection of the correct song by the user to be processed is completed by determining whether or not the information is predetermined information transmitted from the terminal device 12 when selected. If the determination in step 60 is negative, the process proceeds to step 62, where processing according to the instruction information received from the terminal device 12 operated by the user to be processed is performed, and the correct song registration page in the terminal device 12 is processed. Redistribute the information. Thereby, the correct song registration page displayed on the display device of the terminal device 12 is switched according to the operation of the user to be processed.

  For example, when the name of a specific artist is entered in the designation field 80A by the user to be processed and an execution of a search is instructed, in step 62, each name registered in the music DB using the entered artist name as a key. The attribute information of the music data is searched, the name of the input specific artist is displayed in the display column 80G, the names of all albums of the specific artist extracted by the search are listed in the display column 80H, and the name is displayed in the display column 80H. A process of generating a correct song registration page in which the names of all the songs recorded in each album displaying “” are displayed in a list in the display column 80J and re-distributing the information of the generated correct song registration page to the terminal device 12 is performed. Is called.

  Also, for example, when the name of the album is input to the designation field 80B and the execution of the search is instructed by the user to be processed, in step 62, it is registered in the music DB using the input album name as a key. The attribute information of each music data is searched, the names of all artists extracted by the search are displayed in the display column 80G, the names of the input albums are listed in the display column 80H, and the names are displayed in the display column 80G. A correct song registration page in which the names of all the songs recorded in the album whose name is displayed in the album display column 80H of each artist is listed in the display column 80J is generated, and information on the generated correct song registration page is displayed on the terminal. Processing for redistribution to the device 12 is performed.

In addition, when a genre selected by a processing target user from a plurality of genres is set in the specification fields 80C and 80D, or an announcement age selected by a processing target user from a plurality of options is specified. Even when the field 80E is set, a search similar to the above is performed, and a list of music names of a plurality of music pieces is displayed in the display field 80J as correct song choices. When a desired song is selected as the correct song by the user to be processed from among a plurality of songs whose song names are displayed in a list in the display field 80J, in step 62, the song selected as the correct song is selected. A correct song registration page in which attribute information is displayed in the display field 80K is generated, and processing for redistributing the generated correct song registration page information to the terminal device 12 is performed. By repeating this process, (tn ÷ rn) correct songs are selected by the user to be processed. As described above, allowing the user to be processed to select the correct song corresponds to the invention according to claim 8 .

  When the selection of the correct song is completed, the user to be processed selects the button 80M in the correct song registration page. As a result, the determination in step 60 is affirmed and the process proceeds to step 64, where the number of correct songs selected by the user to be processed matches the authentication environment condition, that is, there are (tn ÷ rn) correct songs. It is determined whether it is selected. If the number of selected correct songs does not match (tn ÷ rn), the determination is denied and the process proceeds to step 66 to notify that the number of selected correct songs is too large or too small. Is displayed on the display device of the terminal device 12, and the process returns to step 58 to repeat the above processing. If the number of selected correct answers is equal to (tn ÷ rn), the determination in step 64 is affirmed and the process proceeds to step 68. In step 68, the selection is made by the user to be processed. The correct song ID is registered in the correct song information registration area of the authentication information table. As an example, FIG. 3 shows a state where the number of correct candidate phrases tn = 10, the number of extracted phrases rn = 2, and the song IDs of tn ÷ rn = 5 correct songs are registered in the correct song information registration area. .

  In the next step 70, the candidate phrase number dn corresponding to the correct candidate phrase number tn is obtained by referring to the candidate phrase number table stored in the HDD 18C. The number of candidate phrases table shows the difference between the appearance frequency of each of the tn correct candidate phrases and the appearance frequency of each of the dn misappropriate candidate phrases in jn phrases reproduced at the time of authentication under a specific authentication environment condition. A plurality of combinations of the minimum number of correct candidate phrases tn and the number of misleading candidate phrases dn are registered.

  As an example, when a song list is generated under the conditions of the total number of phrases jn = 10, the maximum number of correct phrases jt = 5, and the minimum number jb = 2, the number of correct candidate phrases tn and the number of misleading candidate phrases dn Table 1 below shows the results of calculation by the inventors of the present invention on how the appearance ratio of the correct candidate phrase and the misleading candidate phrase in the song list changes with respect to the combination of the above.

In Table 1, combinations of values of the number tn of correct candidate phrases and the number dn of candidate word phrases dn corresponding to the shaded columns are the frequency of appearance of each correct candidate phrase in the song list and individual error candidates. This corresponds to a combination of values that minimize the difference in the appearance frequency of phrases (appearance ratio is closest to 1). If the conditions (values of jn, jt, jb) are the same, the number of correct candidate phrases tn and the number of misleading candidate phrases dn that minimize the difference between the appearance frequency of correct candidate phrases and the appearance frequency of misappropriate candidate phrases The combinations are as shown in Table 1. The combination of tn and dn values registered in the number of candidate phrases table is the correct candidate phrase in the above equation (4) with the parameters (jn, jt, jb) corresponding to the specific authentication environment conditions substituted. It is calculated by substituting each value as the number tn to calculate the number dn of confusing candidate phrases, and by rounding off the number of confusing candidate phrases dn obtained by the calculation, and in Table 1 above, The combination of values corresponding to the shaded fields, that is, the difference between the appearance frequency of each correct candidate phrase in the song list and the appearance frequency of each misappropriate candidate phrase is minimized (the appearance ratio is closest to 1). A combination of values is obtained. It should be noted that obtaining the combination of the values of tn and dn registered in the candidate phrase number table as described above corresponds to the invention described in claim 4 .

  In the first embodiment, a plurality of candidate phrase count tables corresponding to mutually different authentication environment conditions are stored in the HDD 18C. In step 70, the authentication determined in the previous step 52 from the plurality of candidate phrase count tables. By selecting the candidate phrase count table that matches the environmental conditions and reading the number of confusing candidate phrases dn corresponding to the correct candidate phrase count tn determined in the previous step 52 from the selected candidate phrase count table, it is reproduced during authentication. The number of misleading candidate phrases dn that minimizes the difference between the appearance frequency of each of the tn correct candidate phrases in jn phrases and the appearance frequency of each of the dn misleading candidate phrases is acquired.

  In step 72, by dividing the number of confused candidate phrases dn acquired in step 70 by the number of extracted phrases rn, the number of tunes (number of distorted tunes) used as a distorted tune (incorrect answer) in the authentication process for the user to be processed. ) In step 74, the number of distorted songs (dn ÷ rn) obtained in step 72 is selected by the user to be processed. Select from the same album as the correct song, the same artist, or the same genre. Note that the priority order of the songs to be selected as the miscellaneous songs is (1) songs recorded in the same album as the correct song, (2) songs played by the same artist as the correct song, and (3) the same as the correct song It is desirable to be a genre of music.

  Authentication processing using music according to the present embodiment is also one of the candidate presentation / selection methods. However, the candidate presentation / selection method has a correct answer to the user himself / herself, in addition to the vulnerability that it is possible to uncover. By selecting the options to be used in advance, it is possible for a third party to easily select the user's preference, that is, the option that the user is likely to choose as the correct answer, by acquiring the user's background and other personal information. It also contains a vulnerability that makes it possible to infer. This vulnerability appears as a problem that in the authentication process using music, the genre or artist of the correct song that is likely to be selected by the user may be easily guessed by a third party. And, for example, in the authentication environment condition where the total number of phrases is jn = 10, if the genre of music from which each phrase is extracted is distributed in multiple genres such as “J-POP, POPS, CLASSIC, JAZZ, etc.” When the number of phrases for each genre is about two, there is a problem that it is very easy for a third party to guess the correct phrase.

  For this reason, in step 74, the miscellaneous music is selected from the same album, the same artist, or the same genre as the correct music selected by the user to be processed. As a result, a third party infers that the phrase of a song belonging to a genre that the user is likely to select as the correct answer among the played jn phrases is the correct phrase, or among the played jn phrases Since it becomes difficult to infer that the phrase of the music played by the artist that the user is likely to select as the correct answer is the correct phrase, the above vulnerability can be eliminated. Note that the above items are not limited to authentication processing using music, but can be widely applied if authentication using a candidate presentation / selection method is applied. By selecting so as to increase the difficulty of classification with correct elements constituting the group (for example, selecting the attributes of incorrect elements such as genres and artists to be the same as or similar to the correct elements) Therefore, it is possible to make it difficult to guess the correct element based on the preference.

  In addition, in the authentication process using the music according to the present embodiment, the correct song is selected by the user to be processed, but instead, the user to be processed selects an artist name, an album name, and the like. Applying the above items, the authentication device will automatically select the correct song and miscellaneous music from among multiple songs corresponding to the artist name and album name selected by the user to be processed, and automatically select them. The correct answer may be presented to the user to be processed. In this case, as described above, it is difficult for the user to guess the correct phrase based on preference, and the correct song that is automatically selected and presented matches the artist name or album name selected by the user. Therefore, it is possible to suppress an increase in the burden on the user for storing the correct answer music, and it is possible to suppress the possibility that the correct phrase is erroneously specified at the time of authentication.

  When (dn ÷ rn) pieces of miscellaneous music are selected in step 74, the process proceeds to step 76, and the song IDs of (dn ÷ rn) pieces of miscellaneous music selected in step 74 are used as authentication information as shown in FIG. It registers in the miscellaneous music information registration area of the table and ends the music registration process. In FIG. 3, for example, since the number of candidate phrases dn = 19 and the number of extracted phrases rn = 2, dn ÷ rn≈10 pieces of song IDs of the pieces are registered in the song information registration area.

  In the present embodiment, jb to jt correct phrases are extracted from tn correct candidate phrases that can be extracted from tn ÷ rn correct answer whose music ID is registered in the authentication information table by the music registration process. (Jn−jb) to (jn−jt) misplaced phrases out of dn misplaced candidate phrases that can be extracted from the dn ÷ rn misplaced songs whose song IDs are registered in the authentication information table. When a phrase is selected (total number of selected phrases = jn), a music list / authentication music data used for authentication is generated, so tn in jn phrases presented to the person to be authenticated at the time of authentication The probability that each correct candidate phrase appears and the probability that each dn misappropriate candidate phrase appears are almost uniform, and the correct candidate phrase or correct song is prevented from being discriminated by a third party due to appearance. Can do.

  Subsequently, the service providing system 16 is accessed via the terminal device 12, and the authentication server 18 requests the user (authenticated person) who operates the access source terminal device 12 to input the authentication ID. The authentication process executed by the authentication server 18 when the authentication ID input by the person to be authenticated operating the input device of the terminal device 12 is received by the authentication server 18 via the network 14 is a flowchart of FIG. Will be described with reference to FIG.

  In this authentication process, first, in step 100, the authentication ID input by the person to be authenticated is acquired, and the access information terminal table 12 is operated by searching the authentication information table using the acquired authentication ID as a key. The authentication information table corresponding to the person to be authenticated is extracted. In the next step 102, a song list pattern that matches the authentication environment condition represented by the authentication environment information registered in the authentication environment information registration area of the authentication information table extracted in step 100 from the song list information stored in the HDD 18C. Search and extract tables.

In the first embodiment, if the authentication environment conditions are the same, even if the users are different, the song list pattern will be the same (however, the correct song and the miscellaneous songs themselves will be different for each user). As an example, music list information as shown in FIG. 6A is stored in advance in the HDD 18C. The music list information corresponds to the authentication element group pattern described in claim 1 (specifically, the authentication element group pattern described in claim 2 ), and the HDD 18C storing the music list information is charged. The second storage means described in item 1 is also supported.

  The music list information according to the first embodiment is that, under a specific authentication environment condition, “the number of correct phrases extracted from correct music out of jn phrases constituting the music list is a maximum number jt or less and a minimum number jb or more. ”By extracting jn phrases from (tn ÷ rn) correct songs and (dn ÷ rn) miscellaneous songs with the maximum number of extracted phrases rn per song. A song list pattern table in which a plurality of (for example, the same number as the number of combinations) song list patterns corresponding to each of the plurality of (for example, the same number as the number of combinations) song lists is registered for each of various authentication environment conditions. Further, an authentication environment condition registration table in which authentication environment conditions corresponding to individual song list pattern tables are registered is provided. As an example, FIG. 6A shows a music list pattern table (authentication environment A) corresponding to authentication environment conditions (authentication environment A) of jn = 10, jt = 5, jb = 2, tn = 10, dn = 19, rn = 2. And a part of the song list pattern table corresponding to the authentication environment condition (authentication environment B) of jn = 8, jt = 4, jb = 2, tn = 8, dn = 15, rn = 1 In the authentication environment condition registration table, the portions where the authentication environments A and B are registered are shown.

  The song list according to the present embodiment includes an ID of each phrase to be played back at the time of authentication (the ID of this phrase is the song ID of the song from which the phrase is extracted, and the extraction start position ID indicating the phrase extraction start position from the song (for details) Or a list in which the playback order is set. In the music list pattern, the correct song information registration area or the miscellaneous music information registration of the authentication information table is used instead of the song ID. Pointer information (for example, “D2”, “T3”, etc., shown in FIG. 6A) indicating the registration position of the music ID on the area is set. As apparent from comparing the pointer information shown in FIG. 6 (A) with the correct song information registration area and the miscellaneous music information registration area of the authentication information table shown in FIG. 3, 1 of the pointer information shown in FIG. 6 (A). “T” in the digit indicates the correct song information registration area, “D” indicates the miscellaneous music information registration area, and the second digit indicates the registration position of the song ID in the correct song information registration area or the miscellaneous music information registration area. Represents. Note that the pointer information system shown in FIG. 6 (A) is merely an example. If the information indicates the registration position of the song ID in the correct song information registration area or the miscellaneous song information registration area of the authentication information table, It goes without saying that the information of the system may be used.

  Each music data registered in the music DB has an extraction start position (the phrase extraction start position is indicated by a mark “▲” in FIG. 7) when a phrase is extracted from the music data. The same number as the maximum number of extracted phrases rn under various authentication environment conditions is preset (FIG. 7 shows an example where the maximum number of extracted phrases rn = 3), and the attribute added to the music data The extraction start position information in the information represents all the phrase extraction start positions set in the corresponding music data. Each extraction start position represented by the extraction start position information is assigned an ID (extraction start position ID: for example, “P01”, “P02”, “P03” shown in FIG. 7). The extraction start position ID is also included in the ID of each phrase set in the list, and the extraction start position ID is also set in the song list pattern according to this embodiment as shown in FIG. ing.

  It should be noted that the setting of the extraction start position when extracting a plurality of phrases for each piece of music can be done manually but in principle, it takes a lot of time and effort, so it is a reality. Is. Here, as a setting method in the case of automatically setting the phrase extraction start position, for example, regardless of the content of each song, the position where the elapsed time when playing a song from the beginning becomes a predetermined value, There is a method of uniformly setting the extraction start position of phrases from individual songs. In this method, depending on the content of the music before and after the phrase extraction start position, the correct phrase extracted from the correct song selected by the user Even so, the user may not be able to recognize the correct phrase. For this reason, it is desirable that the phrase extracted from each piece of music is a characteristic phrase of the song or a phrase corresponding to the climax of the song. For example, for a song for which a phrase extraction start position is set, By detecting the tempo of the music by detecting the change and recognizing the break of the measure, the above condition in the music is recognized by recognizing the part where the volume level shows the maximum or close to the maximum value in the music. It is preferable to determine the portion of the phrase to be satisfied in measure units, and to automatically set the start position of the determined portion as the phrase extraction start position.

  In the authentication processing according to the first embodiment, the authentication represented by the authentication environment information in step 102 described above using the authentication environment information registered in the authentication environment information registration area of the authentication information table extracted in step 100 as a key. A song list pattern table that matches the environmental conditions is searched and extracted. In step 104, a song list pattern used for authentication is randomly selected from a plurality of song list patterns registered in the extracted song list pattern table. Then, in the next step 106, the pointer information in the read music list pattern is converted into the corresponding music IDs registered in the authentication information table (the correct music information registration area and the miscellaneous music information registration area of the authentication information table). (Remember the song ID registered at the position indicated by the pointer information) To produce a song list.

  As an example, the authentication environment condition represented by the authentication environment information registered in the authentication information table is the authentication environment A, and the song list pattern randomly selected from the corresponding song list pattern table for the authentication environment A is shown in FIG. ) And the song ID shown in FIG. 3 is registered in the authentication information table, the pointer information in the song list pattern of the read pattern 1 is rewritten to the corresponding song ID. As an example, as shown in FIG. 6B, the authentication environment condition is met (that is, the total number of phrases constituting the song list is jn, and the number of correct phrases included in the song list is less than the maximum number jt and the minimum A number of jb or more), and a song list that defines the ID and playback order of jn phrases is generated.

  Thus, in the song list generation method (referred to as the third song list generation method for convenience) employed in the authentication processing according to the first embodiment, the song list pattern read from the song list pattern table is written. Since the song list is generated by replacing the information, it is possible to avoid a long time required for the authentication process and to share the song list of the user having the same authentication environment condition as the song list pattern. The storage area can also be saved.

  In the next step 108, the length (reproduction time) of each of the jn phrases (reproduction target phrases) set in the music list generated in step 106 is randomly determined using a random number or the like. In this embodiment, the minimum value Tmin and the maximum value Tmax of the playback time in playback of the playback target phrase are set in advance. In step 108, the playback time of each playback target phrase is greater than the minimum value Tmin and the maximum value Tmax. Decide to be as follows. In step 110, music data of jn reproduction target phrases are sequentially acquired from the music DB. Acquisition of music data of a specific playback target phrase is performed by first acquiring the music ID of the ID of the specific playback target phrase and searching the music DB using the acquired music ID as a key to extract the playback target phrase. Attribute information added to the music data obtained by extracting the music data of the target music, then obtaining the extraction start position ID of the IDs of the specific reproduction target phrases, and extracting the extracted extraction start position ID first The extraction start position of the reproduction target phrase is recognized from the music data by collating with the extraction start position information, and music data for the reproduction time determined in step 108 is extracted from the recognized extraction start position. Made by. In step 108, after the music data of jn playback target phrases is acquired by performing the above processing on jn playback target phrases, the acquired jn music data are connected in accordance with the playback order. Music data (authentication music data) to be reproduced at the time of authentication is generated. Steps 100 to 110 described above correspond to the generating means described in claim 1.

  In step 112, the authentication music data generated in step 110 and information on a predetermined authentication page are distributed to the terminal device 12 operated by the person to be authenticated. Thus, an authentication page as shown in FIG. 8 is displayed as an example on the display device of the terminal device 12 operated by the person to be authenticated. The authentication page shown in FIG. 8 includes an operation to be performed by the person to be authenticated while the authentication music is being played (the period during which the correct song is being played and the button is pressed while the misunderstanding is being played) Is displayed, and the person to be authenticated recognizes the operation to be performed while the authentication music is being played by referring to the displayed authentication page. be able to. In addition, the authentication music data is played back as authentication music by the audio playback device of the terminal device 12, so that jn playback target phrases (correct phrases or misleading phrases) are played back in order. The above operation (operation recognized with reference to the authentication page) is performed while listening to music (jn phrases to be reproduced in order).

While the authentication music is being played back on the terminal device 12, the authentication server 18 determines whether each of the jn phrases is a correct phrase or a misleading phrase in the next step 114 based on the song list generated in the previous step 106. A reference array YN (n) for authentication represented by a numerical value of 1/0 is generated (where n = 1 to jn). In the reference array YN (n), “1” represents the correct phrase and “0” represents the misplaced phrase. For example, as shown in FIG. , If the sixth and eighth phrases are correct phrases, the reference array YN (n) is YN (n) = (0,0,1,0,0,1,0,1,0,0)
It becomes. When the reference array YN (n) is generated, in step 116, it is determined whether or not the reproduction of the authentication music on the terminal device 12 is completed, and step 116 is repeated until the determination is affirmed.

  If the reproduction of the authentication music on the terminal device 12 is completed and the determination in step 116 is affirmed, the process proceeds to step 118, and an authentication target representing an operation result by the person to be authenticated during the period in which the authentication music is being reproduced. The sequence PIN is acquired from the terminal device 12. As a result, when jn correct / confused phrases are reproduced in the order and reproduction period as shown in FIG. 9A as an example, the authentication target number sequence PIN indicating the operation result by the person to be authenticated is shown in FIG. ) Is obtained. Note that the authentication target number sequence PIN is set to “1” if the authenticating person presses the button within a certain period of time (recognizes it as the correct song) and delimits the playback period of the authentication music at regular intervals. If the person to be authenticated has released the button (recognized as a misunderstanding), it is generated by setting "0".

  In the next step 120, based on the length (reproduction time) of each of the jn phrases determined in the previous step 108, the authentication target number sequence PIN obtained in step 118 is used as the reproduction period of each of the jn phrases. It is decomposed into corresponding jn partial sequence AT (n) (where n = 1 to jn) (see also FIG. 9D). Note that in FIG. 9D, each partial sequence is indicated by a comma, and in FIG. 9C, the boundary position of each partial sequence is indicated by a broken line.

  Here, for example, when jn correct / confused phrases are reproduced sequentially in the order and reproduction period as shown in FIG. 9A, the person to be authenticated instantly recognizes the switching of the reproduced phrase. At the same time, if it is immediately determined whether the phrase after switching is a correct phrase or a misplaced phrase, and the result is immediately reflected in the operation, an ideal number sequence as shown in FIG. (Partial number sequences AT (1) to AT (jn) each consisting of only “0” or “1”) are obtained, but in practice, until the person to be authenticated recognizes the switching of the playback phrase It takes time for the person to be authenticated to judge whether the phrase after switching is a correct phrase or a misplaced phrase, and it takes time for the person to be authenticated to reflect the result of the judgment in the operation. Also shown in Fig. 9 (C) and (D) As such, "0" or only "1" partial sequence composed only are few, the majority of the partial sequences is a mix of "0" and "1".

For this reason, in this embodiment, the person to be authenticated determines whether the person to be authenticated recognizes the switching of the phrase Tch, and whether the phrase after the switching is a correct phrase or a misplaced phrase and reflects it in the operation. Considering the longest time Tjd required, the minimum value Tmin of the phrase playback time is Tmin >> Tch + Tjd
In addition, the period until the time corresponding to Tch + Tjd elapses after the switching of the phrase is set to a grace period during which the operation result of the authentication target is not used for authentication of the authentication target. . Then, in step 122, as shown in FIG. 9E as an example, the portions corresponding to the above-described grace period are respectively removed from the heads of the individual partial number sequences AT (1) to AT (jn). FIG. 9 (E) shows the case where the portion corresponding to the grace period is the first two digits of the partial sequence (the portion indicated by the underline in FIG. 9 (D)), which corresponds to the grace period. A partial sequence from which the portion is removed is denoted as AT ′ (n). Also, the times Tch and Tjd vary greatly between individuals and are highly likely to be affected by the level of proficiency with authentication using music, so the number of times a user has received authentication using music or authentication in past authentication. It is preferable to make it different for each user according to the success rate (for example, the time Tch, Tjd with the increase in the authentication success rate in the past authentication and the number of times the user has received authentication using music) And the time Tmin value is also reduced accordingly).

  In step 124, the specific partial sequence AT ′ (i) having undergone the processing of step 122 is checked against the corresponding reference array YN (i), and all the digits of the partial sequence AT ′ (i) are compared with the reference array YN (i). If it is the same value, it is determined that collation is OK, and if there is a digit having a value different from that of the reference array YN (i) in the partial sequence AT ′ (i), it is determined that the verification is NG. (1) to AT ′ (jn), respectively. In the next step 126, it is determined whether or not there is a partial number sequence AT ′ (i) determined to be collation NG in step 124. If the determination is negative, the process proceeds to step 130 without performing any processing. If the determination is affirmative, the process proceeds to step 128, and additional verification is performed on the partial sequence AT ′ (i) determined to be verification NG. Process.

  Specifically, in the example of FIG. 9E, partial number sequences AT ′ (4), AT ′ (9), AT ′ (10) where all the digits are not the same value are determined as the verification NG. Since these partial sequences have already removed the portion corresponding to the above-mentioned grace period, the reason why all the digits of these partial sequences are not the same value is the authentication of the correct / misunderstanding judgment of the corresponding phrase For example, the person who made the mistake was temporarily wrong. If the person to be authenticated is a legitimate user, even if the correct answer / miscue judgment of the phrase is temporarily wrong, the correct answer / mistake is correctly judged when the phrase is played for a certain period of time. Very likely to be done.

  For this reason, in the additional collation processing at step 128, the value of the predetermined number of digits below the partial number sequence AT ′ (i) (the value representing the operation result of the person to be authenticated in the period on the end side of the reproduction period of the corresponding phrase) Matching with the reference array YN (i), if the predetermined number of lower digits of the partial sequence AT ′ (i) is the same as that of the reference array YN (i), it is determined that the verification is OK, and the partial sequence AT ′ (i) If there is a digit having a value different from that of the reference array YN (i) in the predetermined number of lower digits, it is determined that the verification is NG, and all the partial sequences AT ′ (i) determined to be verification NG in the verification in step 124 For each. The number of digits to be verified in this additional verification process may be set empirically.

In step 130, it is determined whether or not the person to be authenticated is a legitimate user based on the number of partial sequences determined to be collation OK. If it is determined that the person to be authenticated is not a legitimate user, the authentication fails. Is displayed on the display device of the terminal device 12. On the other hand, if it is determined that the person to be authenticated is an authorized user, authentication OK is notified to the service providing server 20 and the authentication process is terminated. As a result, a predetermined service is provided by the service providing server 20 only to an authenticated person who is determined to be an authorized user. Steps 112 to 130 described above correspond to the authentication means described in claim 1 (specifically, the authentication means described in claims 6 and 7 ).

  In the first embodiment described above, the difference between the appearance frequency of each of the tn correct candidate phrases and the appearance frequency of each of the dn misappropriation candidate phrases in the jn phrases reproduced at the time of authentication is minimized. A combination of the correct candidate phrase number tn and the misleading candidate phrase number dn is registered in the candidate phrase number table in advance, and the misleading candidate phrase number dn corresponding to the correct candidate phrase number tn is read from the candidate phrase number table. In the jn phrases that are played during authentication, the number dn of confusing candidate phrases that minimizes the difference between the appearance frequency of each of tn correct candidate phrases and the appearance frequency of each of dn confusing candidate phrases was obtained. However, the present invention is not limited to this, and the frequency of appearance of each of the tn correct candidate phrases and the dn misappropriation candidates in the jn phrases reproduced at the time of authentication using the above equation (4). Each phrase The difference in frequency may be calculated by calculating the undoubted candidate phrase number dn having the minimum.

  In the first embodiment described above, after determining the number tn of correct candidate phrases, the aspect in which the user selects tn ÷ rn correct songs has been described. However, the present invention is not limited to this, The user selects an arbitrary number of correct songs, multiplies the number of selected correct songs by rn to obtain the number of correct candidate phrases tn, and the number of misleading candidate phrases dn corresponding to the determined number of correct candidate phrases tn ( The number of misleading candidate phrases dn) that minimizes the difference between the appearance frequency of each of the tn correct candidate phrases and the appearance frequency of each of the dn misleading candidate phrases in the jn phrases played back at the time of authentication It may be obtained by referring to the number table or by calculation using the above-mentioned equation (4), and dn ÷ rn pieces of miscellaneous music may be automatically selected based on the number of found candidate phrases dn. .

[Second Embodiment]
Next, a second embodiment of the present invention will be described. In addition, the same code | symbol is attached | subjected to the part same as 1st Embodiment, and description is abbreviate | omitted. FIG. 10 shows a computer system 30 according to the second embodiment.

The computer system 30 according to the second embodiment is different from the computer system 10 described in the first embodiment in that song list information is not stored in the HDD 18C of the authentication server 18. The second embodiment is different from the first embodiment in the combination of the correct candidate phrase number tn and the misleading candidate phrase number dn registered in the candidate phrase number table (details will be described later). Furthermore, in the second embodiment, the contents of the music registration process and the authentication process realized by the user authentication program are different from those in the first embodiment. The user authentication program according to the second embodiment corresponds to the authentication program according to claim 1 1, that CPU18A executes the authentication program, the authentication server 18 authentication of claim 5 Functions as a device.

  Next, as an operation of the second embodiment, a music registration process according to the second embodiment will be described with reference to FIG. In the song registration process according to the first embodiment (FIG. 2), the number dn of candidate phrases dn is determined in step 70. Instead, in the song registration process according to the second embodiment, in step 52, the step The total number of phrases jn constituting the song list and the correct answer included in the song list as parameters for defining the authentication environment condition in the authentication using the song according to the attribute of the processing target user represented by the attribute information acquired in 50 In addition to the maximum number jt and the minimum number jb of phrases, the number rn of phrases extracted from a single piece of music, and the number tn of correct candidate phrases used for generating a song list, the number dn of candidate phrases is determined.

  In the second embodiment, the candidate phrase number table stored in the HDD 18C includes specific authentication environment conditions (parameters other than the misleading candidate phrase number dn (total phrase number jn, correct phrase maximum number jt and minimum number jb). , The number of correct candidate phrases tn), and the frequency of occurrence of each of the tn correct candidate phrases and dn mistakes in jn phrases played during authentication In order to minimize the difference in the appearance frequency of each candidate phrase, the appearance ratio of each case where jt to jb different numbers of correct phrases are included in jn phrases is as described above. When calculated using the formula (5), the value of the number dn of confusing candidate phrases for minimizing the variation in the appearance ratio (eg, variance or standard deviation) of each case is the value of various authentication environment conditions (conflicting candidate phrases). Number dn A plurality of types of authentication environment conditions) in which at least one of the other parameters is different from each other is registered and configured. In addition, the value of the number of confused candidate phrases dn registered in the candidate phrase number table is calculated by, for example, calculating the appearance ratio of each case while changing the value of the number of confused candidate phrases dn by 1 for a specific authentication environment condition. Various authentication environment conditions (a plurality of authentication environment conditions in which at least one of the parameters other than the number of misleading candidate phrases dn are different from each other) ) To obtain each.

In the song registration process according to the second embodiment, in step 52, parameters other than the number of confusing candidate phrases dn are determined in the same manner as the song registration process according to the first embodiment, among the parameters defining the authentication environment condition. Later, the number of candidate phrases dn is determined by searching the candidate phrase number table using each determined parameter as a key, and obtaining the number of confused candidate phrases dn corresponding to each determined parameter. As a result, in the second embodiment, the combination of the correct candidate phrase number tn and the misleading candidate phrase number dn in each authentication environment condition matches any of a plurality of combinations registered in the candidate phrase number table. So that the difference between the appearance frequency of each of the tn correct candidate phrases and the appearance frequency of each of the dn misappropriation candidate phrases in the jn phrases reproduced at the time of authentication is minimized. Correct answer candidates so that the variation in the appearance ratio of each case is minimized when the appearance ratio of each case where jt to jb different number of correct phrases are included in the phrase It can be determined here the number tn and the number dn of undoubted candidate phrase phrase. Their to, each parameter defining the determined authentication environmental conditions authentication ID and the step 52 which is input by the user in the next step 54 to be processed (including the number dn of undoubted candidate phrases), the authentication information table Register as authentication environment information in the authentication environment information registration area.

  Next, an authentication process according to the second embodiment will be described with reference to FIG. In the authentication processing according to the second embodiment, in step 100, an authentication environment condition to be applied to the authenticated person is extracted by extracting an authentication information table corresponding to the authenticated person who is operating the terminal device 12 that is the access source. , A song list is generated by performing steps 132 to 140 shown in FIG. 12 instead of the steps 102 to 106 (see FIG. 5) described in the first embodiment.

  That is, first, in step 132, the parameters of the authentication environment information registered in the authentication environment information registration area of the authentication information table extracted in step 100 (total phrase number jn, correct phrase maximum number jt and minimum number jb, correct answer) Using the above formula (5), substituting the number of candidate phrases tn and the number of misleading candidate phrases dn), the appearance ratio of each case where the number of correct phrases in the song list is jb to jt is the correct answer candidate in the song list. The difference between the appearance frequencies of the phrase and the misleading candidate phrase, that is, the deviation S is determined to be the minimum.

  The process of determining the appearance ratio of each case using the expression (5) is a process of deriving the values of a plurality of variables (appearance ratio of each case) from a single arithmetic expression (expression (5)). Therefore, specifically, it is assumed that the appearance ratio of the specific case in which the deviation S is minimum (for example, deviation S = 0) in the state where the appearance ratio of the remaining cases other than the specific case is assumed is calculated. After repeating while changing the appearance ratio of each case, the deviation S and the variation in the appearance ratio for each combination of the calculated appearance ratios are compared, and the deviation S is the smallest and the variation in the appearance ratio is also the smallest. This is a complicated process of selecting a combination, and the process takes a long time.

  For this reason, the above process is performed in advance for each of various authentication environment conditions, and the appearance ratio of each case obtained for each of the various authentication environment conditions is registered in advance in a predetermined table. It is preferable to perform a process of reading out the appearance ratio of each case corresponding to the authentication environment information (authentication environment condition) registered in the authentication information table extracted in step (b) from a predetermined table. Thereby, it is possible to reduce the time required to determine the appearance ratio of each case when executing the authentication process (FIG. 12).

  In the next step 134, the appearance ratio of each case determined in step 132 is normalized so that the sum is 1, the appearance probability of each case is obtained, and a number line corresponding to the numerical range of random numbers to be generated is obtained. A number line divided into a plurality of sections respectively corresponding to one of the cases is created according to the appearance probability of each case. As an example, the authentication environment information as shown in FIG. 13A is registered in the authentication information table, and the appearance ratio of each case determined in step 132 is a value as shown in FIG. The appearance probability shown in FIG. 13B is obtained by normalizing the appearance ratio. In addition, when the numerical range of the random number is 0 to 100, the number line corresponding to this numerical range is set to any one of the cases where the number of correct answers i = 2 to 5 according to the appearance probability shown in FIG. By dividing into four sections respectively corresponding to the above, a number line as shown in FIG. 13C is obtained as an example.

  In step 136, a random number is generated, and the correct phrase number i of the case corresponding to the section to which the generated random number belongs is obtained from the number line created in step 134. For example, if the number line shown in FIG. 13C is created in step 134 and the random number generated in step 136 is “51”, the random number “51” is the number of correct phrases i = 3 on the number line. Since it belongs to the section corresponding to a certain case 2, “3” is acquired as the number i of correct phrases. By determining the number i of correct phrases as in steps 134 and 136 described above, the probability that the number i of correct phrases becomes each value of jt to jb matches the appearance ratio of each case determined previously. Can be made.

  In the next step 138, i correct phrases to be set in the song list from (tn ÷ rn) correct songs whose song IDs are registered in the correct song information registration area of the authentication information table corresponding to the person to be authenticated. And select (jn-i) miscellaneous phrases to be set in the song list from (dn ÷ rn) miscellaneous songs whose song IDs are registered in the miscellaneous song information registration area of the authentication information table. . Selection of i correct phrases to be set in the song list is performed by randomly selecting a single song ID from the song IDs of (tn ÷ rn) correct songs registered in the correct song information registration area of the authentication information table, for example. Is selected i times, and a random number in a numerical range of 1 to rn is generated, and the generated random number is converted and generated into an extraction start position ID i times, and the selected i song IDs are This can be done by adding each i generated extraction start position IDs and generating i phrase IDs. Similarly, when selecting (jn-i) miscellaneous phrases to be set in the song list, for example, (tn ÷ rn) miscellaneous songs registered in the miscellaneous music information registration area of the authentication information table are used. Randomly select a single song ID from the ID (jn-i) times, generate a random number in the range of 1 to rn, and convert and generate the generated random number to the extraction start position ID Is performed (jn-i) times, (jn-i) extraction start position IDs generated are added to the selected (jn-i) music IDs, and (jn-i) phrase IDs are generated. Can be done.

  In step 140, the phrase IDs of i correct phrases selected in step 138 and the phrase IDs of (jn-i) misleading phrases are randomly sorted, and the sorted phrase IDs are set in order from the top of the song list. A song list is generated. Thereby, a song list as shown in FIG. 13D is generated as an example.

  As described above, in the song list generation method (referred to as the fourth song list generation method for convenience) employed in the authentication processing according to the second embodiment, the song in the authentication environment condition applied to the person to be authenticated. Based on the appearance ratio of each case in which the number of correct phrases in the list is different from jt to jb, the number i of correct phrases in the song list is jt to jb. The probability of each value is determined to match the appearance ratio of each determined case, i correct answer phrases are selected from tn correct answer candidate phrases, and (jn) -i) Since a song list is generated by selecting one confusing phrase, it is possible to avoid an increase in the time required for the authentication process, and the song list information (song list pattern) described in the first embodiment I need to remember As a result, the storage area of the storage device can be further reduced.

  In the second embodiment, the appearance frequency of each of the tn correct candidate phrases that can be extracted from the tn ÷ rn correct answer whose music ID is registered in the authentication information table and the authentication information In the generated song list, the difference in appearance frequency on each song list of dn lost candidate phrases that can be extracted from the dn ÷ rn lost songs whose song IDs are registered in the table is minimized. Since the appearance ratio of each case where the number of correct phrases is different from jt to jb is determined, tn correct answer candidates in jn phrases presented to the person to be authenticated at the time of authentication The probability that each of the phrases appears and the probability that each of the dn misappropriation candidate phrases appear are almost uniform, and it is possible to prevent the correct candidate phrase or the correct song from being discriminated by a third party due to appearance.

  In the second embodiment, the number tn of correct candidate phrases and the number dn of misleading candidate phrases are set in advance so that the variation in probability that the number i of correct phrases is jt to jb is minimized. Therefore, the number of correct phrases in the number of correct phrases in jn phrases presented to the person being authenticated at the time of authentication is prevented from appearing frequently, and the number of correct phrases is random. It is possible to perform a preferred authentication that is also secure.

When the song list is generated as described above, the length of each of jn phrases (reproduction target phrases) set in the generated song list is the same as the authentication process according to the first embodiment (FIG. 5). (Playback time) is determined randomly using random numbers or the like (step 108), music data of jn playback target phrases are sequentially acquired from the music DB, and the acquired jn music data are linked according to the playback order. Thus, music data (authentication music data) to be reproduced at the time of authentication is generated (step 110). Steps 134 to step 140 and step 108, 110 in the authentication process according to the second embodiment (FIG. 12) corresponds to the generation hands stage according to claim 5. Since the processing after the next step 112 is the same as the authentication processing according to the first embodiment (FIG. 5), description thereof is omitted.

  In the second embodiment described above, the difference between the appearance frequency of each of the tn correct candidate phrases and the appearance frequency of each of the dn misappropriate candidate phrases in the jn phrases reproduced at the time of authentication is minimized. In addition, when the appearance ratio of each case where jn to jb different numbers of correct phrases are included in jn phrases is calculated, the variation in the appearance ratio of each case is minimized. In the above description, the number of correct candidate phrases tn and the number of misleading candidate phrases dn is set before selecting the correct and misleading songs in the music registration process (FIG. 11). However, the present invention is not limited to this. Needless to say, the present invention is also applicable to a mode in which the number of correct candidate phrases tn and the number of confused candidate phrases dn (and other parameters that define authentication environment conditions) are fixedly set in advance.

In the first embodiment, the third song list generation method uses the smallest difference between the appearance frequency in the song list of tn correct candidate phrases and the appearance frequency in the song list of dn missing candidate phrases. In the second embodiment, the fourth song list generation method is changed to tn correct candidate candidates in the second embodiment, in which the number of correct candidate phrases tn and the number confused candidate phrases dn are set. Set the appearance ratio of each case where the number of correct phrases in the song list is different so that the difference between the frequency of appearance of the phrase in the song list and the frequency of occurrence of dn misleading candidate phrases in the song list is minimized embodiments in combination with the invention to have been described (embodiment corresponding to the invention of claim 5 wherein), the present invention is not limited to the combination of the above, the third music list generation method, tn pieces of correct answer In the list of candidate phrase songs It may be combined with an invention that sets the appearance ratio of each case where the number of correct phrases in the song list is different from each other so that the difference in the appearance frequency in the song list of the current frequency and dn misleading candidate phrases is minimized. The fourth song list generation method corrects the correct answer so that the difference between the appearance frequency of the tn correct candidate phrases in the song list and the appearance frequency of the dn misleading candidate phrases in the song list is minimized. You may combine with the invention which sets the number tn of candidate phrases, and the number dn of misleading candidate phrases.

For example, the third song list generation method may be used to minimize the difference between the appearance frequency of tn correct candidate phrases in the song list and the appearance frequency of dn misleading candidate phrases in the song list. In the aspect combined with the invention of setting the appearance ratio of each case where the number of correct phrases in the list is different from each other, specifically, for example, the appearance frequency of tn correct candidate phrases and the dn misappropriation candidates The appearance ratio (appearance frequency p (i)) of each case that minimizes the difference in the appearance frequency of the phrase in the song list is obtained as an integer value, and the song list pattern corresponding to the specific case (in the specific case) A song list pattern generated by performing each case separately for the number of occurrences of a specific case (song list pattern including the same number of correct phrases i) as the integer value of the appearance frequency p (i) of a specific case. Is stored in the storage means, an arbitrary song list pattern is randomly selected from the generated song list patterns of all cases, and the pointer information in the selected song list pattern is rewritten to the song ID. Generate a song list. As a result, the third song list generation method is applied to minimize the difference between the appearance frequency of the tn correct candidate phrases in the song list and the appearance frequency of the dn misappropriate candidate phrases in the song list. The song list can be generated in the same way, and a song list that can avoid discriminating the correct candidate phrase and the correct song by third parties can be generated in almost a fixed time, and the storage area of the storage device can also be saved can do. The above aspect corresponds to the invention described in claim 3 .

Also, for example, the fourth song list generation method is such that the difference between the appearance frequency in the song list of tn correct candidate phrases and the appearance frequency in the song list of dn misleading candidate phrases is minimized. In the aspect combined with the invention of setting the number tn of correct candidate phrases and the number dn of confusing candidate phrases, specifically, the appearance frequency of tn correct candidate phrases in the song list and the number of dn misappropriating candidate phrases In the authentication environment condition including the number of correct candidate phrases tn and the number of misleading candidate phrases dn set so as to minimize the difference in appearance frequency in the song list, for example, as shown in FIG. The number i of correct phrases included is jt to jb. The number of combinations (total number of patterns) in each case is obtained, and the number of correct phrases i is jt to jb by determining the ratio of the number of combinations. Appropriate output for each case A plurality of numerical values corresponding to individual cases are obtained by calculating a ratio, and representing a number line representing a predetermined numerical range according to the obtained appearance ratio for each case (in FIG. 14, a number line representing a numerical range of 0 to 100 is shown). Dividing into ranges, generating a value within a specified numerical range with random numbers, etc., and adopting the case corresponding to the numerical range to which the generated value belongs as the number of i (the number of correct phrases) At the same time, i phrases are selected at random, and (jn-i) phrases are randomly selected from the candidate phrases, and the selected phrases are rearranged randomly to generate a song list. As a result, by applying the fourth song list generation method, the difference between the appearance frequency of the tn correct candidate phrases in the song list and the appearance frequency of the dn misappropriate candidate phrases in the song list is minimized. The song list can be generated in the same way, and a song list that can avoid discriminating the correct candidate phrase and the correct song by third parties can be generated in almost a fixed time, and the storage area of the storage device can also be saved can do. The above aspect corresponds to the invention described in claim 4 .

  Moreover, although each embodiment mentioned above demonstrated the aspect which implement | achieves the authentication apparatus based on this invention by the single computer (authentication server 18), this invention is not limited to this, For example, music DB is memorize | stored A computer (music server) connected to the storage device connected to the authentication server 18 via a network such as the Internet is provided separately from the authentication server 18, and the authentication server 18 acquires music data from the music server via the network. It goes without saying that the authentication apparatus according to the present invention may be realized by a plurality of computers as in the configuration or the like.

1 is a block diagram showing a schematic configuration of a computer system according to a first embodiment. It is a flowchart which shows the content of the music registration process which concerns on 1st Embodiment. It is the schematic which shows an example of an authentication information table. It is an image figure which shows an example of a correct song registration page. It is a flowchart which shows the content of the authentication process which concerns on 1st Embodiment. (A) is an example of music list information, and (B) is a schematic diagram showing an example of a music list generated from a music list pattern. It is a conceptual diagram which shows the music information to which the mark information showing a phrase extraction start position was added. It is an image figure which shows an example of the page for authentication. It is the schematic for demonstrating an example based on an authentication object arrangement | sequence, and the authentication based on an authentication object arrangement | sequence. It is a block diagram which shows schematic structure of the computer system which concerns on 2nd Embodiment. It is a flowchart which shows the content of the music registration process which concerns on 2nd Embodiment. It is a flowchart which shows the content of the authentication process which concerns on 2nd Embodiment. (A) is an example of an authentication environment condition, (B) is an example of an appearance ratio calculation result of each case, (C) is an example of a number line, and (D) is a schematic diagram showing an example of a song list. It is the schematic explaining the other aspect of this invention.

Explanation of symbols

10 Computer System 12 Terminal Device 16 Service Providing System 18 Authentication Server 18C HDD
20 Service Providing Server 30 Computer System

Claims (11)

First storage means for storing a plurality of pieces of information of elements that can be used as constituent elements of an authentication element group used for authentication of a person to be authenticated;
The number tn of correct candidate elements to be used as correct answer elements in the authentication element group, which defines the authentication environment conditions for authentication of the authentication subject, the incorrect answer candidate elements to be used as incorrect answer elements in the authentication element group Number dn, number jn of elements constituting the authentication element group (where jn is determined according to the authentication strength required in the corresponding authentication environment condition), maximum number jt of correct answer elements in the authentication element group, and A component of an authentication element group in which at least one of each parameter of the minimum number jb (where jb ≦ jt <jn) is generated based on each of a plurality of types of authentication environment conditions different from other authentication environment conditions The authentication element group that prescribes, for each of the first to jn elements constituting the authentication element group, which of tn correct answer candidate elements and dn incorrect answer candidate elements is used as For each authentication environment condition Second memory means for storing several,
Processing that represents the attribute information of the person to be processed from the attribute information registered in advance for each individual person to be authenticated, and represents the acquired attribute information as an authentication environment condition to be applied to authentication of the person to be authenticated A detecting means for detecting an authentication environment condition according to an attribute of the subject person to be authenticated;
Randomly select and select a single authentication element group pattern that matches the authentication environment condition detected by the detection means from among the authentication element group patterns stored in the second storage means From the tn correct answer candidate elements and dn incorrect answer candidate elements selected or extracted from the plurality of elements whose information is stored in the first storage means based on the authentication element group pattern, the maximum generating means for generating the authentication element group formed by selecting or extracting a total of jn elements including jt and minimum jb correct elements;
The jn elements constituting the authentication element group generated by the generating means are each presented to the authenticated person, and the correct answer element among the presented jn elements is specified to the authenticated person. An authentication means for authenticating the person to be authenticated;
Only including,
The number tn of correct candidate elements and the number dn of incorrect answer candidate elements in each authentication environment condition in which the corresponding pattern of the authentication element group is stored in the second storage means are the number of correct candidate elements tn and the number of correct candidate elements tn. After determining or obtaining one value of the number dn of correct answer candidate elements,

The other value out of the number tn of correct candidate elements and the number dn of incorrect answer candidate elements satisfying the condition is calculated, and the value obtained by the operation is calculated from the number tn of correct candidate elements and the number dn of incorrect answer candidate elements. By making it an integer as the other value, the appearance frequency of each of tn correct candidate elements in the authentication element group and the appearance frequency of each of dn incorrect answer candidate elements in the authentication element group Is set in advance to minimize the difference between
A plurality of patterns of the authentication element groups corresponding to the individual authentication environment conditions stored in the second storage means are generated in advance for each authentication environment condition according to the corresponding authentication environment condition. An authentication device stored in the second storage means. The patterns of the authentication element groups corresponding to the individual authentication environment conditions stored in the second storage means are tn correct answer candidate elements and dn incorrect answer candidate elements according to the corresponding authentication environment conditions. 2. The authentication apparatus according to claim 1, wherein each of the authentication elements is generated so as to cover all combinations of the authentication element groups when jn elements are selected. For each authentication environment condition in which the corresponding pattern of the authentication element group is stored in the second storage means, the maximum jt from tn correct answer candidate elements and dn incorrect answer candidate elements according to the authentication environment condition When the authentication element group is generated by selecting a total of jn elements including the minimum jb (jb ≦ jt <jn) correct answer elements, jt to jb are generated in the generated authentication element group. P (i) (where i = jb, jb + 1,..., Jt) where the appearance frequency of each case including different numbers of correct answer elements is

The appearance frequency p (i) of each case where the deviation S is minimized is obtained, and the obtained appearance frequency p (i) of each case is set as the appearance ratio of each case.
The authentication element group pattern corresponding to the individual authentication environment conditions stored in the second storage means is the authentication environment corresponding to the ratio of the number of authentication element group patterns for each case. 2. The authentication apparatus according to claim 1, wherein a pattern of an authentication element group is generated for each case so as to match an appearance ratio of each case set for a condition. . First storage means for storing a plurality of pieces of information of elements that can be used as constituent elements of an authentication element group used for authentication of a person to be authenticated;
Processing that represents the attribute information of the person to be processed from the attribute information registered in advance for each individual person to be authenticated, and represents the acquired attribute information as an authentication environment condition to be applied to authentication of the person to be authenticated A detecting means for detecting an authentication environment condition according to an attribute of the subject person to be authenticated;
The number tn of correct candidate elements to be used as correct answer elements in the authentication element group, which defines the authentication environment conditions for authentication of the authentication subject, the incorrect answer candidate elements to be used as incorrect answer elements in the authentication element group Number dn, number jn of elements constituting the authentication element group (where jn is determined according to the authentication strength required in the corresponding authentication environment condition), maximum number jt of correct answer elements in the authentication element group, and In the authentication element group, at least one of the minimum number jb (where jb ≦ jt <jn) is set in units of each of a plurality of types of authentication environment conditions different from other authentication environment conditions. Random numbers to be generated (≧≧) according to the appearance ratio of each case in the authentication environment condition detected by the detection means, out of the appearance ratios of each case including different numbers of correct elements among the number j to jb 0) The number line is divided into a plurality of sections corresponding to any of the cases according to the appearance ratio of the cases in the detected authentication environment condition, and random numbers within the numerical range are generated and generated. The number of correct elements in the case corresponding to the section to which the generated random number belongs is determined as the number i of correct elements in the authentication element group to be generated. Then, i correct answer elements are selected from tn correct answer candidate elements selected or extracted from a plurality of elements whose information is stored in the first storage means, and information is stored in the first storage means. Generating means for generating the authentication element group by selecting (jn-i) incorrect answer elements from dn incorrect answer candidate elements selected or extracted from the plurality of elements,
The jn elements constituting the authentication element group generated by the generating means are each presented to the authenticated person, and the correct answer element among the presented jn elements is specified to the authenticated person. An authentication means for authenticating the person to be authenticated;
Including
Each authentication environment condition in which the appearance ratio of each case is set is determined or acquired one of the number tn of correct candidate elements and the number dn of incorrect candidate elements,

The other value out of the number tn of correct candidate elements and the number dn of incorrect answer candidate elements satisfying the condition is calculated, and the value obtained by the operation is calculated from the number tn of correct candidate elements and the number dn of incorrect answer candidate elements. By making it an integer as the other value, the appearance frequency of each of tn correct candidate elements in the authentication element group and the appearance frequency of each of dn incorrect answer candidate elements in the authentication element group The number of correct answer candidate elements tn and the number of incorrect answer candidate elements dn are set so that the difference between
The appearance ratio of each case in each of the individual authentication environment conditions is selected when jn elements are selected from tn correct answer candidate elements and dn incorrect answer candidate elements according to the corresponding authentication environment conditions. The number i of correct elements included in each element is determined for each case of jt to jb, and the number of combinations is set to match the ratio of the number of combinations obtained for each case. Authentication device. First storage means for storing a plurality of pieces of information of elements that can be used as constituent elements of an authentication element group used for authentication of a person to be authenticated;
Processing that represents the attribute information of the person to be processed from the attribute information registered in advance for each individual person to be authenticated, and represents the acquired attribute information as an authentication environment condition to be applied to authentication of the person to be authenticated A detecting means for detecting an authentication environment condition according to an attribute of the subject person to be authenticated;
The number tn of correct candidate elements to be used as correct answer elements in the authentication element group, which defines the authentication environment conditions for authentication of the authentication subject, the incorrect answer candidate elements to be used as incorrect answer elements in the authentication element group Number dn, number jn of elements constituting the authentication element group (where jn is determined according to the authentication strength required in the corresponding authentication environment condition), maximum number jt of correct answer elements in the authentication element group, and In the authentication element group, at least one of the minimum number jb (where jb ≦ jt <jn) is set in units of each of a plurality of types of authentication environment conditions different from other authentication environment conditions. Random numbers to be generated (≧≧) according to the appearance ratio of each case in the authentication environment condition detected by the detection means, out of the appearance ratios of each case including different numbers of correct elements among the number j to jb 0) The number line is divided into a plurality of sections corresponding to any of the cases according to the appearance ratio of the cases in the detected authentication environment condition, and random numbers within the numerical range are generated and generated. The number of correct elements in the case corresponding to the section to which the generated random number belongs is determined as the number i of correct elements in the authentication element group to be generated. Then, i correct answer elements are selected from tn correct answer candidate elements selected or extracted from a plurality of elements whose information is stored in the first storage means, and information is stored in the first storage means. Generating means for generating the authentication element group by selecting (jn-i) incorrect answer elements from dn incorrect answer candidate elements selected or extracted from the plurality of elements,
The jn elements constituting the authentication element group generated by the generating means are each presented to the authenticated person, and the correct answer element among the presented jn elements is specified to the authenticated person. An authentication means for authenticating the person to be authenticated;
Only including,
The appearance ratio of each case set in units of each of the plurality of types of authentication environment conditions is a maximum of jt and a minimum of jb from tn correct answer candidate elements and dn incorrect answer candidate elements according to the authentication environment conditions. However, when the authentication element group is generated by selecting a total number of jn elements including correct elements of jb ≦ jt <jn, jt to jb of the generated authentication element group When the appearance frequency of each case including different numbers of correct answer elements is p (i) (where i = jb, jb + 1,..., Jt),

An authentication apparatus in which the appearance frequency p (i) of each case with the smallest deviation S is obtained, and the obtained appearance frequency p (i) of each case is set as the appearance ratio of each case. Each element whose information is stored in the first storage means is time-series information in which the content given to the authenticated person changes in time series during presentation to the authenticated person,
The authentication means sequentially presents individual elements constituting the authentication element group to the person to be authenticated, and performs an operation of clearly indicating a period during which an element recognized as a correct element among the individual elements is presented. 6. The authenticated person is authenticated by determining whether or not the presentation period of the correct answer element is properly specified by allowing the authenticated person to perform authentication. Authentication device. The time-series information is music information, each element constituting the authentication element group is information of a part of a phrase extracted from the music information, and the authentication unit includes the authentication element. The authentication apparatus according to claim 6, wherein jn phrases constituting the group are sequentially reproduced to sequentially present the jn phrases to the person to be authenticated. The music for extracting the phrase to be used as the correct element is selected in advance by an authorized person, the ID of the music selected by the authorized person is registered in a table, and is used for authentication as the authentication element group. The authentication apparatus according to claim 7, which is referred to when generating music data. First storage means for storing a plurality of pieces of information of elements that can be used as constituent elements of an authentication element group used for authentication of a person to be authenticated;
The number tn of correct candidate elements to be used as correct answer elements in the authentication element group, which defines the authentication environment conditions for authentication of the authentication subject, the incorrect answer candidate elements to be used as incorrect answer elements in the authentication element group Number dn, number jn of elements constituting the authentication element group (where jn is determined according to the authentication strength required in the corresponding authentication environment condition), maximum number jt of correct answer elements in the authentication element group, and A component of an authentication element group in which at least one of each parameter of the minimum number jb (where jb ≦ jt <jn) is generated based on each of a plurality of types of authentication environment conditions different from other authentication environment conditions The authentication element group that prescribes, for each of the first to jn elements constituting the authentication element group, which of tn correct answer candidate elements and dn incorrect answer candidate elements is used as For each authentication environment condition Second memory means for storing several,
A computer with
Processing that represents the attribute information of the person to be processed from the attribute information registered in advance for each individual person to be authenticated, and represents the acquired attribute information as an authentication environment condition to be applied to authentication of the person to be authenticated Detection means for detecting an authentication environment condition corresponding to the attribute of the subject person to be authenticated,
Randomly select and select a single authentication element group pattern that matches the authentication environment condition detected by the detection means from among the authentication element group patterns stored in the second storage means Generating means for generating an authentication element group used for authentication from the pattern of the authenticated authentication element group,
And each jn elements constituting the authentication element group generated by the generating unit are presented to the person to be authenticated, and the correct element of the presented jn elements is designated by the person to be authenticated. Authentication means for authenticating the person to be authenticated with
An authentication program for functioning as
The number tn of correct candidate elements and the number dn of incorrect answer candidate elements in each authentication environment condition in which the corresponding pattern of the authentication element group is stored in the second storage means are the number of correct candidate elements tn and the number of correct candidate elements tn. After determining or obtaining one value of the number dn of correct answer candidate elements,

The other value out of the number tn of correct candidate elements and the number dn of incorrect answer candidate elements satisfying the condition is calculated, and the value obtained by the operation is calculated from the number tn of correct candidate elements and the number dn of incorrect answer candidate elements. By making it an integer as the other value, the appearance frequency of each of tn correct candidate elements in the authentication element group and the appearance frequency of each of dn incorrect answer candidate elements in the authentication element group Is set in advance to minimize the difference between
A plurality of patterns of the authentication element groups corresponding to the individual authentication environment conditions stored in the second storage means are generated in advance for each authentication environment condition according to the corresponding authentication environment condition. An authentication program stored in the second storage means . A computer comprising first storage means for storing a plurality of pieces of information of elements that can be used as constituent elements of an authentication element group used for authentication of a person to be authenticated,
Processing that represents the attribute information of the person to be processed from the attribute information registered in advance for each individual person to be authenticated, and represents the acquired attribute information as an authentication environment condition to be applied to authentication of the person to be authenticated Detection means for detecting an authentication environment condition corresponding to the attribute of the subject person to be authenticated,
The number tn of correct candidate elements to be used as correct answer elements in the authentication element group, which defines the authentication environment conditions for authentication of the authentication subject, the incorrect answer candidate elements to be used as incorrect answer elements in the authentication element group Number dn, number jn of elements constituting the authentication element group (where jn is determined according to the authentication strength required in the corresponding authentication environment condition), maximum number jt of correct answer elements in the authentication element group, and In the authentication element group, at least one of the minimum number jb (where jb ≦ jt <jn) is set in units of each of a plurality of types of authentication environment conditions different from other authentication environment conditions. Random numbers to be generated (≧≧) according to the appearance ratio of each case in the authentication environment condition detected by the detection means, out of the appearance ratios of each case including different numbers of correct elements among the number j to jb 0) The number line is divided into a plurality of sections corresponding to any of the cases according to the appearance ratio of the cases in the detected authentication environment condition, and random numbers within the numerical range are generated and generated. The number of correct elements in the case corresponding to the section to which the generated random number belongs is determined as the number i of correct elements in the authentication element group to be generated. Then, i correct answer elements are selected from tn correct answer candidate elements selected or extracted from a plurality of elements whose information is stored in the first storage means, and information is stored in the first storage means. Generating means for generating the authentication element group by selecting (jn-i) incorrect answer elements from dn incorrect answer candidate elements selected or extracted from a plurality of elements,
And each jn elements constituting the authentication element group generated by the generating unit are presented to the person to be authenticated, and the correct element of the presented jn elements is designated by the person to be authenticated. Authentication means for authenticating the person to be authenticated with
An authentication program for functioning as
Each authentication environment condition in which the appearance ratio of each case is set is determined or acquired one of the number tn of correct candidate elements and the number dn of incorrect candidate elements,

The other value out of the number tn of correct candidate elements and the number dn of incorrect answer candidate elements satisfying the condition is calculated, and the value obtained by the operation is calculated from the number tn of correct candidate elements and the number dn of incorrect answer candidate elements. By making it an integer as the other value, the appearance frequency of each of tn correct candidate elements in the authentication element group and the appearance frequency of each of dn incorrect answer candidate elements in the authentication element group The number of correct answer candidate elements tn and the number of incorrect answer candidate elements dn are set so that the difference between
The appearance ratio of each case in each of the individual authentication environment conditions is selected when jn elements are selected from tn correct answer candidate elements and dn incorrect answer candidate elements according to the corresponding authentication environment conditions. The number i of correct elements included in each element is determined for each case of jt to jb, and the number of combinations is set to match the ratio of the number of combinations obtained for each case. Authentication program. A computer comprising first storage means for storing a plurality of pieces of information of elements that can be used as constituent elements of an authentication element group used for authentication of a person to be authenticated,
Processing that represents the attribute information of the person to be processed from the attribute information registered in advance for each individual person to be authenticated, and represents the acquired attribute information as an authentication environment condition to be applied to authentication of the person to be authenticated Detection means for detecting an authentication environment condition corresponding to the attribute of the subject person to be authenticated,
The number tn of correct candidate elements to be used as correct answer elements in the authentication element group, which defines the authentication environment conditions for authentication of the authentication subject, the incorrect answer candidate elements to be used as incorrect answer elements in the authentication element group Number dn, number jn of elements constituting the authentication element group (where jn is determined according to the authentication strength required in the corresponding authentication environment condition), maximum number jt of correct answer elements in the authentication element group, and In the authentication element group, at least one of the minimum number jb (where jb ≦ jt <jn) is set in units of each of a plurality of types of authentication environment conditions different from other authentication environment conditions. Random numbers to be generated (≧≧) according to the appearance ratio of each case in the authentication environment condition detected by the detection means, out of the appearance ratios of each case including different numbers of correct elements among the number j to jb 0) The number line is divided into a plurality of sections corresponding to any of the cases according to the appearance ratio of the cases in the detected authentication environment condition, and random numbers within the numerical range are generated and generated. The number of correct elements in the case corresponding to the section to which the generated random number belongs is determined as the number i of correct elements in the authentication element group to be generated. Then, i correct answer elements are selected from tn correct answer candidate elements selected or extracted from a plurality of elements whose information is stored in the first storage means, and information is stored in the first storage means. Generating means for generating the authentication element group by selecting (jn-i) incorrect answer elements from dn incorrect answer candidate elements selected or extracted from a plurality of elements,
And each jn elements constituting the authentication element group generated by the generating unit are presented to the person to be authenticated, and the correct element of the presented jn elements is designated by the person to be authenticated. Authentication means for authenticating the person to be authenticated with
An authentication program for functioning as
The appearance ratio of each case set in units of each of the plurality of types of authentication environment conditions is a maximum of jt and a minimum of jb from tn correct answer candidate elements and dn incorrect answer candidate elements according to the authentication environment conditions. However, when the authentication element group is generated by selecting a total number of jn elements including correct elements of jb ≦ jt <jn, jt to jb of the generated authentication element group When the appearance frequency of each case including different numbers of correct answer elements is p (i) (where i = jb, jb + 1,..., Jt),

An authentication program in which the appearance frequency p (i) of each case that minimizes the deviation S is obtained, and the obtained appearance frequency p (i) of each case is set as the appearance ratio of each case .