JP4826277B2 - User authentication method, system having user authentication function, apparatus having user authentication function, and computer software - Google Patents

Description

  The present invention relates to a user authentication method, a system having a user authentication function, an apparatus having a user authentication function, and computer software.

  When logging in to an image forming apparatus or the like provided with a personal computer or a hard disk capable of storing documents, input of a login ID and a password is required for security.

It is complicated to input a login ID and password for each login, and in order to eliminate this complexity, fingerprint authentication data is stored in advance in association with the login ID and password, and if fingerprint authentication is successful, they are associated with each other. A technique for automatically inputting a login ID and a password into a login ID field and a password field on a login input screen is known (see, for example, Patent Document 1).
JP 2003-36247 A

  In general, in biometric authentication such as fingerprint authentication, the degree of coincidence between input feature data and registered feature data is calculated, and authentication is performed assuming that feature data having a coincidence degree equal to or greater than a predetermined value matches. .

  For this reason, there is a possibility that another person having similar feature data may be mistakenly identified as the principal, and in the method described in Patent Document 1, there is a risk that the other person logs in with his / her login ID and password. In addition, there is a possibility that a plurality of candidates are extracted, but the method described in Patent Document 1 does not consider a handling method when a plurality of candidates are extracted.

  The present invention has been made in view of the problems as described above, and the input at the time of login is simplified, and it is suppressed that another person logs in with the login ID and password of the person, so that a plurality of candidates can be obtained. It is an object of the present invention to provide a user authentication method that can cope with the case of extraction.

The user authentication method of the present invention includes a biometric information registration step for registering biometric information in advance, a biometric information reception step for receiving input of biometric information, the biometric information received by the biometric information reception step, and the biometric information registration step. Based on the degree of coincidence with the registered biometric information, based on the user extraction step of extracting user data corresponding to the biometric information received by the biometric information reception step, and the user data extracted by the user extraction step A user candidate display step for displaying user candidates, a specific user selection step for selecting a specific user from among the user candidates displayed by the user candidate display step, and a specific user selected by the specific user selection step some of the corresponding user name and password to the self Is entered, if the user authentication screen and the number of characters that is automatically entered and can recognize the number of characters to be input, or in the candidate user the user extracting step is not extracted, accepting all the input user name and password a user authentication screen display step of displaying a user authentication screen, the the user authentication screen display the portion displayed in step accepts an input for the complement of the auto-entered password, or user name and password all the The method includes a password complement input receiving step for receiving an input, and an authentication step for authenticating the automatically entered user name and the automatically entered and complemented password .

The system having the user authentication function of the present invention includes a biometric information receiving unit that receives input of biometric information, a user extracting unit that extracts user data corresponding to the biometric information received by the biometric information receiving unit, and the user extraction User candidate display means for displaying user candidates based on user data extracted by the means, specific user selection means for selecting a specific user from user candidates displayed by the user candidate display means, and the specific A user authentication screen in which a part of the user name and password corresponding to the specific user selected by the user selection means is automatically input, and the number of characters automatically input and the number of characters to be input can be recognized , or the user extraction means Enter all usernames and passwords when no candidate users are extracted by A user authentication screen display means for displaying a user authentication screen for accepting the user authentication screen or display the portion displayed by means accepts an input for supplemental automatic input password, or user name and all passwords And a password supplement input accepting means for accepting the input .

An apparatus having a user authentication function according to the present invention includes a user candidate receiving unit capable of receiving input of user data upon successful user authentication using biometric information, and a user candidate based on the user data received by the user candidate receiving unit. a user candidate display means for displaying a particular user selection means for selecting a specific user from the candidates of the user displayed by the user candidate display means, the user corresponding to the particular user selected by the particular user selection means A part of the user name and password is automatically entered , and the user authentication screen that makes it possible to recognize the number of characters that have been automatically entered and the number of characters to be entered , or all user names and passwords when user authentication using biometric information fails a user authentication screen display means for displaying a user authentication screen for accepting the user authentication image Is characterized by having a password complementary input accepting means for accepting all input or accept an input for complementing the password part said displayed is automatically entered, or the user name and password by the display means .

The computer software of the present invention displays a user candidate based on a user candidate accepting step capable of accepting input of user data upon successful user authentication using biometric information, and the user data accepted by the user candidate input accepting step. A user candidate display step, a specific user selection step for selecting a specific user from among the user candidates displayed in the user candidate display step, and a user name and password corresponding to the specific user selected in the specific user selection step A user authentication screen in which a part of the password is automatically input and the number of characters that are automatically input and the number of characters to be input can be recognized , or a user who accepts all input of a user name and password when user authentication using biometric information fails user authentication screen table that displays the authentication screen A step, and a password complementary input step of accepting all input of said or user authentication screen display the portion displayed in step accepts an input for the complement of the auto-entered password, or user name and password It is characterized by being executed by a computer.

  According to the present invention, when the login ID and the password are automatically entered in the login ID field and the password field on the login input screen with the success of the biometric authentication, all the passwords are not automatically entered, and a part of the user is entered. Since it is set as an input, the input at the time of login is simplified and another person is prevented from logging in with his / her own login ID and password. Further, when a plurality of candidates are extracted, the plurality of candidates are displayed and allowed to be selected by the user, so that a desired user can be reliably identified.

(Device configuration)
FIG. 1 is a block diagram showing a configuration of an image forming apparatus 1 to which a user authentication method of the present invention is applied. The image forming apparatus 1 includes an apparatus main body 10 and a fingerprint authentication module 30.

  The apparatus main body 10 is centered on a CPU 11 that executes control of the apparatus main body 10 in accordance with a program, and a bus 12, a ROM 13, a RAM 14, a document reading unit 15, an image forming unit 16, a hard disk 17, a nonvolatile memory 18, an operation unit 19, The display unit 20 and the communication unit 21 are connected to each other.

  The ROM 13 stores various programs and data, and the CPU 11 executes control of the image forming apparatus 1 using these programs and data.

  The RAM 14 is used as a work area by the CPU 11 and temporarily stores programs and data required when the CPU 11 executes control.

  The document reading unit 15 reads the document and generates image data. The generated image data is output to the image forming unit 16 or the hard disk 17 or the like.

  The image forming unit 16 forms an image on a recording medium based on image data or document data input from the document reading unit 15 or the hard disk 17 or the like.

  The hard disk 17 stores and stores image data input from the document reading unit 15 or the like.

  The nonvolatile memory 18 stores the login ID and password for each user in association with the registration number.

  The operation unit 19 is operated by a user, and a login ID and password are input, an image formation instruction, a storage instruction to the hard disk, and the like are performed from the operation unit 19.

  The display unit 20 displays a user login screen that accepts input of a login ID and password from the user. The display unit 20 may be configured with a touch panel and may also serve as the operation unit 19.

  The communication unit 21 is connected to a fingerprint authentication module 30 described later, and transmits a fingerprint authentication instruction to the fingerprint authentication module 30.

  The fingerprint authentication module 30 has a CPU 33 that executes control of the fingerprint authentication module 30 according to a program, and a ROM 33, a RAM 34, a fingerprint input unit 35, a nonvolatile memory 36, and a communication unit 37 are connected to each other by a bus 32. Yes.

  The ROM 33 stores various programs and data, and the CPU 31 executes control of the fingerprint authentication module 30 using these programs and data.

  The RAM 34 is used as a work area by the CPU 31 and temporarily stores programs and data required when the CPU 31 executes control.

  The fingerprint input unit 35 reads the user's fingerprint and generates fingerprint data.

  The nonvolatile memory 36 is a memory in which the generated fingerprint data is stored, and stores the fingerprint data in association with the registration number.

  The communication unit 37 is connected to the apparatus main body 10 and transmits the registration number stored in the nonvolatile memory 36 and the matching degree at the time of authentication to the apparatus main body 10 when fingerprint authentication is successful.

(Device control)
FIG. 2 is a control flow diagram relating to login processing of the image forming apparatus of FIG. This control is performed when the CPU 11 and the CPU 31 cooperate to execute processing based on programs stored in the ROM 13 and the ROM 33.

  First, the CPU 11 displays, for example, “Please input fingerprint” on the display unit 20 (step S1). Further, the CPU 11 instructs the CPU 31 to perform fingerprint authentication (step S2). In accordance with this instruction, the user places a finger on the fingerprint input unit 35.

  Next, the CPU 31 causes the fingerprint input unit 35 to read the user's fingerprint and input fingerprint data (step S3).

  Next, the CPU 31 determines whether there is fingerprint data that matches the input fingerprint data in the fingerprint data stored in the nonvolatile memory 36 and performs fingerprint authentication (step S4).

  Next, the CPU 31 transmits a fingerprint authentication result (authentication success or authentication failure) to the apparatus main body 10 via the communication unit 37 (step S5). When the authentication is successful, data with a registration number corresponding to the matched fingerprint data is transmitted as data. When there are a plurality of matching fingerprint data, the data with the registration number and the matching degree corresponding to each candidate fingerprint data is transmitted. By adding the degree of coincidence and transmitting, when a plurality of candidates are displayed later on the apparatus main body 10, they can be displayed in order of the degree of coincidence. Further, when there are a large number of candidates, transmission may be limited to the upper number or the upper percentage of data.

  Next, the CPU 11 determines whether or not the fingerprint authentication result transmitted from the fingerprint authentication module 30 is successful (step S6). If the authentication is successful (step S6; Yes), the CPU 11 determines whether or not a plurality of candidates have been extracted (step S7). If authentication fails (step S6; No), the process proceeds to step S13.

  If it is determined in step S7 that a plurality of candidates have been extracted (step S7; Yes), the CPU 11 stores the login ID corresponding to the registration number added to each candidate data of the plurality of candidates in the nonvolatile memory 18. For example, as shown in FIG. 3, the login ID candidates are displayed on the display unit 20 in descending order of the degree of coincidence. This prompts the user to select and input a login ID (step S8). By displaying in the order of the degree of coincidence, candidates with a high probability of being selected by the user are displayed near the top, so that the user can easily find the selection candidates from the candidates. In addition, when the number of candidates is large, if only the top number or the top percentage data is displayed, only the candidates with a high probability of being selected by the user are displayed. Easy to find from inside.

  If it is determined that a plurality of candidates have not been extracted (step S7; No), the process proceeds to step S10.

  When the user selects and inputs one of the login ID candidates displayed on the display unit 20 by the operation unit 19 according to the display in step S8, the selection information of the selected login ID is input to the CPU 11 (step S9). ).

  In step S10, the CPU 11 stores the password corresponding to the selected login ID (from step S9) or the login ID and password corresponding to the registration number (step S7; from No) from the nonvolatile memory 18 to the RAM 14. Read to.

  Next, the CPU 11 displays a login screen on which the login ID and part of the password read out in step S7 are input and displayed on the display unit 20, and prompts the user to input a complementary password (step S11). For example, as shown in FIG. 4, if the password is 8 characters, the password is automatically entered for 6 characters from the beginning and 6 * s are displayed, and an underbar for 2 characters is added after the last *. indicate. In accordance with this display, the user performs complementary input of the password through the operation unit 19. In the case of the example in FIG. 4, the user inputs the remaining two characters in the portion where the underbar is displayed. By displaying the number of characters to be input with an underbar or the like, for example, even when a password with a long number of characters is displayed, the user can immediately recognize how many characters should be input.

  Thereby, a complementary input of the password is made to the CPU 11 (step S12). In the case of the example in FIG. 4, two * s are added to the end of the six * s that are displayed and displayed on the login screen.

  By letting the user perform complementary input in this way, even if another person is mistakenly identified as the person and the verification succeeds, the other person cannot log in by itself and must complete the password. Log in with the login ID and password of the person.

  If authentication fails in step S6 (step S6; No), the process proceeds to step S13, and the CPU 11 displays a login screen with a blank login ID and password on the display unit 20, and inputs the login ID and password to the user. Prompt. In accordance with this instruction, the user inputs all characters of the login ID and password through the operation unit 19.

  For example, even when the fingerprint registration state is bad and the fingerprint authentication fails even though the person is the person himself, the user can log in by entering all characters of the login ID and password.

  In step S14, all characters of the login ID and password are input to the CPU 11.

  In step S12 or step S14, when the login ID and password are input and login is executed, the CPU 11 refers to the login ID and password stored in the nonvolatile memory 18 and authenticates the input login ID and password. Is performed (step S12). If the authentication is successful (step S15; Yes), the CPU 11 outputs a use permission signal for the image forming apparatus (step S16). If the authentication is unsuccessful (step S15; No), the CPU 11 outputs a use prohibition signal for the image forming apparatus (step S17).

  As described above, according to the present embodiment, when the login ID and the password are automatically entered in the login ID field and the password field on the login input screen with the success of the biometric authentication, all the passwords are automatically entered. In addition, since a part of the user input is used, it is easy to input at the time of login, and another person is prevented from logging in with his / her own login ID and password. Further, when a plurality of candidates are extracted, the plurality of candidates are displayed and allowed to be selected by the user, so that a desired user can be reliably identified.

  In the present embodiment, the login ID is displayed when there are a plurality of user candidates. However, any information may be used as long as the user can be recognized.

  In the present embodiment, the end part of the password is complemented and input, but it may be the start part or the intermediate part. In the case of the complementary input of the head part or the tail part, it is preferable because the user can easily memorize it.

  In the present embodiment, as an example of a display for prompting a user to input a complementary input and accepting the input, an example using underbars corresponding to the number of characters (number of digits) of the complementary input has been described. However, the present invention is not limited to this display form. For example, a display form as shown in FIG. 5 may be used. In the case of the example in this figure, as in the case of FIG. 4, the password is described as 8 characters. For example, the password is automatically entered for 6 characters from the beginning, and 6 * s are displayed. A prompt (for example, a blinking cursor) is displayed after *. In the case of the example shown in the figure, the user follows the prompt and inputs the remaining two characters. Here, if the number of digits of the password itself is different for each user, it is not possible for a genuine user to know how many more characters should be input according to the prompt. Thus, in the case of the present embodiment, the number of characters to be complemented can be given a meaning like a password, which is more preferable for ensuring security.

  In the present embodiment, fingerprint data is stored in association with the registration number in the nonvolatile memory 36 of the fingerprint authentication module 30, and a login ID and password are stored in association with the registration number in the nonvolatile memory 18 of the apparatus body 10. When the authentication is successful by the fingerprint authentication module 30, the login ID and password corresponding to the fingerprint are specified by transmitting the registration number from the fingerprint authentication module 30 to the apparatus body 10, but the nonvolatile memory 36 of the fingerprint authentication module 30 is identified. The login ID and password may be stored in the device, and when the authentication by the fingerprint authentication module 30 is successful, the login ID and password stored in the nonvolatile memory 36 may be transmitted from the fingerprint authentication module 30 to the apparatus main body 10. .

  In this embodiment, the fingerprint authentication module 30 is controlled by the CPU 31 different from the CPU 11 of the apparatus main body 10, but may be configured to be controlled by the CPU 11 of the apparatus main body 10.

  In this embodiment, the user authentication method of the present invention is used to authorize the use of the image forming apparatus, but image data, document data, a personal address book used for Scan to E-mail, etc. The user authentication method of the present invention can also be used when accessing.

  In this embodiment, the user authentication method of the present invention is applied to an image forming apparatus. However, the present invention is applied to an apparatus having other authentication functions, such as a personal computer, an ATM (Auto Teller Machine), an input / output management apparatus, and the like. Needless to say, it can be applied.

  In this embodiment, a fingerprint is used as the authentication module. However, the present invention can also use other biological information such as a vein, a face, an iris, a retina, a voiceprint, and a handwriting.

1 is a block diagram illustrating a configuration of an image forming apparatus according to an exemplary embodiment. FIG. 6 is a control flow diagram relating to login processing of the image forming apparatus in the present embodiment. It is an example of the selection input screen in case this embodiment has a plurality of candidates. It is an example of the login screen in this embodiment. It is an example of another login screen in this embodiment.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Image forming apparatus 10 Apparatus main body 11 CPU
13 ROM
18 Nonvolatile Memory 19 Operation Unit 20 Display Unit 30 Fingerprint Authentication Module 31 CPU
35 Fingerprint input part 36 Non-volatile memory

Claims (7)

A biometric information registration step for registering biometric information in advance;
A biometric information receiving step for receiving input of biometric information;
Extraction of user data corresponding to the biometric information received in the biometric information receiving step is performed based on the degree of coincidence between the biometric information received in the biometric information receiving step and the biometric information registered in advance in the biometric information registration step. A user extraction step to perform;
A user candidate display step for displaying user candidates based on the user data extracted by the user extraction step;
A specific user selection step of selecting a specific user from the user candidates displayed in the user candidate display step;
A user authentication screen in which a part of the user name and password corresponding to the specific user selected in the specific user selection step is automatically input and the number of characters to be automatically input and the number of characters to be input can be recognized , or the user A user authentication screen display step for displaying a user authentication screen for accepting all input of a user name and a password when a candidate user is not extracted in the extraction step;
Accepting an input for complementing a password automatically entered by the part displayed by the user authentication screen display step , or accepting a password complement input receiving step for accepting all input of a user name and a password ;
An authentication step of authenticating the automatically entered user name and the automatically entered and complementary entered password;
A user authentication method comprising: The user authentication method according to claim 1 , wherein the user candidate display step displays user candidates in descending order of the degree of coincidence. 3. The user authentication method according to claim 2 , wherein the user candidate display step displays a predetermined number of candidates from the top or a predetermined ratio of candidates from the top among the user candidates. It has a determining step of the user data extracted by the user extracting step determines whether a plurality or is one, when the user data is determined to be one in the determination step, the user authentication The user authentication method according to claim 1 , wherein a screen is displayed. Biometric information receiving means for receiving input of biometric information;
User extraction means for extracting user data corresponding to the biological information received by the biological information receiving means;
User candidate display means for displaying user candidates based on the user data extracted by the user extraction means;
Specific user selection means for selecting a specific user from user candidates displayed by the user candidate display means;
A user authentication screen in which a part of the user name and password corresponding to the specific user selected by the specific user selection means is automatically input, and the number of characters automatically input and the number of characters to be input can be recognized , or the user A user authentication screen display means for displaying a user authentication screen for accepting all input of a user name and a password when a candidate user is not extracted by the extraction means;
A password complement input accepting unit for accepting an input for complementing a password automatically entered by the part displayed by the user authentication screen display unit , or accepting all inputs of a user name and a password ;
A system having a user authentication function characterized by comprising: User candidate accepting means capable of accepting input of user data upon successful user authentication using biometric information ;
User candidate display means for displaying user candidates based on user data received by the user candidate receiving means;
Specific user selection means for selecting a specific user from user candidates displayed by the user candidate display means;
User authentication screen or biometric information in which a part of the user name and password corresponding to the specific user selected by the specific user selection means is automatically input, and the number of characters automatically input and the number of characters to be input can be recognized A user authentication screen display means for displaying a user authentication screen that accepts all input of a user name and a password when user authentication using the user fails ,
A password complement input accepting unit for accepting an input for complementing a password automatically entered by the part displayed by the user authentication screen display unit , or accepting all inputs of a user name and a password ;
A device comprising a user authentication function. A user candidate acceptance step capable of accepting input of user data upon successful user authentication using biometric information ;
A user candidate display step of displaying user candidates based on the user data received by the user candidate input receiving step;
A specific user selection step of selecting a specific user from the user candidates displayed in the user candidate display step;
User authentication screen or biometric information in which a part of the user name and password corresponding to the specific user selected in the specific user selection step is automatically input, and the number of characters automatically input and the number of characters to be input can be recognized A user authentication screen display step for displaying a user authentication screen for accepting all input of a user name and a password when user authentication using the user fails ,
A password completion input step for accepting input for complementing the password automatically entered by the part displayed by the user authentication screen display step , or accepting all user name and password inputs,
Computer software characterized by causing a computer to execute.

Images