JP5056113B2 - Authentication apparatus, electronic device including the same, authentication method, and program - Google Patents

Description

  The present invention relates to an authentication apparatus, and more particularly, to an authentication apparatus that can be incorporated in an electronic device having a handwriting input function by mounting a touch panel having two or more input locations.

  Conventional portable electronic devices such as mobile phones and PDAs (Personal Digital Assistants) have a key lock function that prohibits key input in order to prevent misoperation of the owner and to ensure security when lost. If the portable electronic device is lost in a state where the key lock function is not set to ON, there is a problem that information stored in the device is leaked by unauthorized use by others.

  In the conventional key lock function of such a portable electronic device, first, the owner enters a multi-digit number (or only alphanumeric characters) in the setting menu, and these are used as a password for releasing the key lock function. sign up. When the key lock function is set to ON, a password input is requested for the key input during standby. On the other hand, the user inputs a password. If the entered password does not match the registered password, the key lock function is not released and functions such as outgoing calls cannot be used. On the other hand, when the input password matches the registered password, the key lock function is canceled and the portable electronic device can be used. Therefore, unauthorized use of the portable electronic device by another person who does not know the password (a person other than the authorized user) can be prevented.

  However, in the conventional key lock function of such portable electronic devices, since the key lock password is realized by a combination of several digits, etc., combinations of numbers that can be used for the password are limited. Yes. Therefore, there is a disadvantage that the key lock function is canceled and the portable electronic device is illegally used by another person who is intended for unauthorized use predicting these combinations or checking all combinations. The problem is that security is low.

  In recent years, fingerprint authentication is known as an authentication technique for improving such problems. For example, in Patent Document 1, when the fingerprint of the operator of the mobile terminal is read, the fingerprint information read is used to recognize whether the operator is a valid user of the mobile terminal, and is recognized as a valid user Only the authentication method of permitting the use of the mobile terminal is taken. However, in the technology of Patent Document 1, although security can be improved, complicated authentication processing is required to realize the fingerprint authentication function, and it is necessary to incorporate an expensive reading device, software, and the like for that purpose. The problem of increased costs arises.

  Further, in Patent Document 2, a method is adopted in which a locked state is set / released by a combined operation of an operation key and a touch panel (touch pen) in a portable electronic device having a touch panel. However, the technique of Patent Document 2 merely prevents malfunctions and erroneous operations, and is not intended to prevent unauthorized use by a malicious person.

  On the other hand, Patent Documents 3 and 4 disclose technologies that use data input from a touch panel for authentication. In each patent document, for example, the input position and shape of handwritten input on the touch panel, the writing order of the user's signature, the writing pressure, and the like are used for authentication. However, in the above authentication method, the uniqueness of each parameter used for authentication for each user is insufficient, and there is a possibility that prediction or decryption may be easily performed by others for the purpose of unauthorized use. As a result, the key lock may be released by a third party, and there is a problem that the security is insufficient.

JP 2003-143290 A JP 2003-58302 A JP 10-334239 A JP 2001-156967 A

  For this reason, the object of the present invention is to improve the disadvantages of the above-described conventional example, and in particular to provide an authentication device with high security and an electronic apparatus equipped with the authentication device.

Therefore, one aspect of the present invention is
An authentication device including a touch panel having at least two or more handwritten input locations, and corresponding to input authentication information and input authentication information receiving means for receiving input authentication information based on information input to each of the two or more input locations A reference authentication information storage unit that stores in advance reference authentication information to be stored, and an authentication unit that performs authentication based on the input authentication information and the reference authentication information and determines whether the authentication is correct or not. In addition to this configuration, reference authentication information registration means for storing reference authentication information based on information respectively input from two input locations in the reference authentication information storage means may be provided.

  According to the above invention, first, reference authentication information to be compared at the time of authentication is registered in advance. Then, it accepts input authentication information based on information input to two or more input locations formed on one or two or more touch panels, and compares the registered reference authentication information with the input authentication information for authentication. Processing is executed. Therefore, in the present invention, authentication parameters based on two or more pieces of information input to the touch panel are used for authentication processing, so that it is difficult to decode and predict authentication information by a third party, and unauthorized authentication can be suppressed. Security can be improved.

  And the said input authentication information reception means receives the input authentication information based on the information each input into two input locations, It is characterized by the above-mentioned. In particular, the input authentication information receiving means is characterized by receiving input authentication information based on two pieces of character information respectively input to two input locations. Furthermore, the input authentication information accepting means is characterized in that it accepts input authentication information based on information of the same character respectively input to two input locations. Also, for example, the input authentication information includes input start time difference information for each character information, input end time difference information for each character information, starting point region information for each character information track, end point region information for each character information track, each character One or more types of information in the handwriting information. Further, when there are a plurality of types of input authentication information, the authentication means authenticates a predetermined type of input authentication information for each type, and determines whether the authentication is correct or not based on all authentication results. It is a feature.

  In this way, by making the input information input to the touch panel into two and making the input information different or the same character information, the input by the user is facilitated, and the parameters as described above are input authenticated. Use as information and setting a plurality of parameters makes it easy to express individual personality, making it difficult to predict and decipher, and further improving security.

  According to another aspect of the present invention, there is provided an electronic device including the authentication device, including an operation key and key lock means for setting and releasing the key lock of the operation key. The key lock setting and release of the operation key are performed according to whether the authentication by the authentication device is correct or not. The key lock means is characterized in that the key lock of the operation key is released when the authentication by the authentication device is successful. In this way, the above-described authentication can be used for canceling the key lock setting of the electronic device, and the security of the electronic device can be improved.

  Moreover, the other form of this invention is the authentication method by the authentication apparatus provided with the touchscreen which has at least 2 or more handwritten input locations, Comprising: Input authentication information based on the information each input into 2 or more input locations Authentication is performed based on the received input authentication information receiving step, the reference authentication information stored in advance corresponding to the input authentication information, and the input authentication information received in the input authentication information receiving step, and whether or not the authentication is correct is determined. And an authentication step.

  Furthermore, the program which is the other form of this invention is an input which receives the input authentication information based on the information each input into two or more input locations in the authentication apparatus provided with the touch panel which has at least two or more handwritten input locations. An authentication unit that performs authentication based on the authentication information receiving unit, the reference authentication information stored in advance corresponding to the input authentication information, and the input authentication information received by the input authentication information receiving unit, and determines whether the authentication is correct or not It is characterized by realizing.

  Even the invention of the method and program having the above-described configuration operates in the same manner as the above-described authentication apparatus, and thus the object of the present invention can be achieved.

  Since the present invention is configured and functions as described above, according to this, authentication parameters based on two or more pieces of information input to the touch panel are used for authentication processing. It is difficult to predict, can prevent unauthorized authentication, and can improve security.

  The present invention is mounted on an electronic device including a touch panel having two or more handwritten input locations, and the operator is authenticated based on handwritten information input to the touch panel by an operator who operates the electronic device. Is. For example, the authentication result is used to release the key lock of the electronic device. However, the authentication result may be used as a condition for permitting other operations, or may be used simply for authenticating the user. The electronic device in which the authentication device of the present invention is incorporated is not limited to a portable electronic device such as a mobile phone, but may be a fixed terminal having a touch panel, and further an ATM installed in a store or the like. It may be a fixed dedicated device.

  A first embodiment of the present invention will be described with reference to FIGS. 1 and 2 are block diagrams showing the configuration of a mobile phone. 3 to 6 are diagrams illustrating a configuration of the touch panel and input examples. 7 to 11 are flowcharts showing the operation of the mobile phone.

[Constitution]
FIG. 1 is a block diagram showing a configuration of a mobile phone 1 (electronic device) in the present embodiment. As shown in FIG. 1, a mobile phone 1 includes a central processing unit 2, a memory unit 5, an operation key 6, two touch panels 3 and 4, touch panel input processors 31 and 32, and a display device also serving as a touch panel. 30 and 40. As will be described later, the cellular phone 1 is provided with a key lock function (key lock means) for enabling / disabling the input operation of the operation key 6, that is, for setting and releasing the key lock. An authentication function (authentication device) for releasing the key lock is incorporated. In addition, the mobile phone 1 is naturally provided with a call function, a communication function, and the like, which are original functions as a mobile phone, but since these are well-known, description thereof is omitted. Hereinafter, the configuration of the mobile phone 1 will be described in more detail.

  As shown in FIG. 3, the touch panels 3 and 4 are provided on the outer surface of the mobile phone 1 and have two input surfaces. However, in the touch panel, the panel itself is formed on one surface, and two input locations may be formed. Alternatively, there may be only one input place (one face) formed by the touch panel, and two input faces may be displayed on the one face continuously in time. That is, a configuration in which a first surface is displayed on a single touch panel, the input content is erased after characters and the like are input on the first surface, and a second surface is displayed on the same panel surface. It may be. Further, three or more touch panels may be provided, and authentication may be performed as described later based on information input on each of the three surfaces.

  And the touch panels 3 and 4 are comprised so that information, such as a handwritten character and a figure, can be input by being pressed with an input pen. In addition, signals input to the touch panels 3 and 4 are primarily processed by the touch panel input processors 31 and 41. At this time, signals input from the touch panels 3 and 4 to the touch panel input processors 31 and 41 are analog voltage values, which indicate position information indicating which point on the touch panels 3 and 4 is pressed by an input pen or the like. . The touch panel input processors 31 and 41 incorporate an analog / digital (A / D) converter (not shown). With this A / D converter, the analog voltage value from the touch panels 3 and 4 is periodically read, and unstable characters are eliminated and chattering processing is performed. The input authentication information based on the above is stored in the memory unit 5 through the central processing unit 2. Further, from the touch panels 3 and 4, reference authentication information that is authenticated by comparing with the input authentication information is also input and stored in the memory unit 5 through the central processing unit 2. These input information will be described later.

  The display devices 30 and 40 are realized by, for example, liquid crystal display devices, and are display units for providing visual information to the user of the portable electronic device 1. The touch panels 3 and 4 are integrally formed. That is, the display devices 30 and 40 have a function of displaying information and detecting an input by pressing from an input pen or the like.

  The central processing unit 2 is a control device that controls the operation of the mobile phone 1 as a whole, for example, a CPU (Central Processing Unit) that is read from the memory unit 5 or that executes a built-in program. Realized. Then, specifically, a predetermined program is incorporated in the central processing unit 2, so that a touch panel input / display processing unit 21, an authentication information registration processing unit 22, and an authentication processing unit 23 are provided as shown in FIG. The key lock processing unit 24 is constructed. The functions of these processing units 21 to 24 will be described in detail.

  The touch panel input / display processing unit 21 performs display control on the display devices 30 and 40 described above, and when the user of the mobile phone 1 draws figures, lines (trajectories) and characters on the touch panels 3 and 4, By displaying the progress of the drawing on the display devices 30 and 40, it has a function of providing visual feedback for the drawing to the user. The touch panel input / display processing unit 21 has a function of receiving character information input by the user and passing it to the authentication information registration processing unit 22 or the authentication processing unit 23. Then, the authentication information registration processing unit 22 is a reference that is compared when authenticating the user based on the character information (authentication password) input from the touch panels 3 and 4 at the time of registration of the reference data for authentication. Reference authentication information (authentication parameter) as data is extracted or calculated and registered in the memory unit 5 (reference authentication information storage means). That is, the touch panel input / display processing unit 21 and the authentication information registration processing unit 22 cooperate to function as a reference authentication information registration unit.

  The authentication processing unit 23 also inputs authentication information (authentication password) to be compared with the reference data based on the character information (authentication password) input from the touch panels 3 and 4 when the authentication data is input. Is extracted or calculated, the authentication processing is performed by comparing the input authentication information with the reference authentication information stored in the memory unit 5, and it is determined whether or not they match or are within the set allowable range. I do. That is, the touch panel input / display processing unit 21 and the authentication processing unit 23 cooperate to function as an input authentication information receiving unit and an authentication unit.

  Further, the key lock processing unit 24 (key lock means) receives input from the operation key 6 or the user from the touch panels 3 and 4 and locks or unlocks the operation key 6. At this time, the operation key 6 is locked in accordance with, for example, the registration of the reference authentication information described above, and the operation key 6 is unlocked when the above-described authentication is successful. Along with this, the key lock processing unit 24 is notified that the reference information has been registered from the authentication information registration processing unit 22, or the key lock instruction is notified from the touch panels 3 and 4 and the operation keys 6. . In addition, the key lock processing unit 24 is notified from the authentication processing unit 24 that the authentication is successful.

  Here, as described above, the character information input acceptance process performed by the user on the touch panels 3 and 4, and the reference authentication information registration process and input based on the character information, which are executed by the central processing unit 2. The authentication information authentication process will be described with reference to FIGS.

  First, FIG. 3 shows the display surfaces of the touch panels 3 and 4 and the display devices 30 and 40. The state of FIG. 3 shows a handwritten input standby state (graphic, character and line locus input screen as a password) in the key lock setting process / cancellation process.

  Referring to FIG. 3, two touch panels 3 and 4 (input locations) for drawing figures, characters, lines, and the like for the key lock setting process / cancellation process are formed by four rectangular input areas. The first region to the fourth region are formed. Specifically, the upper touch panel 3 is virtually divided into four rectangular input areas and a soft key area for displaying a clock for measuring the difference between the start / end times of both pads. Yes. In addition, the lower touch panel 4 is set by virtually dividing four rectangular input areas and soft key area portions. When handwriting is input, an input pen or the like presses the touch panels 3 and 4 on these areas, thereby generating handwriting coordinates, start / end points, and time information at the time of pressing.

  Specifically, when different characters or the same character as an authentication password is input to both touch panels 3 and 4 before and after the time, the input character information (authentication password) ), As reference authentication information at the time of registration of reference authentication information, as input authentication information at the time of authentication, (1) origin area information of the trajectory of each character information, (2) end area information of the trajectory of each character information, (3 ) Input start time difference information for each character information, (4) Input end time difference information for each character information, and (5) Handwriting information for each character information. The information generated as the reference authentication information at the time of registration of the reference authentication information is registered in the memory unit 5, and the information generated as the input authentication information at the time of authentication is temporarily stored in the memory unit 5, and then The registered standard authentication information is compared. In this way, a plurality of authentication parameters are generated from the character information that is the authentication password.

  Next, a state when the handwriting input is actually performed on the touch panels 3 and 4 will be described with reference to FIGS. 4 to 6. First, it is assumed that kanji characters “day” and “month” are set as authentication passwords. In this case, first, as shown in FIG. 4, a locus of kanji characters “day” is drawn on the upper touch panel 3. At this time, the starting point 101 of the trajectory exists in the first area, and the end point 102 after drawing the trajectory of the kanji character “day” exists in the second area. Then, the handwriting input time at the locus start point 101 is Start_time_11, and the handwriting input time at the locus end point 102 is End_time_11. Then, in this case, the input authentication information (or information for generating the input authentication information) (authentication parameter) generated by handwriting input from the upper touch panel 3 is the first area where the locus start point 101 is located, “day” The coordinate data of the locus of kanji characters, the second area where the end point 102 of the locus is located, the start time 101 input time of the locus Start_time_11, and the input time End_time_11 of the end point 102 of the locus.

  Subsequently, the locus of the kanji character “moon” is drawn on the lower touch panel 4. Then, the starting point 111 of the locus exists in the third region, and the end point 112 thereof exists in the fourth region. Further, the handwriting input time of the locus start point 111 is Start_time_12, and the handwriting input time of the locus end point 112 is End_time_12. Then, in this case, the input authentication information (authentication parameter) generated by handwriting input from the lower touch panel 4 is the third area where the locus start point 111 is located, the coordinate data of the locus of the kanji character “Month”, the locus The fourth area where the end point 112 of the trajectory is located, the start time 111 input time of the trajectory Start_time_12, and the input time End_time_12 of the end point 112 of the trajectory. The handwriting input start time difference Start_dif_time_1, which is input authentication information (authentication parameter) generated based on the character information input to the touch panels 3 and 4, is calculated by (Start_time_12) − (Start_time_11). The handwriting input end time difference End_dif_time_1 is calculated by (End_time_12) − (End_time_11).

  As described above, based on the character information “day” and “month” which are passwords input to the touch panels 3 and 4, the above (1) to (1) as the reference authentication information or the input authentication information which are authentication parameters. (5) can be acquired. Since these pieces of information are used as key lock setting and release data, the reference authentication information is registered in the memory unit 5 in advance, and the input authentication information is temporarily stored in the memory unit 5 at the time of authentication. The authentication process is executed by comparing with the authentication information. That is, at the time of authentication processing, key lock setting / cancellation processing is executed by detecting a match / mismatch of data between the reference authentication information and the input authentication information.

  In the authentication process, kanji, numbers, and alphabets are generated from the coordinate information of the read trajectory. Therefore, when the input characters are different, the characters that are recognized and generated by the mobile phone 1 are also different and do not match the registered characters. Is detected. Further, even if the characters generated from both touch panels 3 and 4 are the same as the pre-registered characters, if the handwriting input start time difference Start_dif_time_1 is not within the pre-registered input start time difference allowable range, a mismatch is detected. The Similarly, even if the generated character is the same as a previously registered character, a mismatch is detected when the handwriting input end time difference End_dif_time_1 is not within the preregistered input end time difference allowable range. Furthermore, even if the characters generated from both touch panels are the same as the pre-registered characters and the handwriting input start time difference and end time difference are the same as the pre-registered allowable range setting, the region where the locus starts is different. Or, if the region where the end point of the locus is located is different, the generated data is also different, and it is detected as a mismatch. That is, it is determined that the authentication has succeeded when all of the above-described parameters match, while it is determined that the authentication has failed if even one of the parameters does not match.

  However, the authentication parameters to be compared at the time of authentication are not limited to those described above. For example, only a part of the parameters described above may be compared. Further, unlike the above, the authentication parameter itself to be compared at the time of authentication may be other information that can be generated from a password such as input character information.

  Next, FIG. 5 shows an example in which other character information is input to the touch panels 3 and 4 as an authentication password. In the example of this figure, the same character is set and input as an authentication password. Specifically, a case where a locus of uppercase alphabet “R” is drawn on the touch panel 3 and then a locus of uppercase alphabet “R” is also drawn on the touch panel 4 is shown.

  First, when the handwriting input time of the starting point 201 of the locus drawn on the upper touch panel 3 is Start_time_21 and the handwriting input time of the end point 202 of the locus is End_time_21, authentication generated by handwriting input from the upper touch panel 3 in this case Parameters for the first area where the locus start point 201 is located, the coordinate data of the locus of uppercase “R”, the fourth region where the locus end point 202 is located, the locus start point 201 input time Start_time_21, and the locus end point 202 input Time End_time_21. Also, assuming that the handwriting input time at the start point 211 of the locus drawn on the touch panel 4 is Start_time_22 and the handwriting input time at the end point 212 of the locus is End_time_22, the authentication parameter generated by handwriting input from the touch panel 4 in this case is The second area where the locus start point 211 is located, the coordinate data of the locus of uppercase alphabet “R”, the fourth region where the locus end point 212 is located, the input time Start_time_22 of the locus start point 211, and the input time of the locus end point 212 End_time_22. Then, the handwriting input start time difference Start_dif_time_2 that is an authentication parameter that can be generated based on the input from both touch panels 3 and 4 is (Start_time_22) − (Start_time_21), and the handwriting input end time difference End_dif_time_2 is (End_time_22) − (End_time_21) It becomes.

  Thus, in the above example, the authentication passwords input to the touch panels 3 and 4 are all the letter “R”, and the authentication parameters required for authentication generated from this character information are drawn on the touch panel 3. The first area where the starting point 201 of the trajectory is located, the coordinate data of the trajectory of capital letter “R”, the fourth area where the end point 202 of the trajectory is located, the first area where the starting point 211 of the trajectory drawn on the lower touch panel 4 is located The two regions, the coordinate data of the locus of the capital letter “R”, the fourth region where the end point 212 of the locus is located, the handwriting input start time difference Start_dif_time_2 and the touch panel handwriting input end time difference End_dif_time_2 for both touch panels 3 and 4.

  Next, FIG. 6 shows an example in which other character information is input to the touch panels 3 and 4 as an authentication password. In the example of this figure, the same character is set and input as an authentication password. Specifically, a case where a locus of the Chinese character “special” is drawn on the touch panel 3 and then a locus of the Chinese character “special” is also drawn on the touch panel 4 is shown.

  If the handwriting input time of the starting point 301 of the locus drawn on the touch panel 3 is Start_time_31 and the handwriting input time of the end point 302 of the locus is End_time_31, the authentication parameter generated by handwriting input from the touch panel 3 in this case is The first region where the locus start point 301 is located, the coordinate data of the locus of the Chinese character “special”, the first region where the locus end point 302 is located, the input time Start_time_31 of the locus start point 301, and the input time End_time_31 of the locus end point 302 It becomes. Further, if the handwriting input time of the locus start point 311 drawn on the lower touch panel 4 is Start_time_32 and the handwriting input time of the locus end point 312 is End_time_32, authentication generated by handwriting input from the lower touch panel 4 in this case Parameters for the first region where the locus start point 311 is located, the coordinate data of the locus of the Chinese character “special”, the first region where the locus end point 312 is located, the locus start point 312 input time Start_time_32, and the locus end point 312. The input time is End_time_32. Then, the handwriting input start time difference Start_dif_time_3 for both touch panels 3 and 4 is (Start_time_32)-(Start_time_31), and the handwriting input end time difference End_dif_time_3 is (End_time_32)-(End_time_31).

  Thus, in the above example, the authentication passwords input to the touch panels 3 and 4 are all kanji characters “special”, and the authentication parameters required for authentication generated from the character information are the upper touch panel 3. The first area where the starting point 301 of the locus drawn is located, the coordinate data of the locus of the Chinese character “special”, the first area where the end point 302 of the locus is located, and the starting point 311 of the locus drawn on the lower touch panel 4 are located The first area to be processed, the coordinate data of the locus of the Chinese character “special”, the first area where the end point 312 of the locus is located, the handwriting input start time difference Start_dif_time_3 and the handwriting input end time difference End_dif_time_3 for both touch panels 3 and 4.

  As described above, the number of combinations of both characters that are authentication passwords generated from the trajectories input from the touch panels 3 and 4 is very large. Even if the combination of both characters is completely the same, there is one condition based on the combination of the start / end timing (time) of handwriting input from both touch panels 3 and 4 and the region where the input locus start / end point is located. However, if they are different, the generated authentication parameters are different. Therefore, even if a third party knows the input characters, it is very difficult to guess a parameter (password) for releasing the key lock. As a result, unauthorized use by a third party other than a legitimate user can be prevented more reliably, and security can be improved.

  In addition, the number, shape, arrangement, etc. of the detection areas on the touch panels 3 and 4 described above, that is, the area areas set by dividing each of the touch panels 3 and 4 as needed, are controlled by the control of the central processing unit 2. It is possible to change arbitrarily. For example, in the illustrated embodiment, both are divided into four rectangular area regions, but may be divided into nine or sixteen regions, and the number of divided area regions is the number of each touch panel 3. , 4 may be different. The shape of the area region may be a triangle. Furthermore, what can be input from both touch panels 3 and 4 as a password may be other figures that can be recognized by the handwritten character recognition function possessed by the portable electronic device of the present invention other than kanji, numbers, and alphabets.

[Operation]
Next, the operation of the mobile phone configured as described above will be described with reference to the flowcharts of FIGS. First, registration processing of authentication parameters generated from an authentication password (kanji, alphabet, etc.) for the key lock function, that is, registration processing of reference authentication information registered in advance in the mobile phone 1 and compared at the time of authentication as described above Will be described with reference to the flowchart shown in FIG. The following processing is mainly executed by the touch panel input / display processing unit 21 and the authentication information registration processing unit 22 of the central processing unit 2.

  First, the upper touch panel 3 (hereinafter also referred to as “upper pad”) is traced with an input pen, and is in a state of waiting for a locus to be input (hereinafter referred to as “pad input”) (step S1). In this state, a necessary graphic locus (authentication password) is input. Then, the touch panel input / display processing unit 21 of the central processing unit 2 receives the “fixed” touch input in the display screen of the touch panel 3 via the upper touch panel 3 as shown in FIG. The input graphic locus is read (step S2). Note that the touch panel input state is continued until “confirm” is input, and the locus is displayed on the display device 30 (step S11).

  Next, from the coordinate information of the graphic trajectory read in step S2, a character is generated based on the locus where the origin / end point of the trajectory of the upper touch panel 3 is located and the trajectory which is an authentication password (step S3). The generated parameter is written and registered in the memory unit 5 by the authentication information registration processing unit 22 as an authentication parameter for key lock setting (step S4).

  Next, in step S5, the lower touch panel 4 (hereinafter also referred to as “lower pad”) is traced with the input pen, and a state of waiting for the locus to be input is entered. In this state, a necessary graphic locus (authentication password) is input. Then, when the central processing unit 2 receives a touch input of “determined” in the display screen of FIG. 3 via the lower touch panel 4, it reads a graphic locus input to the lower touch panel 4 (step S6). Until this “confirm” is input, the touch panel input state is continued, and the locus is displayed on the display device 40 (step S12).

  Next, from the coordinate information of the graphic trajectory read in step S6, a character is generated based on the region where the origin / end point of the trajectory of the lower touch panel 4 is located and the trajectory which is the authentication password (step S7). The generated parameter is written and registered in the memory unit 5 by the authentication information registration processing unit 22 as an authentication parameter for key lock setting (step S8).

Next, the central processing unit 2 sets an allowable range of the difference between the input start time to the upper touch panel 3 and the input start time to the lower touch panel 4, and writes the set result in the memory unit 2 (step S9). ). As one realization method, an allowable range setting menu is prepared and displayed on the display unit 30, and the user selects an item from the setting menu on the touch panel 3 and sets the allowable range. The following is an example of item setting.
Item 1. (2 seconds <upper pad input start time-lower pad input start time ≤ 3 seconds)
Item 2. (1 second <upper pad input start time-lower pad input start time ≤ 2 seconds)
Item 3. (0 seconds <upper pad input start time-lower pad input start time ≤ 1 second)
Item 4. (0 seconds <lower pad input start time-upper pad input start time ≤ 1 second)
Item 5. (1 second <lower pad input start time-upper pad input start time ≤ 2 seconds)
Item 6. (2 seconds <lower pad input start time-upper pad input start time ≤ 3 seconds)

Next, the central processing unit 2 sets an allowable range of the difference between the input end time to the upper touch panel 3 and the input end time to the lower touch panel 4, and writes the set result in the memory unit 2 (step S10). ). As one implementation method, as described above, an allowable range setting menu is prepared and displayed on the display unit 30, and the user selects an item on the touch panel 3 from the setting menu and sets the allowable range. The following is an example of item setting.
Item 1. (2 seconds <upper pad input end time-lower pad input end time ≤ 3 seconds)
Item 2. (1 second <upper pad input end time-lower pad input end time ≤ 2 seconds)
Item 3. (0 seconds <upper pad input end time-lower pad input end time ≤ 1 second)
Item 4. (0 seconds <lower pad input end time-upper pad input end time ≤ 1 second)
Item 5. (1 second <lower pad input end time-upper pad input end time ≤ 2 seconds)
Item 6. (2 seconds <lower pad input end time-upper pad input end time ≤ 3 seconds)

  As described above, the reference authentication information, which is an authentication parameter to be compared at the time of authentication, is registered in the memory unit 5 and the key lock setting process is completed. As a result, the cellular phone 1 enters the key lock state, and to release the key lock state, it is necessary to input authentication parameters that are the same as or registered in the registered range.

  Note that the input order of authentication passwords (kanji, alphabets, etc.) to the touch panels 3 and 4 may be input first from the lower touch panel 4. In that case, the order of calculation formulas of the input start time difference / end time difference described above may be appropriately changed according to the input order.

  Next, in order to release the key lock, the operation (input authentication information receiving step) when inputting the authentication password, that is, the input authentication information that is the authentication parameter to be actually authenticated, from the touch panels 3 and 4 is shown in FIG. 8 and FIG. The following processing operates when the mobile phone 1 is in the key lock state, and is mainly executed by the touch panel input / display processing unit 21 and the authentication processing unit 23 of the central processing unit 2.

  First, the upper touch panel 3 is in a state of waiting for a trace to be input by being traced with an input pen (step S21). In this state, a necessary figure locus (password for authentication) is input. The central processing unit 2 keeps the input state of the touch panel until accepting the “determined” touch input via the touch panel 3, and the display device 30 draws the locus of the inputted key lock releasing graphic. (Step S26). Then, the above operation is continuously performed, and the processes in steps S21 and S26 are repeated until the input of the figure is completed. During this time, the central processing unit 2 compares the data (authentication parameter) generated based on the coordinate information of the figure inputted to release the key lock, which is the next process, with the reference authentication information registered in advance. In preparation for this, the information on the trajectory is stored in the memory unit 5.

  Subsequently, when “confirm” is input on the upper touch panel 3, the central processing unit 2 deletes the display of the trajectory on the display device 30 (step S22), and the input graphic trajectory and the trajectory start time / end. The time is read (step S23). Then, from the coordinate information of the graphic trajectory read in step S23, an area where the trajectory start / end point is located and a character as a password are generated (step S24). Then, the locus start time / end time of the touch panel 3 obtained in steps S23 and S24, the area where the locus start / end points are located, and the password characters are stored in the memory unit 5 as authentication parameters used at the time of authentication. Writing is performed (step S25). Thereby, the input authentication information input process from the upper touch panel 3 is terminated.

  Next, input authentication information input processing from the lower touch panel 4 will be described with reference to a flowchart shown in FIG. First, the lower touch panel 4 is traced with the input pen and waits for the locus to be input (step S31). In this state, a necessary figure trajectory is input. The central processing unit 2 continues the pad input state until accepting the “fixed” touch input via the lower touch panel 4, and the trace of the graphic input to release the key lock input to the display device 40. Are drawn (step S36). This operation is continuously performed, and the processes in step S31 and step S36 are repeated until the figure input is completed. During this time, the central processing unit 2 prepares a comparison process between the data generated based on the coordinate information of the inputted graphic, which is the next process, and the reference authentication information registered in advance, and stores the trajectory information in the memory unit 5. accumulate.

  Subsequently, when “confirm” is input on the lower touch panel 4, the central processing unit 2 deletes the display of the trajectory on the display device 40 (step S 32), and the input graphic trajectory and the trajectory start time / end. The time is read (step S33). Then, from the coordinate information of the graphic trajectory read in step S33, an area where the trajectory start / end point is located and a character as a password are generated (step S34). Then, the memory unit 5 uses the trajectory start time / end time of the lower touch panel 4 obtained in steps S33 and S34, the region where the trajectory start / end points are located, and password characters as authentication parameters used during authentication. (Step S35). Thereby, the input authentication information input process from the lower touch panel 4 is terminated.

  Next, processing (authentication step) for performing authentication and releasing key lock based on the input authentication information input will be described with reference to the flowcharts of FIGS. First, as described above, when all the input authentication information input from the upper and lower touch panels 3 and 4 is completed (Yes in step S41), the central processing unit 2 starts from the upper and lower touch panels 3 and 4. The input start time difference is calculated and compared with a time difference allowable range registered in advance (step S42). Then, it is determined whether or not the input start time difference is within the registration allowable range (step S43). At this time, if the determination result is NO, the key lock is continued, and the process proceeds to step S59 in FIG. On the other hand, if the determination result of step S43 is yes, the process proceeds to step S44.

  Subsequently, in step S44, the input end time difference from the upper and lower touch panels 3 and 4 is calculated and compared with a pre-registered time difference allowable range. In step S45, it is determined whether or not the input end time difference is within the registration allowable range. At this time, if the determination result in step S45 is NO, the key lock is continued, and the process proceeds to step S59 in FIG. On the other hand, if the determination result of step S45 is yes, the process proceeds to step S46.

  Subsequently, in step S46, the locus start location area input from the upper touch panel 3 is compared with the corresponding location area registered in advance, and in step S47, it is determined whether or not they match. If the determination result in step S47 is no, the key lock is continued, and the process proceeds to step S59 in FIG. 11 where key operation invalidation processing is performed. On the other hand, if the determination result of step S47 is yes, the process proceeds to step S48.

  Subsequently, in step S48, the trajectory end point location area input from the upper touch panel 3 is compared with the corresponding location area registered in advance, and in step S49, it is determined whether or not they match. If the determination result in step S49 is no, the key lock is continued, and the process proceeds to step S59 in FIG. 11 where key operation invalidation processing is performed. On the other hand, if the determination result of step S59 is yes, the process proceeds to step S50.

  Subsequently, in step S50, the locus start location area input from the lower touch panel 4 is compared with the corresponding location area registered in advance, and it is determined whether or not they match in step S51. If the determination result in step S51 is no, the key lock is continued and the process proceeds to step S59 in FIG. 11 where key operation invalidation processing is performed. On the other hand, if the determination result of step S51 is yes, the process proceeds to step S52 of FIG.

  Subsequently, in step S52, the locus end point location area input from the lower touch panel 4 is compared with the corresponding location area registered in advance, and it is determined whether or not they match in step S53. If the determination result in step S53 is no, the key lock is continued, and the process proceeds to step S59 in FIG. 11 where key operation invalidation processing is performed. On the other hand, if the determination result of step S53 is yes, the process proceeds to step S54.

  Subsequently, in step S54, the password character generated from the trajectory input from the upper touch panel 3 or 4 is compared with a previously registered character, and it is determined whether or not they match in step S55. If the determination result in step S55 is no, the key lock is continued and the process proceeds to step S59 for performing a key operation invalidation process. On the other hand, if the determination result of step S55 is yes, the process proceeds to step S56.

  Subsequently, in step S56, the password character generated from the locus input from the lower touch panel 4 is compared with the previously registered character, and it is determined whether or not they match in step S57. If the determination result in step S57 is no, the key lock is continued and the process proceeds to step S59 for performing key operation invalidation processing. On the other hand, if the determination result of step S57 is yes, the process proceeds to step S58.

  In step S58, as described above, all authentication parameters of the reference authentication information registered in advance and the input authentication information input from the touch panels 3 and 4 at the time of requesting the key lock release match, or Since it is within the allowable range, it is determined that the authentication is successful, the key lock is released, and key operation acceptance processing is performed. On the other hand, in step S59, a message indicating that the key lock function is set is displayed, and the key lock function is continued. As described above, the key lock release processing is completed.

  As described above, according to the present invention, authentication parameters generated based on two or more information input to the touch panel are used for authentication processing, so parameters that are difficult to predict or decipher are compared for authentication. Can be set as data. Therefore, fraud authentication can be effectively suppressed and security can be improved.

  INDUSTRIAL APPLICABILITY The present invention can be used for any information processing apparatus that requires authentication, such as authentication for releasing a cellular phone key lock, and has industrial applicability.

1 is a block diagram illustrating a configuration of a mobile phone in Example 1. FIG. It is a functional block diagram which shows the structure of the central processing unit of the mobile telephone disclosed in FIG. It is a figure which shows the handwriting input standby state by the touch panel and display apparatus which were disclosed in FIG. It is a figure which shows an example of the handwriting input with respect to the touchscreen and display apparatus which were disclosed in FIG. It is a figure which shows an example of the handwriting input with respect to the touchscreen and display apparatus which were disclosed in FIG. It is a figure which shows an example of the handwriting input with respect to the touchscreen and display apparatus which were disclosed in FIG. It is a flowchart which shows operation | movement of the mobile telephone in Example 1, and is a figure explaining key lock setting processing operation. It is a flowchart which shows operation | movement of the mobile telephone in Example 1, and is a figure explaining the input operation to an upper side touch panel. It is a flowchart which shows operation | movement of the mobile telephone in Example 1, and is a figure explaining the input operation to a lower side touch panel. It is a flowchart which shows operation | movement of the mobile telephone in Example 1, and is a figure explaining key lock cancellation | release processing operation. It is a flowchart which shows operation | movement of the mobile telephone in Example 1, and is a figure explaining key lock cancellation | release processing operation.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Cellular phone 2 Central processing unit 3, 4 Touch panel 5 Memory unit 6 Operation key 21 Touch panel input / display processing unit 22 Authentication information registration processing unit 23 Authentication processing unit 24 Key lock processing unit 30, 40 Display device 31, 41 Touch panel input processor

Claims (11)

An authentication device including a touch panel having at least two or more handwritten input locations,
Input authentication information receiving means for receiving input authentication information based on information input to each of the two or more input locations;
Reference authentication information storage means for storing in advance reference authentication information corresponding to the input authentication information;
An authentication unit that performs authentication based on the input authentication information and the reference authentication information, and determines whether authentication is correct or not;
Equipped with a,
The input authentication information receiving means receives, as the input authentication information, an input start time difference representing a difference in time when input of information is started for each of the two input locations.
An authentication apparatus characterized by that. An authentication device including a touch panel having at least two or more handwritten input locations,
Input authentication information receiving means for receiving input authentication information based on information input to each of the two or more input locations;
Reference authentication information storage means for storing in advance reference authentication information corresponding to the input authentication information;
An authentication unit that performs authentication based on the input authentication information and the reference authentication information, and determines whether authentication is correct or not;
Equipped with a,
The input authentication information receiving means receives, as the input authentication information, an input end time difference representing a difference in time at which input of information is ended for each of the two input locations.
An authentication apparatus characterized by that. The input authentication information receiving means receives the input authentication information based on the two character information respectively input to the two input locations;
The authentication apparatus according to claim 1 or 2, wherein The input authentication information receiving means receives the input authentication information based on information of the same character respectively input to the two input locations;
The authentication apparatus according to claim 1, 2, or 3. The input authentication information further comprises prior Symbol starting point region information of the trajectory of each character information, the end point area information of the trajectory of the character information, the handwriting information of each character information, one or more information among,
The authentication apparatus according to claim 3 or 4, wherein The authentication means authenticates the input authentication information of a predetermined type for each type when there are a plurality of types of the input authentication information, and determines whether the authentication is correct or not based on all authentication results.
The authentication apparatus according to claim 5, wherein: Reference authentication information registration means for storing the reference authentication information based on information input from the two input locations in the reference authentication information storage means,
The authentication device according to claim 1, 2 , 3 , 4 , 5, or 6. An electronic device comprising an operation key and key lock means for setting and releasing the key lock of the operation key,
While comprising the authentication device according to any one of claims 1 to 6,
The key lock means performs key lock setting and release of the operation key according to whether the authentication by the authentication device is correct or not.
An electronic device characterized by that. The key lock means releases the key lock of the operation key when the authentication by the authentication device is successful.
9. The electronic apparatus according to claim 8, wherein An authentication method by an authentication device provided with a touch panel having at least two or more handwritten input locations,
An input authentication information receiving step for receiving input authentication information based on information input to each of the two or more input locations;
An authentication step of performing authentication based on the reference authentication information stored in advance corresponding to the input authentication information and the input authentication information received in the input authentication information receiving step, and determining whether the authentication is correct;
I have a,
In the input authentication information receiving step, an input start time difference indicating a difference in time when information input is started for each of the two input locations, and information input is performed for each of the two input locations. Accepting at least one of input end time differences representing the time difference as the input authentication information;
An authentication method characterized by that. In an authentication device provided with a touch panel having at least two handwritten input locations,
Input authentication information receiving means for receiving input authentication information based on information input to each of the two or more input locations;
Authentication means for performing authentication based on the reference authentication information stored in advance corresponding to the input authentication information and the input authentication information received by the input authentication information receiving means, and determining whether the authentication is correct;
With to realize,
The input authentication information receiving means is configured to input an input start time difference indicating a difference in time when information input is started for each of the two input locations, and to input information to each of the two input locations. Accepting at least one of input end time differences representing the time difference as the input authentication information;
A program to make things happen .

Images