JP5479820B2 - Input device - Google Patents

Description

  The present invention relates to an input device, and more particularly to an input device for inputting an authentication code.

  To use ATMs (Automated Teller Machines) and credit cards of automatic transaction equipment installed at financial institutions and convenience stores, a PIN (authentication) that only the customer (user) who owns the card knows Code). However, recently, when an authentication code is input, the authentication code leaks due to peeping or voyeurism, and unauthorized transactions due to the leaked authentication code tend to increase.

  For this reason, in recent years, security for authentication codes has been emphasized, and various measures have been taken. For example, Patent Document 1 below discloses a personal identification number input device that can prevent leakage of an authentication code even when the fingertip is visually observed by another person when the authentication code is input.

  This personal identification number input device includes a display unit, an input unit having a numeric keypad, and an information processing unit that executes information processing. A series of information processing as shown in FIG. It has been broken. The customer does not input the personal identification number (authentication code) as it is, but enters a numerical value obtained by performing a predetermined calculation on the personal identification number in accordance with an instruction issued from the personal identification number input device. For example, as shown in FIG. 5, when the personal identification number is “1234”, first, the information processing unit determines the calculation method and operand for each digit. Then, the information processing unit causes the display unit to display an instruction “Please input a value obtained by adding 2 to the first digit of your personal identification number and press the execution key”. As the first numerical value input operation, the customer adds “2” of the operand determined by the information processing unit to “1” that is the first digit of the password in accordance with the instruction displayed on the display unit. "From the input section and press the Enter key. The customer repeats such an operation for four digits, and the information processing unit performs an inverse calculation from the input numerical value to derive the original personal identification number for authentication.

  Thus, in the password input device described in Patent Document 1, since the number key and the password entered by the customer are different, even when the fingertip is directly visually observed by another person when entering the password, Your PIN will not be leaked.

JP 2008-140009 A

  However, in an input device in which a user directly inputs a personal identification number (authentication code), the input code corresponding to the pressed key is accepted as it is. That is, since the pressed key and the input code received by the input device correspond to each other, there is a problem that the authentication code leaks when the pressed key is peeped or voyeurized.

  Further, as in Patent Document 1, even if the authentication code is not directly input, if an instruction displayed on the display unit is seen or a voyeur is taken, the authentication code is easily obtained by calculation. There is a problem that the authentication code is leaked to others. This is because the input code corresponding to the pressed key is accepted as it is, so when a peep or voyeur is taken, the input code that the input device accepts from the pressed key is known to the other person, and the input This is because the authentication code is derived by performing the calculation based on the code and the instruction displayed on the display unit.

  An object of the present invention is to provide an input device that can prevent leakage of an authentication code even when an operation for inputting the authentication code is seen by others.

In order to solve the above-described problems, an input device for inputting an authentication code according to the first aspect is:
A display unit for displaying an input code for inputting the authentication code;
A touch sensor for detecting an input to an input code displayed on the display unit;
A tactile sensation providing unit that vibrates the touch surface of the touch sensor;
When an input to the input code is detected by the touch sensor,
In the case of the first input rule, the tactile sensation providing unit is controlled so as to present the first tactile sensation to the pressed object pressing the touch surface without accepting the input code as an authentication code,
In the case of the second input rule, the input code is accepted as an authentication code, and the second tactile sensation different from the first tactile sensation is presented to the pressed object pressing the touch surface. A control unit that controls the tactile sensation providing unit.

An input device for inputting the authentication code according to the second aspect is
A display unit for displaying an input code for inputting the authentication code;
A touch sensor for detecting an input to an input code displayed on the display unit;
A tactile sensation providing unit that vibrates the touch surface of the touch sensor;
When an input to the input code is detected by the touch sensor,
In the case of the first input rule, the tactile sensation providing unit is controlled so as to present a tactile sensation with respect to the pressed object pressing the touch surface without accepting the input code as an authentication code,
In the case of the second input rule, a control unit that controls to accept the input code as an authentication code is provided.

An input device for inputting the authentication code according to the third aspect is
A display unit for displaying an input code for inputting the authentication code;
A touch sensor for detecting an input to an input code displayed on the display unit;
A tactile sensation providing unit that vibrates the touch surface of the touch sensor;
When an input to the input code is detected by the touch sensor,
In the case of the first input rule, the input code is controlled not to be accepted as an authentication code,
In the case of the second input rule, a control unit that receives the input code as an authentication code and controls the tactile sensation providing unit so as to present a tactile sensation to the pressed object that is pressing the touch surface; Prepare.

  ADVANTAGE OF THE INVENTION According to this invention, even when the operation which inputs an authentication code is seen by others, the input device which can prevent the leakage of an authentication code can be provided.

FIG. 1 is a functional block diagram showing a schematic configuration of an input device according to an embodiment of the present invention. FIG. 2 is a diagram illustrating an example of a mounting structure of the input device of FIG. FIG. 3 is a flowchart showing the operation of the input device of FIG. FIG. 4 is a diagram showing a mobile phone as an application example of the input device of the present invention. FIG. 5 is a diagram showing an authentication method in a conventional password input device.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings.

  FIG. 1 is a functional block diagram showing a schematic configuration of an input device according to an embodiment of the present invention. The input device 1 according to the present embodiment is an input device for inputting an authentication code. As an example, a bank ATM, a credit card terminal such as a CAT (Credit Authorization Terminal) or a CCT (Credit Center Terminal), and a station ticket sale Machine, personal computer, mobile phone, and PDA (Personal Digital Assistant). The input device 1 includes a display unit 2, a touch sensor 3, a tactile sensation providing unit 4, a storage unit 5, and a control unit 6. The display unit 2 displays an input code (Hiragana, Katakana, English letters, numbers, symbols, etc.) for inputting an authentication code, and is configured using, for example, a liquid crystal display panel, an organic EL display panel, or the like. The authentication code here is a code that only the user himself / herself can know, such as a personal identification number, and is generally used for identity verification. The authentication code is composed of one or a plurality of input codes, and generally consists of one or more digits of characters or numbers. The touch sensor 3 detects an input to an input code displayed on the display unit 2, and is configured by a known method such as a resistance film method, a capacitance method, or an optical method. Input to the input code is performed by a pressing object such as a user's finger or a stylus pen, for example. When the touch sensor 3 detects an input, it is not essential that the pressing object physically presses the touch surface of the touch sensor 3. For example, when the touch sensor 3 is optical, the touch sensor 3 detects a position where the infrared light on the touch sensor 3 is blocked by a finger, a stylus pen, or the like, so that the pressing object presses the touch surface of the touch sensor 3. It is not necessary to do. The tactile sensation providing unit 4 vibrates the touch surface of the touch sensor 3 and is configured using, for example, a vibration element such as a piezoelectric element. The storage unit 5 stores various input information and authentication codes, and also functions as a work memory. The control unit 6 controls and manages the entire input device 1 including each functional block of the input device 1. Here, the control unit 6 is configured as software executed on any suitable processor such as a CPU (Central Processing Unit), or a dedicated processor specialized for each process (for example, DSP (Digital Signal Processor)). Can be configured.

  An example of the mounting structure of the input device of FIG. 1 is as shown in FIG. A touch sensor 3 is disposed on the display unit 2. In the input device 1 according to the present embodiment, the display unit 2 and the touch sensor 3 are planar and rectangular. The touch surface of the touch sensor 3 is made of, for example, a transparent film or glass, and the back surface is made of glass or acrylic. When the touch surface is pressed, the touch sensor 3 has a structure in which the pressed portion is slightly bent (distorted) according to the pressing force, or the structure itself is bent slightly.

  The tactile sensation providing unit 4 vibrates the touch surface of the touch sensor 3 and touches the touch sensor 3, for example, so that a tactile sensation can be presented to a user's finger or stylus pen pressing the touch surface. Placed in. The tactile sensation to be presented may be any vibration, and the frequency, period (wavelength), amplitude, and waveform can be appropriately set according to the tactile sensation to be presented. Further, examples of a more realistic tactile sensation that improves a user's operational feeling include a tactile hard tactile sensation, a soft tactile sensation such as bull or buni, and a tactile sensation that can be recognized as vibration such as a bull. A clicked hard tactile sensation can be realized by, for example, presenting a sine wave of 200 Hz to 500 Hz for one period or a rectangular wave for one period. A soft tactile sensation such as bull or beech can be realized by, for example, presenting a sine wave of 200 Hz to 500 Hz for two or three periods. A tactile sensation that can be recognized as a vibration such as a bull can be realized by, for example, presenting a sine wave for four cycles or more.

  Next, the control unit 6 will be described in detail. The control unit 6 determines whether to accept an input code corresponding to the input detected by the touch sensor 3 as an authentication code according to two input rules. The two rules are a first input rule and a second input rule, and are rules relating to the current input and / or the past input. When the input to the input code is detected by the touch sensor 3 in the case of the first input rule, the control unit 6 does not accept the input code corresponding to the detected input as the authentication code, and the second input rule. In this case, an input code corresponding to the detected input is accepted as an authentication code. Here, not accepting the input code means that the input is not received. That is, the control unit 6 does not accept all detected inputs. Hereinafter, the input that the control unit 6 has not accepted is referred to as “dummy input”. The first input rule defines in what case the input detected by the touch sensor 3 is used as a dummy input in order to realize that at least one dummy input is performed when the authentication code is input. It is a rule. The second input rule refers to an input code corresponding to an input detected by the touch sensor 3 in any case in order to realize that at least one dummy input is performed when the authentication code is input. It is a rule that decides whether to accept as. For example, when the authentication code is entered, at least one dummy input is performed, for example, when a dummy input is performed before or after the first digit of the authentication code, or in the case of a multi-digit authentication code. For example, a dummy input is performed between the input of the authentication code for the digit and the input of the authentication code for the next digit.

  Examples of the first input rule are “the previous input is not a dummy input”, “no input in the past is a dummy input”, “the current input is the digit of the authentication code” , “The first input relating to a preselected digit”, “the current input being the first input relating to a digit selected randomly among the digits of the authentication code”, and the like. Examples of the second input rule are “the previous input is a dummy input”, “one of the past inputs is a dummy input”, “the current input is a digit of the authentication code” Among them, it is not the first input relating to a preselected digit ”,“ the current input is not the first input relating to a digit selected randomly among the digits of the authentication code ”, and the like. According to these rules, when there is no dummy input in the past input or when the first input related to a selected digit is performed, the current input is not accepted as an authentication code and becomes a dummy input. The first input relating to a digit selected in advance here is an input performed for the first time on a digit determined in advance by the input device 1. For example, when the digit selected in advance is the second digit, when the second digit is input, the input code input first is a dummy input. Here, the randomly selected digit means a digit determined by the input device 1 generating, for example, a random number, and the dummy input is realized by the same process as the digit selected in advance. . That is, it is desirable that at least one dummy input is performed when the authentication code is input.

  And the control part 6 controls the tactile sensation presentation part 4 so that a 1st tactile sensation is shown with respect to the press object which is pressing the touch surface of the touch sensor 3, when an input code is not received as an authentication code. To do. Further, when the control unit 6 receives the input code as the authentication code, the control unit 6 presents a second tactile sensation different from the first tactile sensation with respect to the pressed object pressing the touch surface of the touch sensor 3. The tactile sensation providing unit 4 is controlled. That is, the control unit 6 presents different tactile sensations to the user depending on whether or not the input by the user to the input device 1 according to the present embodiment is a dummy input. Since tactile sensation is not recognized by another person (a third person other than the user) unlike sound and smell, whether the control unit 6 has received an input code corresponding to the input detected by the touch sensor 3 or not. Can be notified only to the user.

  Hereinafter, an authentication method using an input device according to an embodiment of the present invention will be described with reference to FIG. FIG. 3 is a flowchart showing the operation of the input device according to the embodiment of the present invention.

  First, when the input device 1 is an ATM or the like jointly used by an unspecified number of users, a user's card (such as a cash card or a credit card) is inserted into the input device 1. Then, the control part 6 reads the authentication code memorize | stored in the card | curd, and memorize | stores an authentication code in the memory | storage part 5 (step S100). When the input device 1 is a personal dedicated terminal or the like used only by a specific user, the storage unit 5 stores an authentication code in advance, and thus step S100 is unnecessary. Thereafter, the control unit 6 displays an input code on the display unit 2 as an input screen (step S101).

  When an input to the input code displayed on the display unit 2 is performed by a pressing object such as a user's finger or a stylus pen, the touch sensor 3 detects this input (step S102). In addition, in order to make a user recognize clearly that the input was detected, the control part 6 can change the display of the input code (input location) in the display part 2 corresponding to the detected input ( Step S103). The change in display is a change that can be recognized as an input by a pressing object with respect to a certain input code, such as, for example, inversion of the color of the input code or change in the darkness of the display of the input code. Note that the change in display of the input code is not limited to strictly changing the display of only codes such as letters and numbers. For example, it includes changes in the pattern, shape, and color of keys and buttons to which codes are assigned, and changes in the surrounding display of keys and buttons to which codes are assigned (for example, contours and shadows). . Note that the feedback method for detecting the input is not limited to the method of acting on the vision such as changing the display of the input code. For example, a method of acting on the hearing such as making a sound is also included.

  When the input is detected, the control unit 6 determines whether the current input and the past input to the input device 1 or any one of the inputs follows the first input rule or the second input rule ( Step S104). When the control unit 6 determines that the input to the input device 1 conforms to the first input rule, the control unit 6 does not accept an input code corresponding to the input detected by the touch sensor 3 as an authentication code (step S105). Here, the first input rule is that the input detected by the touch sensor 3 in any case is a dummy input in order to realize that at least one dummy input is performed when the authentication code is input. It is a rule that decides. For example, when the first input rule stipulates that “the previous input is not a dummy input”, if the input code corresponding to the previous input is accepted as an authentication code, the current input is Even if the input is an input code corresponding to the authentication code, the control unit 6 does not accept the code as the authentication code. That is, the input is a dummy input. Therefore, when such a first input rule is defined, the control unit 6 does not continuously accept the input code as an authentication code, and as a result, a dummy input is always performed when the authentication code is input. Become.

  Next, the control unit 6 controls the tactile sensation providing unit 4 to indicate the touch surface of the touch sensor 3 in order to clearly notify only the user that the input code is not accepted as the authentication code. The first tactile sensation is presented to the pressed object such as the user's finger by vibrating with the vibration pattern (step S106). As described above, the first tactile sensation is not recognized by a third party other than the user.

  In step S104, when the control unit 6 determines that the current input and / or the past input to the input device 1 comply with the second input rule, the control unit 6 is detected by the touch sensor 3. An input code corresponding to the input is accepted as an authentication code (step S107). The second input rule refers to an input code corresponding to an input detected by the touch sensor 3 in any case in order to realize that at least one dummy input is performed when the authentication code is input. It is a rule that decides whether to accept as. For example, when the second input rule defines that “the previous input is a dummy input” and the previous input is a dummy input, the control unit 6 authenticates the input code input this time. Accept as code. When such a second input rule is defined, since the input code is not accepted as the authentication code without dummy input, dummy input is always performed when the authentication code is input.

  Next, the control unit 6 controls the tactile sensation providing unit 4 to cause the touch surface of the touch sensor 3 to vibrate the first vibration in order to clearly notify only the user that the input code has been accepted as the authentication code. By vibrating with a second vibration pattern different from the pattern, a second tactile sensation different from the first tactile sensation is presented to the pressed object such as the user's finger (step S108). As described above, the second tactile sensation is not recognized by a third party other than the user.

  Note that the control unit 6 can control the tactile sensation providing unit 4 so as to present a tactile sensation to the user only when the input code is accepted as an authentication code or only when the input code is not accepted. The user can distinguish and recognize whether or not the input code is accepted as the authentication code only by the presence or absence of tactile sensation.

  When the authentication code is composed of a plurality of input codes, the control unit 6 determines whether or not the input code is accepted as the authentication code by the number of digits of the authentication code (step S109). If the input code is not accepted for the number of digits of the authentication code (No in step S109), the process returns to step S101 again, and the processes of steps S101 to S108 are repeated for the number of digits of the authentication code. When the process returns to step S101, if the display of the input code has changed due to the previous input, the control unit 6 returns the input code to the original display and causes the display unit 2 to display the input code.

  When the input code corresponding to the authentication code is accepted by the number of digits of the authentication code (Yes in step S109), the input is completed. When all input codes are accepted as authentication codes (when they match the authentication codes), it is determined that the user is a valid user, and authentication is completed.

  When authentication is completed when an input code corresponding to the last digit of the authentication code is accepted as an authentication code, another person can know what the last digit of the authentication code is. Therefore, the input device 1 can be configured such that dummy input can be performed even after the input code is accepted as the authentication code by the number of digits of the authentication code. For example, the first input rule is “the previous input is an input to the input code corresponding to the last digit of the authentication code” (that is, the input code corresponding to the last digit is accepted as the authentication code). If defined, the input after the input code corresponding to the last digit of the authentication code is a dummy input. To end the dummy input after the input code corresponding to the last digit of the authentication code is entered, for example, by placing a “Confirm” button on the display unit 2 and pressing the “Confirm” button, the authentication is completed. What is necessary is just to make it the structure to do. As a result, the user can perform a dummy input until the “confirm” button is pressed even after the authentication code is input.

  As described above, in the present embodiment, in the case of the first input rule, the control unit 6 does not accept the input code as the authentication code, and gives the first tactile sensation to the pressing object pressing the touch surface of the touch sensor 3. The tactile sensation providing unit 4 is controlled so as to be presented. In the case of the second input rule, the control unit 6 accepts the input code as an authentication code, and applies a second tactile sensation different from the first tactile sensation to the pressed object that is pressing the touch surface of the touch sensor 3. The tactile sensation providing unit 4 is controlled so as to be presented. The first input rule and the second input rule are rules for realizing that at least one dummy input is performed when an authentication code is input. That is, even if the user inputs an input code corresponding to the authentication code, the input device 1 may not accept the input code as an authentication code due to input rules. Whether or not the input code is accepted can be recognized only by the user by the tactile sensation presented. Another person (a third party other than the user) cannot recognize the tactile sensation through peeping or voyeurism, and therefore cannot recognize the dummy input. Therefore, if there is a dummy input when the user inputs the authentication code, it is impossible for another person to specify the authentication code. Therefore, even when an operation for inputting the authentication code is seen by another person, the leakage of the authentication code can be prevented.

  In addition, when the input to the input code is detected by the touch sensor 3, the control unit 6 presses the touch surface of the touch sensor 3 without accepting the input code as an authentication code in the case of the first input rule. The tactile sensation providing unit 4 is controlled so as to present a tactile sensation with respect to the pressed object, and in the case of the second input rule, the input code is controlled to be accepted as an authentication code. Since the tactile sensation providing unit 4 generates vibration only when the input code is not accepted as the authentication code, the tactile sensation providing unit 4 can have a simple configuration that generates only one type of vibration. In addition, the user does not have to distinguish two types of tactile sensations, and the operability is improved.

  In addition, when the input to the input code is detected by the touch sensor 3, the control unit 6 performs control so that the input code is not accepted as an authentication code in the case of the first input rule. In this case, the input code is accepted as an authentication code, and the tactile sensation providing unit 4 is controlled so as to present a tactile sensation to the pressed object that is pressing the touch surface of the touch sensor 3. Since the tactile sensation providing unit 4 generates vibration only when the input code is accepted as an authentication code, the tactile sensation providing unit 4 can have a simple configuration that generates only one type of vibration. In addition, the user does not have to distinguish two types of tactile sensations, and the operability is improved.

  Further, in this embodiment, when the input code is accepted as an authentication code, the tactile sensation providing unit 4 does not merely vibrate, but a click that can be felt when a mechanical key is pressed to enhance the user's operational feeling. A hard tactile sensation (real click feeling) can be presented on the pressed object. The touch sensor 3 itself does not physically displace like a mechanical key even when the touch surface is pressed. However, by presenting the tactile sensation as described above to the pressed object, the user can press the mechanical key. A realistic click feeling similar to that in the case of operation can be obtained. Thereby, the user can perform an input operation to the touch sensor 3 that originally does not have feedback by pressing without a sense of incongruity.

  Although the present invention has been described based on the drawings and examples, it should be noted that those skilled in the art can easily make various modifications and corrections based on the present disclosure. Therefore, it should be noted that these variations and modifications are included in the scope of the present invention. For example, the functions included in each functional unit, each step, etc. can be rearranged so that there is no logical contradiction, and a plurality of functional units, steps, etc. can be combined into one or divided. It is.

  For example, the control unit of the input device according to the present invention controls the vibration pattern presented by the tactile sensation providing unit, thereby prompting the user to intentionally make an erroneous input (input to an incorrect input code). May be presented to the user. Specifically, in step S104 and step S106 in FIG. 3, when the control unit 6 controls the tactile sensation providing unit 4 to present a tactile sensation to the user, the third is urged to make an erroneous input by the user. The third tactile sensation by the vibration pattern is also presented. Then, the input code in the next input in which the third tactile sensation is presented is not accepted as the authentication code. Thereby, the user can intentionally perform a dummy input in the next input, and can securely prevent leakage of the authentication code. In addition, if a condition that the intentional dummy input must be input to an input code that does not constitute an authentication code is provided, input to an input code that is completely unrelated to the authentication code is performed. The authentication code is difficult to be identified by others.

  Further, for example, in the above embodiment, the control unit controls the tactile sensation providing unit to present the second tactile sensation to the pressed object when the input code is received as the authentication code. It is also possible to change the number of tactile presentations depending on the input code of the digit of the code. For example, if the first digit is the second tactile sensation once, the second digit is the second tactile sensation twice, the number of tactile sensations to be presented depends on the number of digits of the current authentication code. It is possible to make the user recognize whether the input code of the eye has been accepted. Alternatively, a completely different tactile sensation can be given for each digit of the authentication code. As a result, the user can easily grasp what digit of the current authentication code is to be input, and the operability is improved. Since the dummy input is performed when the authentication code is input, there is a case where the user forgets the input code of the current authentication code. In this case, in particular, it is effective to change the tactile sensation for each digit of the authentication code.

  For example, in the above-described embodiment, the input device having the touch sensor has been described. However, the present invention is not limited to the input device having the touch sensor. The present invention includes an optional switch provided with a mechanical switch such as a key (or push button) for detecting input by a user instead of a touch sensor, and a display for displaying a display requesting the user to input an authentication code. It can be applied to the input device. For example, when applied to a mobile phone as shown in FIG. 4, the display unit of the present invention corresponds to the display 10 of the mobile phone, and the touch sensor of the present invention corresponds to the mechanical key 11 of the mobile phone. The tactile sensation providing unit of the present invention is disposed below the key 11.

DESCRIPTION OF SYMBOLS 1 Input device 2 Display part 3 Touch sensor 4 Tactile sense presentation part 5 Memory | storage part 6 Control part 10 Display 11 Key

Claims (3)

An input device for inputting an authentication code,
A display unit for displaying an input code for inputting the authentication code;
A touch sensor for detecting an input to an input code displayed on the display unit;
A tactile sensation providing unit that vibrates the touch surface of the touch sensor;
When an input to the input code is detected by the touch sensor,
In the case of the first input rule, the tactile sensation providing unit is controlled so as to present the first tactile sensation to the pressed object pressing the touch surface without accepting the input code as an authentication code,
In the case of the second input rule, the input code is accepted as an authentication code, and the second tactile sensation different from the first tactile sensation is presented to the pressed object pressing the touch surface. An input device comprising: a control unit that controls the tactile sensation providing unit. An input device for inputting an authentication code,
A display unit for displaying an input code for inputting the authentication code;
A touch sensor for detecting an input to an input code displayed on the display unit;
A tactile sensation providing unit that vibrates the touch surface of the touch sensor;
When an input to the input code is detected by the touch sensor,
In the case of the first input rule, the tactile sensation providing unit is controlled so as to present a tactile sensation with respect to the pressed object pressing the touch surface without accepting the input code as an authentication code,
In the case of the second input rule, an input device comprising: a control unit that controls to accept the input code as an authentication code. An input device for inputting an authentication code,
A display unit for displaying an input code for inputting the authentication code;
A touch sensor for detecting an input to an input code displayed on the display unit;
A tactile sensation providing unit that vibrates the touch surface of the touch sensor;
When an input to the input code is detected by the touch sensor,
In the case of the first input rule, the input code is controlled not to be accepted as an authentication code,
In the case of the second input rule, a control unit that receives the input code as an authentication code and controls the tactile sensation providing unit so as to present a tactile sensation to the pressed object that is pressing the touch surface; Input device provided.

Images