JP5492312B1 - Information processing apparatus, method, and program - Google Patents

Abstract

An object of the present invention is to realize authentication with excellent resistance to snooping while using the direction of touch operation.
SOLUTION: Target display means for displaying an operation target on a touch panel screen in any of a plurality of display modes, direction detection means for detecting the direction of a touch operation on the displayed target, and the detected Authentication determining means for determining that the authentication is positive when the direction forms a predetermined direction array, and the direction detecting means is for a target whose display form is a predetermined display form. The direction of touch operation is detected in reverse mode.
[Selection] Figure 1

Description

  The present invention relates to information security.

  In recent years, with the spread of touch panel technology in the field of information equipment, there is a technology for personal authentication that combines a touch operation for inputting a number such as a password with a direction in which a finger is moved (see, for example, Patent Document 1). In addition, when unlocking the screen of a smartphone, there is an example in which the user is authenticated by drawing a touch trajectory so as to draw a preset line with the points displayed on the screen arranged vertically and horizontally as a guide.

Table 2005/013138

  However, although the operation of moving a finger in a specific direction is easy and familiar to the user, there is a problem that the movement is large and easy to understand.

  An object of the present invention is to realize authentication excellent in resistance to snooping while using the direction of the touch operation.

  Based on the above object, an information processing apparatus according to one aspect (1) of the present invention includes target display means for displaying an operation target on a touch panel screen in any of a plurality of display modes, and the displayed target Direction detecting means for detecting the direction of the touch operation with respect to the user, and authentication determining means for determining that the authentication is positive when the detected directions constitute a predetermined direction array, the direction detecting means Is characterized in that the direction of a touch operation with respect to a target whose display mode is a predetermined display mode is detected in a reverse mode.

  An information processing method according to another aspect (7) of the present invention is a method in which the above aspect is captured by a method category, and target display processing for displaying an operation target on a touch panel screen in any of a plurality of display forms; A direction detection process for detecting a direction of a touch operation on the displayed target, and an authentication determination process for determining that the authentication is positive when the detected directions constitute a predetermined direction array; Is executed by the computer, and in the direction detection process, the direction of the touch operation on the target whose display mode is a predetermined display mode is detected in the reverse mode.

  According to another aspect (8) of the present invention, the above aspect is captured by a category of a computer program, and a target display process for displaying an operation target on a touch panel screen in any of a plurality of display forms is displayed. A computer executes direction detection processing for detecting a direction of a touch operation on the target and authentication determination processing for determining that the authentication is positive when the detected directions constitute a predetermined direction array. In the direction detection process, the direction of the touch operation on the target whose display mode is a predetermined display mode is detected in the reverse mode.

  According to another aspect (2) of the present invention, in any one of the above aspects, the aspect selection means for receiving selection of a display aspect to be detected in the inversion mode from among the plurality of display aspects displayed as candidates. It is characterized by having.

  According to another aspect (3) of the present invention, in any one of the above aspects, the display aspect is a combination of values for a plurality of attributes constituting the display aspect, and the display of an object to be detected in the inversion mode. The aspect is characterized by a specific value in any of the plurality of attributes.

  According to another aspect (4) of the present invention, the direction detecting means detects the direction of the touch operation for control in addition to the number of touch operation directions constituting the predetermined arrangement of directions, and controls the control. According to another aspect of the present invention, there is provided a changing unit that changes a display mode of a target to be detected in the inversion mode according to the direction of the touch operation.

  In another aspect (5) of the present invention, the direction detecting means detects the direction of the first touch operation for control prior to the number of touch operations constituting the predetermined direction sequence, and the direction The detecting means detects all subsequent touch operation directions in a reverse mode when the detected direction of the first touch operation is a predetermined direction.

  According to another aspect (6) of the present invention, in any one of the above aspects, the direction detection means may include a dummy touch in addition to the number of original touch operation directions constituting the predetermined direction array. An operation direction is detected, and only the original touch operation direction is passed to the authentication determination unit.

  ADVANTAGE OF THE INVENTION According to this invention, the authentication excellent in tolerance to snooping can be implement | achieved, using the direction of touch operation.

The functional block diagram which shows a structure about this embodiment of this invention. The figure which illustrates the information (data) in this embodiment of this invention. The flowchart which shows the process sequence in this embodiment of this invention. The figure which shows the example of a screen display in this embodiment of this invention. The figure which shows the example of a screen display in this embodiment of this invention. The figure which shows the example of a screen display in this embodiment of this invention.

  Next, a mode for carrying out the present invention (referred to as “embodiment”) will be illustrated along the drawings. In addition, the assumptions common to the contents already described in the background art and problems are omitted as appropriate.

[1. Constitution〕
The present embodiment relates to the information processing apparatus T (also referred to as “terminal T”) shown in the configuration diagram of FIG. The terminal T is a portable terminal such as a smartphone having a display screen, and accepts login depending on the direction of the touch operation. In this embodiment, as a representative touch operation, a so-called flick operation in which a finger is operated is used. However, any touch operation other than a flick may be used as long as the finger is moved. .

  Here, there are four types of flick operation directions: up (also expressed as “↑”), down (also expressed as “↓”), left (also expressed as “←”), and right (also expressed as “→”). The number of directions may be other numbers such as 8 types. A sequence of operations “↑ ↓ ← →” combining these is arranged in a predetermined direction corresponding to a correct password for which login is permitted, and is also referred to as a “correct answer sequence”.

  Login to which this embodiment is applied includes, for example, screen lock release of the terminal T itself, activation of an application program (hereinafter also referred to as “app”), access to personal data such as an address book, connection to a predetermined server, etc. It is.

  The terminal T has a computer configuration such as an arithmetic control unit 6 such as a CPU, a storage device 7 such as a main memory and an auxiliary storage device, and communication means 8 (for example, the Internet, a mobile phone network, etc.). Communication equipment and communication adapter).

  In addition to the computer configuration as described above, the terminal T includes a rechargeable battery control unit 3 that controls a built-in rechargeable battery, a call control unit 4 that controls a call, and a positioning unit 5 that performs a positioning process using GPS or the like. A display screen G which is a touch panel screen such as a liquid crystal with a touch panel function, and basic software 9 for controlling each unit.

  In the terminal T, the arithmetic control unit 6 executes the computer program stored in the storage device 7 to realize the elements shown in FIG. The program is, for example, various applications, middleware, scripts, etc. in addition to basic software. Of the realized elements, the information storage means is not limited to so-called local storage, but may be remote storage by network computing (cloud).

  The storage means may include not only a data storage area but also functions such as data input / output and management. The unit of the storage means shown in this application is for convenience of explanation, and the configuration can be divided or integrated as appropriate. Further, in addition to the storage means for specifying, storage means for processing targets, work areas, results, and the like are used as appropriate.

  The arrows in the figure (for example, FIG. 1) supplementarily indicate the main direction of the flow of data, control, etc., and do not deny other flows or imply direction limitations. For example, before or after data acquisition in a certain direction, a data request or an acknowledgment (ACK) can occur in the reverse direction.

  In addition, each means other than the storage means is a processing means for realizing and executing the functions and operations of information processing as described below, but these are functional units arranged for explanation, and actual hardware It doesn't matter if it matches elements or software modules.

[2. Action)
[2-1. (Display of target)
FIG. 3 is a flowchart showing the operation of the present embodiment. When the screen lock state is canceled (step S12) and the login operation is performed on the terminal T (step S13: “YES”), the target display unit 20 displays the operation target in any of a plurality of display modes as the operation screen. Is displayed on the display screen G (step S14). FIG. 4 is an example of a display screen G that displays a plurality of targets in which characters are enclosed in graphics.

  The target of the operation is not limited to a character surrounded by a graphic, but may be a character, a graphic, a symbol, a combination of these, or a combination of these and a color, or a 3D display object. . Further, the display mode is a combination of values for a plurality of attributes constituting the display mode. In the example of FIG. 4, a plurality of targets are displayed at a time, but one target may be displayed for each operation.

[2-2. Pre-selection of specific aspects)
In the login setting registration prior to the login operation (step S11), the login setting means 50 (also serving as the aspect selection means of the present invention) receives the designation of the correct answer sequence from the user and stores it in the correct answer storage means 45. From the display of a plurality of display modes as candidates, selection of a display mode (referred to as “specific mode”) to be detected in the reverse mode (described later) is received from the user and stored in the specific mode storage unit 25. Let Each information is read from each storage means and used.

  The specific mode is a specific value in any of a plurality of attributes, and the flick operation on the target displayed in the specific mode serves as a marker that instructs the user to perform in the opposite direction. For example, if the figure surrounding the character is a rectangle, it is performed in the opposite direction. Attributes constituting such a display mode of the target are, for example, a character type, a font type and size, a type of a figure surrounding or decorating the character, a direction, a size, an expression, and a movement.

  Examples of character types include numbers (even or odd), English characters (uppercase or lowercase letters), and symbols. The font types include Gothic and Mincho, and may include italics and bold. The types of figures are, for example, a circle, a square, a triangle, a pentagon, a hexagon, and a parallelogram. The representation of the figure includes, for example, whether the line for drawing the figure is a single line or a double line, the thickness of the line, the type of the broken line or the chain line, the color or pattern of the fill in the figure.

  It should be noted that the number of operations constituting the correct answer sequence and the order thereof are also referred to as “digits” and “◯ digit” according to the password and the password. For example, “↑ ↓ ← →” has 4 digits, and the first digit is “↑”. In this embodiment (FIG. 4), the first to fourth digits are passwords, and the 0th and 5th digits are used for operation control described later.

[2-3. (Detection by reverse mode)
The direction detection unit 30 sequentially detects the direction of the flick operation for each displayed target (steps S18 and S19). At this time, the direction detection unit 30 displays the display mode for the first to fourth digits. Is a specific mode (step S17: “YES”) and detects the direction of the flick operation in the reverse mode (step S19).

  The reverse mode is an operation for detecting a direction opposite to the direction of the flick operation actually performed on the display screen G as the operation direction. For example, for a target displayed in a specific color as a specific mode, a flick operation actually performed on the target is detected as a reverse flick operation. Detection in the inversion mode is also referred to as “inversion detection”.

  Then, the authentication determination unit 40 determines that the authentication is positive when the detected direction forms a correct answer sequence (step S21: “YES”), and permits login (step S23). Here is a simplified example. FIG. 5A is an example of a screen that is simplified to only the first to fourth digits corresponding to the password among the targets shown in FIG. It is assumed that the correct answer rows corresponding to these targets are as indicated by the black arrows shown in FIG.

  When the specific form is “square figure” (FIG. 6), the second digit corresponding to this is upward (indicated by a broken arrow in FIG. 6) upward (indicated by a black arrow). If the flick operation is performed in the direction, the inversion is detected as the downward direction in the inversion mode, and the correct digit in the correct answer string is collated.

[2-4. (Invert detection of all digits)
In the present embodiment, the flicking operation in the opposite direction is not limited to a specific number of digits, and can be applied to all digits by user's judgment such as when another person's eyes are concerned. That is, the direction detecting means 30 uses the direction of the first flick operation (0th digit shown in FIG. 4) for control prior to the flicking operation of the number of digits constituting the correct sequence (that is, the first digit to the fourth digit). It detects (step S15). This detection is performed not by inversion detection but by normal detection (step S15).

  Then, when the detected direction of the first flick operation is a predetermined direction (for example, the left direction) (step S16: “YES”), the direction detecting unit 30 reversely detects the direction of all subsequent flick operations. (Step S19). In this case, the user can log in by flicking all the digits in the direction opposite to the stored correct answer sequence.

[2-5. Switching between specific modes]
In addition, in the middle of a series of operations, when the user notices a risk that has been seen by another person, the user can switch the specific mode applied to the next login operation with a simple operation on the spot.

  That is, the direction detecting means 30 detects the direction of the flick operation for control (for example, the fifth digit) in addition to the direction of the flick operation of the number of digits constituting the correct answer sequence (four digits in the above example) (Step 5). S18, S20: “YES”), the changing means 33 changes the specific mode according to the direction of the control flick operation.

  For example, in the example of FIG. 2, there are four options of specific modes that can be switched. The first is “square” for “type of graphic”, the second is “double line for outline” for “graphic drawing mode”, the third is “odd” for “character”, and the fourth is “character”. "Lowercase letters". The check mark shown in the “current setting” column of the figure represents a flag indicating the current setting. In the state of the figure, “square” is selected for the first “type of figure”.

  In this state, for example, when the operation direction of the fifth digit is a predetermined direction (for example, “←”), the setting up to that point is changed to second if it is first, third if it is second, fourth if it is third, If it is the fourth, the setting is switched cyclically in order, and the new setting is applied to the next login. In this case, when the operation direction of the fifth digit is another direction “↑”, “→”, “←”, the setting is not changed.

  As another example, it is possible to switch to an option corresponding to the operation direction of the fifth digit. In this case, for example, regardless of the setting up to that point, the first digit is “↑”, the second is “→”, the second is “←”, the third is “↓”, the fourth is “↓”, etc. Switch to.

[2-6. Add dummy digit)
Although not shown, a dummy flick operation may be added for a predetermined number of digits. In this case, the direction detection unit 30 detects the direction of the dummy flick operation in addition to the number of original flick operation directions constituting the correct answer sequence, and passes only the original flick operation direction to the authentication determination unit 40. .

  Regarding the waiting for the dummy flick operation, the flick operation may be waited up to a preset number of dummy digits, or after the flick operation of the original number of digits is received, the input is performed for a predetermined time (for example, 0. 0). If it is interrupted for 5 seconds or 1 second), the acceptance of the dummy flick operation may be terminated and the process may proceed to collation with the correct answer sequence (step S21).

[3. effect〕
As described above, in the present embodiment, the operation direction to the target displayed on the display screen G in a predetermined display mode is reversed (for example, FIG. 6). For this reason, even if there is a person who steals the operation, it is not known in which display mode the operation direction is opposite, and the entire correct answer sequence that is the correct sequence of the flick operation direction cannot be grasped, so security can be maintained. Thereby, it is possible to realize authentication excellent in resistance to snooping while using the direction of the touch operation.

  In particular, in the present embodiment, selection of a predetermined display mode to be detected in reverse is received from the user from candidates such as colors and shapes (step S11 in FIG. 3). As a result, the user only has to store the display mode selected by the user, not the display mode specified in advance from the system side, as the condition for operating in the reverse direction. .

  Further, in this embodiment, the display mode of the target is composed of a plurality of attributes (FIG. 2, FIG. 4 and subsequent figures), and the third party does not know which attribute has which value, so the security is further improved. .

  Furthermore, in the present embodiment, the direction of the flick operation for control in addition to the flick operation that constitutes the correct answer is detected, and the display mode that is used as the inversion condition at this time or next time can be switched according to the direction (FIG. 3). Step S22). For this reason, it is easy to change the display mode without having to call the setting screen again, and the security is improved.

  In addition, in the present embodiment, when the first flick operation is in a predetermined direction (step S15) (step S16: “YES”), all the flick operations are detected in reverse (step S19). For this reason, when the user feels uneasy about the surrounding environment, if the first flick operation is set to a predetermined direction, all flick operations can be operated in the opposite direction, and the resistance to snooping is further improved.

  In particular, in this embodiment, in addition to the original flick operation, by adding a dummy flick operation in any direction before, after, or in the middle of the flick operation, the flick operation sequence viewed from the side changes more than each time. It is even more difficult to see through the line, and resistance to snooping is further improved.

[4. Other embodiments]
In addition, the content of the said embodiment and figure is only an illustration, and the presence or absence and arrangement | positioning of each element, the order and content of a process, etc. can be changed suitably. For this reason, this invention also includes the modification illustrated below and other embodiments.

  For example, a point where a dummy flick operation is detected, a point where all flick operations are reversed and detected in the direction of the first flick operation, and a point where the specific mode is changed by a control flick operation are not essential and can be omitted as appropriate. Further, the display mode may not be a combination of values for a plurality of attributes. For example, the target may be only a number, and inversion detection may be performed only when a specific number is a multiple. Moreover, the point which a user selects about a specific aspect is not essential, You may designate from the apparatus side, such as a terminal.

  Moreover, each aspect of the present invention can be understood as other categories (methods, programs, systems including terminals, etc.) that are not specified. In the category of method or program, “means” shown in the category of apparatus is appropriately read as “process” or “step”. In addition, all or any part of “means” can be read as “part” (unit, section, module, etc.).

  Also, the processes and steps shown in the embodiment can be changed by changing the order, executing some of them collectively, or executing them part by part. In addition, hardware elements such as a CPU core that implements and executes individual means, processes, and steps may be common, or may differ for each means, process, step, or timing.

  The individual means shown in the present application may be realized by calling a function provided by an external server by an API (Application Program Interface) or network computing (so-called cloud or the like). Furthermore, each element such as means relating to the present invention may be realized by other information processing mechanisms such as a physical electronic circuit as well as an arithmetic control unit of a computer.

3 rechargeable battery control unit 4 call control unit 5 positioning unit 6 arithmetic control unit 7 storage device 8 communication unit 9 basic software 20 target display unit 25 specific mode storage unit 30 direction detection unit 33 change unit 40 authentication determination unit 45 correct answer storage unit 50 Login setting means G Display screen N Communication network T Information processing device (terminal)

Claims (8)

Target display means for displaying an operation target on the touch panel screen in any of a plurality of display modes;
Direction detecting means for detecting a direction of a touch operation on the displayed target;
Authentication determination means for determining that the authentication is positive when the detected directions constitute an array of predetermined directions;
With
The information processing apparatus, wherein the direction detection unit detects a direction of a touch operation with respect to a target whose display mode is a predetermined display mode in a reverse mode.   The information processing apparatus according to claim 1, further comprising a mode selection unit that receives a selection of a display mode to be detected in the reverse mode from among the plurality of display modes displayed as candidates. The display mode is a combination of values for a plurality of attributes constituting the display mode,
The information processing apparatus according to claim 1, wherein a display mode of a target detected in the reverse mode is a specific value in any of the plurality of attributes. The direction detection means detects the direction of the touch operation for control in addition to the number of touch operation directions constituting the predetermined direction sequence,
4. The information processing according to claim 1, further comprising a changing unit that changes a display mode of a target to be detected in the inversion mode according to a direction of the touch operation for control. 5. apparatus. The direction detection means detects the direction of the first touch operation for control prior to the number of touch operations constituting the predetermined direction sequence,
The direction detection means detects all subsequent touch operation directions in a reverse mode when the detected direction of the first touch operation is a predetermined direction. The information processing apparatus according to claim 1.   The direction detecting means detects a direction of a dummy touch operation in addition to the number of original touch operation directions constituting the predetermined direction array, and only the direction of the original touch operation is authenticated. The information processing apparatus according to claim 1, wherein the information processing apparatus is passed to a determination unit. Target display processing for displaying an operation target on the touch panel screen in any of a plurality of display modes;
A direction detection process for detecting a direction of a touch operation on the displayed target;
An authentication determination process for determining that the authentication is positive when the detected directions constitute an array of predetermined directions;
The computer runs,
In the direction detection process, an information processing method is characterized in that a direction of a touch operation on a target whose display mode is a predetermined display mode is detected in a reverse mode. Target display processing for displaying an operation target on the touch panel screen in any of a plurality of display modes;
A direction detection process for detecting a direction of a touch operation on the displayed target;
An authentication determination process for determining that the authentication is positive when the detected directions constitute an array of predetermined directions;
A program for causing a computer to execute
In the direction detection process, a program for causing the direction of a touch operation on a target whose display mode is a predetermined display mode to be detected in a reverse mode.

Images