JP5618437B1 - Personal authentication method - Google Patents

Abstract

The present invention provides a personal authentication method that enables so-called “hand-held” authentication without an authentication card and is not easily seen by others. When it is detected that an input button 5a corresponding to the first symbol of a password symbol string made up of a plurality of symbols such as numbers, characters or images is touched, the screen is switched to the next input screen. When an input button corresponding to the second symbol is arranged around the touched input button 5a and the input button corresponding to the second symbol in the password string is sensed, the next input is detected. After switching to the screen, the above operation is repeated until the input button corresponding to the last symbol in the code string is touched. [Selection] Figure 2

Description

  The present invention relates to a personal authentication method excellent in security and operability.

  As a personal authentication method, password authentication combining characters such as numerals and alphabets, and biometrics authentication for identifying a fingerprint, an iris, or a person's face are generally used.

  In the case of biometric authentication, there is a problem of misrecognition. That is, when the registered fingerprint or iris is compared with the person's fingerprint or iris, if a high degree of accuracy is required, the person will be judged as someone else, but the accuracy will be low. If it is enough, even if you are not the person, you will be authenticated.

  On the other hand, password authentication is regarded as “reproduction” in cognitive psychology, and the amount of information that one person can reproduce is limited. For this reason, most combinations of numbers and alphabets of 4 to 8 digits and alphabets are used, and in many cases, your password is left as a memo so that you can't forget it. This memo is often lost or stolen. There are security problems.

  In order to compensate for the above-mentioned drawbacks, Patent Document 1 discloses an input device in which a third party cannot detect a personal identification number by moving a display position of an input key to see a user's movement or a finger movement. Has been proposed.

  Patent Document 2 and Non-Patent Document 1 propose a personal authentication method that uses a specific image (personal memory) stored by the person instead of characters and numbers that are difficult to remember. In other words, the personal memory image is displayed by mixing it with an image that is not related to the user's memory, and authenticating the user by selecting a specific image stored by the user from the mixed images. I have to.

  In cognitive psychology, images are “recognition” instead of “reproduction”, and humans can instantly select specific images from a lot of similar information, so it takes time to create, but individuals rather than numbers and letters Suitable for authentication systems.

  In addition, as a method of locking (unlocking) a smartphone, a plurality of points are displayed on the screen at intersections of the lattice, and the points are locked (unlocked) by passing (tracing) the points in a single stroke. Is also known.

JP-A-6-318186 Japanese Patent No. 4706817

USABILITY AND USER AUTHENTICATION: PICTORIAL PASSWORDS VS.PIN / Antonelia De Angeli, Lynne Coventry, Graham Johnson & Mike Coutts

  The above-described input key is moved on the screen, and a unique image stored only by the user is used as an element for personal authentication, thereby improving safety and convenience compared to the conventional authentication system. However, in Patent Document 1, since the input key is moved, it is troublesome to find a specific number or character and it is easy to input it by mistake.

  By using the image (personal memory) disclosed in Patent Document 2 instead of the number in Patent Document 1, a specific key (image) can be easily found even if the input key is moving. When the key is used as an input key, moving the input key is highly safe and easy to operate as a personal authentication method.

  However, even in a configuration in which Patent Literature 1 and Patent Literature 2 are combined, the user must touch the screen a plurality of times. Therefore, by applying the “one-stroke writing” technique adopted as one of the methods for locking (unlocking) a smartphone, touching the screen is only one time, and the operability is further improved.

  Here, the method of locking (unlocking) “one-stroke writing” currently used in smartphones is a content in which a plurality of fixed points are formed on the screen and these fixed points are continuously connected. In other words, in order to apply the “one-stroke writing” locking (unlocking) method currently used in smartphones, the location of the input key must be a fixed point. Therefore, the above-mentioned problem can be solved if the input key can be moved to input “single stroke”, but none of the prior arts discloses a solution for that point.

  In order to solve the above-described problems, according to the present invention, an individual touches an input button sequentially indicating a symbol such as a number, a character, or an image displayed on the input screen (in this specification, an image is also treated as one of the symbols). When the authentication method detects that the input button corresponding to the first symbol of the code string consisting of a plurality of symbols such as numbers, letters or images is touched, the screen switches to the next input screen, and the next input screen Then, an input button corresponding to the second symbol is arranged around the touched input button, and when the input button corresponding to the second symbol in the code string is sensed, the next input is detected. After switching to the screen, the above operation is repeated until the input button corresponding to the last symbol in the code string is touched.

  According to the personal authentication method of the present invention, the problems of password authentication and biometrics authentication can be solved at the same time, and the security in so-called “hand-held” authentication without a card can be ensured. The characteristics are greatly improved.

Schematic of ATM to which personal authentication method according to the present invention is applied Smartphone default (first layer) screen for carrying out the personal authentication method according to the present invention Second layer screen of the same smartphone The third layer screen of the smartphone Diagram showing the trajectory of a finger The same figure as FIG. 1 which shows another Example using a personal memory. Screen of the second layer of another embodiment shown in FIG.

  The best mode for carrying out the present invention will be described below with reference to the drawings. The personal authentication method according to the present invention includes, for example, a terminal 1 such as an ATM and an authentication unit 2 such as a bank server, and the terminal 1 and the authentication unit 2 are connected so as to be capable of bidirectional communication. 3 set portions 4 are provided.

  In this embodiment, the ATM does not have a monitor screen. By setting the smartphone 3 in the setting unit 4, the screen of the smartphone 3 becomes the monitor screen. In the present embodiment, it is assumed that the smartphone 3 has previously registered an individual identification number and a user name in a financial institution to be used. As a result, when the smartphone 3 is set in the setting unit 4, the authentication unit 2 specifies the user name from the individual identification number of the smartphone.

  Next, an example in which a user withdraws cash from, for example, an ATM using the personal authentication method according to the present invention will be described below with reference to FIGS.

  First, when the smartphone 3 is set in the setting unit 4, a default screen (first layer) shown in FIG. 2 is displayed. On this screen, numeric input buttons 5... 1 to 10 are displayed. Although the arrangement of the input buttons 5 is arbitrary, it is preferable that the input buttons 5 are gathered in the central portion so as to have as much space as possible.

  At the same time as the display of the default screen above, the authentication unit 2 has already identified the user name from the individual identification number of the smartphone, so "You are Mr. XX. Please enter your PIN. The numbers around will change, so please trace slowly. "

  For example, when the password string is “477”, the number 4 input button 5a is touched as shown in FIG. Then, as shown in FIG. 3, the second layer screen is displayed. On the second layer screen, the input buttons 5 other than the number 4 input button 5a are arranged so as to surround the number 4 input button 5a.

  Although the number of input buttons was 10 on the screen of the first layer, since 10 input buttons are arranged around 5a on the input button on the screen of the second layer, there are 11 input buttons in total. Become.

  Next, since the personal identification number string is “477”, as shown by the dotted line in FIG. 3, the finger is moved on the screen to the input button 5 b of the numeral 7. When the fingertip touches the input button 5b with the number 7, the screen is switched to the third layer screen. On the screen of the third layer, as shown in FIG. 4, the input buttons 5 other than 5b are arranged so as to surround the input buttons of the numeral 7 so as to surround the input buttons 5 of the numeral 7.

  Here, if the input button of number 6 is touched to the input button of number 7 instead of 5b, ten input buttons cannot be arranged around the input button of number 6 due to screen restrictions. In order to prevent such a situation from occurring, each layer information created and transmitted by the authentication unit 2 is arranged around the position of the numeric input button to be selected next when the input button is touched. A position where the input buttons are not removed from the screen.

  That is, when the smartphone 3 is set in the set unit 4, the authentication unit 2 knows the user name and password from the solid authentication number of the smartphone 3, so the arrangement of the input buttons is not completely random. Then, the position of the number input button to be selected next is set to a position where the input button group moves to the center of the screen by touching the input button, for example.

  Next, since the personal identification number string is “477”, as indicated by the dotted line in FIG. 4, the finger is moved on the screen from the number 7 input button 5b to the number 7 input button 5c. When the fingertip touches the input button 5c with the numeral 7, the password is confirmed, and the next screen for communication with the authentication unit 2 is displayed.

  FIG. 5 is a diagram showing the trajectory of the finger. In this embodiment, since the PIN number can be input in the manner of “one-stroke writing” in which the finger is moved along the screen, the operability is extremely simple. . In the embodiment, the personal identification number string is composed of three numbers, but it is arbitrary to increase the number of constituent numbers in order to increase security.

Instead of the input button representing the number, the input button 6 representing the personal memory shown in FIG. 6 may be used.
In this embodiment, four face photo input buttons 6 including a family face photo are displayed as the first layer screen, and when the family face photo input button 6a is selected, the input button 6a is shown in FIG. Three pet photo input buttons are displayed adjacent to, then the input button 6b representing the photo of his pet is touched in the following manner with intention and the above operation is repeated several times for the personal memory. In this way, personal authentication is performed.

  The above is an example of the implementation, and the present invention is not limited to the above configuration. For example, numeric input buttons and personal memory input buttons may be mixed, or a large number (10 or more) of input buttons may be arranged concentrically around one input button.

  The personal authentication method according to the present invention is not limited to cash withdrawals or deposits at ATMs, but can be replaced with all of the conventional password authentication and biometrics authentication such as entering and exiting buildings and rooms, and starting up computers. it can.

  DESCRIPTION OF SYMBOLS 1 ... Terminal, 2 ... Authentication part, 3 ... Smartphone, 4 ... Set part 5, 6, 5a, 5b, 5c, 6a, 6b ... Input button.

Claims (2)

A personal authentication method that sequentially touches an input button indicating a symbol such as a number, character, or image displayed on the input screen, and is used as the first symbol in a code string composed of a plurality of symbols such as a number, character, or image. When it is detected that the corresponding input button has been touched, the screen is switched to the next input screen, and the second input screen is centered around the touched input button so that a one-stroke input operation can be performed on the next input screen. When an input button corresponding to the symbol is placed and it is detected that the input button corresponding to the second symbol in the code string is touched, the screen is switched to the next input screen. input button corresponding to the third symbol in the periphery are arranged around the touched input button such is possible, password symbols thereafter the operation Input button corresponding to the last symbol is repeated until the touch, and an output device for displaying the input screen is created presentation layer for each input screen based on personal identification symbol string of users, the user of the The display layer is switched to display in accordance with the touch, and the display layer is created so that when the input button is touched, the next symbol to be touched is positioned closer to the center of the input screen. A personal authentication method characterized by the above. The personal authentication method according to claim 1, wherein the input screen is displayed on a smartphone .