JP5694027B2 - Authentication apparatus, method and program - Google Patents

Description

  The present application discloses an authentication apparatus, method, and program.

  Various authentication processes are performed when various services are provided via a communication line (see, for example, Patent Documents 1 and 2).

JP 2005-128820 A JP 2007-310678 A

  One of the methods for authenticating a user who has forgotten his / her password is to ask a specific question in which only the person knows the correct answer, and to make a determination according to whether the answer is correct. In this case, the correct answer to a specific question that is generally considered to be answered only by the person himself / herself may be easily obtained from the information of the cellular phone or notebook that has been found, and there is a risk that other persons may be mistakenly identified as the person. is there.

  In addition, as in Patent Document 1, when using a question with a known correct answer, even if personal information leaks from lost items, etc., it does not make sense for authentication, so the risk of falsely authenticating another person as a person is reduced. It is difficult to determine whether the correct answer is a known question or not.

  Accordingly, an object of the present application is to provide an authentication device, a method, and a program that can execute highly accurate authentication.

  In order to solve the above problem, in the present application, when an access from an unspecified user is detected, a plurality of questions are presented to the unspecified user, and a correct answer rate or a score of the unspecified user's answer to the plurality of questions And determining whether or not the unspecified user who has accessed is the specific user according to the degree of coincidence with the authentication correct answer rate or the score arbitrarily set in advance and stored in the storage means An authentication apparatus including a processing unit is disclosed.

  It becomes possible to perform highly accurate authentication.

It is a block diagram of an authentication device. It is a processing flowchart of a user registration process. It is the figure which showed an example of the question pattern setting screen. It is the figure which showed an example of the personal question registration screen (specialization). It is the figure which showed an example of the personal question sample selection screen. It is the figure which showed an example of the personal question registration screen (individual). It is the figure which showed an example of the question & correct answer confirmation screen (general). It is the figure which showed an example of the question & correct answer confirmation screen (specialization). It is the figure which showed an example of the question & correct answer confirmation screen (individual). It is an example of a table of question patterns. It is a processing flow figure of identity verification processing. It is a process outline figure of identity verification processing. It is an example of the screen of the problem sentence displayed by identity verification processing. It is an example of the screen of the scoring result displayed by the personal identification process. It is an example of the message screen of a determination result. It is a processing flow figure of a change notification process of a setting pattern. It is an example of the screen of a prior notice mail.

  Embodiments of the authentication apparatus, method, and program will be exemplarily described. The following embodiments are merely examples, and the technical scope of the authentication apparatus, method, and program disclosed in the present application is not limited to these.

<Configuration>
FIG. 1 is a configuration diagram of an authentication apparatus (hereinafter referred to as a server 1) according to the present embodiment. The server 1 includes a processor 2, a memory 3, a communication interface (communication I / F) 4, and a database 5. When the processor 2 executes a computer program loaded in the memory 3, an authentication process described later is executed. To do. A series of these processes is realized by the processor 2 cooperating with the memory 3, the communication I / F 4, and the database 5. The processor 2 is connected to the network 6 via the communication I / F 4 and can be accessed from various information terminals 7 used by the user.

<Processing flow>
Processing executed by the processor 2 of the server 1 will be described. The processor 2 roughly divides and executes three processes of “user registration process”, “person identification process”, and “setting pattern change notification process”. The processor 2 performs user authentication by executing these series of processes, but these processes may be executed in parallel with each other. Hereinafter, the series of processes executed by the processor 2 will be described in order from the user registration process.

  <User Registration Process> FIG. 2 is a process flow diagram of the user registration process executed by the processor 2. Hereinafter, the details of the user registration process executed by the processor 2 will be described with reference to the process flowchart of FIG.

  (Step S <b> 101) Upon receiving a user registration request from the user information terminal 7 via the network 6, the processor 2 transmits data of an ID registration screen for identifying the user to the information terminal 7. In this screen, a column for inputting personal information necessary for providing various services such as a user's name and address is provided. When the data in the input field input by the user is sent from the information terminal 7, the processor 2 stores this data in the memory 3.

  (Step S <b> 102) After accepting ID registration in step S <b> 102, the processor 2 transmits, to the information terminal 7, data on a screen for registering a transmission destination of answers and correct answer rates (or scores). In this screen, a column is provided for the user to input a destination e-mail address for which an answer example is requested to be sent. When the mail address data is sent from the information terminal 7, the processor 2 stores this data in the memory 3.

(Step S103) After accepting the registration of the mail address in Step S102, the processor 2 displays screen data of a “question pattern setting screen” (D101) for setting a combination of questions and an answer pattern as shown in FIG. Is transmitted to the information terminal 7. As shown in FIG. 3, the processor 2 transmits to the information terminal 7 screen data in which various items defining the question pattern such as the question change period, answer pattern, authentication correct answer rate (or score), and question field are arranged. To do.

  Here, the processor 2 performs authentication in the personal identification process described later based on the following concept. That is, the processor 2 issues a plurality of questions for identity verification in the identity verification process described later. Generally, it is an indispensable condition for obtaining authentication that all questions for identity verification are correct. The security level is improved by taking the idea that there is a reverse and making the answer including the wrong answer a condition for authentication. In addition, if the correct answer rate (or score) for authentication is uniformly defined among users, it is possible that someone who knows this will impersonate the person and give an answer containing an incorrect answer. Therefore, as shown in FIG. 3, the processor 2 allows the user to arbitrarily set the correct answer rate (or score) at the time of authentication on the setting screen. The correct answer rate (or score) at the time of authentication can be arbitrarily set by the user, but from the viewpoint of increasing the security level, for example, 50% or 60%, and any correct answer other than 0% and 100%. It is preferable to present a plurality of rate options and select one of them. In any case, the correct answer rate (or score) set here is 0% based on the assumption that the correct answer of all questions is an essential condition for obtaining authentication. Therefore, it may be set to an intermediate value between 100% and 100%, so that the user may be prompted to input the intermediate value together with the fact in the input field.

  (Step S104) In the setting screen (D101) of FIG. 3, the processor 2 inputs “1 (Yes)” in the entry field of “Addition of specialized field question self-registration question” and fills in “Addition of personal question question registration question” "1 (Yes)" is entered in the field or "1 (Yes)" is entered in the "Personal question additional registration" entry field and the "To Question & Correct Answer Confirmation" button has been pressed When the data is received from the information terminal 7, the following process for adding questions about individuals and specialized fields is executed.

  For example, in the setting screen (D101) of FIG. 3, the processor 2 has a button “To Question & Correct Answer Confirmation” in a state where “1 (Yes)” is entered in the entry field of “Addition of specialized field question self-registration question”. When the data indicating that the button has been pressed is received from the information terminal 7, screen data of a “personal question registration screen (specialized)” (D 102) as shown in FIG. 4 is transmitted to the information terminal 7. As shown in FIG. 4, this screen (D102) is provided with an input field for inputting a specialized field and genre, and an input field for inputting an individually created question and its answer. When the processor 2 receives data indicating that the “Add as question” button has been pressed from the information terminal 7, the processor 2 stores the data input in each input field in the memory 3. Information such as an email address may be hidden depending on the security level.

  Further, the processor 2, for example, in the setting screen (D101) of FIG. 3 with the “1 (Yes)” entered in the entry field of “Add Personal Question Question Registration Question”, the “To Question & Correct Answer Confirmation Screen” button When data indicating that is pressed is received from the information terminal 7, screen data of a “personal question sample selection screen” (D 103) as shown in FIG. 5 is transmitted to the information terminal 7. On this screen (D103), as shown in FIG. 5, standard problems relating to individuals are arranged. When the processor 2 receives data indicating that the “confirm” button has been pressed from the information terminal 7, the processor 2 stores a list of problems selected by the user in the memory 3.

Further, for example, the processor 2 presses the “To Question & Correct Answer Confirmation” button in a state where “1 (Yes)” is entered in the entry field of “Additional Registration of Personal Questions” on the setting screen (D101) of FIG. When data indicating that it has been received is received from the information terminal 7, screen data of a “personal question registration screen (individual)” (D 104) as shown in FIG. 6 is transmitted to the information terminal 7. In this screen (D104), as shown in FIG. 6, an input field for inputting the genre of the question content, an input field for inputting the question created by the individual and its answer, and the necessity of correct answering are set. An input field is provided. When the processor 2 receives data indicating that the “Add as question” button has been pressed from the information terminal 7, the processor 2 stores the data input in each input field in the memory 3.

  In addition, the display order of each said screen (D102-D104) displayed on the information terminal 7 after the "To question & correct answer confirmation screen" button is pushed on the setting screen (D101) of FIG. 3 is limited to said order. It can be changed as appropriate. Moreover, the said screen is an example and the display content can be changed suitably.

  (Step S105) Whether the processor 2 displays at least one of the above screens (D102 to D104) on the information terminal 7 when the “To Question & Correct Answer Confirmation” button is pressed on the setting screen (D101) of FIG. Alternatively, “2 (None)” is entered in the entry field of “Addition of specialized field problem self-registration question” on the setting screen (D101) of FIG. 3, and “2 ( No ") is entered, and" 2 (None) "is entered in the entry field of" Additional Personal Questionnaire ", and data indicating that the" To Question & Correct Answer Confirmation "button has been pressed is displayed on the information terminal 7 If it is received from, a process for confirming the question to be asked and its correct answer is executed.

  In this process, a screen for confirming a question to be asked and its correct answer is displayed on the information terminal 7 for each question field. For example, when “123 (general, specialized, individual)” is entered in the entry field of “question field” on the setting screen (D101) in FIG. 3, the processor 2 displays “question & correct answer” as shown in FIG. The screen data of “confirmation screen (general)” (D105) is transmitted to the information terminal 7. When the processor 2 receives the data indicating that the “confirm” button displayed on this screen (D105) has been pressed from the information terminal 7, the “question & correct answer confirmation screen (specialized) shown in FIG. ) "(D106) is transmitted to the information terminal 7. When the processor 2 receives the data indicating that the “confirm” button displayed on this screen (D106) has been pressed from the information terminal 7, the “question & correct answer confirmation screen (individual) shown in FIG. ) ”(D107) is transmitted to the information terminal 7.

  If, for example, “12 (general, specialized)” is entered in the entry field of “question field” on the setting screen (D101) in FIG. 3, only the screen data of D105 and D106 is transmitted to the information terminal 7. For example, when “13 (general, individual)” is input, only the screen data of D105 and D107 is transmitted to the information terminal 7, for example, “23 (special, individual)”. "Is input, only the screen data of D106 and D107 are transmitted to the information terminal 7.

  By the way, on the confirmation screens (D105 to D107), check boxes are provided for each genre name and each question, and the mark can be turned on and off by clicking on the check box. When the “confirm” button is pressed while the mark is on the confirmation screen, the question with the mark on is given in the personal identification process described later.

  (Step S106) The processor 2 completes the process of confirming the question to be asked and its correct answer for all fields input in the “question field” entry field on the setting screen (D101) in FIG. Data of a screen for selecting a message at the time of authentication displayed on the information terminal 7 in the personal identification process is transmitted to the information terminal 7. A number of default messages are displayed on this screen, and the user can select a message to be displayed on the information terminal 7 when the authentication is successful or the authentication is unsuccessful. When the data of the message selected by the user is sent from the information terminal 7, the processor 2 stores this data in the memory 3.

  (Step S <b> 107) The processor 2 registers the setting items stored in the memory 3 in the database 5 after completing the process of selecting a message to be displayed at the time of authentication.

The details of the user registration process executed by the processor 2 are as described above. The processor 2 executes the above-described series of processing (S101 to S107) for each user, whereby a question pattern table as shown in FIG. As is clear from FIG. 10, the question pattern table is composed of information on setting items entered in the input fields of the setting screen (D101).

  <Person Confirmation Processing> FIG. 11 is a process flow diagram of the identity confirmation processing executed by the processor 2. FIG. 12 is a process outline diagram of the identity verification process. Hereinafter, details of the identity verification process executed by the processor 2 will be described with reference to the process flow diagram of FIG. 11 and the process outline diagram of FIG.

  (Step S <b> 201) When the processor 2 receives a request for identity verification from the user information terminal 7 via the network 6, the processor 2 transmits data of an ID input screen for identifying the user to the information terminal 7. In this screen, a column for inputting an ID for identifying a user is provided. When the data in the input field input by the user is sent from the information terminal 7, the processor 2 compares this data with the information in the database 5.

  (Step S202) The processor 2 reads the user setting information that matches the ID sent from the information terminal 7 from the database 5, and executes question selection and editing processing based on this. That is, the processor 2 searches the database 5 for information on the combination pattern of questions set for the user. After extracting the question combination pattern, the processor 2 extracts from the database 5 the content of the question and the model answer that match the combination pattern, and generates screen data describing the question text of the extracted question.

  (Step S203) After the generation of the screen data describing the question text of the question is completed, the processor 2 transmits the screen data of the question text to the information terminal 7 together with the data of the opening screen and the scoring confirmation screen. On the information terminal 7 that has received the screen data, an opening screen as shown in FIG. 13A is displayed, and then a question sentence screen as shown in FIG. 13B is displayed. On the question sentence screen, as shown in FIG. 13B, a field for inputting an answer is provided. When the user inputs answers to all the questions, a screen for confirming whether or not scoring is possible is displayed on the screen of the information terminal 7 as shown in FIG. When the user presses the “scoring” button displayed on this screen, the answer column data is transmitted from the information terminal 7 to the server 1.

  (Step S204) On the server 1 side, the processor 2 performs a scoring process by comparing the data of the model answer extracted from the database 5 in step S202 with the data of the answer column transmitted from the information terminal 7, and the scoring result screen Data is sent to the information terminal 7.

  Here, if all questions are correct, a scoring result screen as shown in FIG. 14A is displayed on the information terminal 7 together with a message that praises the user and a button indicating whether or not to start authentication. If it is a partial correct answer, a scoring result screen as shown in FIG. 14B is displayed on the information terminal 7 together with a button indicating whether or not to start authentication and a button for accepting a request for re-answer. When the “Send” button is pressed, a message to that effect is sent from the information terminal 7 to the server 1.

  (Step S <b> 205) The processor 2 accesses the database 5 after receiving a notification of authentication start from the information terminal 7, and whether or not the calculated scoring result matches the authentication correct answer rate (or score) set for the user. Determine whether.

(Step S206) If the scoring result matches the authentication correct answer rate (or score) set in the database 5, the processor 2 determines that the user who has accessed from the information terminal 7 is the person himself / herself. On the other hand, if the scoring result does not match the authentication correct answer rate (or score) set in the database 5, the processor 2 determines that the user who has accessed from the information terminal 7 is not the person himself / herself.

  The processor 2 accesses the database 5, extracts message data corresponding to the determination result, and transmits message data related to the authentication result to the information terminal 7. For example, when it is determined that the user who has accessed from the information terminal 7 is not the user, the server 1 transmits screen data describing a message indicating that authentication cannot be performed to the information terminal 7 as illustrated in FIG. To do. On the other hand, if it is determined that the user who has accessed from the information terminal 7 is the user, the server 1 transmits screen data describing a message indicating that authentication has been performed to the information terminal 7 as shown in FIG. To do.

  The details of the personal identification process executed by the processor 2 are as described above. By executing the above-described series of processing (S201 to S206) by the processor 2, in general, it is considered that it is an indispensable condition for obtaining authentication that all questions are correct. The improved security level is realized.

  <Setting Pattern Change Notification Process> FIG. 16 is a process flow diagram of the setting pattern change notification process executed by the processor 2. The details of the setting pattern change notification process executed by the processor 2 will be described below with reference to the process flowchart of FIG.

  (Step S301) The processor 2 compares the internal clock of the server 1 with the question change period of each user stored in the database 5, and determines whether or not it is the timing to change the set question combination pattern. Make a decision.

  (Step S302) When the processor 2 detects that it is time to change the combination pattern of the set questions, the processor 2 executes the same process as in the above-described step S103. That is, when the processor 2 detects that it is the timing to change the set question combination pattern, the “question pattern” for setting the question combination and answer pattern is set for the information terminal 7 of the corresponding user. The screen data of “setting screen” (D101) is transmitted.

  Here, the processor 2 inputs “1 (Yes)” in the entry field of “Addition of specialized field problem self-registration question” on the setting screen (D101) of FIG. “1 (Yes)” is entered in the field, or “1 (Yes)” is entered in the “Personal question additional registration” entry field, and data indicating that the “To question & correct answer confirmation screen” button has been pressed. Is received from the information terminal 7, the process of adding questions for individuals and specialized fields is executed as in the process of step S <b> 104 described above.

  (Step S303) The processor 2 causes the information terminal 7 to display at least one of the screens (D102 to D104) by pressing the “go to question & correct answer confirmation screen” button on the setting screen (D101) in FIG. In the setting screen (D101) of FIG. 3, “2 (None)” is entered in the entry field of “Addition of specialized field question self-registration question”, and “2 (Not)” is entered in the entry field of “Addition of personal question question registration question”. ”And“ 2 (None) ”is entered in the“ Personal question additional registration ”entry field, and data indicating that the“ To question and correct answer screen ”button has been pressed is received from the information terminal 7. Then, similarly to the process of step S105 described above, a process for confirming the question to be asked and its correct answer is executed. That is, a question to be asked and data of a screen for confirming the correct answer are transmitted to the information terminal 7 for each question field.

  Details of the setting pattern change notification processing executed by the processor 2 are as described above. Since the processor 2 executes the above-described series of processing (S301 to S303) for each user, the combination pattern of questions is periodically changed, so that a high security level is maintained.

  In addition, about the correct answer of the question displayed on the information terminal 7 in the process of the said step S105, and the correct answer rate (or score) at the time of the set authentication, for example, on the screen of a prior notice mail as shown in FIG. You may make it notify to the information terminal 7 separately. Further, the question pattern may be appropriately changed on the server 1 side, and only the answer example may be notified to the user.

  Moreover, in the said embodiment, although the user set the question himself, for example, only the example of an answer that gives an arbitrary correct answer rate (or score) is notified to the user, and the user who is the person himself / herself May input an answer example notified in advance. In this case, since the questions themselves are all dummy, these questions are appropriately created on the server 1 side, for example. As answers to questions, for example, although there are only three question options, the answers to questions may not necessarily match, such as “5” as the correct answer.

  In the above embodiment, the server 1 that has received access from the information terminal 7 executes a series of authentication processes. However, the information terminal 7 has the same configuration as the server 1 and the information terminal 7 When receiving access from the user, the information terminal 7 may present a plurality of questions to the user and execute the above-described series of authentication processes to determine whether the user can access the information terminal 7. The information terminal 7 can be exemplified by a mobile phone, a personal computer, and any other information display device.

<Computer-readable recording medium>
A program for causing a computer or other machine or device (hereinafter, a computer or the like) to realize any of the above functions can be recorded on a recording medium that can be read by the computer or the like. The function can be provided by causing a computer or the like to read and execute the program of the recording medium.

  Here, a computer-readable recording medium is a recording medium that stores information such as data and programs by electrical, magnetic, optical, mechanical, or chemical action and can be read from a computer or the like. Say. Examples of such a recording medium that can be removed from a computer or the like include a flexible disk, a magneto-optical disk, a CD-ROM, a CD-R / W, a DVD, a Blu-ray disk, a DAT, an 8 mm tape, a flash memory, and the like. There are cards. In addition, as a recording medium fixed to a computer or the like, there are a hard disk, a ROM (read only memory), and the like.

The present application includes the following supplementary matters.
(Appendix 1)
When an access from an unspecified user is detected, a plurality of questions are presented to the unspecified user, and a correct answer rate or a score of the unspecified user's answer to the plurality of questions is arbitrarily set in advance and stored. A processing unit that determines whether or not the unspecified user who has accessed is the specific user according to a degree of coincidence with a correct answer rate or a score for authentication stored in
Authentication device.
(Appendix 2)
When the processing unit detects an access from an unspecified user, the specific user presents the plurality of questions whose contents are arbitrarily set in advance to the unspecified user, and the unspecified user with respect to the plurality of questions Whether or not the unspecified user who has accessed is the specific user according to the degree of coincidence between the correct answer rate or score of the user's answer and the correct answer rate or score for authentication stored in the storage means To determine,
The authentication device according to attachment 1.
(Appendix 3)
When the specific user arbitrarily sets the correct answer rate or score for authentication, the processing unit stores the correct answer rate or score for authentication in the storage unit, and sets and sets the contents of the plurality of questions. In addition, the correct answer rate for the authentication or an example of the answer to be scored is presented to the specific user.
The authentication device according to appendix 1 or 2.
(Appendix 4)
When an access from an unspecified user is detected, a plurality of questions are presented to the unspecified user, and a correct answer rate or a score of the unspecified user's answer to the plurality of questions is arbitrarily set in advance and stored. Determining whether or not the unspecified user who has accessed is the specific user according to the degree of coincidence with the correct answer rate or score for authentication stored in
Authentication method.
(Appendix 5)
When an access from an unspecified user is detected, the specific user presents the plurality of questions arbitrarily set in advance to the unspecified user, and correct answers of the unspecified user's answers to the plurality of questions Determining whether or not the unspecified user who has accessed is the specific user according to the degree of coincidence between the rate or score and the correct answer rate or score for authentication stored in the storage means;
The authentication method according to attachment 4.
(Appendix 6)
When the specific user arbitrarily sets the authentication correct answer rate or score, the authentication correct answer rate or score is stored in the storage means, and the contents of the plurality of questions and the set authentication value are stored. Presenting an example of a correct answer rate or a score to the specific user,
The authentication method according to appendix 4 or 5.
(Appendix 7)
When an access from an unspecified user is detected, a plurality of questions are presented to the unspecified user, and a correct answer rate or a score of the unspecified user's answer to the plurality of questions is arbitrarily set in advance and stored. According to the correct answer rate for authentication or the degree of coincidence with the score, the computer is caused to execute a process of determining whether or not the unspecified user who has accessed is the specific user.
Authentication program.
(Appendix 8)
When an access from an unspecified user is detected, the specific user presents the plurality of questions arbitrarily set in advance to the unspecified user, and correct answers of the unspecified user's answers to the plurality of questions Determining whether or not the unspecified user who has accessed is the specific user according to the degree of coincidence between the rate or score and the correct answer rate or score for authentication stored in the storage means;
The authentication program according to appendix 7.
(Appendix 9)
When the specific user arbitrarily sets the authentication correct answer rate or score, the authentication correct answer rate or score is stored in the storage means, and the contents of the plurality of questions and the set authentication value are stored. Presenting an example of a correct answer rate or a score to the specific user,
The authentication program according to appendix 7 or 8.

1..Server, 2..Processor, 3..Memory, 4..Communication I / F, 5..Database, 6..Network, 7..Information terminal

Claims (4)

When an access from an unspecified user is detected, a plurality of questions are presented to the unspecified user, and a correct answer rate or a score of the unspecified user's answer to the plurality of questions is arbitrarily set in advance and stored. depending on the degree of coincidence between the percentage of correct answers or the score for authentication is stored, accessed and the have unspecified users includes a processing unit that determines whether a user's specific to,
When the specific user arbitrarily sets the correct answer rate or score for authentication, the processing unit stores the correct answer rate or score for authentication in the storage unit, and sets and sets the contents of the plurality of questions. In addition, the correct answer rate for the authentication or an example of the answer to be scored is presented to the specific user.
Authentication device. When the processing unit detects an access from an unspecified user, the specific user presents the plurality of questions whose contents are arbitrarily set in advance to the unspecified user, and the unspecified user with respect to the plurality of questions Whether or not the unspecified user who has accessed is the specific user according to the degree of coincidence between the correct answer rate or score of the user's answer and the correct answer rate or score for authentication stored in the storage means To determine,
The authentication device according to claim 1. Computer
When an access from an unspecified user is detected, a plurality of questions are presented to the unspecified user, and a correct answer rate or a score of the unspecified user's answer to the plurality of questions is arbitrarily set in advance and stored. depending on the degree of coincidence between the percentage of correct answers or the score for authentication is stored, it determines whether the unspecified user who has access is the specific user,
When the specific user arbitrarily sets the authentication correct answer rate or score, the authentication correct answer rate or score is stored in the storage means, and the contents of the plurality of questions and the set authentication value are stored. Presenting an example of a correct answer rate or a score to the specific user,
Authentication method. When an access from an unspecified user is detected, a plurality of questions are presented to the unspecified user, and a correct answer rate or a score of the unspecified user's answer to the plurality of questions is arbitrarily set in advance and stored. and depending on the degree of coincidence between the percentage of correct answers or the score for authentication is stored, accessed and the unspecified users have is determined whether or not the a specific user, the
When the specific user arbitrarily sets the authentication correct answer rate or score, the authentication correct answer rate or score is stored in the storage means, and the contents of the plurality of questions and the set authentication value are stored. An authentication program for causing a computer to execute a process of presenting an example of an answer to be a correct answer rate or a score to the specific user .

Images