JP5705165B2 - INPUT INFORMATION AUTHENTICATION DEVICE, SERVER DEVICE, INPUT INFORMATION AUTHENTICATION SYSTEM, AND DEVICE PROGRAM - Google Patents

Description

  The present invention relates to an input information authentication device, a server device, an input information authentication system, and a program for the device for receiving an input operation for authentication and performing authentication based on the input content and registered information registered in advance.

  For example, as a countermeasure against the fact that pre-registered registration information such as a security code is stolen during authentication input operations, the viewing angle of the display screen is narrowed or the entered number is displayed with an “*” mark or the like. It is common practice to indicate only the number of digits.

  In addition, as a PIN code input device that allows a user to input a PIN code using a numeric keypad from a terminal such as a financial automatic machine (ATM), an input numeric keypad screen and a fake input numeric keypad screen are displayed. In some cases, the password is prevented from being stolen even when the movement of the input hand is seen by being inserted (see, for example, Patent Document 1).

Japanese Patent No. 2985888

  However, the above-described conventional technology for preventing snooping such as Patent Document 1 assumes that a third party is located at some distance away, such as a financial automatic machine (ATM), for example. It wasn't even taken into account even when it was seen from a distance by a third party. That is, information indicating whether the user wants to input a dummy number or a password is presented on a fake input numeric keypad. For this reason, for example, when the input screen itself is viewed as well as the movement of the input user's hand, such as over the shoulder of the input user or a hidden camera, which input is dummy There is a risk that the password will be identified and the password will be known.

  The present invention has been made in view of such a situation, and even when a hand and an input screen are viewed from a third party during an input operation for authentication, it is difficult to infer an input content that is OK for authentication. It is an object of the present invention to provide an input information authentication device, a server device, an input information authentication system, and a device program.

In order to achieve such an object, the input information authentication apparatus according to the present invention satisfies a predetermined authentication condition for registration information in which information corresponding to an operated key of an input unit having a plurality of keys is registered in advance. An input information authentication device that performs authentication based on whether or not
Group configuration information in which a plurality of registered key top information is associated as a group is stored as registration information,
When the key top information arranged in each key of the input means in the combination of the key top information associated as one group by the group configuration information is divided into a plurality of states, the state among the divided states The authentication condition is satisfied if key input is performed for all of the key top information in a state where the key top information contained in is the smallest.

Further, the server device according to the present invention is a server device used by being connected to the input information authentication device by wire, wireless, or a combination thereof,
The input information authentication device includes an input unit having a plurality of keys,
Server device
Authentication is performed based on whether or not the information corresponding to the operated key of the input means satisfies a predetermined authentication condition with respect to registered information registered in advance,
Group configuration information in which a plurality of registered key top information is associated as a group is stored as registration information,
When the key top information arranged in each key of the input means in the combination of the key top information associated as one group by the group configuration information is divided into a plurality of states, the state among the divided states If the key input is performed from the input means for all of the key top information in the state where the key top information is the least, the authentication condition is satisfied.

The input information authentication system according to the present invention is an input information authentication system configured by connecting an input information authentication device and a server device by wire, wireless, or a combination thereof,
The input information authentication device includes an input unit having a plurality of keys,
Server device
Authentication is performed based on whether or not the information corresponding to the operated key of the input means satisfies a predetermined authentication condition with respect to registered information registered in advance,
Group configuration information in which a plurality of registered key top information is associated as a group is stored as registration information,
When the key top information arranged in each key of the input means in the combination of the key top information associated as one group by the group configuration information is divided into a plurality of states, the state among the divided states If the key input is performed from the input means for all of the key top information in the state where the key top information is the least, the authentication condition is satisfied.

Further, the program of the input information authentication apparatus according to the present invention is based on whether or not the information corresponding to the operated key of the input means having a plurality of keys satisfies a predetermined authentication condition for the registered information registered in advance. A program of an input information authentication device that performs authentication,
Group configuration information in which a plurality of registered key top information is associated as a group is stored as registration information in the input information authentication device,
On the computer,
When the key top information arranged in each key of the input means in the combination of the key top information associated as one group by the group configuration information is divided into a plurality of states, the state among the divided states If the key input is performed for all of the key top information in the state where the key top information included in is the smallest, the authentication procedure is executed as satisfying the authentication condition.

  As described above, according to the present invention, even when a hand and an input screen are viewed from a third party at the time of an input operation for authentication, it is possible to make it difficult to analogize an input content that is OK for authentication. .

It is a block diagram which shows the structural example of the input information authentication apparatus 100 as the 1st Embodiment of this invention. It is a figure which shows the example of a touch keyboard as 1st Embodiment, and the arrangement | positioning state of each group. It is a flowchart which shows the operation example of the input information authentication apparatus 100 as 1st Embodiment. It is a figure which shows the other touch keyboard example in 1st Embodiment. It is a block diagram which shows the structural example of the input information authentication system as 2nd Embodiment. It is a flowchart which shows the operation example of the input information authentication system as 2nd Embodiment. It is a block diagram which shows the structural example of the input information authentication apparatus 100 as 3rd Embodiment. It is a flowchart which shows the operation example at the time of registration of the group structure information in 3rd Embodiment. It is a flowchart which shows the operation example of the input information authentication apparatus 100 as 3rd Embodiment.

  Next, an embodiment to which an input information authentication apparatus, a server apparatus, an input information authentication system, and an apparatus program according to the present invention are applied will be described in detail with reference to the drawings.

First, an outline common to each embodiment of the present invention described below will be described.
In the embodiment of the present invention, a plurality of key top information is associated with each other and registered in advance. A plurality of groups may be registered, or one group. When one key in the same group is displayed in a different state during the input operation for authentication, the key that should be input to make the authentication OK is the key in the different state. It becomes. Then, the input information authentication apparatus performs authentication based on whether or not all of the keys in different states have been input.

  As described above, in the embodiment of the present invention, the key to be input for the authentication OK changes depending on the arrangement pattern (display pattern) of the key top information. For this reason, even if a third party sees the input and the display screen at the time of input, a third party who does not know what and what key top information is associated as a group will be authenticated. It is possible to make it difficult to guess the key to be input for OK.

[First Embodiment]
Next, a first embodiment of the present invention will be described.
In each embodiment described below, the case where the key top information assigned to each key of the touch keyboard is a number will be described. However, the key top information is not limited to a number, and may be an image or a character.

  As shown in FIG. 1, the input information authentication device 100 according to the first embodiment includes a display input unit 110 such as a touch panel display, a display input control unit 120, a display pattern generation unit 121, a registration unit 122, The authentication unit 123 is configured to determine whether or not the input code string input satisfies a predetermined authentication condition, and a storage unit 130 that stores registered group configuration information and the like.

  The display input unit 110 displays a plurality of keys as a touch keyboard on the screen and detects a contact position on the front screen. In addition, a start button for starting the authentication operation by the authentication unit 123 is displayed.

  The display input control unit 120 inputs to any of a plurality of displayed keys based on the display control of the input key displayed on the display input unit 110 or the position information of the contact position by the operation input to the display input unit 110. The control which receives as an input signal is performed.

  The registration unit 122 receives a registration input of group configuration information in which a plurality of key top information is associated as a group from the user for each group, and causes the storage unit 130 to store it.

  The display pattern generation unit 121 generates a display pattern that is an arrangement pattern of key top information assigned to each key in the touch keyboard displayed on the display input unit 110. The display pattern generation by the display pattern generation unit 121 is to perform an input operation for authentication with the touch keyboard of the display input unit 110, and after the authentication is OK, to start the input operation for authentication next. This is done every time the input screen is displayed.

  Further, in the display pattern generation by the display pattern generation unit 121, the arrangement of the key top information for each key is generated so as to be different from the previous display pattern. Further, according to the group configuration information registered by the registration unit 122, a display pattern is generated so that one input key for satisfying the authentication condition is included or not included in each group as described later.

  Therefore, when the group configuration information is registered by the user under the control of the registration unit 122, the display pattern generation unit 121 displays a predetermined number (for example, 30) that is set in advance according to the registered group configuration information. Generate a pattern. When a display pattern is generated at the time of an input operation for authentication, a pattern different from the previous display pattern is randomly selected from a predetermined number of display patterns generated in advance using a random number or the like.

  When the start button of the display input unit 110 is pressed, the authentication unit 123 determines whether the input code string based on the input key top information satisfies the authentication condition based on the group configuration information registered by the registration unit 122 Judgment is made.

  FIG. 2 shows an example of group configuration information registered by the registration unit 122 and examples of display patterns generated by the display pattern generation unit 121. In the present embodiment, an example will be described in which a display pattern displayed as a touch keyboard is configured by assigning each key top information to a 3 × 3 matrix arrangement.

As shown in FIG. 2, in each display pattern generated by the display pattern generation unit 121, a group having three or more key top information included in the display pattern among the key top information registered as each group. When the key top information included in the display pattern in the group is divided into two states depending on the positional relationship, only one key top information is in a different state from the other. Or all the key top information contained in the display pattern in a group is made into the same positional relationship.
In the example of FIG. 2, the two states divided by the positional relationship are states that are arranged in a positional relationship adjacent to each other in the vertical and horizontal directions with other key top information registered as the same group. It is.

  For this reason, among the key top information registered as each group, for a group having three or more key top information included in the display pattern, one key among the key top information included in the display pattern in the group is displayed. In addition to the top information, there are other keys in the same group that are adjacent in the vertical and horizontal directions. Alternatively, all key top information included in the display pattern in the group is in a state in which there are other keys adjacent in the vertical and horizontal directions in the group.

  In this way, when all of the key top information that is in a different state in the group has been key-input when the start button of the display input unit 110 is pressed, the authentication unit 123 satisfies the authentication condition. judge.

Next, the case of the display pattern example of FIG. 2 will be specifically described. In the example of FIG. 2, the group configuration information of each group registered by the registration unit 122 is
“Group 1”: Key top information “01”, “02”, “03”, “04”...
“Group 2”: Key top information “11”, “12”, “13”, “14”...
“Group 3”: Key top information “21”, “22”, “23”, “24”...
“Group 4”: Key top information “31”, “32”, “33”, “34”...
It explains as being.

  In the display pattern example shown in FIG. 2A, for the key top information “01”, “02”, and “04” registered as “group 1”, the same key registered as “group 1” Among the top information, there is key top information which is a positional relationship adjacent to each other in the vertical and horizontal directions. On the other hand, for the key top information “03” registered as “Group 1”, the key tops that are adjacent to each other in the vertical and horizontal directions in the same key top information registered as “Group 1”. Information does not exist. Therefore, the key top information to be input for “group 1” in order to satisfy the authentication condition is “03”.

  Further, in the display pattern example shown in FIG. 2A, the key top information “12”, “13”, and “14” registered as “Group 2” are registered as the same “Group 2”. Among the key top information, there is key top information which is a positional relationship adjacent in the vertical and horizontal directions. On the other hand, for the key top information “11” registered as “Group 2”, among the key top information registered as “Group 2”, the key tops that are adjacent to each other in the vertical and horizontal directions. Information does not exist. Therefore, the key top information to be input for “group 2” in order to satisfy the authentication condition is “11”.

  In the example of the display pattern shown in FIG. 2A, the key top information registered as “group 3” is only “22”. For this reason, the key top information registered as “Group 3” includes less than three key top information included in the display pattern, and there is no key top information in which the positional relationship is different from the others in the same group. I don't get it. For this reason, there is no key top information to be input for “Group 3” in order to satisfy the authentication condition.

  For this reason, in order to perform key input satisfying the authentication condition with respect to the display pattern example shown in FIG. 2A and make authentication OK, the user inputs key top information “03” and “11”, Key in the start button.

  In addition, when the authentication is OK by the key input for authentication in this way, a display pattern different from the previous one is generated by the display pattern generation unit 121 at the time of the input operation for the next authentication, and the generated display pattern is displayed. A touch keyboard is displayed on the input unit 110.

FIG. 2B shows a display pattern example different from the case of FIG.
In the example of the display pattern shown in FIG. 2B, the key top information “02” and “03” registered as “group 1” is the same as the key top information registered as “group 1”. Thus, there is key top information which is a positional relationship adjacent in the vertical and horizontal directions. On the other hand, for the key top information “01” registered as “Group 1”, among the key top information registered as the same “Group 1”, the key tops that are adjacent to each other in the vertical and horizontal directions. Information does not exist. Therefore, the key top information to be input for “group 1” in order to satisfy the authentication condition is “01”.

  Further, in the display pattern example shown in FIG. 2B, for the key top information “12” and “14” registered as “Group 2”, the key top information registered as “Group 2” is the same. Among them, there is key top information which is a positional relationship adjacent to each other in the vertical and horizontal directions. On the other hand, for the key top information “13” registered as “Group 2”, the key tops that are adjacent to each other in the vertical and horizontal directions in the same key top information registered as “Group 2”. Information does not exist. Therefore, the key top information to be input for “group 2” in order to satisfy the authentication condition is “13”.

  In the display pattern example shown in FIG. 2B, the key top information “21”, “22”, and “23” registered as “Group 3” are registered as the same “Group 3”. Among the key top information, there is key top information which is a positional relationship adjacent in the vertical and horizontal directions. That is, there is no key top information in which the positional relationship is different from the others in the same group. For this reason, there is no key top information to be input for “Group 3” in order to satisfy the authentication condition.

  For this reason, in order to perform key input satisfying the authentication condition with respect to the display pattern example shown in FIG. 2B and to make authentication OK, the user inputs key top information “01” and “13”, Key in the start button.

As described above, in the present embodiment, even if the group configuration information of each group registered by the registration unit 122 is the same, the key to be input for authentication OK differs depending on the display pattern.
Further, after the authentication is successful, the display pattern generation unit 121 generates a different display pattern as described above when performing an input operation for authentication next time.

  Here, when a user is performing an input operation for authentication, for example, from a close distance such as over the shoulder of the user, the operation of the hand inputting the key and the input screen have been seen by a third party. To do. Furthermore, after that, it is assumed that the input information authentication device 100 of this embodiment has been obtained by the third party.

  According to the input information authentication device 100 of the present embodiment, even if the third party tries to input the same key as the one who has seen the input information authentication device 100 of the present embodiment, the display pattern is different. Therefore, it cannot be set as authentication OK.

The security for the replay attack in this embodiment will be described with reference to the example of FIG.
For example, after a user inputs a key for authentication with the display pattern in FIG. 2A and sets the authentication OK, a third party who steals the operation and input screen of the hand inputting the key performs authentication. Assume that the display pattern of FIG. 2B is displayed when an attempt is made to input a key for the purpose.

  In this case, the third party can input the same key top information “03” and “11” that he / she saw in the input information authentication apparatus 100 of the present embodiment as a key, and the display pattern shown in FIG. Then, the key top information “11” is not displayed. For this reason, it is impossible to input a key with the same key top information as the one who has seen it.

  Further, when the third party inputs a key for authentication to the input information authenticating apparatus 100 of the present embodiment at the same key location as that seen earlier, the input key in the display pattern of FIG. Is key top information “01”, “22”. As for the “group 3” of the key top information “22” in the display pattern of FIG. 2B, there is no key top information in which the positional relationship is different from the others in the same group as described above. 123 does not satisfy the authentication condition, and the authentication is NG.

  As described above, even if a third party steals the hand operation and the input screen in the key input operation for authentication OK, and then tries to perform the key input with the same key top information and key location, the display pattern Are different from each other. Therefore, the authentication contents cannot be accepted with the input contents that have been stolen. Thus, even when the operation of the hand inputting the key and the input screen are seen, it is possible to realize high security without knowing the input content to be authenticated.

Further, once the key input for authentication becomes NG, the wait time for input may be doubled at the next input. Alternatively, the wait time may be increased exponentially every time the authentication is NG. Alternatively, the authentication screen may be locked when the authentication NG continues for a predetermined number of times.
With such a configuration, it is possible to secure a sufficient security strength that can surely defend against a powerful attack such as inputting a pattern that can be inferred by brute force.

Here, as described above, when the group configuration information is registered, the display pattern generation unit 121 generates a predetermined number of display patterns set in advance according to the registered group configuration information.
As a display pattern generation method by the display pattern generation unit 121, key placement information to be assigned to each group is determined in advance for a predetermined number of display patterns, and the registered key top information of each group is assigned to each placement location. By assigning them to a predetermined number, it is possible to generate a predetermined number of display patterns when the group configuration information is registered.

  For example, in the display pattern example shown in FIG. 2A, the arrangement locations of the key top information registered as “Group 1” are the four locations shown in FIG. 2A and the key top information registered as “Group 2”. There are four places shown in FIG. 2A, and one place where the key top information registered as “group 3” is shown in FIG. 2A. A predetermined number of template patterns that determine the allocation of arrangement locations for each group are stored. By assigning the key top information of each group thus registered to the arrangement location assigned to each group in each stored pattern of patterns, the display pattern generation unit 121 is registered when the group configuration information is registered. Generates a predetermined number of display patterns.

  Next, an operation example of the input information authentication apparatus 100 as the first embodiment will be described with reference to the flowchart of FIG. In the operation of the present embodiment described below, it is assumed that registration input by the user is performed in advance for the group configuration information and stored in the storage unit 130 by the registration unit 122.

First, the display pattern generation unit 121 generates a display pattern used for an input operation for authentication, and the display input control unit 120 displays it on a touch panel display as the display input unit 110 (step S1). In the generation of the display pattern by the display pattern generation unit 121, the display pattern used for the input operation for the current authentication is generated by selecting from the predetermined number of display patterns generated in advance as described above.
Then, key input by the user is received until the start button is pressed (steps S2 and S3).

When the start button is pressed in this way, the authentication unit 123 includes a group configuration in which an input code string based on input contents that are key-input between the start of the input operation for authentication and the start button is registered in advance. Whether or not the authentication condition based on the information is satisfied is determined as described above (step S4). That is, in the display pattern, it is determined whether or not all key top information that is in a different state from the other in the group is key-input.
The authentication unit 123 sets authentication OK when it is determined that the authentication condition is satisfied, and authentication NG otherwise.

As described above, in the embodiment of the present invention described above, after authentication is OK, when the next input for authentication is performed, a combination different from the display pattern used when authentication was previously performed is different. The display pattern generation unit 121 generates it.
Therefore, as described above with reference to FIG. 2, even if an attempt is made to input the same key input string the next time the key input is authenticated, the input cannot be performed because the same key top information is not displayed. The authentication result is NG.

In this way, even if the group configuration information registered and input is the same, the key input content for authentication OK changes each time it is input even if it functions as a one-time password. Further, there is no feature that a key at a specific location on the touch keyboard corresponds to the key input content for making the authentication OK.
For this reason, sufficiently high security can be ensured as a countermeasure against a case where the input hand movement and the display screen are stolen from a third party. Furthermore, sufficient security strength can be secured against replay attacks such as repeated retries.

  However, the user inputs all the key top information that is different from the other one in the group based on the group configuration information of each registered group from the displayed touch keyboard display pattern. It can be operated with a simple hassle. As described above, the high security as described above can be realized without impairing the convenience of the user.

  In the case of authentication OK, a display pattern is generated so as to have a different pattern at the time of input operation for the next authentication, and at the time of authentication NG, the display pattern is left as it is at the time of input operation for the next authentication. It is said. For this reason, the probability that the display pattern displayed as a touch keyboard coincides by chance can be made zero, and higher security can be realized.

  In particular, when the input information authentication device 100 of the present embodiment is a touch panel type portable information terminal, it is possible to perform an input operation for authentication in a train or in a crowded area. May be seen by a third party from a close distance, such as over the shoulder and display screen. In this way, even when the user is performing an input operation for authentication and when the display screen is viewed, it is difficult to analogize the input content that is an authentication OK from the viewed information. The input information authentication device can be excellent.

Also, especially for beginners and elderly people, it is conceivable that the speed of key input is very slow even during an input operation for authentication. Accordingly, when viewed by a third party, hand movements and display screens may be easily stored.
According to the above-described embodiment, even in such a case, sufficiently high security can be ensured as described above.

[Other operation examples in the first embodiment]
Next, another operation example in the first embodiment described above will be described.

  In the first embodiment described above, the key top information that is different from the other one in the same group in the display pattern is displayed in the positional relationship adjacent to each other in the vertical and horizontal directions in the same group as described above with reference to FIG. Depending on whether or not key top information exists, the state is different from others. The state different from the other in the present embodiment is not limited to the state division by this positional relationship, and may be a state different from the other depending on, for example, whether there is key top information in a positional relationship adjacent in the up / down / left / right and diagonal directions. Good.

  Moreover, the structure which makes it different from others may be sufficient depending on whether the display state of the key in a touch keyboard is the same. The example of FIG. 4 shows a case where each key on the touch keyboard is divided into a colored key and a white key.

  As shown in FIG. 4, in each display pattern generated by the display pattern generation unit 121, a group having three or more key top information included in the display pattern among the key top information registered as each group. When the key top information included in the display pattern in the group is divided into two states depending on the display color, only one key top information has a display color different from the other. Alternatively, all of the key top information included in the display pattern in the group has the same display color.

  For this reason, among the key top information registered as each group, for a group having three or more key top information included in the display pattern, one key among the key top information included in the display pattern in the group is displayed. Other than the top information, the same display color is used in the same group. Alternatively, all key top information included in the display pattern in the group is set to the same display color in the group.

  In this way, when all the key top information having a different display color in the same group has been key-input when the start button of the display input unit 110 is pressed, the authentication unit 123 satisfies the authentication condition. Is determined.

  Next, the case of the display pattern example of FIG. 4 will be specifically described. The group configuration information of each group is the same as in the example of FIG.

  In the example of the display pattern shown in FIG. 4A, the key top information “02”, “03”, and “04” registered as “Group 1” are displayed as the same colored key. On the other hand, “01” of the key top information registered as “Group 1” is displayed as a white key. Therefore, the key top information to be input for “group 1” in order to satisfy the authentication condition is “01”.

  In the display pattern example shown in FIG. 4A, the key top information “12”, “13”, and “14” registered as “group 2” are displayed as the same white key. On the other hand, “11” of the key top information registered as “Group 2” is displayed as a coloring key. Therefore, the key top information to be input for “group 2” in order to satisfy the authentication condition is “11”.

  In the example of the display pattern shown in FIG. 4A, the key top information registered as “group 3” is only “22”. For this reason, the key top information registered as “group 3” includes less than three key top information included in the display pattern, and there cannot be key top information having a different display color in the same group. . For this reason, there is no key top information to be input for “Group 3” in order to satisfy the authentication condition.

  For this reason, in order to perform key input satisfying the authentication condition for the display pattern example shown in FIG. 4A and make the authentication OK, the user inputs key top information “01” and “11”, Key in the start button.

  Further, when the authentication is OK by the key input for authentication in this way, a display pattern different from the previous one is generated by the display pattern generation unit 121 at the time of the input operation for the next authentication as in the above-described operation example. The touch keyboard is displayed on the display input unit 110 with the generated display pattern.

FIG. 4B shows a display pattern example different from the case of FIG.
In the display pattern example shown in FIG. 4B, the key top information “01” and “03” registered as “group 1” are displayed as the same colored key. On the other hand, the key top information “02” registered as “group 1” is displayed as a white key. Therefore, the key top information to be input for “group 1” in order to satisfy the authentication condition is “02”.

  In the display pattern example shown in FIG. 4B, the key top information “12” and “14” registered as “group 2” are displayed as the same white key. On the other hand, “13” of the key top information registered as “Group 2” is displayed as a coloring key. Therefore, the key top information to be input for “group 2” in order to satisfy the authentication condition is “13”.

  In the display pattern example shown in FIG. 4B, the key top information “21” and “22” registered as “group 3” are displayed as the same white key. On the other hand, “23” of the key top information registered as “Group 3” is displayed as a coloring key. Therefore, the key top information to be input for “group 3” in order to satisfy the authentication condition is “23”.

  For this reason, in order to perform key input satisfying the authentication condition with respect to the display pattern example shown in FIG. 4B and make authentication OK, the user sets the key top information “02”, “13”, “23”. Key in and enter the start button.

  As described above, also by the operation example shown in FIG. 4, the above-described first embodiment can be similarly realized, and the same effect can be obtained.

[Second Embodiment]
Next, a second embodiment of the present invention will be described.
In the second embodiment, functions such as display pattern generation, group configuration information storage, and authentication condition determination in the first embodiment described above are implemented using a server device.
Description of the same components as those in the first embodiment described above will be omitted.

  As shown in FIG. 5, the input information authentication system as the second embodiment is configured by connecting an input information authentication device 100 and a server device 200 via a network.

  The input information authentication device 100 includes a communication unit 150 in addition to the display input unit 110 and the display input control unit (display control unit) 120 similar to those in the first embodiment described above.

  The communication unit 150 is connected to the communication unit 250 of the server device 200 via a network by wire, wireless, or a combination thereof, and performs communication with the server device 200.

  The display input control unit 120 controls the display of the input keys displayed on the display input unit 110 and the operation input to the display input unit 110 as an input signal based on the transmission / reception contents of the communication unit 150 with the server device 200. I do.

  The server device 200 includes a communication unit 250, a display pattern generation unit 121 similar to that in the first embodiment, a registration unit 122, an authentication unit 123, and a storage unit 130 that stores registered group configuration information and the like. And comprising.

  The communication unit 250 is connected to the communication unit 150 of the input information authentication device 100 via a network by wire, wireless, or a combination thereof, and performs communication with the input information authentication device 100. Through this communication, the server device 200 performs display control of a touch keyboard displayed on the display input unit 110 of the input information authentication device 100 and the like.

  Next, an operation example of the input information authentication system as the second embodiment will be described with reference to the flowchart of FIG. In the operation of the present embodiment described below, the group configuration information used for authentication in the input information authentication device 100 is registered in advance under the control of the registration unit 122 of the server device 200 and registered in the storage unit 130. To do.

First, the display pattern generation unit 121 of the server device 200 generates a display pattern used for an input operation for authentication (step S11). The display pattern is generated by the same method as that in the first embodiment described above.
The communication unit 250 transmits the generated display pattern data to the input information authentication apparatus 100 (step S12).

  The display input control unit 120 of the input information authentication device 100 displays a touch keyboard based on the received display pattern on the touch panel display as the display input unit 110 based on the display pattern data received from the server device 200 by the communication unit 150. (Step S13). Then, key input by the user is received until the start button is pressed (steps S14 and S15).

  When the start button is pressed, the communication unit 150 transmits, to the server device 200, an input code string based on the input content that has been key-input between the start of the input operation for authentication and the start button being pressed ( Step S16).

The authentication unit 123 of the server device 200 determines whether or not the input code string received from the input information authentication device 100 satisfies the authentication condition based on the group configuration information registered in advance for the display pattern generated in step S11. The determination is performed in the same manner as in the first embodiment described above (step S17). That is, in the display pattern, it is determined whether or not all key top information that is in a different state from the other in the group is key-input.
The authentication unit 123 sets authentication OK when it is determined that the authentication condition is satisfied, and authentication NG otherwise.

  As described above, according to the above-described second embodiment, the same effects as those of the above-described first embodiment can be obtained, and protection is performed with stronger security than the input information authentication device 100 that is a terminal. Since the server device 200 can be used as a storage location for group configuration information, security can be further improved.

  In addition, the server apparatus 200 generates a display pattern, and the server apparatus 200 receives an input code string based on the display pattern from the input information authentication apparatus 100 and performs processing, whereby authentication such as challenge and response is performed. The effect is obtained, and the effect of defense against impersonation of the terminal itself (including the impersonation of the program on the terminal) is obtained.

[Third Embodiment]
Next, a third embodiment of the present invention will be described.
In the third embodiment, the information corresponding to the registered group configuration information is stored after being encrypted with a one-way function such as a hash function, thereby improving the security strength for storing the group configuration information. In this state, it is possible to determine whether or not the above-described authentication condition is satisfied.
Description of the same components as those in the first embodiment described above will be omitted.

  As shown in FIG. 7, the input information authentication device 100 as the third embodiment includes a display input unit 110, a display input control unit 120, a display pattern generation unit 121, and the same as those of the first embodiment described above. In addition to the storage unit 130, when the group configuration information is registered, the encryption registration unit 161 that performs encryption with a one-way function such as a hash function, and the input code string are encrypted with the one-way function and verified. An encryption authentication unit (collation unit) 162. The storage unit 130 stores the hash value encrypted by the encryption registration unit 161.

An operation of performing encryption when the group configuration information is registered in the apparatus by the user in the input information authentication apparatus 100 of the present embodiment will be described with reference to the flowchart of FIG.
The following operation example shows a case where HMAC using a hash function is used as encryption by a one-way function, and a hash code obtained by hashing a numerical value x with HMAC is shown as HMAC (x).

When the group configuration information to be registered is registered and input, the display pattern generation unit 121 generates a predetermined number of display patterns set in advance in the same manner as in the first embodiment described above, according to the registered group configuration information. To do.
The encryption registration unit 161 extracts all the keys to be input for the authentication OK with the display pattern for all the display patterns generated in this way (step S21).

  The encryption registration unit 161 sorts the numbers corresponding to the extracted keys to be input in a predetermined order, and hashes the number string obtained by concatenating the sorted numbers with HMAC (step S22) (first encryption) means).

The number corresponding to the key to be input may be the number if the key top information is a number, and if the key top information is an image or a character, the image ID as specific information associated with the image or the character And so on.
The order of sorting the numbers corresponding to the keys to be input may be any order such as ascending order or descending order as long as it is a predetermined order.

  The encryption registration unit 161 stores the hash value thus hashed in the storage unit 130 in association with the corresponding display pattern (step S23).

  Hashing by the encryption registration unit 161 will be described using the specific example of FIG. In the following description, it is assumed that the order in which numbers corresponding to the keys to be input are sorted is set in ascending order.

  Of the predetermined number of display patterns generated by the display pattern generation unit 121, in the display pattern shown in FIG. 2A, the key to be input for authentication OK is the key top information “03” as described above. “11” key.

  When the encryption registration unit 161 extracts “03” and “11” as numbers corresponding to the keys to be input for authentication OK, the encryption registration unit 161 sorts and connects all the extracted numbers in ascending order. Then, the encryption registration unit 161 hashes the concatenated number string “0311” with HMAC to obtain HMAC (0311). The encryption registration unit 161 stores the calculated hash value HMAC (0311) in the storage unit 130 in association with the corresponding display pattern (in this specific example, the display pattern in FIG. 2A).

  In this way, even if a third party who obtains the input information authentication apparatus 100 tries to analyze the stored information in the storage unit 130, not only the registered group configuration information is not known. It is also unclear how many keys should be input in order to authenticate the display pattern.

  Next, an operation example when the input information authentication apparatus 100 according to the third embodiment receives an input operation for authentication from a user will be described with reference to a flowchart of FIG.

  As operations when receiving an input operation for authentication, the operations of steps S1 to S3 are the same as the operations of steps S1 to S3 in the flowchart of FIG. 3 described above in the first embodiment.

  In this way, when receiving a key input from the user and pressing the start button as in the first embodiment described above, the encryption authentication unit 162 presses the start button after the input operation for authentication starts. The numbers corresponding to the input keys that have been input by the operation are sorted in a predetermined order similar to that of the encryption registration unit 161 (in ascending order in the above specific example). Then, similarly to the encryption registration unit 161, the sorted numbers are concatenated, and the concatenated number string is hashed with HMAC (step S31) (second encryption unit).

  The encryption authentication unit 162 collates the hash code associated with the display pattern generated in step S1 and stored in the storage unit 130 with the hash code hashed in step S31 (step S32) (collation unit) ). When the collation is matched by this collation, the authentication is OK, and in other cases, the authentication is NG.

  As described above, according to the above-described third embodiment, the same effect as that of the above-described first embodiment can be obtained, and a numeric string used for authentication corresponding to the registered group configuration information is hashed. Since it is stored after being encrypted by a one-way function such as a function, even if the input information authentication apparatus 100 is obtained by a third party, it is possible to protect against analysis of stored information in the memory. it can. Nevertheless, as in the first embodiment described above, it is possible to receive an input operation for authentication and reliably determine whether or not the input key input until the start button is pressed satisfies the authentication condition. . For this reason, higher security can be realized.

  Further, in the collation method of the third embodiment described above, collation can be performed with a much smaller amount of computation than when using an advanced calculation technique in which computation for collation is performed in an encrypted state. Therefore, even a computer having a relatively low processing capability such as a mobile terminal can be easily realized.

[Another operation example in the third embodiment]
In the third embodiment described above, the numbers corresponding to the keys to be input for authentication OK are sorted in a predetermined order, the sorted numbers are concatenated, and the concatenated number string is hashed with HMAC. This is used for verification in the encryption authentication unit 162. In this embodiment, the method of generating the number string to be hashed is not limited to this method, and all the numbers corresponding to the keys to be input to make the authentication OK are all prime numbers, and the product of these prime numbers is hashed. It is good as well.

  In this case, the encryption registration unit 161 calculates, for each display pattern generated by the display pattern generation unit 121, a product of prime numbers corresponding to each key to be input in order to make authentication OK with the display pattern, The calculated product is hashed with HMAC (first encryption means).

  In addition, the encryption authentication unit 162 calculates a product of prime numbers corresponding to each input key that has been input between the start of the authentication input operation and the start button being pressed. The product is hashed with HMAC (second encryption means).

  The above-described third embodiment is realized in the same manner as the configuration in which the number string to be hashed by such an operation is generated and the encryption authentication unit 162 collates the hash value in the same manner as the above-described operation in the flowchart of FIG. And the same effect can be obtained.

[About each embodiment]
Each of the above-described embodiments is a preferred embodiment of the present invention, and the present invention is not limited to this, and various modifications can be made based on the technical idea of the present invention.

  For example, in each of the above-described embodiments, the touch keyboard is described as having 9 keys of 3 rows × 3 columns. However, the number of keys constituting the touch keyboard is not limited to this number, and depends on the performance of the device. It may be determined arbitrarily. If the number of keys constituting the touch keyboard is increased, the number of key top information in the display pattern that is different from the others in the same group also increases. The number of keys to be input also increases, and the security strength can be further improved.

Moreover, in each embodiment mentioned above, when the keytop information contained in a display pattern is divided into two states among the keytop information registered as each group, only one keytop information is in a state different from the other. Explained as being. The two states of the key top information divided in the above-described embodiments are not limited to this division method, and the divided number may be arbitrary as long as it is divided into different numbers of key top information.
In this case, if all of the key top information of the smaller number included in the key top information divided into two states is key-input, the above-described authentication condition is satisfied for the group.

  Further, the number of divisions for dividing the key top information is not limited to two, and may be an arbitrary number of divisions. In this case, if the key input is performed for all the key top information in the state where the key top information included in the state is the least among the plurality of divided states, the group is described above. Will meet the authentication requirements.

  In each of the embodiments described above, the key top information is described as a number. However, the key top information is not limited to this as long as the key top information can be expressed as a number, and may be a character such as an image or an alphabet. May be. In this case, by assigning a number such as an image ID as specific information to each key top information by image or character, it can be realized in the same manner as in each of the above-described embodiments.

  In each of the above-described embodiments, the input for authentication OK has been described as an individual key input. However, the present invention is not limited to this, and a stroke as a movement trajectory of an input key, or a stroke and an individual key. It may be a combination of inputs. In this case, the key top information of the input start key and the key top information of the end point key in the stroke can be realized as a numeric string, and can be realized in the same manner as the above-described embodiment.

  As described above, if the input contents for making the authentication OK in each of the above-described embodiments can be expressed as a numeric string by performing a predetermined conversion or the like, a numeric string, a character string, an image string, coordinate information Or a combination thereof.

Further, in each of the above-described embodiments, it has been described that the user inputs a key to the touch keyboard displayed on the touch panel display of the display input unit 110. However, the input unit and the display unit are not limited to the touch keyboard, and are physically It may be a keyboard.
That is, each embodiment mentioned above is not limited to the structure with which an input part and a display part are united, Even if an input part and a display part are a different body or another apparatus, this invention is implement | achieved similarly. Can do.
When the input unit and the display unit are separate, the display pattern of the touch keyboard is displayed on the display unit, and the user performs key input using the keys of the input unit corresponding to the keys displayed on the display unit. Also with such a configuration, the above-described embodiments can be similarly realized, and the same effect can be obtained.

  Moreover, the input information authentication device 100 of each embodiment described above is not limited to a portable information terminal, and can be similarly applied to a stationary device such as a desktop PC.

In addition, by recording the processing procedure for realizing the input information authentication device 100 or the server device 200 as each embodiment described above on a recording medium as a program, the above-described functions according to each embodiment of the present invention can be obtained. A program supplied from a recording medium can be realized by causing a CPU of a computer constituting the system to perform processing.
In this case, the present invention can be applied even when an information group including a program is supplied to the output device from the above recording medium or from an external recording medium via a network.
That is, the program code itself read from the recording medium realizes the novel function of the present invention, and the recording medium storing the program code and the signal read from the recording medium constitute the present invention. It will be.
As this recording medium, for example, a hard disk, an optical disk, a magneto-optical disk, a floppy (registered trademark) disk, a magnetic tape, a nonvolatile memory card, a ROM, or the like may be used.

  According to the program according to the present invention, each function in each of the above-described embodiments can be realized by a computer controlled by the program.

110 Display input section (display means, input means)
DESCRIPTION OF SYMBOLS 120 Display input control part 121 Display pattern generation part 122 Registration part 123 Authentication part 130 Storage part 150,250 Communication part 161 Encryption registration part (1st encryption means)
162 Encryption authentication unit (second encryption means, verification means)

Claims (13)

An input information authentication device that performs authentication based on whether information corresponding to an operated key of an input unit having a plurality of keys satisfies a predetermined authentication condition with respect to registered information registered in advance,
Group configuration information associating a plurality of registered key top information as a group is stored as the registration information,
When the key top information arranged in each key of the input means in the combination of key top information associated as one group by the group configuration information is divided into a plurality of states, among the divided plurality of states, An input information authentication apparatus characterized in that the authentication condition is satisfied if key input is performed on all key top information in a state where the key top information included in the state is the least.   When the key top information arranged in each key of the input means in the combination of key top information associated as one group by the group configuration information is divided into a plurality of states, the key top information of the group is arranged The authentication condition is satisfied when one of the keys is set to a different state from the other and key input is performed for all the keys in the different state. The input information authentication device according to 1.   The different state means that, for key top information arranged in each key of the input means in a combination of key top information associated as one group by the group configuration information, one key top information is other key top information. The input information authentication apparatus according to claim 2, wherein the input information authentication apparatus is placed in a location that does not satisfy the predetermined positional relationship.   The different state refers to the display state of one key top information for the key top information arranged in each key of the input means in the combination of key top information associated as one group by the group configuration information. The input information authentication apparatus according to claim 2, wherein the input information authentication apparatus is in a state different from a display state of the key top information. Pattern generating means for generating an arrangement pattern of key top information assigned to each key of the input means;
When the key top information included in the arrangement pattern in the combination of the key top information associated as one group by the group configuration information is divided into a plurality of states, it is included in the state among the divided states. Authentication means for performing the authentication as satisfying the authentication condition if key input has been performed on all of the key top information in a state where the key top information is the smallest. Item 5. The input information authentication device according to any one of Items 1 to 4. Pattern generating means for generating an arrangement pattern of key top information assigned to each key of the input means;
For each arrangement pattern of all key top information that can be generated by the pattern generation means, information corresponding to a combination of key top information satisfying the authentication condition for the arrangement pattern is encrypted with a one-way function. Encryption means;
Second encryption means for encrypting information corresponding to the input information input from the input means with the one-way function;
The encryption character string calculated by the first encryption means and the encrypted character string by the second encryption means are collated with respect to the arrangement pattern of the key top information used at the time of input from the input means. The input information authenticating device according to claim 1, further comprising: a matching unit that performs matching. The first encryption means sorts numbers corresponding to all key top information satisfying the authentication condition in a predetermined order for each arrangement pattern, and encrypts the sorted number string with the one-way function. ,
The second encryption means sorts numbers corresponding to all the key top information input from the input means in a predetermined order, and encrypts the sorted number string with the one-way function. The input information authentication apparatus according to claim 6, wherein Each key top information assigned to each key of the input means is associated with a prime number,
The first encryption means encrypts a product of prime numbers corresponding to all key top information satisfying the authentication condition with the one-way function for each arrangement pattern,
7. The input information authentication apparatus according to claim 6, wherein the second encryption means encrypts a product of prime numbers corresponding to all the key top information input from the input means with the one-way function. . The input information authentication device is used by being connected to a server device by wire, wireless, or a combination thereof,
The server device
Pattern generating means for generating an arrangement pattern of key top information assigned to each key of the input means;
When the key top information included in the arrangement pattern in the combination of the key top information associated as one group by the group configuration information is divided into a plurality of states, it is included in the state among the divided states. Authentication means for performing the authentication as satisfying the authentication condition if key input has been performed on all of the key top information in a state where the key top information is the smallest. Item 5. The input information authentication device according to any one of Items 1 to 4. Wherein the input means is configured to display a plurality of keys on a display screen, detecting a contact position of the said surface shows a screen, determine whether the input to any of the plurality of keys based on the position information of the contact position The input information authentication device according to claim 1, wherein the input information authentication device is a touch panel display. A server device used by being connected to an input information authentication device by wire, wireless, or a combination thereof,
The input information authentication device includes an input unit having a plurality of keys,
The server device
Authentication is performed based on whether or not the information corresponding to the operated key of the input means satisfies a predetermined authentication condition with respect to registered information registered in advance,
Storing group configuration information associating a plurality of registered key top information as a group as the registration information;
When the key top information arranged in each key of the input means in the combination of key top information associated as one group by the group configuration information is divided into a plurality of states, among the divided plurality of states, The server apparatus according to claim 1, wherein the authentication condition is satisfied if key input is performed from the input unit for all of the key top information in which the key top information included in the state is the least. An input information authentication system configured by connecting an input information authentication device and a server device by wire, wireless, or a combination thereof,
The input information authentication device includes an input unit having a plurality of keys,
The server device
Authentication is performed based on whether or not the information corresponding to the operated key of the input means satisfies a predetermined authentication condition with respect to registered information registered in advance,
Storing group configuration information associating a plurality of registered key top information as a group as the registration information;
When the key top information arranged in each key of the input means in the combination of key top information associated as one group by the group configuration information is divided into a plurality of states, among the divided plurality of states, Input information authentication characterized in that the authentication condition is satisfied if key input is made from the input means for all of the key top information in a state where the key top information contained in the state is the least system. A program of an input information authentication device that performs authentication based on whether or not information corresponding to an operated key of an input unit having a plurality of keys satisfies a predetermined authentication condition with respect to registered information registered in advance,
Group configuration information associating a plurality of registered key top information as a group is stored as the registration information in the input information authentication device,
On the computer,
When the key top information arranged in each key of the input means in the combination of key top information associated as one group by the group configuration information is divided into a plurality of states, among the divided plurality of states, If the key input is performed for all of the key top information in a state where the key top information included in the state is the smallest, the procedure for performing the authentication is executed to satisfy the authentication condition. Program of input information authentication device.

Images