JP5867382B2 - Security system, wrist terminal, control program, and confidential information confirmation method - Google Patents

Description

The present invention relates to a security system, a wrist terminal, a control program, and a confidential information confirmation method for ensuring security against unauthorized use by another person at a terminal.

Conventionally, as a technique for ensuring the security of a mobile terminal, for example, a system described in Patent Document 1 below is known.
This system is composed of a portable terminal and a key unit wirelessly connected thereto. The portable terminal detects the radio wave intensity level from the key unit and compares the received radio wave intensity level with a specified value to determine the use restriction level. Then, the use restriction of the function of the portable terminal is restricted based on the distance from the key unit by setting the use restriction level when authentication is established when both of them are wirelessly connected. Specifically, there is no limit at level 1 where the distance to the key unit is the smallest,
Level 2: Restriction of payment function, Level 3: Restriction of operations related to address book / mail, Level 4: Restriction of operations related to outgoing calls. At level 5 where the distance from the key unit is the largest, the security of the mobile terminal is to be secured by restricting all functions of the mobile terminal.

JP 2007-19748 A

  Today, various payments, product purchases, application downloads, and the like are performed using mobile terminals. In this case, input of a password or the like is required for logging in to each corresponding site. Therefore, even if there is no level 1 restriction in the prior art, it is necessary to input a corresponding password or the like to log in to a desired site.

  At this time, the user generally sets a different password for each site in order to prevent login due to unauthorized use. For this reason, the relationship between the site and the password may be misidentified or forgotten, and not only can the user not log in quickly to the desired site but also login may be impossible.

  In addition, a list of passwords used by the mobile terminal is stored in the memory of the portable terminal, and a master key for opening the memory is set to ensure security. However, in such a security mode, if the master key is broken, there is a serious risk that all passwords are stolen and illegally used.

The present invention has been made in view of such conventional problems, and a security system, a wrist terminal, a control program, and a confidential information confirmation that improve security while ensuring security against unauthorized use of confidential information such as passwords by others. It aims to provide a method .

In order to solve the above-mentioned problem, the invention according to claim 1 is a security system comprising a terminal that can be connected to an external server via a network, and a wrist terminal that can be paired with the terminal and worn on a wrist. The terminal comprises storage means for storing confidential information required for connection with the server, and transmission means for transmitting the confidential information to the wrist terminal paired with the terminal , the wrist terminal includes receiving means for receiving the confidential information transmitted from the paired terminal provided with a display means for displaying the confidential information received by the receiving unit, to the terminal, the characterized in that the confidential information stored in the storage means, a control program for displaying only the list terminal that is paired is installed To provide a security system.

  According to the present invention, it is possible to improve the use performance while ensuring security against unauthorized use of confidential information such as passwords by others.

It is a block diagram which shows the security system which concerns on one embodiment of this invention. It is operation | movement explanatory drawing of the smart phone in the security system. It is a block diagram which shows the circuit structure of the smart phone in the security system. It is a block diagram which shows the circuit structure of the wrist terminal in the security system. It is a flowchart which shows the procedure of a pairing process. It is a flowchart which shows the process sequence of a smart phone and a wrist terminal. It is a display transition diagram of a smart phone and a wrist terminal.

Hereinafter, embodiments of the present invention will be described with reference to the drawings.
FIG. 1 is a block diagram showing the overall configuration of the security system according to the present embodiment.
The application site 10 including the server 11 and each bank site 13 including the server 12 include smartphones 1-1, 1-2, 1-3,... (Hereinafter collectively referred to as the plurality of smartphones) via the Internet 500. Or when referring to any one of a plurality of smartphones) and a PC (Personal Computer) 3. List terminals 2-1, 2-2, 2-3... (Hereinafter, the plurality of list terminals are collectively referred to as a list terminal 2 when referring to any one of the plurality of list terminals 2). Is connected only to the application site 10 including the server 11. The wrist terminal 2 is connected to the smartphone 1 by wireless proximity, for example, via Bluetooth (registered trademark), and can exchange data. The smartphone 1 and the wrist terminal 2 operate to download and install an application from the application site 10 and execute processing according to the installed application.

  FIG. 2 is a display transition diagram including appearance configurations of the smartphone 1 and the wrist terminal 2. As is well known, the smartphone 1 includes a vertically long device main body 101 and a vertically long display unit 102 and a touch panel 103 arranged on the device main body 101 in the same manner. The wrist terminal 2 is a wristwatch type that can be worn on the wrist of a human body, and includes a watch case 201, a display unit 202 and a touch panel 203 disposed on the watch case 201, and wrist bands attached to both ends of the watch case 201. 204.

  FIG. 3 is a schematic block diagram illustrating a circuit configuration of the smartphone 1. Reference numeral 102 denotes the display unit, which includes the LCD arranged as described above, a drive circuit for driving the LCD, and the like. A display control unit 104 controls the display state of the display unit 102. An input unit 105 includes various keys and switches, and includes the touch panel 103. A secret file memo 106 is a memory that stores a passkey, a password, a secret number, and the like generated by starting an application “secret file memo” described later.

  Reference numeral 107 denotes a CPU that controls the entire smartphone 1. A program memory 108 stores a control program 1081 and a pairing program 1083 in advance, and stores a downloaded application program 1082 and the like. The control program 1081 is a basic control program for controlling the entire smartphone 1, and the pairing program 1083 is a program for establishing pairing with the latest wrist terminal 2. Reference numeral 109 denotes a wireless I / F that performs transmission and reception by the proximity wireless communication with the wrist terminal 2, and reference numeral 110 denotes a communication I / F that links with the servers 11, 12 and the like by Wi-Fi or the like.

  Reference numeral 111 denotes a radio field intensity detection circuit that detects the radio field intensity of the near field radio received via the radio I / F 109, that is, the received radio field intensity. Although not shown, the program memory 108 stores a table in which the relationship between the received radio wave intensity and the distance to the transmission source is written. Therefore, the CPU 107 can acquire the distance to the device that is the transmission source by referring to the table based on the received radio wave intensity detected by the radio wave intensity detection circuit 111. Further, when a plurality of radio waves having different intensities are received, it is possible to determine which radio wave is transmitted to the nearest device, that is, to search for the nearest device.

  Note that the smartphone 1 includes a voice input circuit that modulates and transmits input voice, a transmission circuit, a reception circuit that receives and receives a received voice signal, a playback circuit, and the like in order to perform telephone communication. The illustration and description of these known circuits are omitted.

  FIG. 4 is a schematic block diagram illustrating a circuit configuration of the wrist terminal 2. The wrist terminal 2 has substantially the same configuration as the smartphone 1 except that the wrist terminal 2 has a clock unit 221. That is, reference numeral 202 denotes the display unit, which includes an LCD and a drive circuit for driving the LCD. A display control unit 204 controls the display state of the display unit 202. An input unit 205 includes various keys and switches, and includes the touch panel 203. Reference numeral 206 denotes a secret file memo, which is a memory for storing confidential information such as a passkey, a personal identification number, and a secret number generated by starting an application “secret file memo” described later.

  Reference numeral 207 denotes a CPU that controls the entire wrist terminal 2. A program memory 208 stores a control program 2081 and a pairing program 2083 in advance, and stores a downloaded application program 2082 and the like. The control program 2081 is a basic control program for controlling the entire wrist terminal 2, and the pairing program 2083 is a program for establishing pairing with the latest smartphone 1. Reference numeral 209 denotes a wireless I / F that performs the wireless link with the smartphone 1, and reference numeral 210 denotes a communication I / F that performs a link with the server 11 or the like using Wi-Fi or the like.

  Reference numeral 211 denotes a radio field intensity detection circuit that detects the radio field intensity of the close proximity radio received via the radio I / F 209, that is, the received radio field intensity. Although not shown, the program memory 208 stores a table in which the relationship between the received radio wave intensity and the distance to the transmission source is written. Therefore, the CPU 207 can acquire the distance to the device that is the transmission source by referring to the table based on the received radio wave intensity detected by the radio wave intensity detection circuit 211. Furthermore, when a plurality of radio waves having different intensities are received, it is possible to determine which radio wave is transmitted to the nearest device, that is, to search for the nearest device.

Next, the operation of the present embodiment will be described based on a flowchart and the like.
FIG. 5 is a flowchart showing the pairing process. Although the pairing processing method in Bluetooth is a well-known technique, the pairing processing between the smartphone 1 and the wrist terminal 2 in the present embodiment will be described based on the flowchart of FIG. 2 and the explanatory diagram of FIG.

  The smartphone 1 searches for the latest wrist terminal 2 in a state where Bluetooth (or Wi-Fi) is set as shown in FIG. On the other hand, the wrist terminal 2 searches for the nearest smartphone in the state where Bluetooth (or Wi-Fi) is set and close proximity wireless communication is possible as shown in FIG. 5B (step SB11). At this time, if the smartphone 1 and the wrist terminal 2 of the user who are not paired exist close to each other, the smartphone 1 and the wrist terminal 2 repeat transmission and reception in proximity wireless, respectively, as described above. To search for the nearest device.

  When the search for the nearest partner device is completed, the smartphone 1 transmits a connection request to the wrist terminal 2 (step SA12, FIG. 2 (1)), and the wrist terminal 2 transmits a connection request to the smartphone 1 (step SB12). FIG. 2 (2)). Then, it is determined whether or not mutual communication is established from each of the devices according to the connection request (steps SA13 and SB13). If the mutual communication by the connection request is established, the smartphone 1 issues a pairing completion notification to the wrist terminal 2 (step SA14, FIG. 2 (3)). The wrist terminal 2 determines whether or not a pairing completion notification has been received from the smartphone 1 (step SB14).

  When receiving the pairing completion notification, the wrist terminal 2 generates a passkey (step SB15) and displays it on the display unit 202 for 30 seconds, for example (step SB16, FIG. 2 (4)). The user of the smartphone 1 and the wrist terminal 2 visually recognizes the pass key displayed on the display unit 202 of the wrist terminal 2, operates the key of the input unit 105 of the smartphone 1, and inputs the pass key. Thereby, the input part 105 of the smart phone 1 inputs the pass key according to the operated key into CPU107 (step SA14).

  Subsequently, it is determined whether or not the input passkey satisfies the input condition (step SA15). Here, as described in FIG. 2 (5), the input condition is, for example, that the issued passkey is input within 30 seconds or the input limit number is up to three. If these input conditions are not satisfied, the process returns to step SA11. If the input conditions are satisfied, the connection is completed (step SA17), and the communication settings are automatically set so that the paired smartphone 1 list terminal 2 can communicate with each other using the pass key as identification information. Done.

  Next, the overall operation of the smartphone 1 and the wrist terminal 2 will be described with reference to the flowchart of FIG. 6 and the display transition diagram of FIG. The user of the smart phone 1 and the wrist terminal 2 first operates the smart phone 1, for example, and accesses the smart phone application market (the market of the application for the smart phone 1) provided in the application site 10 via the Internet 500. Thereafter, when a predetermined operation is performed at the input unit 105, the CPU 107 downloads a smartphone application (application for the smartphone 1) called “secret file memo” from the smartphone application market (step SA21, FIG. 7 (1)). ).

  When the download of the smartphone application “secret file memo” is completed, the secret file memo 106 used in this application is automatically provided in the smartphone 1 as shown in FIG.

  Next, the user operates the wrist terminal 2 to access the wrist terminal application market (the market for applications for the wrist terminal 2) provided in the application site 10 via the Internet 500. Thereafter, when a predetermined operation is performed at the input unit 205, the CPU 207 downloads a list terminal application (an application for the list terminal 2) called “secret file memo” from the list terminal application market (step SB21, FIG. 7). (2)).

  When the download of the smartphone application “secret file memo” is completed, the secret file memo 206 used in this application is automatically provided in the wrist terminal 2 as shown in FIG.

  When the download of the wrist terminal application is completed, the CPU 207 automatically activates the application (step SB22) and determines whether the activation of this application is the first activation after the download (step SB23). . If it is the first activation, the pairing process according to the flowchart shown in FIG. 5B is executed (step SB24).

  On the other hand, when the smartphone 1 completes the download of the smartphone application, it performs pairing processing according to the flowchart shown in FIG. 5B by performing close proximity wireless communication with the wrist terminal 2 (step SA22, FIG. 7 (3)). When the pairing process is completed, data is written to the secret file memo 106 in accordance with an operation on the input unit 105 by the user (step SA23). The data written in the secret file memo 106 is composed of an item such as “ABC bank” and a secret number such as “3210” as illustrated in the editing screen P1 of FIG. Therefore, the user writes a secret number such as a personal identification number of an account owned by the user or a personal identification number of various settlements to the secret file memo 106 as data in association with each item.

  When the input of all data is completed, the user performs a data input completion operation at the input unit 105. As a result, the determination in step SA24 is YES, and the CPU 107 advances the process from step SA24 to step SA25. After completing the input of all data in the secret file memo 106, the user determines a secret number necessary for starting the “secret file memo” application and inputs it from the input unit 105. The CPU 107 stores the input personal identification number in the program memory 108 and ends the input process (step SA25, FIG. 7 (3)).

  After that, when the contents of the secret file memo 106 are displayed on the smartphone 1, the CPU 107 encrypts the secret number and displays it on the display unit 102 (step SA26). That is, the secret file memo 106 corresponds to the item “ABC bank” and the secret number “3210”, the item “DEF bank” and the secret number “5678”... As shown in the edit screen P1 of FIG. Although stored, when the application is opened in a normal state, the secret number is encrypted and displayed as shown in the display screen P2 (FIG. 7 (5)).

  Therefore, it is possible to prevent the secret number displayed on the display unit 102 of the smartphone 1 that is a larger screen than the wrist terminal 2 from being looked into and stolen, and the secret number that can be stored if the smartphone 1 is misplaced. Security can be ensured by preventing leakage.

  When a change occurs in the items to be written in the secret file memo 106, the input unit 105 performs a predetermined operation to instruct editing (step SA27). Then, the CPU 107 reads the secret file memo 106, and permits the start of editing the secret file memo 106 on condition that the personal identification number set in step SA25 is input (step SA28). Therefore, when new data to be written to the secret file memo 106 is generated or when the data written to the secret file memo 106 becomes unnecessary, it can be freely edited by performing the above operation. it can.

  On the other hand, if the determination at step SB23 is NO and the activation is not the first time, the wrist terminal 2 receives the contents of the secret file memo 106 of the smartphone 1 by proximity wireless communication, and uses this as the secret file of its own device. Copy and update the memo 206 (step SB25). This update may be performed for both the item and the secret number, but the items “ABC bank”, “DEF bank”. Therefore, the secret file memos 106 and 206 of the smart phone 1 and the wrist terminal 2 are always in perfect agreement with respect to at least the items “ABC bank”, “DEF bank”.

  When finishing the process of step SB24 or the process of step SB25, the wrist terminal 2 displays the item on the display unit 202 so that any item can be selected and selected in response to the touch (step) SB25). This item display may be performed only when the item display mode is set by an operation on the input unit 205 or may be always displayed on a part of the display unit 252. Further, as shown in FIG. 7 (6), only a single item (“ABC bank” in the illustrated example) may be displayed, and the other items may be scroll-displayed. In the display state, as shown in FIG. 7 (6), when the user touches the displayed item with a finger, this is detected by the touch panel 103, and the CPU 207 selects the touched item.

  Then, the CPU 207 of the wrist terminal 2 confirms that the smartphone 1 corresponding to the wrist terminal 2 and the smartphone 1 corresponding to the wrist terminal 2 are synchronized with each other (step SB26). It confirms that the process of SB24 is completed and the smart phone 1 and the wrist terminal 2 are paired.

  Subsequently, the wrist terminal 2 performs data communication with the smartphone 1 by proximity wireless communication, requests the transfer of the stored contents of the secret file memo 106 included in the smartphone 1, and responds to the secret file transferred from the smartphone 1. The stored contents of the memo 106 are received and stored in the secret file memo 206 of the own device, and the data is extracted from the secret file memo 206 and the secret number is displayed on the display unit 202 (step SB27).

  As a result of the processing in step SB27, the secret number “3210” is displayed on the display unit 202 of the wrist terminal 2 together with the character string “ABC bank” as shown in FIG. Therefore, the user can perform electronic transactions such as settlement using the secret number by visually recognizing the secret number and performing a predetermined operation such as inputting the secret number on the smartphone 1.

  In this way, the secret number is not displayed on the smartphone 1 but is displayed on the separate wrist terminal 2, so that even if the smartphone 1 is misplaced, another person illegally identifies the secret number. It cannot be used, and security against unauthorized use can be ensured. In addition, since the user only has to operate the smartphone 1 while viewing the confidential information displayed on the wrist terminal 2, the secret number can be easily input. Therefore, it is possible to improve the use performance while ensuring security against unauthorized use of the secret number by others.

  Moreover, in the present embodiment, since the application necessary for communication with the server of each bank using the secret number is stored only in the smartphone 1, even if the secret number is displayed on the wrist terminal 2, Electronic payment cannot be performed using this. Therefore, even if either the smartphone 1 or the wrist terminal is left behind, others cannot illegally use the secret number, and security against unauthorized use can be ensured.

  In addition, in embodiment, although the system which concerns on the combination of the smart phone 1 and the wrist terminal 2 was demonstrated, it is not restricted to these combinations, For example, the combination of a notebook personal computer and a smart phone, the combination of a notebook personal computer and a wrist terminal A combination of other device types may be used.

Moreover, this invention is not limited to these, The invention described in the claim and its equivalent range are included.
The claims appended at the time of filing this application will be appended below.
<Claim 1>
A security system comprising a first terminal connectable to an external server via a network and a second terminal communicable with the first terminal,
The first terminal is
Storage means for storing confidential information required for connection with the server;
First pairing means for determining the second terminal as a connection partner;
Transmitting means for transmitting the confidential information to the second terminal determined by the first pairing means;
The second terminal is
A second pairing means for determining the first terminal as a connection partner;
Receiving means for receiving the confidential information transmitted from the first terminal determined as the connection partner by the first and second pairing means;
A security system comprising: display means for displaying the confidential information obtained by the receiving means.
<Claim 2>
The storage means stores confidential information corresponding to each of a plurality of items,
The transmission means transmits confidential information of each item,
The receiving means receives confidential information of each item,
The display means is a first display means for displaying each item, and a second display means for displaying corresponding confidential information when one of the items displayed by the first display means is selected. The security system according to claim 1, further comprising:
<Claim 3>
The security system according to claim 1 or 2, wherein the first and second terminals are portable.
<Claim 4>
The security system according to claim 3, wherein the first terminal is a smartphone, and the second terminal is a wrist terminal that can be worn on an arm.
<Claim 5>
5. The security system according to claim 1, wherein an application necessary for connecting to the server using the confidential information is stored in the first terminal.
<Claim 6>
A first terminal in a security system including a first terminal connectable to an external server via a network and a second terminal communicable with the first terminal;
Storage means for storing confidential information required for connection with the server;
Pairing means for determining the second terminal as a connection partner;
A terminal comprising: transmission means for transmitting the confidential information to the second terminal determined by the pairing means.
<Claim 7>
A second terminal in a security system comprising a first terminal connectable to an external server via a network and a second terminal communicable with the first terminal;
Pairing means for determining the first terminal as a connection partner;
Receiving means for receiving the confidential information transmitted from the first terminal determined as a connection partner by the pairing means;
And a display means for displaying the confidential information obtained by the receiving means.
<Claim 8>
A computer included in a first terminal in a security system including a first terminal connectable to an external server via a network and a second terminal capable of communicating with the first terminal;
Storage control means for storing confidential information required for connection with the server;
Pairing means for determining the second terminal as a connection partner;
A program for causing a second terminal determined by the pairing means to function as a transmission means for transmitting the confidential information.
<Claim 9>
A computer included in the second terminal in a security system including a first terminal connectable to an external server via a network and a second terminal capable of communicating with the first terminal;
Pairing means for determining the first terminal as a connection partner;
Receiving means for receiving the confidential information transmitted from the first terminal determined as a connection partner by the pairing means;
A program which functions as display control means for displaying the confidential information obtained by the receiving means.

DESCRIPTION OF SYMBOLS 1 Smart phone 2 List terminal 101 Apparatus main body 102 Display part 103 Touch panel 105 Input part 106 Secret file memo 107 CPU
108 Program memory 109 Wireless I / F
DESCRIPTION OF SYMBOLS 111 Radio wave intensity detection circuit 201 Watch case 202 Display part 203 Touch panel 204 Wristband 205 Input part 206 Secret file memo 207 CPU
209 Wireless I / F
211 Signal Strength Detection Circuit 252 Display Unit 1081 Control Program 1082 Application Program 1083 Pairing Program 2081 Control Program 2082 Application Program 2083 Pairing Program

Claims (8)

A security system comprising a terminal that can be connected to an external server via a network, and a wrist terminal that can be paired with the terminal and attached to a wrist ,
The terminal
Storage means for storing confidential information required for connection with the server;
Transmission means for transmitting the confidential information to the wrist terminal paired with the terminal ,
The wrist terminal is
Receiving means for receiving the confidential information transmitted from the paired terminal;
Display means for displaying the confidential information received by the receiving means ,
A security system , wherein a control program for displaying confidential information stored in the storage means only on the paired wrist terminal is installed in the terminal . The wrist terminal is installed with a wrist terminal control program that cooperates with the control program, and the control information and the wrist terminal control program cooperate with each other so that confidential information stored in the storage means is stored at the terminal. The security system according to claim 1 , wherein the confidential information is displayed on the display means of the wrist terminal only when the pairing is performed without displaying . The storage means stores confidential information corresponding to each of a plurality of items,
The transmission means transmits confidential information of each item,
The receiving means receives confidential information of each item,
The display means is a first display means for displaying each item, and a second display means for displaying corresponding confidential information when one of the items displayed by the first display means is selected. The security system according to claim 1, further comprising: 4. The security system according to claim 1, wherein the confidential information is a personal identification number for connecting to the external server . The confidential information corresponding to a plurality of items can be input and stored in the terminal, and the confidential information corresponding to one item is displayed on the list terminal. 4. The security system according to any one of 4. In a security system comprising a terminal that can be connected to an external server via a network and a wrist terminal that can be paired with the terminal, pairing confidential information that is installed in the terminal and stored in the storage means The control program according to claim 1, wherein the control program is displayed only on the wrist terminal . The wrist terminal in the security system according to claim 1. A method for confirming confidential information in a security system including a terminal that can be connected to an external server via a network and a wrist terminal that can be paired with the terminal ,
Only the terminal stores confidential information required for connection with the external server,
Let the terminal transmit to the paired wrist terminal without displaying the stored confidential information,
Let the wrist terminal receive the confidential information transmitted from the paired terminal, and display the received confidential information
A method for confirming confidential information.