JP6135715B2 - User authentication apparatus and program - Google Patents

Description

The present invention relates to a user authentication device and a program for performing user authentication .

  2. Description of the Related Art Conventionally, portable terminals having a function of inputting various information and a function of reading a symbol such as a barcode are known. Furthermore, in order to prevent misuse and information leakage when a portable terminal is lost, identification (authentication) of the user is required. User authentication includes password key input and fingerprint authentication methods.

  Some portable terminals have a touch panel function. This touch panel is provided on the display screen, and accepts coordinate information input by a touch operation with a user's finger or pen.

  Further, a watch that accepts input of a security code by a touch panel provided on a dial is disclosed (see Patent Document 1). This is because the movement trajectory of the clockwise and counterclockwise directions of the finger is registered, and the security code is input by the user touching and moving the finger as registered.

JP 2004-178484 A

  However, in the conventional user authentication by the fingerprint authentication of the portable terminal, a dedicated special device is required.

  Moreover, in the conventional user authentication by the key input of the password of a portable terminal, it is complicated to input every time it is used, and there is a possibility that it is peeped by others. The same applies to password input in which numbers and the like displayed on the screen are touch-input using a touch panel.

  Further, in the conventional security code input method using the touch panel, the operation of inputting only the security code is complicated as described above, and there is a possibility that the movement path of the security code may be peeped by others.

An object of the present invention is to is to prevent the processing for that by the unauthorized user operation.

In the first aspect , when a plurality of tap operations are performed by the user , a distance between taps that is a distance between the tap operation positions and a time between taps that is a time interval at the time of each tap operation. obtaining means for obtaining the distance, a, for each of a plurality of registered users, a first feature information of the distance between the taps, memory means for storing a second feature information of the inter-tap interval, the storage means Whether there is a registered user having first feature information and second feature information corresponding to both the inter-tap distance and the inter-tap time interval acquired by the acquisition unit And an authentication control means for controlling authentication for the user based on a determination result of the determination means.
According to a fourth aspect of the present invention, the acquisition means for acquiring the feature information of the inter-tap distance, which is the distance between the respective tap operation positions , from the operation content at the time of arbitrary multiple tap operations by the user, and acquired by the acquisition means If the feature information of the operation content corresponds to any of the feature information of the inter-tap distance stored in advance for each of a plurality of registered users, the corresponding registered user is specified and user authentication for the user is permitted. After the user authentication by the user authentication means and the user authentication means, a user corresponding to the feature information of the inter-tap distance in the operation content newly acquired by the acquisition means permits the user authentication by the user authentication means. The validity of the user authentication by the user authentication means is maintained based on whether or not the same user as the registered user specified at the time Characterized by comprising an authentication control means for controlling whether or not.

According to the present invention, it is possible to prevent the process on that by the unauthorized user operation.

It is a block diagram which shows the structure of the portable terminal of embodiment of this invention. It is a figure which shows the structure of an authentication table. It is a figure which shows a user registration process. It is a flowchart which shows an operation process. It is a flowchart which shows the 1st user authentication process of an operation process. It is a figure which shows distribution of the distance between taps, and the time interval between taps. It is a figure which shows distribution of the distance between taps, and the distance of a finger | toe. It is a figure which shows distribution of tap time and frequency. It is a figure which shows distribution of a tap area and frequency. It is a flowchart which shows the 1st same user authentication process of an operation process. It is a flowchart which shows a 2nd user authentication process. It is a flowchart which shows a 2nd same user authentication process.

  DESCRIPTION OF EMBODIMENTS Hereinafter, embodiments and modifications according to the present invention will be described in detail with reference to the accompanying drawings. The present invention is not limited to the illustrated example.

  First, the apparatus configuration of the present embodiment will be described with reference to FIG. In FIG. 1, the structure of the portable terminal 10 of this Embodiment is shown.

  As shown in FIG. 1, a mobile terminal 10 as a user identification device according to the present embodiment is a handy terminal having an input function of information by a touch panel, a barcode scanning function, a wireless communication function, and the like. The mobile terminal 10 is used in, for example, a warehouse or a retail store.

  The portable terminal 10 is used for a plurality of users. For this reason, the mobile terminal 10 has a user authentication function for authenticating (identifying) each user by touch input on the touch panel. In the mobile terminal 10, when user authentication is successful, the authenticated user can use a program or data that is permitted to be used. These users are referred to as users A, B,.

  The portable terminal 10 includes a CPU (Central Processing Unit) 11 as a feature information acquisition unit and a user identification unit, a key operation unit 12a, a touch panel 12b, a RAM (Random Access Memory) 13, a display unit 14, and a ROM ( Read Only Memory) 15, a wireless communication unit 16, a flash memory 17 as a storage unit, a scanner unit 18, a notification unit 19, a timing unit 20, and a power supply unit 21. Each part of the mobile terminal 10 excluding the power supply part 21 is connected to each other via a bus 22.

  The CPU 11 controls each unit of the mobile terminal 10. The CPU 11 reads a designated program out of various programs from the ROM 15 and expands it in the RAM 13 and executes various processes in cooperation with the expanded program.

  The key operation unit 12 a includes a key group including various keys such as a character input key, and outputs operation information corresponding to a pressing input of each key from the user to the CPU 11.

  The touch panel 12b is provided on the display panel of the display unit 14, receives a touch input of a finger, a pen, or the like (hereinafter referred to as a finger) as a touch input object from the user, and a position of coordinates of the touched display panel Information is output to the CPU 11. The touch panel 12b is a capacitive touch panel.

  In addition, the touch panel 12b acquires finger distance information as the distance between the touch panel 12b and the user's finger and outputs the information to the CPU 11. This is because, in the capacitive touch panel 12b, the capacitance of the capacitor provided on the touch panel 12b changes according to the vertical distance from the touch panel 12b to the user's finger. And the touch panel 12b acquires the information of the distance of the finger | toe according to the variation | change_quantity of this electrostatic capacitance.

  The RAM 13 is a volatile semiconductor memory and has a work area for storing various data and various programs.

  The display unit 14 includes a display panel such as an LCD (Liquid Crystal Display) or an EL (ElectroLuminescent) display, and performs various displays on the display panel according to display information input from the CPU 11.

  The ROM 15 is a read-only semiconductor memory that stores various data and various programs. The ROM 15 stores a user registration program 151 and an operation program 152.

  The wireless communication unit 16 is a wireless LAN (Local Area Network) type wireless communication unit. The wireless communication unit 16 includes an antenna, a modulation unit, a demodulation unit, a signal processing unit, and the like, and performs wireless communication with the access point. The wireless communication unit 16 processes a signal of information to be transmitted by the signal processing unit, modulates the signal by the modulation unit, and transmits the signal from the antenna to the access point. This access point is connected to a communication destination device via a communication network. In addition, the wireless communication unit 16 demodulates a radio wave reception signal received from an access point by an antenna by a demodulation unit, and performs signal processing by a signal processing unit to obtain reception information. In this way, the wireless communication unit 16 communicates with a communication destination device via the access point. In addition, the wireless communication unit 16 may be a wireless communication unit of a mobile phone communication system, and may communicate with a communication destination device via a base station.

  The flash memory 17 is a non-volatile semiconductor memory that stores information in a readable and writable manner.

  The scanner unit 18 is a laser type scanner unit or an image scanner, reads a symbol (bar code, two-dimensional code), and outputs the read image data to the CPU 11. The CPU 11 decodes the image data input from the scanner unit 18. The scanner unit 18 may decode the image data.

  The notification unit 19 outputs an alarm sound when the user authentication fails according to an instruction from the CPU 11 to notify the user. In addition, the alerting | reporting part 19 is good also as a structure which alert | reports by an audio | voice, lighting of LED (Light Emitting Diode), etc.

  The clock unit 20 is a clock circuit that clocks the current time, and outputs the current time information to the CPU 11.

  The power supply unit 21 is a secondary battery such as a lithium battery, and supplies power to each unit of the mobile terminal 10. The power supply unit 21 may be a primary battery such as an alkaline battery.

  Next, information stored in the mobile terminal 10 will be described with reference to FIG. FIG. 2 shows the configuration of the authentication table 30.

  The authentication table 30 is a table used for user authentication, and is stored in the flash memory 17. The authentication table 30 has items of a user ID 31 and feature information 32.

  The user ID 31 is identification information for each user. The feature information 32 is information indicating the feature of each user's touch input according to the information obtained from the touch panel 12b. The feature information 32 includes an inter-tap distance 321, an inter-tap time interval 322, a finger distance 323, a tap time 324, and a tap area 325.

  The inter-tap distance 321 is information on a plane distance from one tap to the next tap among a plurality of taps on the touch panel 12b. The inter-tap time interval 322 is time interval information from one tap to the next tap among a plurality of taps on the touch panel 12b. The finger distance 323 is information on the vertical distance (height) of the user's finger from the touch panel 12b. The tap time 324 is information on the tap time on the touch panel 12b. The tap area 325 is information on the contact area of the finger when tapping on the touch panel 12b.

  Next, the operation of the mobile terminal 10 will be described with reference to FIGS. FIG. 3 shows the user registration process. FIG. 4 shows the operation process. FIG. 5 shows a first user authentication process of the operation process. FIG. 6 shows the distribution of the distance between taps and the time interval between taps. FIG. 7 shows the distribution of the inter-tap distance and the finger distance. FIG. 8 shows the distribution of tap time and frequency. FIG. 9 shows the distribution of tap area and frequency. FIG. 10 shows the first same user authentication process of the operation process.

  First, with reference to FIG. 3, the user registration process performed with the portable terminal 10 is demonstrated. The user registration process is a process of logging in and registering a user who newly uses the mobile terminal 10.

  In the mobile terminal 10, for example, when an instruction to execute user registration processing is input via the key operation unit 12 a or the touch panel 12 b, the CPU 11 reads the user registration program 151 that is read from the ROM 15 and appropriately expanded in the RAM 13. The user registration process is executed in cooperation with

  First, the CPU 11 displays a user registration operation screen for user registration on the display unit 14 (step S11). The user registration operation screen is not a screen for entering a password, but a screen for accepting various user registration inputs by touch input. The touch input content on the user registration operation screen can obtain touch input information sufficient to obtain feature information (inter-tap distance, inter-tap time interval, finger distance, tap time, tap area).

  And CPU11 receives the touch input according to the user registration operation screen of step S11 with the touch panel 12b, and calculates and acquires the feature information according to the obtained touch input information and the time information obtained from the time measuring part 20. And stored in the RAM 13 (step S12).

  In step S12, the inter-tap distance and the tap area as the feature information are obtained according to the touch position information obtained from the touch panel 12b. In step S12, the finger distance as the feature information is obtained according to the finger distance information obtained from the touch panel 12b. Further, the time interval between taps and the tap time are obtained according to the position information of the touch obtained from the touch panel 12b and the time information obtained from the time measuring unit 20.

  And CPU11 discriminate | determines whether the touch input in step S12 was complete | finished (step S13). If the touch input has not ended (step S13; NO), the process proceeds to step S11. When the touch input is completed (step S13; YES), the CPU 11 receives an input of a user ID to be newly registered via the key operation unit 12a or the touch panel 12b (step S14). A unique ID may be automatically generated as the user ID.

  Then, the CPU 11 associates the feature information stored in the RAM 13 in step S12 with the user ID input in step S14, and records the feature information 32 and the user ID 31 as the authentication information stored in the flash memory 17, respectively. It adds to the table 30 (step S15), and ends user registration processing.

  Next, an operation process executed on the mobile terminal 10 will be described with reference to FIGS. The operation process is a process in which the user performs various operations and repeatedly performs user authentication.

  In the portable terminal 10, for example, when an operation processing execution instruction is input via the key operation unit 12 a or the touch panel 12 b, the CPU 11 cooperates with the operation program 152 that is read from the ROM 15 and appropriately expanded in the RAM 13. The operation process is executed by the operation.

  First, the CPU 11 displays a pre-login operation screen on the display unit 14 (step S21). The pre-login operation screen is various touch input operation screens displayed before user authentication success (login), and an unauthenticated user can also operate. In the pre-login operation screen, it is assumed that an operation that uses a program and data that the login user is permitted to use after login cannot be performed. Further, it is assumed that the touch input content on the pre-login operation screen can obtain sufficient touch input information to obtain feature information.

  Then, the CPU 11 receives a touch input corresponding to the pre-login operation screen in step S21 through the touch panel 12b, calculates and acquires characteristic information corresponding to the obtained information and time information obtained from the time measuring unit 20, and acquires the RAM 13 (Step S22). In step S22, feature information is acquired in the same manner as in step S12 of the user registration process of FIG.

  Then, the CPU 11 performs user authentication processing (step S23). Here, the first user authentication process as the user authentication process in step S23 will be described with reference to FIG. First, the CPU 11 refers to the authentication table 30 stored in the flash memory 17, and the distribution pattern of the inter-tap time interval and the inter-tap distance of the feature information obtained in step S22 is the inter-tap time interval 322 and the inter-tap interval. It is determined whether or not there is a corresponding user having the same distribution pattern as the distance 321 (step S41). That the distribution pattern is the same is not limited to perfect match, it is assumed that there is no more than a certain difference, and so on.

  In step S41, for example, as shown in FIG. 6, it is assumed that the distribution of the inter-tap time interval 322 and the inter-tap distance 321 is stored in the authentication table 30. The pattern P1 is a distribution pattern of the user A whose user ID 31 is A (a distribution pattern of “◯” in FIG. 6). The pattern P2 is a distribution pattern of the user B whose user ID 31 is B (a distribution pattern of “x” in FIG. 6). In step S41, the user corresponding to the pattern P1 or P21 depends on whether the distribution pattern of the time interval between taps and the distance between taps obtained in step S22 is the same as or not one of the patterns P1 and P21. It is determined whether or not there is.

  When there is a corresponding user (step S41; YES), the CPU 11 refers to the authentication table 30 stored in the flash memory 17, and the distribution pattern of the finger distance and the inter-tap distance of the feature information obtained in step S22 is obtained. It is determined whether or not the same user corresponds to the distribution pattern of the finger distance 323 and the inter-tap distance 321 of the user ID 31 of the corresponding user in step S41 (step S42).

  In step S42, for example, as shown in FIG. 7, the distribution of the finger distance 323 and the inter-tap distance 321 is stored in the authentication table 30. The pattern P3 is a distribution pattern of the user A whose user ID 31 is A (a distribution pattern of “◯” in FIG. 7). The pattern P4 is a distribution pattern of the user B whose user ID 31 is B (a distribution pattern of “x” in FIG. 7). For example, when the corresponding user is the user A, in step S42, whether the same user corresponds depending on whether the distribution pattern of the finger distance and the inter-tap distance obtained in step S22 is the same as the pattern P3. It is determined whether or not.

  When the same user corresponds (step S42; YES), the CPU 11 refers to the authentication table 30 stored in the flash memory 17, and the distribution pattern of the tap time and the frequency of the feature information obtained in step S22 is as follows. It is determined whether or not the same user corresponds to the tap time 324 and the frequency distribution pattern of the user ID 31 of the corresponding user in step S41 (step S43).

  In step S43, for example, as shown in FIG. 8, it is assumed that the distribution of the tap times 324 is stored in the authentication table 30. The pattern P5 is a distribution pattern of the user A whose user ID 31 is A (a distribution pattern of “◯” in FIG. 8). The pattern P6 is a distribution pattern of the user B whose user ID 31 is B (distribution pattern of “x” in FIG. 8). For example, when the corresponding user is the user A, in step S43, whether or not the same user corresponds depending on whether or not the distribution pattern of the tap time and the frequency obtained in step S22 is the same as the pattern P5. Is determined.

  When the same user is applicable (step S43; YES), the CPU 11 refers to the authentication table 30 stored in the flash memory 17, and the tap area of the feature information obtained in step S22 and the frequency distribution pattern thereof are It is determined whether or not the same user corresponds to the tap area 325 and the frequency distribution pattern of the user ID 31 of the corresponding user in step S41 (step S44).

  In step S44, for example, as shown in FIG. 9, it is assumed that the distribution of the tap area 325 is stored in the authentication table 30. The pattern P7 is a distribution pattern of the user A whose user ID 31 is A (a distribution pattern of “◯” in FIG. 9). The pattern P8 is a distribution pattern of the user B whose user ID 31 is B (a distribution pattern of “x” in FIG. 9). For example, when the corresponding user is the user A, in step S44, whether or not the same user corresponds depending on whether or not the distribution pattern of the tap area and the frequency obtained in step S22 is the same as the pattern P7. Is determined.

  When the same user corresponds (step S44; YES), the CPU 11 sets the success of the user authentication of the corresponding user in step S41, displays that fact on the display unit 14 (step S45), and performs the first user authentication process. Exit. After step S45, programs and data that are permitted to be used only by the corresponding user can be used.

  If there is no corresponding user (step S41; NO), the CPU 11 sets failure of user authentication, displays that fact on the display unit 14 (step S46), and ends the first user authentication process. When the same user does not correspond (step S42; NO), when the same user does not correspond (step S43; NO), or when the same user does not correspond (step S44; NO), the process proceeds to step S46.

  Returning to FIG. 4, after executing step S23, the CPU 11 determines whether or not the user authentication is successful in step S23 (step S24). When user authentication fails (step S24; NO), the process proceeds to step S21.

  If the user authentication is successful (step S24; YES), the CPU 11 updates the feature information of the user ID 31 of the corresponding user in the authentication table 30 with the feature information stored in the RAM 13 in the immediately preceding step S22 or S28 (step S24). S25). The feature information of the authentication table 30 may be additionally updated. And CPU11 discriminate | determines whether an operation process is complete | finished according to operation of the key operation part 12a or the touch panel 12b (step S26). When the operation process ends (step S26; YES), the operation process ends.

  When the operation process is not ended (step S26; NO), the CPU 11 displays an operation screen after login on the display unit 14 (step S27). The post-login operation screen is various touch input operation screens displayed after successful user authentication (login), and can be operated by an authenticated user. On the post-login operation screen, an operation using the program and data that the login user is permitted to use after login is possible. It is assumed that the touch input content on the operation screen after login can obtain sufficient touch input information to obtain feature information.

  Then, the CPU 11 receives a touch input corresponding to the post-login operation screen in step S27 through the touch panel 12b, calculates and acquires characteristic information according to the obtained information and time information obtained from the time measuring unit 20, and acquires the RAM 13 (Step S28). In step S28, feature information is acquired in the same manner as in step S12 of the user registration process of FIG.

  Then, the CPU 11 performs the same user authentication process (step S29). Here, the first identical user authentication process as the identical user authentication process in step S29 will be described with reference to FIG. First, the CPU 11 refers to the authentication table 30 stored in the flash memory 17, and the user authentication succeeds in step S24 with respect to the distribution pattern of the inter-tap time interval and the inter-tap distance of the feature information obtained in step S28. It is determined whether the same user corresponds to the distribution pattern of the inter-tap time interval 322 and the inter-tap distance 321 of the user ID 31 of the corresponding user (step S51).

  Steps S52 to S56 are the same as steps S42 to S46 of the first user authentication process of FIG.

  Returning to FIG. 4, after executing step S29, the CPU 11 determines whether or not the user authentication is successful in step S29 (step S30). When the user authentication is successful (step S30; YES), the process proceeds to step S25.

  When user authentication fails (step S30; NO), the CPU 11 performs a lock setting that disables the use of the mobile terminal 10 (program and data used after login), and indicates that the user is no longer identified and the lock setting. Is displayed on the display unit 14 and the notification unit 19 is notified with an alarm sound (step S31), and the process proceeds to step S21.

  As described above, according to the present embodiment, the mobile terminal 10 uses the touch input characteristics of the inter-tap distance, the inter-tap time interval, the finger distance, the tap time, and the tap area according to the touch input information to the touch panel 12b. Information is acquired, and it is determined whether or not there is a user whose distribution pattern of the acquired feature information is the same as the distribution pattern of the feature information in the authentication table 30 stored in the flash memory 17. If there is, the user is identified (authenticated). For this reason, in user identification (authentication), since the user does not perform touch input intended to input a password and the user does not need to store and input a password, the user's workload can be reduced. In addition, since it is not a touch input intended for password input, even if another person peeks at the touch input, characteristic information cannot be obtained and imitation cannot be performed, thereby preventing unauthorized user identification (authentication) by peeping at another person. it can.

  In addition, the mobile terminal 10 has a distribution pattern of a distance between taps—a time interval between taps, a distance between fingers—a distance between taps, a tap time, and a tap area as a plurality of pieces of feature information acquired by touch input. Then, it is determined whether or not there is a user who is the same as the distribution pattern of the same type of feature information in the authentication table 30 stored in the flash memory 17, and if there is a corresponding user, the user is identified (authentication). To do. For this reason, a user can be identified (authenticated) more accurately.

  Further, when the user is identified (authenticated), the mobile terminal 10 stores (updates) the feature information of the user used for the user identification as a record of the authentication table 30 in the flash memory 17. Therefore, the feature information stored in the flash memory 17 as a verification source can be easily acquired, and the latest touch input feature of the user can be reflected in the feature information of the flash memory 17. For example, even when the user's proficiency level for the operation increases, the user can be accurately identified (authenticated) using the feature information whose proficiency level has increased.

  In addition, after the user is identified (authenticated), the mobile terminal 10 acquires the feature information according to the touch input information to the touch panel 12b and is acquired after the user is identified. When the distribution pattern of the feature information is the same as the distribution pattern of the feature information of the user in the authentication table 30 stored in the flash memory 17, and the distribution pattern of the feature information of the user is the same Then, the user is identified (authenticated) again. For this reason, as long as the same user performs touch input after user identification (authentication), user identification (authentication) can be performed. Even after the user identification (authentication) is performed, even if the portable terminal 10 passes over to another person, the user identification (authentication) of the other person can be omitted.

  In addition, after the user is identified (authenticated), the mobile terminal 10 sets a lock on the use of the mobile terminal 10 when the user is not identified (authenticated) again. For this reason, even after the user identification (authentication) is performed, even if the portable terminal 10 passes over to another person, unauthorized use of the portable terminal 10 by others can be prevented.

  In addition, after performing user identification (authentication), the mobile terminal 10 causes the notification unit 19 to notify that the user is no longer identified (authenticated) when the user is not identified (authenticated) again. For this reason, even after the user identification (authentication) is performed, even if the portable terminal 10 passes over to another person, the intention of use by the other person can be notified to the user or the like.

(Modification)
A modification of the above embodiment will be described with reference to FIGS. FIG. 11 shows the second user authentication process. FIG. 12 shows the second identical user authentication process.

  In the present modification, the mobile terminal 10 is used as the device configuration as in the above embodiment. As operations of the mobile terminal 10, the user registration process of FIG. 3 and the operation process of FIG. 4 are executed. However, the user authentication process in step S23 of the operation process is the second user authentication process in FIG. 11 instead of the first user authentication process in FIG. 5, and the same user authentication process in step S29 of the operation process is Instead of the tenth first identical user authentication process, the second identical user authentication process of FIG. 12 is assumed.

  The second user authentication process will be described with reference to FIG. First, the CPU 11 initializes a score as a variable for determining whether or not the user authentication is successful (step S61). The score in step S61 is the score for each user. Then, the CPU 11 refers to the authentication table 30 stored in the flash memory 17, and the distribution pattern of the inter-tap time interval and the inter-tap distance of the feature information obtained in step S22 is the inter-tap time interval 322 and the inter-tap interval. It is determined whether or not there is a corresponding user having the same distribution pattern as the distance 321 (step S62).

  When there is a corresponding user (step S62; YES), the CPU 11 adds a predetermined number to the score of the corresponding user in step S62 (step S63).

  Then, the CPU 11 refers to the authentication table 30 stored in the flash memory 17, and the distribution pattern of the finger distance and the inter-tap distance of the feature information obtained in step S22 is the finger distance 323 and the inter-tap distance 321. It is determined whether or not there is a corresponding user having the same distribution pattern (step S64).

  If there is no corresponding user (step S62; NO), the process proceeds to step S64. When there is a corresponding user (step S64; YES), the CPU 11 adds a predetermined number to the score of the corresponding user in step S64 (step S65).

  Then, the CPU 11 refers to the authentication table 30 stored in the flash memory 17, and the tap time and the frequency distribution pattern of the feature information obtained in step S22 are the same as the tap time 324 and the frequency distribution pattern. It is determined whether or not there is a corresponding user (step S66).

  If there is no corresponding user (step S64; NO), the process proceeds to step S66. When there is a corresponding user (step S66; YES), the CPU 11 adds a predetermined number to the score of the corresponding user in step S66 (step S67).

  Then, the CPU 11 refers to the authentication table 30 stored in the flash memory 17, and the tap area of the feature information obtained in step S22 and the frequency distribution pattern thereof are the tap area 325 of the authentication table 30 and the frequency thereof. It is determined whether or not there is a corresponding user having the same distribution pattern (step S68).

  If there is no corresponding user (step S66; NO), the process proceeds to step S68. When there is a corresponding user (step S68; YES), the CPU 11 adds a predetermined number to the score of the corresponding user in step S69 (step S69).

  And CPU11 discriminate | determines whether the score of a user with the highest score is more than the preset reference value (step S70). When the user score ≧ reference value (step S70; YES), the CPU 11 sets the user authentication success of the corresponding user with the score equal to or higher than the reference value, and displays that fact on the display unit 14 (step S71). The second user authentication process is terminated.

  When the score of the user is smaller than the reference value (step S70; NO), the CPU 11 sets a failure of user authentication, displays that fact on the display unit 14 (step S72), and ends the second user authentication process. .

  The second same user authentication process will be described with reference to FIG. First, the CPU 11 initializes the score of the user who input the touch in step S28 (step S81). Then, the CPU 11 refers to the authentication table 30 stored in the flash memory 17, and the user authentication succeeds in step S24 in the distribution pattern of the inter-tap time interval and the inter-tap distance of the feature information obtained in step S28. It is determined whether the same user corresponds to the distribution pattern of the inter-tap time interval 322 and the inter-tap distance 321 of the user ID 31 of the corresponding user (step S82).

  When the same user corresponds (step S82; YES), the CPU 11 adds a predetermined number to the score of the user touch-inputted in step S28 (step S83).

  Then, the CPU 11 refers to the authentication table 30 stored in the flash memory 17, and the distribution pattern of the finger distance and the inter-tap distance of the feature information obtained in step S 28 corresponds to the user authentication succeeded in step S 24. It is determined whether or not the same user corresponds to the distribution pattern of the finger distance 323 and the inter-tap distance 321 of the user ID 31 of the user (step S84).

  When the same user does not correspond (step S82; NO), the process proceeds to step S84. When the same user corresponds (step S84; YES), the CPU 11 adds a predetermined number to the score of the user touch-inputted in step S28 (step S85).

  Then, the CPU 11 refers to the authentication table 30 stored in the flash memory 17, and the tap time of the feature information obtained in step S28 and the frequency distribution pattern of the corresponding user who has succeeded in user authentication in step S24. It is determined whether the same user corresponds to the distribution pattern of the tap time 324 and the frequency of the user ID 31 (step S86).

  When the same user does not correspond (step S84; NO), the process proceeds to step S86. When the same user corresponds (step S86; YES), the CPU 11 adds a predetermined number to the score of the user touch-inputted in step S28 (step S87).

  Then, the CPU 11 refers to the authentication table 30 stored in the flash memory 17, and the tap area of the feature information obtained in step S 28 and the frequency distribution pattern of the corresponding user who has been successfully authenticated in step S 24. It is determined whether the same user corresponds to the tap area 325 and the frequency distribution pattern of the authentication table 30 of the user ID 31 (step S88).

  When the same user does not correspond (step S86; NO), the process proceeds to step S88. When the same user corresponds (step S88; YES), the CPU 11 adds a predetermined number to the score of the user touch-inputted in step S28 (step S89).

  And CPU11 discriminate | determines whether the score of the user who input touch by step S28 is more than the preset reference value (step S90). When the user score is equal to or greater than the reference value (step S90; YES), the CPU 11 sets the success of the user authentication of the user touch-inputted in step S28, and displays that fact on the display unit 14 (step S91). The same user authentication process 2 is finished.

  When the score of the user is smaller than the reference value (step S80; NO), the CPU 11 sets the failure of the user authentication touch-input in step S28, and displays that fact on the display unit 14 (step S92). The same user authentication process is terminated.

  As described above, according to the present modification, the mobile terminal 10 includes, as the plurality of feature information acquired by touch input, the inter-tap distance-inter-tap time interval, the finger distance-inter-tap time interval, the tap time, Of the distribution patterns of the tap area, the points that are the same as the distribution patterns of the plurality of feature information in the authentication table 30 stored in the flash memory 17 are added for each user. It is determined whether or not there is a user that is equal to or greater than the value, and when there is a corresponding user, the user is identified (authenticated). For this reason, a user can be identified (authenticated) more accurately. Further, the ease (accuracy) of user identification (authentication) can be changed by changing the reference value.

In the above description, the example in which the ROM 15 is used as the computer-readable medium of the program according to the present invention is disclosed, but the present invention is not limited to this example.
As other computer-readable media, a non-volatile memory such as a flash memory and a portable recording medium such as a CD-ROM can be applied.
A carrier wave is also applied to the present invention as a medium for providing program data according to the present invention via a communication line.

  Note that the descriptions in the above embodiments and modifications are examples of the user identification device and the program according to the present invention, and the present invention is not limited to this.

  In the said embodiment and modification, although the portable terminal 10 as a user identification device was set as the handy terminal, it is not limited to this. The user identification device has a touch panel, ATM (Automated Teller Machine), kiosk terminal, ECR (Electronic Cash Register), PC (Personal Computer), PDA (Personal Digital Assistant), smartphone, mobile phone, etc. according to touch input Any device for user identification (authentication) may be used.

  Further, in the above-described embodiments and modifications, user identification (authentication) is performed by using the distance between taps, the time interval between taps, the distance of a finger (object of touch input), the tap time, and the tap area as feature information of touch input. However, the present invention is not limited to this. As the touch input feature information, a configuration may be adopted in which user identification (authentication) is performed using at least one of the distance between taps, the time interval between taps, and the distance of a finger (object of touch input).

  Moreover, in the said embodiment and modification, although the touch panel 12b was a thing of an electrostatic capacitance type, it is not limited to this. For example, the touch panel 12b may be another type of touch panel such as a resistive film type.

  Moreover, it is needless to say that the detailed configuration and detailed operation of each component of the mobile terminal 10 in the above embodiment can be changed as appropriate without departing from the spirit of the present invention.

Although the embodiments of the present invention have been described, the scope of the present invention is not limited to the above-described embodiments, but includes the scope of the invention described in the claims and the equivalents thereof.
The invention described in the scope of claims attached to the application of this application will be added below. The item numbers of the claims described in the appendix are as set forth in the claims attached to the application of this application.
[Appendix]
<Claim 1>
A touch panel that accepts touch input by a touch input object;
According to the information of the touch input to the touch panel, the tap-to-tap distance of a plurality of taps on the plane of the touch panel, the time interval between taps of the plurality of taps, the distance of the object of the touch input from the touch panel, A feature information acquisition unit that acquires at least one of them as touch input feature information;
A storage unit for storing feature information for each user;
When there is a user who determines whether or not there is a user whose feature information distribution pattern acquired by the feature information acquisition unit is the same as the distribution pattern of feature information stored in the storage unit. And a user identification unit that identifies the user.
<Claim 2>
Whether the user identification unit has a user whose distribution pattern of the plurality of feature information acquired by the feature information acquisition unit is the same as the distribution pattern of the plurality of feature information stored in the storage unit. The user identification device according to claim 1, wherein when there is a corresponding user, the user is identified.
<Claim 3>
For each user, the user identification unit is the same as the plurality of feature information distribution patterns stored in the storage unit among the plurality of feature information distribution patterns acquired by the feature information acquisition unit. The user identification device according to claim 1, wherein the user identification device is configured to add a score, determine whether there is a user whose score is equal to or higher than a reference value, and identify the user when there is a corresponding user.
<Claim 4>
4. The user according to claim 1, wherein, when the user is identified, the user identification unit stores the feature information of the user acquired by the feature information acquisition unit in the storage unit. 5. Identification device.
<Claim 5>
The feature information acquisition unit acquires feature information according to information of a touch input to the touch panel after the user is identified,
After the user is identified, the user identification unit has a feature information distribution pattern acquired by the feature information acquisition unit that is the same as the feature information distribution pattern stored in the storage unit. The user identification device according to any one of claims 1 to 4, wherein the user is identified again when the distribution pattern of the feature information of the user is the same.
<Claim 6>
The user identification device according to claim 5, wherein the user identification unit sets a lock for use of the own device when the user is not identified again.
<Claim 7>
With a notification unit,
The user identification device according to claim 5 or 6, wherein when the user is not identified again, the user identification unit notifies the notification unit that the user is no longer identified.
<Claim 8>
Computer
According to the information of the touch input to the touch panel that accepts the touch input by the touch input object, the tap-to-tap distance of the plurality of taps on the plane of the touch panel, the time interval between the taps of the plurality of taps, and the touch panel from the touch panel A feature information acquisition unit that acquires at least one of the distance of an object of touch input as feature information;
Determining whether there is a user whose distribution pattern of feature information acquired by the feature information acquisition unit is the same as the distribution pattern of feature information stored in the storage unit storing the feature information for each user; A user identification unit for identifying the user when there is a corresponding user,
Program to function as.

10 Mobile terminal 11 CPU
12a Key operation unit 12b Touch panel 13 RAM
14 Display 15 ROM
16 Wireless communication unit 17 Flash memory 18 Scanner unit 19 Notification unit 20 Timekeeping unit 21 Power supply unit 22 Bus

Claims (7)

When any multiple tap operations are performed by the user , the distance between taps, which is the distance between each tap operation position, and the time interval between taps, which is the time interval at the time of each tap operation, are acquired. Acquisition means to
Storage means for storing first feature information of the inter-tap distance and second feature information of the inter-tap time interval for each of a plurality of registered users;
Whether there is a registered user having first feature information and second feature information corresponding to both the inter-tap distance and the inter-tap time interval acquired by the acquiring unit among the registered users stored in the storage unit Determining means for determining whether or not
Authentication control means for controlling authentication for the user based on a determination result in the determination means;
A user authentication device comprising: It said acquisition means, the operation content of the tap operation of any multiple with respect to the touch panel by the user, acquires the distance between the tap and a time interval between the taps,
The user authentication device according to claim 1, wherein the this. It has a touch panel that can detect non-contact touch operations at spaced positions above the panel,
The acquisition means further acquires by the vertical distance between the non-contact distance in the touch panel above with the case where the user relative to the touch panel is tap operation in a non-contact,
The storage means further stores third feature information of the non-contact distance for each of the plurality of registered users.
If it is determined by the determining means that there is a registered user, it is further determined whether or not the third feature information of the registered user corresponds to the non-contact distance acquired by the acquiring means;
The user authentication device according to claim 1, characterized in that. An acquisition means for acquiring feature information of an inter-tap distance, which is a distance between the respective tap operation positions , from operation contents at the time of arbitrary multiple tap operations by the user;
If the feature information of the operation content acquired by the acquisition unit corresponds to any of the feature information of the inter-tap distance stored in advance for each of a plurality of registered users, the corresponding registered user is specified and the user User authentication means for permitting user authentication to
After user authentication by the user authentication means, a user corresponding to the feature information of the inter-tap distance in the operation content newly acquired by the acquisition means is specified when the user authentication is permitted by the user authentication means. Authentication control means for controlling whether to maintain the validity of the user authentication by the user authentication means, based on whether or not the same user as the registered user corresponds,
A user authentication device comprising: The acquisition means acquires the feature information of the inter-tap distance from the operation content at the time of multiple tap operations on the touch panel by the user,
The user authentication unit, wherein the information of the inter-tap distance in time tap operation acquired by the acquisition unit, corresponds to one of the characteristic information of the distance between the pre-stored said taps for each of the plurality of registered users If so, allow user authentication for the user,
The user authentication device according to claim 4 . A program for controlling a computer of a user authentication device that performs user authentication,
The computer,
When any multiple tap operations are performed by the user , the distance between taps, which is the distance between each tap operation position, and the time interval between taps, which is the time interval at the time of each tap operation, are acquired. Acquisition means,
Storage means for storing first feature information of the inter-tap distance and second feature information of the time interval between taps for each of a plurality of registered users;
Whether there is a registered user having first feature information and second feature information corresponding to both the inter-tap distance and the inter-tap time interval acquired by the acquiring unit among the registered users stored in the storage unit Discriminating means for discriminating
Authentication control means for controlling authentication for the user based on a result of determination by the determination means;
A program designed to function as A program for controlling a computer of a user authentication device that performs user authentication,
The computer,
An acquisition means for acquiring feature information of an inter-tap distance, which is a distance between the respective tap operation positions , from operation contents at the time of arbitrary multiple tap operations by the user,
If the feature information of the operation content acquired by the acquisition unit corresponds to any of the feature information of the inter-tap distance stored in advance for each of a plurality of registered users, the corresponding registered user is specified and the user User authentication means for permitting user authentication to
After user authentication by the user authentication means, a user corresponding to the feature information of the inter-tap distance in the operation content newly acquired by the acquisition means is specified when the user authentication is permitted by the user authentication means. Authentication control means for controlling whether or not the validity of the user authentication by the user authentication means is maintained based on whether or not the same user as the registered user corresponds.
A program designed to function as

Images