JP6585518B2 - Authentication system, method and program - Google Patents

Description

  The present invention relates to a technique for managing a user's exercise.

  Recently, biometric authentication using a wearable terminal has begun to appear. For example, Nymi (for example, see Non-Patent Document 1) that can perform identity verification by continuously acquiring an electrocardiogram from the wrist and can omit the authentication operation each time, or magatama (for example, for example, an external fingerprint authentication device) (See Non-Patent Document 2).

  For example, “magatama”, which is an external fingerprint authentication device, enables use of a biometric authentication function even in a smartphone without a biometric authentication function. “Nymi” is a wristband wearable terminal that keeps acquiring an electrocardiogram from the wrist to authenticate the person and eliminate the need for authentication using a conventional ID.

[Online], [Search January 26, 2016], Internet <URL: https://www.nymi.com/> [Online], [Search January 26, 2016], Internet <URL: http://www.dds.co.jp/newsdata/20151027/>

  However, the above techniques still have problems (1) and (2). (1) Since Nymi keeps acquiring electrocardiograms at all times, even if the user's attention such as sleeping or sleeping is not suitable for a mobile terminal such as a smartphone, in other words, the user holds the mobile terminal by hand. Even if it is not possible, a person other than the user can log in to the Web service by using the user's mobile terminal. Further, (2) magatama is an external fingerprint authentication device, and thus requires an authentication operation every time by the user.

  An object of the present invention is to provide an authentication system, method, and program in which authentication cannot be performed when the user does not hold the portable terminal by hand, and the user's attention is not required every time the user performs authentication work. It is to be.

An authentication system according to an aspect of the present invention includes a vibration request unit that transmits a vibration request signal to a wearable terminal when authentication is required, a sensor unit that detects vibrations that have reached the user's body from the wearable terminal, Receiving a vibration request signal and a portable terminal held by the user, including a determination unit that determines whether the authentication data that is data about the vibration and the predetermined learning data read from the storage unit match Then, including an oscillating unit that generates vibration, including a wearable terminal attached to the user's body, and an authentication system that succeeds in authentication when it is determined that the determination unit matches, The authentication data is converted to an absolute value after Fourier transforming the amplitude value of the vibrations that arrived from the wearable device through the user's body. This is the signal intensity spectrum PA (i) in each frequency band obtained by squaring, and the learning data is obtained by Fourier transforming the amplitude value at each time of a predetermined vibration and then square-converting the absolute value. The signal intensity spectrum PL (i) of each frequency band, and the determination unit has a similarity that is an absolute value of a difference between the signal intensity spectrum PA (i) and the signal intensity spectrum PL (i) being a predetermined threshold value or less. In this case, it is determined that the authentication data matches the learning data .
An authentication system according to an aspect of the present invention includes a vibration request unit that transmits a vibration request signal to a wearable terminal when authentication is required, a sensor unit that detects vibrations that have reached the user's body from the wearable terminal, Receiving a vibration request signal and a portable terminal held by the user, including a determination unit that determines whether the authentication data that is data about the vibration and the predetermined learning data read from the storage unit match Then, including an oscillating unit that generates vibration, including a wearable terminal attached to the user's body, and an authentication system that succeeds in authentication when it is determined that the determination unit matches, The authentication data is the attenuation rate R and delay time D of the signal that is the vibration that has reached the user's body from the wearable terminal, and the learning data , The average value mu _r and the standard deviation sigma _r attenuation rate signal a predetermined vibration, the average value mu _d and standard deviation sigma _d of the delay time of the signal, a, as any positive number b, determination unit is a damping factor R of the signal in the authentication data _{μ r -aσ r ≦ R ≦ μ} r + aσ r, and the delay time D in the authentication data _{μ d -bσ d ≦ D ≦ μ} d + bσ d In some cases, it is determined that the authentication data matches the learning data.

  If the user does not hold the portable terminal by hand, authentication cannot be performed, and the user's attention is not required every time the user performs authentication work.

The block diagram for demonstrating the example of an authentication system. The figure which shows the example of learning data. The figure which shows the example of learning data. The flowchart for demonstrating the example of an initial registration phase. The flowchart for demonstrating the example of an authentication phase. The figure for demonstrating the example of how to obtain | require learning data.

  Hereinafter, embodiments of an authentication system and method will be described with reference to the drawings.

[Overview]
A state in which the user 300 can easily recognize the mobile terminal 100 and the wearable terminal 200 that are, for example, smartphones without requiring an authentication operation every time (for example, both terminals are in contact with the skin of the user 300) We propose a system and method in which possession in is an authentication condition. As an example, the following system and method can be considered.

  The above-described authentication conditions correspond to the following (2) to (4). However, if the conditions that can be easily recognized by the user 300 are satisfied, not only the following examples but also a system configuration is possible.

  (1) The wearable terminal 200 and the portable terminal 100 are mutually registered.

  (2) The wearable terminal 200 worn on the wrist of the user 300 is vibrated from the mobile terminal 100.

  (3) The vibration generated by the wearable terminal 200 propagates through the fingers of the user 300.

  (4) The portable terminal 100 is held by the finger on the same side as the wearable terminal 200 and vibrations are detected using various sensors of the portable terminal 100.

  (5) The vibration obtained from the sensor is registered as learning data. Since the vibration propagates through the finger of the user 300, there is a difference between the vibration generated by the wearable terminal 200 and the vibration detected by the sensor of the mobile terminal 100. This difference is derived from the characteristics of the user's 300 fingers (musculoskeletal difference) and the characteristics of holding (the inclination of the mobile terminal 100 and the part of the hand in contact).

  (6) At the time of authentication, the vibration is detected using the sensor of the portable terminal 100 as in the above (1) to (4). The identity verification is possible by comparing the vibration propagated at the time of authentication with the learning data created in (5).

[Function configuration]
As illustrated in FIG. 1, the authentication system includes, for example, a mobile terminal 100, a wearable terminal 200, and a server 400. The mobile terminal 100 is an information mobile terminal such as a mobile phone, a smartphone, or a tablet terminal. The portable terminal 100 is held by the user's hand, and the wearable terminal 200 is attached to the user's body (for example, wrist).

  The mobile terminal 100 includes, for example, a communication unit 101, a man-machine unit 102, a sensor unit 103, a determination unit 104, a storage unit 105, a command unit 106, and a vibration request unit 107.

  The communication unit 101 communicates with the communication unit 201 of the wearable terminal 200. Further, the communication unit 101 stores the pairing data received from the wearable terminal 200 in the data table of the storage unit 105. Further, the communication unit 101 transmits the pairing data received from the wearable terminal 200 to the vibration request unit 107.

  The man machine unit 102 receives an input from the user 300 and operates the command unit 106.

  The sensor unit 103 detects vibration using an acceleration sensor and an angular velocity sensor, and stores it in a data table of the storage unit 105 as vibration input data.

  The determination unit 104 creates learning data (authentication data at the time of authentication) using the vibration input data and the vibration output data stored in the storage unit 105. Further, the determination unit 104 performs a match determination using the learning data stored in the storage unit 105 and the authentication data obtained at the time of authentication, and transmits the determination result to the server 400.

  The learning data and the authentication data may be created in the same way.

  The storage unit 105 stores a data table illustrated in FIGS. 2 and 3. The data table includes, for example, terminal data, pairing data, vibration output data, vibration input data, learning data, and authentication data.

  The terminal data is data related to the mobile terminal 100 such as the device ID, device name, and terminal number of the mobile terminal 100.

  The pairing data is data used for pairing between the portable terminal 100 and the wearable terminal 200 such as the device ID, device name, and terminal number of the wearable terminal 200 registered in the portable terminal 100.

  The vibration output data is vibration generation information (information such as vibration output ID, intensity, frequency, and duration) transmitted to the wearable terminal 200.

  The vibration input data is information of vibration detected from the sensor unit 103 (information such as vibration input ID, intensity, frequency, time delay, duration, etc.).

  The learning data is generated by the determination unit 104 using the vibration output data and the vibration input data in the initial registration. The learning data is information such as a learning ID, strength reduction, frequency, delay time, and duration difference.

  The authentication data is generated by the determination unit 104 using vibration output data and vibration input data at the time of authentication. The authentication data is information such as a learning ID, strength reduction, frequency, delay time, and duration difference.

  The command unit 106 is called by the man machine unit 102 and transmits terminal data stored in the storage unit 105 to the communication unit 101. In addition, the instruction unit 106 is called by the server 400 and transmits terminal data stored in the storage unit 105 to the communication unit 101. The instruction unit 106 is called by the communication unit 101 and transmits the pairing data received from the wearable terminal 200 to the vibration request unit 107.

  The vibration request unit 107 is called by the command unit 106 and receives pairing data. When there is a wearable terminal number stored in the data table of the storage unit 105 that matches the received pairing data, the vibration output data read from the storage unit 105 to the wearable terminal 200 having the received wearable terminal number Registration vibration request signal or vibration request signal including Further, the vibration request unit 107 transmits the vibration output data to the sensor unit 103 simultaneously with the transmission of the vibration output data to the storage unit 105.

  The wearable terminal 200 includes, for example, a communication unit 201, a vibration unit 202, a storage unit 203, and a man machine unit 204.

  The communication unit 201 communicates with the mobile terminal 100. Further, the communication unit 201 transmits the received information to the vibration unit 202 or the storage unit 203.

  The vibration unit 202 vibrates based on vibration input data received from the communication unit 201.

  The storage unit 203 stores a data table. The data table is composed of terminal data and pairing data, for example.

  The terminal data is data related to the mobile terminal 100 such as the device ID, device name, and terminal number of the mobile terminal 100.

  The pairing data is data used for pairing between the portable terminal 100 and the wearable terminal 200 such as the device ID, device name, and terminal number of the wearable terminal 200 registered in the portable terminal 100.

  The man machine unit 204 receives input from the user 300 and transmits the pairing data stored in the storage unit 203 to the communication unit 201.

  Note that the authentication system and method include processes of [initial registration phase] and [authentication phase]. Hereinafter, each process of [initial registration phase] and [authentication phase] will be described.

[Initial registration phase]
First, an outline of the initial registration phase will be described with an example. As the initial registration, the wearable terminal 200 and the portable terminal 100 that is a smartphone, for example, are paired. The user 300 wears the wearable terminal on the wrist on one side and vibrates the wearable terminal while holding the mobile terminal 100 in the hand on the same side. The vibration propagates through the wrist and fingers and reaches the mobile terminal 100 held by the same hand. The portable terminal 100 detects vibration using a built-in acceleration sensor and angular velocity sensor. The detected vibration waveform is stored as learning data in the local storage of the mobile terminal 100. In addition, a password and an ID necessary for Web service authentication are registered in the mobile terminal 100.

  Hereinafter, an example of the initial registration phase will be described with reference to FIG.

  (1-1) The user 300 taps a registration button displayed on the screen of the mobile terminal 100.

  (1-2) The man-machine unit 102 of the mobile terminal 100 activates the command unit 106 using a tap of the registration button as a trigger. The instruction unit 106 transmits terminal data stored in the data table of the storage unit 105 from the communication unit 101 to the wearable terminal 200.

  (1-3) The wearable terminal 200 stores the received terminal data in the data table of the storage unit 203 and activates the vibration unit 202 to indicate reception of the terminal data.

  (1-4) The user 300 confirms that the wearable terminal 200 worn on the wrist vibrates, and presses the button of the man-machine unit 204 of the wearable terminal 200.

  (1-5) The wearable terminal 200 transmits the pairing data stored in the storage unit 203 to the portable terminal 100 when the button of the man-machine unit 204 is pressed as a trigger.

  (1-6) The command unit 106 of the mobile terminal 100 stores the received pairing data in the data table of the storage unit 105. The command unit 106 of the mobile terminal 100 transmits pairing data to the vibration request unit 107.

  (1-7) The vibration request unit 107 transmits a registered vibration request signal including vibration output data stored in the storage unit 105 to the wearable terminal 200 and the sensor unit 103.

  In this way, when performing initial registration, the vibration request unit 107 of the mobile terminal transmits a registration vibration request signal to the wearable terminal 200.

  (1-8) Wearable terminal 200 operates vibration unit 202 according to vibration output data included in the received registered vibration request signal. Thereby, a registration vibration which is a vibration at the time of initial registration occurs. The registered vibration is the same vibration that the vibration unit 202 generates when authentication is required in the [authentication phase].

  In this way, when the vibration unit 202 receives the registered vibration request signal, the vibration unit 202 generates a registered vibration that is the same vibration as the vibration generated when the vibration unit 202 requires authentication.

  (1-9) When the wearable terminal 200 vibrates by the vibration unit 202, the wrist of the user 300 wearing the wearable terminal 200 vibrates.

  (1-10) The sensor unit 103 detects the wrist vibration of the user 300 and creates vibration input data. The sensor unit 103 transmits the vibration input data and the vibration output data received from the vibration request unit 107 in the process (1-7) to the determination unit 104.

  In this way, the sensor unit 103 detects a registered vibration that has arrived from the wearable terminal 200 through the body of the user 300.

  (1-11) The determination unit 104 creates learning data using the received vibration input data and the vibration output data included in the registered vibration request signal.

  Various methods can be considered for the learning data generation algorithm, but any method may be used. For example, a signal attenuation rate, a vibration transmission delay time, and the like can be used as learning data. Further, the amplitude value of vibration at each time detected by the sensor unit 103 may be used as learning data.

  The signal attenuation rate is, for example, signal attenuation rate = (intensity of vibration detected by the sensor unit 103 of the portable terminal 100 / intensity of vibration generated by the vibration unit 202 of the wearable terminal 200). The vibration transmission delay time is, for example, an interval between the vibration start time generated by the vibration unit 202 of the wearable terminal 200 and the vibration intensity start time detected by the sensor unit 103 of the mobile terminal 100. See, for example, FIG. 6 for vibration intensity and delay time. The intensity of vibration is, for example, the absolute value of the difference between the minimum value and the maximum value of the signal amplitude.

  Regarding the creation of learning data, the required number of times of learning varies depending on the algorithm, but any algorithm may be used. The processing from (1-7) to (1-11) may be performed a plurality of times as required by each algorithm. For example, the average value and standard deviation of the signal attenuation rate and delay time may be obtained by performing these processes a plurality of times, and these may be used as learning data.

  (1-12) The determination unit 104 stores the created learning data in the data table of the storage unit 105.

  In this way, the determination unit 104 generates learning data that is data about the detected registration vibration that has been reached and stores the learning data in the storage unit 105. The learning data stored in the storage unit 105 is also referred to as predetermined learning data.

[Authentication Phase]
First, an outline of the authentication phase will be described with an example. When the user 300 accesses the server 400 that provides the Web service, an authentication request is generated from the Web service to the mobile terminal 100. The portable terminal 100 receives this authentication request and transmits a vibration request to the wearable terminal 200. The wearable terminal 200 receives a vibration request and generates a predetermined pattern of vibration. The portable terminal 100 acquires the propagated vibration using the above-described sensor. The portable terminal 100 compares the vibration waveform obtained at the time of authentication with the learning data, and performs a match determination. If the results match, the mobile terminal 100 inputs the password and ID registered in the Web service and performs authentication. If the results do not match, restrict authentication to the Web service.

  Hereinafter, an example of the authentication phase will be described with reference to FIG.

  (2-1) When an authentication request from the server 400 to the portable terminal 100 is generated, the command unit 106 of the portable terminal 100 outputs terminal data stored in the storage unit 105 to the wearable terminal 200.

  (2-2) The wearable terminal 200 that has received the terminal data 112 transmits the pairing data stored in the storage unit 203 to the mobile terminal 100.

  (2-3) The command unit 106 of the mobile terminal 100 transmits the received pairing data to the vibration request unit 107.

  (2-4) The vibration request unit 107 transmits vibration output data to the pairing data in the data table that matches the received pairing data. A vibration request signal including vibration output data is transmitted to the sensor unit 103.

  In this way, the vibration request unit 107 transmits a vibration request signal to the wearable terminal 200 when authentication is required.

  (2-5) Wearable terminal 200 operates vibration unit 202 in accordance with vibration output data included in the received vibration request signal.

  (2-6) When the wearable terminal 200 vibrates by the vibration unit 202, the wrist of the user 300 wearing the wearable terminal 200 vibrates.

  (2-7) The sensor unit 103 detects the wrist vibration of the user 300 and creates vibration input data. The sensor unit 103 transmits the vibration input data and the vibration output data received from the vibration request unit 107 in the process (2-4) to the determination unit 104.

  In this way, the sensor unit 103 detects the vibration that has reached the wearer terminal 200 through the body of the user 300.

  (2-8) The determination unit 104 creates authentication data using the received vibration input data and vibration output data.

  Various methods can be considered for the authentication data creation algorithm, but any method may be used. For example, a signal attenuation rate, a vibration transmission delay time, and the like can be used as authentication data. Further, the amplitude value of vibration at each time detected by the sensor unit 103 may be used as authentication data.

  The signal attenuation rate is, for example, signal attenuation rate = (intensity of vibration detected by the sensor unit 103 of the portable terminal 100 / intensity of vibration generated by the vibration unit 202 of the wearable terminal 200). The vibration transmission delay time is, for example, an interval between the vibration start time generated by the vibration unit 202 of the wearable terminal 200 and the vibration intensity start time detected by the sensor unit 103 of the mobile terminal 100. See, for example, FIG. 6 for vibration intensity and delay time. Note that the attenuation rate of the signal may be obtained by further utilizing at least one of the frequency and the duration in FIG.

  (2-9) The determination unit 104 determines whether the created authentication data matches the learning data stored in the storage unit 105, and transmits the determination result to the server 400.

  Various methods are conceivable for the algorithm for determining the match between the learning data and the authentication data, but any method may be used. For example, it may be determined to be a match only in the case of a complete match, or may be determined to be a match if the similarity between the authentication data and the learning data is calculated instead of a complete match and the similarity is equal to or less than a predetermined threshold. Good.

  For example, the absolute value of the difference between the signal attenuation rate in the learning data and the signal attenuation rate in the authentication data is Δ attenuation rate, and the absolute value of the difference between the delay time in the learning data and the delay time in the authentication data is Δ delay time. The non-increasing function for each of the Δ attenuation rate and the Δ delay time is F, and the output value F (Δ attenuation rate, Δ delay time) when the Δ attenuation rate and the Δ delay time are input to the function F is the similarity. And

  In addition, when the amplitude value of vibration at each time detected by the sensor unit 103 is used as learning data or authentication data, for example, each frequency obtained by performing a Fourier transform on the learning data and then performing an absolute value conversion and squaring. The signal intensity spectrum of the band is PL (i) (where i represents a frequency (for example, if 1 to 1000 Hz, i represents a value from 1 to 1000 in increments of 1)), and authentication data is Fourier transformed Let PA (i) be the signal intensity spectrum of each frequency band obtained by absolute value conversion and squaring. In this case, the absolute value of the difference between PL (i) and PA (i) may be used as the similarity.

When the average value and standard deviation of the attenuation rate and delay time of the signal are used as learning data, the average value μ _r and standard deviation σ _r of the attenuation rate of the learning data signal and the learning data Based on the average value μ _d of the signal delay time and the standard deviation σ _d , it may be determined whether or not they match. For example, a and b are arbitrary positive numbers, the signal attenuation rate R in the authentication data is μ _r −aσ _r ≦ R ≦ μ _r + aσ _r , and the delay time D in the authentication data is μ _d −bσ _{If d} ≦ D ≦ μ _d + bσ _d , it may be determined that they match, and otherwise, it may be determined that they do not match.

  In this way, the determination unit 104 determines whether the authentication data, which is data about the reached vibration, matches the predetermined learning data read from the storage unit 105.

  Thus, since it is a necessary condition for authentication that the portable terminal 100 and the wearable terminal 200 are possessed at the same time, when the attention of the user 300 such as sleeping or waking is not suitable for a portable terminal such as a smartphone, A person other than the user 300 can also use the mobile terminal of the user 300 to prevent a threat that the user can log in to the Web service, for example. In addition, the wearable terminal 200 attached to, for example, a wrist at the time of authentication only vibrates and does not require an active authentication operation, which is convenient.

[Program and recording medium]
When each process in the mobile terminal 100 is realized by a computer, the processing contents of the functions that the mobile terminal 100 should have are described by a program. Then, by executing this program on a computer, each process is realized on the computer.

  The program describing the processing contents can be recorded on a computer-readable recording medium. As the computer-readable recording medium, any recording medium such as a magnetic recording device, an optical disk, a magneto-optical recording medium, and a semiconductor memory may be used.

  Each processing means may be configured by executing a predetermined program on a computer, or at least a part of these processing contents may be realized by hardware.

[Modification]
The processes described above are not only executed in chronological order according to the order of description, but may be executed in parallel or individually as required by the processing capability of the apparatus that executes the processes.

  Needless to say, other modifications are possible without departing from the spirit of the present invention.

DESCRIPTION OF SYMBOLS 100 Mobile terminal 101 Communication part 102 Man machine part 103 Sensor part 104 Determination part 105 Storage part 106 Command part 107 Vibration request part 200 Wearable terminal 201 Communication part 202 Vibration part 203 Storage part 204 Man machine part 300 User 400 Server

Claims (6)

A vibration request unit that transmits a vibration request signal to the wearable terminal when authentication is required, a sensor unit that detects vibrations that have traveled from the wearable terminal through the user's body, and authentication that is data about the reached vibrations A portable terminal held by the user's hand, including a determination unit that determines whether data and predetermined learning data read from the storage unit match;
Including a vibration unit that generates vibration when receiving the vibration request signal, and the wearable terminal attached to the user's body,
When the determination unit determines that they match, the authentication system assumes that the authentication is successful ,
The authentication data is a signal intensity spectrum PA ( i)
The learning data is a signal intensity spectrum PL (i) of each frequency band obtained by performing an Fourier transform on the amplitude value at each time of a predetermined vibration and then performing an absolute value conversion and squaring,
When the similarity, which is the absolute value of the difference between the signal intensity spectrum PA (i) and the signal intensity spectrum PL (i), is equal to or less than a predetermined threshold, the determination unit and the learning data Is determined to match,
Authentication system . A vibration request unit that transmits a vibration request signal to the wearable terminal when authentication is required, a sensor unit that detects vibrations that have traveled from the wearable terminal through the user's body, and authentication that is data about the reached vibrations A portable terminal held by the user's hand, including a determination unit that determines whether data and predetermined learning data read from the storage unit match;
Including a vibration unit that generates vibration when receiving the vibration request signal, and the wearable terminal attached to the user's body,
When the determination unit determines that they match, the authentication system assumes that the authentication is successful ,
The authentication data is an attenuation rate R and a delay time D of a signal that is a vibration that has reached the user's body from the wearable terminal,
The learning data includes an average value μ _r and a standard deviation σ _r of a signal attenuation rate that is a predetermined vibration, and an average value μ _d and a standard deviation σ _d of a delay time of the signal ,
a, b as any positive number, the determination unit is a decay rate of the signal in the authentication data R is _{μ r -aσ r ≦ R ≦ μ} r + aσ r, and the delay time in the authentication data D Determines that the authentication data and the learning data match when μ _d −bσ _d ≦ D ≦ μ _d + bσ _d ,
Authentication system . The authentication system according to claim 1 or 2 ,
When performing initial registration, the vibration request unit of the mobile terminal transmits a registration vibration request signal to the wearable terminal,
When the vibration unit receives the registration vibration request signal, the vibration unit generates a registration vibration that is the same vibration as the vibration generated when the vibration unit requires authentication,
The sensor unit detects a registered vibration that reaches the user's body from the wearable terminal,
The determination unit generates learning data that is data about the detected registration vibration that has arrived, and stores the learning data in the storage unit as the predetermined learning data.
Authentication system. The vibration requesting step of transmitting the vibration request signal to the wearable terminal attached to the user's body when the vibration request unit of the portable terminal held by the user's hand requires authentication,
A vibration step for generating a vibration when the vibration unit of the wearable terminal receives the vibration request signal;
A sensor step in which the sensor unit of the mobile terminal detects vibrations that reach the user's body from the wearable terminal; and
A determination step of determining whether the determination unit of the mobile terminal matches authentication data that is data about the reached vibration and predetermined learning data read from the storage unit;
When it is determined in the determination step that they match, the authentication method is assumed to be successful in the authentication ,
The authentication data is a signal intensity spectrum PA () for each frequency band obtained by Fourier transforming the amplitude value at each time of vibration reaching the user's body from the wearable terminal and then performing an absolute value conversion and squaring. i)
The learning data is a signal intensity spectrum PL (i) of each frequency band obtained by performing an Fourier transform on the amplitude value at each time of a predetermined vibration and then performing an absolute value conversion and squaring,
In the determination step, when the similarity that is the absolute value of the difference between the signal intensity spectrum PA (i) and the signal intensity spectrum PL (i) is equal to or less than a predetermined threshold, the authentication data and the learning data Is determined to match,
Authentication method . The vibration requesting step of transmitting the vibration request signal to the wearable terminal attached to the user's body when the vibration request unit of the portable terminal held by the user's hand requires authentication,
A vibration step for generating a vibration when the vibration unit of the wearable terminal receives the vibration request signal;
A sensor step in which the sensor unit of the mobile terminal detects vibrations that reach the user's body from the wearable terminal; and
A determination step of determining whether the determination unit of the mobile terminal matches authentication data that is data about the reached vibration and predetermined learning data read from the storage unit;
When it is determined in the determination step that they match, the authentication method is assumed to be successful in the authentication ,
The authentication data is an attenuation rate R and a delay time D of a signal that is a vibration that has reached the user's body from the wearable terminal,
The learning data includes an average value μ _r and a standard deviation σ _r of a signal attenuation rate that is a predetermined vibration, and an average value μ _d and a standard deviation σ _d of a delay time of the signal ,
a, b as any positive number, the determination unit is a decay rate of the signal in the authentication data R is _{μ r -aσ r ≦ R ≦ μ} r + aσ r, and the delay time in the authentication data D Determines that the authentication data and the learning data match when μ _d −bσ _d ≦ D ≦ μ _d + bσ _d ,
Authentication method . The program for functioning a computer as each part of the said portable terminal of the authentication system in any one of Claim 1 to 3 .

Images