JPH06161591A - Device and method for inputting password number - Google Patents

Abstract

PURPOSE:To provide a practical method and device for inputting password number for which the degree of security is sufficiently high and the input operation of the password number is simplified as well. CONSTITUTION:A password number input device 1 is provided with a control circuit 3, IC card reader/writer 5 connected to the control circuit, ten-key 7 for number input, and display 9. An IC card 12 carried by a user previously stores the plural kinds of password numbers and when the IC card is fed to the reader/writer 5, the control circuit 3 selects one of plural password numbers stored in the IC card 13 at random and displays a message on the display 9 for pressing the input of that number. Next, when the user inputs the number from the ten-key, the control circuit 3 compares the input number with the password number selected and read from the IC card 13 and when they are coincident, the control circuit judges the input of the right password number and permits the operation of an operating equipment 15.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a personal identification number input device and a personal identification number input method for enabling a device requiring security to operate.

[0002]

2. Description of the Related Art ATMs at banks and locks for entry / exit gates
For devices that require security, such as systems,
A security system is widely used in which a user first inputs a personal identification number before operating it, and only when the personal identification number is the same as the predetermined number of the user, the operation of the device is permitted.

In such a system, in order to enhance the certainty of security, a plurality of personal identification numbers are set in advance,
It is publicly known that the operation of the device is allowed only when all of them are correctly input (Japanese Patent Laid-Open No. 3-697).
No. 80).

[0004]

Although the conventional input method that requires inputting all of a plurality of personal identification numbers is certainly high in security, the operation for inputting all the personal identification numbers is troublesome. Therefore, ATMs and gate locks
There is a problem that it is not practical in a system such as a system that is used by many people frequently.

Therefore, an object of the present invention is that the degree of security is sufficiently high and the operation of inputting a personal identification number is simple.
It is to provide a practical PIN input method and device.

[0006]

According to the present invention, in a personal identification number input device for determining whether or not a correct personal identification number has been input by a user, a storage means for storing a plurality of predetermined personal identification numbers unique to the user, and a storage means. Selecting means for randomly selecting one of the plurality of secret codes, display means for displaying a message prompting the user to input the selected secret code, and for the user to input an arbitrary number There is provided a personal identification number input device comprising: an input means and a means for comparing the number input from the input means with the selected personal identification number and determining that the correct personal identification number has been input when they match.

[0007]

In the present invention, one personal identification number is randomly selected from a plurality of personal identification numbers stored and determined in advance, and a message prompting the user to enter the personal identification number is displayed. The user inputs the designated personal identification number in response to this display. Then, the entered number and the selected personal identification number are compared, and if they match,
It is determined that the correct PIN has been entered.

Since one personal identification number is randomly selected from a plurality of personal identification numbers, the personal identification number to be input differs depending on the time, and thus high security can be obtained. On the other hand, since the user's operation is only input of one type of personal identification number, the input operation is simple.

[0009]

1 is a block diagram of an embodiment of a personal identification number input device according to the present invention.

In FIG. 1, a personal identification number input device 1 has a control circuit 3 which is composed of, for example, a microcomputer for controlling the entire device, and the control circuit 3 communicates with an IC card 13 carried by a user. An IC card reader / writer 5, a numeric keypad 7 for the user to input a number, a display 9 for displaying an instruction message to the user, and an operating device (for example, an electric lock of the gate lock system) 15. An interface 11 for connecting is connected.

When inputting the personal identification number to the personal identification number input device 1, the user first has the IC card 13 possessed by the user.
Is fed to the IC card reader / writer 5. This I
The C card 13 has an IC memory 17 built-in.
In the C card memory 17, as shown in FIG. 2, a plurality of types of personal identification numbers, such as a telephone number, a business office code, a name code, etc., unique to the user, which are arbitrarily determined by the user, are stored in the storage area No. They are stored in 1, 2, and 3, respectively. This storage area No. 1, 2, and 3 are the "personal identification number" and the "telephone number" and "business code" indicating the type of the personal identification number.
Character information such as "name code" may be stored.

When the IC card 13 is fed to the reader / writer 5, the control circuit 3 controls the plurality of storage area numbers in the IC memory 17. 1, 2, 3, ... One of them is randomly selected. This random selection is, for example, the IC card 1
Select based on the time when the data was read from 3.
Alternatively, it is carried out by a method in which the user does not know the regularity of the selection, such as selecting based on the numerical value obtained by performing a predetermined calculation on the personal identification number of the person who has used this device before. Then, the control circuit 3 reads the character information from the selected storage area via the reader / writer 5 when the character information is stored in the storage area, or the number of the selected storage area or the read character. Using the information, the following instruction message is displayed on the display 9 (for example, when the storage area No. 1 is selected).

"Please enter the security code No. 1"
Alternatively, "Please input the telephone number." Next, the user inputs the instructed personal identification number from the ten keys 7 in accordance with this instruction message. Subsequently, the control circuit 3 reads the personal identification number from the selected storage area of the IC card 13, compares it with the number input by the user, and if they match, permits the operation of the operating device 15 via the interface 11. To do.

FIG. 3 shows a processing flow of the control circuit 3 in the above process.

When the IC card 13 is fed to the reader / writer 5, the control circuit 3 first checks whether or not the IC card is correctly inserted (S1).
One storage area in the IC memory 17 of the card 13 is randomly selected (S2), and a message prompting the input of the personal identification number corresponding to the selected storage area is displayed on the display 9 (S3). After that, when a number is input from the ten-key pad 7 (S4), the reader / writer is selected from the selected storage area.
The personal identification number (and character information) is read out via the writer 5 (S5). Then, the read personal identification number is compared with the input personal identification number (S6), and if they match each other, control for activating the operating device 15 is started (S7). On the other hand, if they do not match, the mismatch counter is incremented, and it is checked whether or not the number of mismatches reaches a specified number, for example, 3 times (S8). As a result, if the number of mismatches has not yet reached 3, the IC card 13 is ejected (S
9). However, if the number of disagreements reaches three, the leader /
The personal identification number in the IC memory 17 of the IC card 13 is erased or rewritten via the writer 5, changed to a card that cannot be used thereafter (S10), and ejected (S9). As a result, the unauthorized use of the IC card can be prevented not only in the system but also in other systems.

A preferred embodiment of the present invention has been described below, but the present invention is not limited to this embodiment and can be implemented in various modified modes. For example, in the above-described embodiment, the personal identification number of the user is stored in the IC card possessed by the user, and the personal identification number input device uses the IC.
Although the personal identification numbers are read from the card, an embodiment is possible in which a database storing the personal identification numbers of all users is provided on the personal identification number input device side, and the user side does not have a medium storing the personal identification numbers. Is.

[0017]

As described above, according to the present invention,
Since one of a plurality of PINs is randomly selected and the user is prompted to enter it, the security level is high in that the PIN to be entered is not fixed, and the user has only one PIN. Since it is only necessary to input, the operation is simple and highly practical.

[Brief description of drawings]

FIG. 1 is a block diagram showing an embodiment of a personal identification number input device according to the present invention.

[FIG. 2] An IC in which a plurality of personal identification numbers are stored in an IC card
Memory map.

FIG. 3 is a flowchart showing the processing of the control circuit of FIG.

[Explanation of symbols]

 1 PIN Input Device 3 Control Circuit 5 IC Card Reader / Writer 7 Numeric Keypad 9 Display 11 Interface 13 IC Card 15 Operating Device 17 IC Memory

Claims (2)

[Claims] 1. A personal identification number input device for determining whether or not a correct personal identification number has been input by a user, and a storage means for storing a plurality of predetermined personal identification numbers unique to the user, and the stored personal identification numbers among the plurality of stored personal identification numbers. Selecting means for randomly selecting one of the passwords, a displaying means for displaying a message prompting the user to input the selected personal identification number, an inputting means for the user to input an arbitrary number, and the inputting means. A personal identification number input device having a judgment means for comparing the number inputted from the above-mentioned and the selected personal identification number and judging that the correct personal identification number has been inputted when they match. 2. A method for determining whether or not a correct personal identification number has been input by a user, wherein a process of randomly selecting one of a plurality of predetermined personal identification numbers and inputting the selected personal identification number. A method of determining a personal identification number, including a step of displaying a message prompting the user to prompt the user, and a step of determining whether or not a correct personal identification number has been input by comparing the number input by the user with the selected personal identification number. .