JPH1131020A - Individual identifying method and recording medium stored with individual identifying program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To structure a security system which can secure high security level at low cost. SOLUTION: A user 103 registers a key word item and a key word associated with the key word item in an associative key word storage part 103 of a security system 401 in advance corresponding to a user name. Here, the security system 401 reads the registered key word item out of the associative key word storage part 104 in response to the input of the user name and displays it to the user, and when the user 103 inputs a key word for the displayed key word item, a security match decision part 108 of the security system 401 judges whether or not the inputted key word matches the key word registered for the key word item and identifies the user.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a personal identification method for identifying an individual in a security system for protecting the security of an information system, and a recording medium storing a personal identification program.

[0002]

2. Description of the Related Art FIG. 10 is a diagram for explaining the relationship between an information system and a security system. In FIG. 1, reference numeral 201 denotes an information system, which comprises a security system 101 and an information system main body 102. 10
Reference numeral 3 denotes a user who uses the information system 201.

In this information system 201, in order to protect data and programs in the information system main body 102,
The security system 101 performs a personality check, a qualification check, and the like of the user 103, so that only a suitable user can access the information system main body 102.

[0004] Conventionally, there are the following three methods for personal identification in such a security system, depending on the level of security. FIG.
A conventional method will be described with reference to FIG.

First, with reference to FIG. 11, an individual identification method 1 with a low security level, that is, an individual identification method 1 based on a user's memory will be described.

[0006] A pair of a user name and a password is registered in the security system 101 in advance (step S90).
1, S902). When individual identification is required in the information system 201, the security system 101 requests the user to enter a user name (step S903) and a password (step S904). When an input is made in response to this request, the password normally displays a character different from the input character (for example, “*” regardless of the input character) on the screen so as not to be stolen by another person. Next, the security system determines whether there is a match between the input user name-password pair and a previously registered user name-password pair (step). S905). If there is a matching set, it is identified as a correct user (step S906), and if there is no matching set, it is identified as an incorrect user (step S907).

Next, with reference to FIG. 12, a description will be given of a personal identification method 2 of an intermediate security level, that is, a personal identification method 2 based on an object owned by a user.

[0008] In advance, a personal identification medium (such as an IC card)
The user's password (step S1).
001). Usually, this recording requires a special device (such as an IC card writer), and is performed by the person managing the security system 101, not the user himself. The personal identification medium on which the password is recorded is owned by the user (step S1002). Information system 2
01 is connected to a personal identification medium reading device (such as an IC card reader) capable of reading a password recorded on the personal identification medium. When personal identification is required in the information system 201, the security system reads the user's password from the personal identification medium using the personal identification medium reader (step S100).
3) Next, the user is requested to input a password (step S1004). Further, the security system determines whether or not the password recorded on the personal identification medium matches the input password (step S1005). If they match, they are identified as correct users (step S1006), and if they do not match, they are identified as incorrect users (step S1007).

[0009] In the method 2, in addition to the password of the method 1, the user is allowed to own the personal identification medium, so that a higher security level can be secured than the method 1.

Next, with reference to FIG. 13, a personal identification method 3 of a high security level, that is, a personal identification method 3 based on the physical characteristics of the user will be described.

The information system 201 is connected to a device capable of capturing human physical characteristics (such as a fingerprint), for example, a physical characteristic capturing device. The physical characteristics of the user are registered in advance in the security system 101 of the information system 201 through the physical characteristics capturing device (step S110).
1). When identification of an individual is required in the information system 201, the security system 101 captures a physical feature from a user by a physical feature capture device (step S1102). Next, it is determined whether there is a match between the captured feature and a physical feature registered in the security system (step S110).
3). If there is a match, the user is identified as a correct user (step S1104). If there is no match, the user is identified as an incorrect user (step S1105).

[0012] In the method 2, there is a risk that another person may falsify the personal identification medium, but it is extremely difficult to forge a physical feature such as a fingerprint. Therefore, the method 3 can ensure a high level of security.

[0013]

However, the above-mentioned conventional methods 1 to 3 have the following problems, respectively.

Method 1: In general, insignificant alphanumeric characters are often used for passwords to prevent theft of others.
In addition, in order to prevent plagiarism, it is often operated to periodically request a password change. For this reason, there is a problem that the user forgets the password registered and cannot use the information system.

Method 2: In addition to the problem of Method 1, a problem that the user loses the personal identification medium and cannot use the information system, or a problem that the personal identification medium is stolen or forged by others. There is. In addition, there is a problem that a personal medium reading device is required and the cost for constructing a security system is increased.

Method 3: A body characteristic capturing device (such as a fingerprint reader) is generally expensive, and has a problem that the cost of constructing a security system is higher than that of the system according to Method 2.

The present invention has been made in view of the above,
An object of the present invention is to provide a personal identification method for constructing a security system capable of securing a high security level at a low cost, and a recording medium storing a personal identification program.

[0018]

According to one aspect of the present invention, there is provided a personal identification method for identifying an individual in a security system for protecting the security of an information system. In advance, a keyword item and a keyword associated with the keyword item are registered in advance, and the registered keyword item is displayed to the user in response to the input of the user name. The point is that the user inputs a keyword and determines whether the input keyword matches a keyword registered for the displayed keyword item to identify the user.

According to the first aspect of the present invention, a keyword item and a keyword are registered corresponding to the user name, and the registered keyword item is displayed in response to the input of the user name. The user inputs a keyword for the item and judges whether the entered keyword matches the keyword registered for the keyword item to identify the user. A high level of security can be ensured.

According to a second aspect of the present invention, there is provided a personal identification method for identifying an individual in a security system for protecting the security of an information system, comprising a plurality of keyword items and a plurality of keyword items corresponding to a user name. A plurality of keywords associated with each of the keyword items are registered in advance, and an arbitrary number of the keyword items among the registered keyword items are displayed to the user in response to the input of the user name. Then, the user inputs each keyword for each of the displayed keyword items, and determines whether or not each of the input keywords matches each of the keywords registered for each of the displayed keyword items. The gist is to judge the user and identify the user.

According to the second aspect of the present invention, a plurality of keyword items and a plurality of keywords are registered in correspondence with a user name, and a plurality of registered keywords are registered in response to a user name input. An arbitrary number of keyword items are displayed from among the items, the user inputs each keyword for each of the displayed keyword items, and each of the input keywords is registered for each of the keyword items. Since the user is identified by judging whether or not all the keywords match, it is possible to economically secure a high level of security.

Further, the present invention according to claim 3 provides the invention according to claim 1.
(3) In the invention described in (2), the registration process of the keyword item and the keyword corresponding to the keyword item can change, delete, and add only a set of the keyword item and the keyword corresponding to the keyword item or only the keyword. Is the gist.

According to the third aspect of the present invention, it is possible to change, delete and add only a combination of a keyword item and a keyword or only a keyword. Can be enhanced.

According to a fourth aspect of the present invention, there is provided a recording medium storing a personal identification program for identifying an individual in a security system for protecting the security of an information system. A keyword associated with the keyword item is registered in advance, and the registered keyword item is displayed to the user in response to the input of the user name, and the user inputs the keyword in response to the displayed keyword item. The gist of the present invention is to determine whether or not the input keyword matches a keyword registered for the displayed keyword item to identify a user.

According to the fourth aspect of the present invention, a keyword item and a keyword are registered in correspondence with the user name, and the registered keyword item is displayed in response to the input of the user name. The user inputs a keyword for the item, and determines whether or not the entered keyword matches the keyword registered for the keyword item, and uses a personal identification program for identifying the user as a recording medium. Since the information is recorded, a high level of security can be secured economically, and the distribution of the personal identification program can be enhanced.

According to a fifth aspect of the present invention, there is provided a personal identification method for remotely identifying an individual in a security system for protecting the security of an information system, wherein a keyword item and a keyword item corresponding to a user name are provided. A keyword associated with is registered in the security system in advance, and the registered keyword item is displayed on the pager of the user or the display device of the mobile phone in response to a remote input of the user name, The user inputs a keyword for the displayed keyword item, and determines whether or not the input keyword matches the keyword registered for the displayed keyword item to determine the user. The gist is to identify.

According to the fifth aspect of the present invention, a keyword item corresponding to a user name and a keyword associated with the keyword item are registered in the security system in advance, and a remote user name is registered. For the input of
The registered keyword item is displayed on the pager of the user or the display device of the mobile phone, and the user inputs a keyword for the displayed keyword item, and the entered keyword is the displayed keyword. Since the user is identified by determining whether or not the keyword matches the keyword registered for the item, a high level of security can be economically secured even in the case of remote personal identification.

The present invention according to claim 6 aims at protecting the security of an information system, and identifies an individual in a security system comprising a security system main body on a computer and a storage medium with a display device incorporating a clock. A personal identification method for registering a plurality of keyword items in the storage medium, and a plurality of keywords associated with each of the plurality of keyword items together with a user name in the security system main body in advance. The storage medium selects a keyword item from the plurality of registered keyword items by a function using the time of the built-in clock as a parameter and displays the keyword item on a display device of the storage medium. Enter the keyword for the keyword item displayed on the medium into the security system itself The security system main unit selects a keyword from the plurality of keywords corresponding to the input user name using the same function as that of the storage medium using time as a parameter, and determines whether or not the keyword matches the input keyword. The point is to judge and identify the user.

According to the present invention, a keyword item corresponding to the user name is registered in the storage medium, and a keyword associated with the keyword item is registered in the security system body in advance. The storage medium displays the registered keyword items on a display device of the storage medium based on the time of an internal clock, and a user inputs a user name and a keyword for the keyword item displayed on the storage medium to the security system main body. Input, the security system main body selects a keyword from the input user name and time using the same function as that of the storage medium, determines whether or not the keyword matches the input keyword, and identifies the user. As a result, a high level of security can be economically secured even in the case of remote personal identification.

[0030]

Embodiments of the present invention will be described below with reference to the drawings.

FIG. 1 is a block diagram showing a configuration of a security system for implementing a personal identification method according to one embodiment of the present invention. In the figure, 401 is a security system, 102 is a security system 102
The information system main body 103 to be protected by the user is a user who uses the information system main body 102 and the security system 401. The security system 401
An associative keyword storage unit 104, a user selection unit 105, a maintenance unit 106, an association item selection unit 107, and a keyword match determination unit 108. Further, a plurality of user names 109 are stored in the associative keyword storage unit 104, and a plurality of sets of the associative items 110 and the keywords 111 are stored under each user name 109.

Next, the personal identification processing will be described in detail with reference to the flowchart shown in FIG. First, the pre-registration processing will be described. The user 103 inputs his / her user name into the maintenance unit 106 (step S
201). The maintenance unit 106 prompts the user 103 to input an association item and a keyword, and stores the set of the association item and the keyword input from the user 103 in the corresponding user name of the association keyword storage unit 104 (step S202). Until the registration is completed, step S202 is repeated for the association item and the keyword (step S203).

Next, the personal identification processing will be described. When a request for personal identification comes from the information system main body 102,
The user selection unit 105 prompts the user 103 to input a user name, and passes the user name input from the user 103 to the association item selection unit 107 (Step S204).

The associative item selecting unit 107 randomly selects one of the associative item-keyword sets in the associative keyword storage unit 104 corresponding to the designated user name, and sends the associated items to the user 103. The keyword is displayed and the keyword is passed to the keyword determination unit 108 (step S
205). The user 103 inputs a keyword corresponding to the association item (step S206).

The keyword determination unit 108 compares the keyword passed from the association item selection unit 107 with the keyword corresponding to the association item input from the user 103 (step S207). It is determined whether or not the number of keywords has reached the predetermined number, and if not, a request is made to the associative item selection unit 107 to select the next associative item-keyword (step S20).
8).

Here, if they match and the number of compared keywords has reached the predetermined number, the user 103 returns a personal identification result to the effect to the information system main body 102 (step S209). If they do not match,
The personal identification result indicating that the user 103 is incorrect is returned to the information system main body 102 (step S210).

Next, the process of changing the association item and the keyword will be described with reference to the flowchart of FIG. The user 103 inputs his / her user name into the maintenance unit 106 (step S301). Maintenance unit 10
6 prompts the user 103 to input an old association item-keyword set, and receives an input from the user 103 (step S).
302).

The maintenance unit 106 determines whether or not the old association item-keyword group input from the user 103 exists in the association item-keyword group of the corresponding user name in the association keyword storage unit 104 (step S3).
03). If it does not exist, the change is not possible and the change operation ends (step S304).

If there is an old association item-keyword group input from the user 103, the maintenance unit 106
Deletes the input association item-keyword group from the association keyword storage unit 104, prompts the user 103 to input a new association item and a new keyword, and receives the input from the user 103 (step S305). Maintenance unit 106
Stores the combination of the association item and the keyword input from the user 103 at the corresponding user name in the association keyword storage unit 104 (step S306).

The addition / deletion of the association item-keyword group can be performed in the same manner. Next, the process of changing only the keyword will be described with reference to the flowchart of FIG.
The user 103 inputs his / her user name into the maintenance unit 106 (step S401). Maintenance part 1
06 prompts the user 103 to input an association item-old keyword group, and receives an input from the user 103 (step S402). The maintenance unit 106 determines whether the association item-old keyword set input from the user 103 exists in the association item-keyword set of the corresponding user name in the association keyword storage unit 104 (Step S4).
03). If not, the change is not possible and the change process ends (step S404).

If there is, the maintenance unit 106 prompts the user 103 to input a new keyword, and the user 1
03 (step S405). The maintenance unit 106 registers the input keyword as a new keyword in the associated item of the corresponding user name in the associated keyword storage unit 104 (Step S406).

In the above-described conventional method 1, the user name and the password are in a one-to-one correspondence.
The user name and the keyword have a one-to-n relationship. And
Conventional method 1 has one password, so plagiarism,
To avoid forgery, for example, “Q7RD2F”, “2M
A character string that cannot be easily analogized, such as ORI8 ", must be used. On the other hand, in the present embodiment, a large number (for example, 10) of keywords are registered, and a random number of the keywords is registered to the user. Since some (for example, three) inputs are required, plagiarism is difficult, and natural words can be used as keywords, and the risk of forgetting the keywords can be reduced.

Although the conventional method 1 has no means for prompting the user to recall a password, the present embodiment presents an associative item for recalling a keyword from the security system side. In the conventional method 1, a user name is presented from the system side depending on the security system. However, the user name is generally a user's last name (for example, “KATO”) and a password. Is a string that has nothing to do with it. Therefore, it is difficult for the user to look at the user name and remember the password. On the other hand, this embodiment presents an item that reminds the user of a keyword. For example, "grandfather" is presented as the association item, and the user may input "remote control" (the user has an association that "grandfather" is always looking for "remote control" on the television). .

The security system is, by its nature,
It is important to prevent so-called "keys" such as keywords from being stolen or falsified, and in the past, this was solved by making it difficult for others to understand (that is, difficult for the users themselves). The time when computers were used by some professionals was fine, but in today's era when computers penetrate everyday life and are used by everyone, from children to the elderly.
Furthermore, in the era of using various IC cards, a key composed of a character string that is "incomprehensible" is easily lost (that is, forgotten) and is difficult to use.

In order to solve these problems, the present embodiment focuses on the mental characteristics of human beings, and realizes the identification of personality by using many memories that cannot be associated without the user.

FIGS. 5 and 6 show examples of specific association item-keyword sets used at the time of registration, and FIGS. 7A and 7B show examples of use at the time of personal identification. As shown in FIGS. 5 and 6, the keywords in the present invention are very natural and easy to use for the user. On the other hand, as shown in FIG. 7, at the time of personal identification, the system randomly asks three of the ten associative item-keyword pairs, so that a person attempting to steal a keyword must steal all ten. There is a complete system (it is easy to realize so that the user can freely increase and decrease the number of association item-keyword pairs).

FIG. 8 is a block diagram for implementing the personal identification method according to claim 5 of the present invention. In the figure, reference numeral 501 denotes a wireless communication device, for example, a commercially available pager, PHS (Personal Handypho
Ne System) or a portable telephone for displaying the transmitted message. The basic movement is the same as that described with reference to FIG. The different part is that the associative item selection unit transmits the associative item as a message to the user's pager, PHS, or portable telephone corresponding to the input user name through the public telephone network, Is displayed on the display device. It can be easily realized by using a generally used computer connection method by telephone callback.

FIG. 9 is a block diagram for implementing the personal identification method according to claim 6 of the present invention. In the figure, reference numeral 601 denotes a security system main body, which is usually provided on a computer. 602 is a clock built in the security system main body, 610 is a storage medium with a display device, 611 is an associative item storage unit, 612 is a maintenance unit, 613 is an associative item selection unit, and 614 is a clock built in the storage medium. It is. Clock 602 and clock 614
Marks the same time. Also, the associative item selecting unit 107 and the associative item selecting unit 613
14, the association item displayed from the association item selection unit 613 and the keyword output from the association item selection unit 107 are in correspondence.

The difference between the processing of this embodiment and the embodiment of FIG. 1 is as follows. In the processing at the time of pre-registration in FIG. 2, the registration of the user name S201 is performed on the security system main body 601. The registration of the association item and the keyword S202 is such that the registration of the association item is performed through the maintenance unit 612 of the storage medium 610 and the association item storage unit 611.
The keyword is registered in the associative keyword storage unit 104 through the maintenance unit of the security system main unit 601. The association between the associative items and the keywords can be realized by assigning serial numbers (attached to the associative items and keywords in FIG. 1; equivalent to 1, 2,..., 1,..., M).

In the personal identification process shown in FIG. 2, the input of the user name S204 is performed by the security system main unit 6.
01, and according to the user name and the input time,
The keyword is output from the association item selection unit 107. On the other hand, the display device of the storage medium 610 displays an association item corresponding to the input time to the security system main body 601. The processing after the keyword input S207 is performed by the security system main body 601.

[0051]

As described above, according to the present invention,
A keyword item and a keyword are registered corresponding to the user name, the registered keyword item is displayed in response to the input of the user name, and the user inputs a keyword in response to the keyword item. Since the user is identified by determining whether or not the keyword matches the keyword registered for the keyword item, the security system has a low risk of the user forgetting the keyword. And the use of the mental characteristics of human beings, ie, memories, enables the construction of a system with less risk of loss and forgery.
Since a special device such as a body characteristic capturing device is not used, a high level of security can be economically secured.

Further, in the present invention, a plurality of keyword items and a set of keywords are registered, and an arbitrary number of keyword items are selected from the registered keyword items in response to the input of the user name. Is displayed, and the user is identified by matching all of the keywords input for the plurality of keyword items, so that a higher level of security can be economically secured.

Further, according to the present invention, it is possible to change, delete, and add only a combination of a keyword item and a keyword or only a keyword, so that it is possible to perform setting according to a security level desired by a user. The security level can be increased by changing these periodically.

When personal authentication is performed from a remote place, there is a concern that security may be reduced due to wiretapping of association items and keywords between the user and the security system. By adopting the method of claim 5, since the path of the association item and the keyword are different between the user and the security system, the risk of eavesdropping and forgery is reduced, and higher security can be ensured. Further, by adopting the method of claim 6, since the associative item does not flow through the transmission path, higher security can be ensured.

[Brief description of the drawings]

FIG. 1 is a block diagram showing a configuration of a security system for implementing a personal identification method according to an embodiment of the present invention.

FIG. 2 is a flowchart showing a keyword item and a keyword pre-registration process and a personal identification process in the embodiment of FIG. 1;

FIG. 3 is a flowchart showing a keyword item and a keyword changing process in the embodiment of FIG. 1;

FIG. 4 is a flowchart showing a process for changing only keywords in the embodiment of FIG. 1;

FIG. 5 is a diagram showing an example of use when registering a keyword item and a keyword in the embodiment of FIG. 1;

FIG. 6 is a diagram showing an example of use when registering a keyword item and a keyword in the embodiment of FIG. 1, and shows a continuation of FIG. 5;

FIG. 7 is a diagram showing an example of use at the time of personal identification in the embodiment of FIG. 1;

FIG. 8 is a block diagram showing a configuration of a system for implementing a personal identification method according to the present invention.

FIG. 9 is a block diagram showing a configuration of a system for implementing the personal identification method according to the present invention.

FIG. 10 is a diagram for explaining a relationship between an information system and a security system.

FIG. 11 is a flowchart illustrating a conventional personal identification method 1.

FIG. 12 is a flowchart for explaining a conventional personal identification method 2.

FIG. 13 is a flowchart for explaining a conventional personal identification method 3.

[Explanation of symbols]

 102 Information System Main Body 103 User 104 Associative Keyword Storage Unit 105 User Selection Unit 106 Maintenance Unit 107 Association Item Selection Unit 108 Keyword Matching Judgment Unit 401 Security System

Claims (6)

[Claims] 1. A personal identification method for identifying an individual in a security system for protecting the security of an information system, wherein a keyword item corresponding to a user name and a keyword associated with the keyword item are registered in advance. The registered keyword item is displayed to the user in response to the input of the user name, the user inputs a keyword for the displayed keyword item, and the input keyword is the displayed keyword. A personal identification method characterized by determining whether a user matches a keyword registered for an item and identifying the user. 2. A personal identification method for identifying an individual in a security system for protecting the security of an information system, comprising: a plurality of keyword items corresponding to a user name; and a plurality of keyword items associated with each of the plurality of keyword items. A plurality of keywords are registered in advance, and an arbitrary number of keyword items among the registered plurality of keyword items are displayed to the user in response to the input of the user name, and each of the displayed keyword items is displayed. , The user inputs each keyword, and determines whether or not each of the input keywords matches all the keywords registered for each of the displayed keyword items to identify the user. Personal identification method characterized by performing. 3. The registration process of the keyword item and the keyword corresponding to the keyword item can change, delete, and add only a set of the keyword item and the keyword corresponding to the keyword item or only the keyword. The personal identification method according to claim 1 or 2, wherein 4. A recording medium storing a personal identification program for identifying an individual in a security system for protecting the security of an information system, comprising: a keyword item corresponding to a user name; and a keyword associated with the keyword item. Is registered in advance, and the registered keyword item is displayed to the user in response to the input of the user name, and the user inputs a keyword in response to the displayed keyword item. A recording medium storing a personal identification program, wherein a user is identified by determining whether or not the displayed keyword item matches a registered keyword. 5. A personal identification method for remotely identifying an individual in a security system for protecting the security of an information system, the method comprising the steps of: securing a keyword item associated with a user name and a keyword associated with the keyword item;・ Registered in advance in the system, and in response to remote entry of a user name, display the registered keyword items on the display device of the communication device via the user's radio. In response to this, a user inputs a keyword, and determines whether the input keyword matches a keyword registered for the displayed keyword item to identify the user. Personal identification method. 6. A personal identification method for identifying an individual in a security system, comprising a security system main body on a computer and a storage medium with a display device having a built-in clock for the purpose of protecting the security of an information system. A plurality of keyword items are registered in the storage medium in advance, and a plurality of keywords respectively associated with each of the plurality of keyword items are registered in advance in the security system main body together with the user name. A keyword item is selected from a plurality of keyword items by a function using the time of the built-in clock as a parameter, and is displayed on a display device of a storage medium. Is entered into the security system itself, and the security system The main body of the program selects a keyword from the plurality of keywords corresponding to the input user name using the same function as that of the storage medium using time as a parameter, and determines whether or not the keyword matches the input keyword. A personal identification method characterized by identifying a user.