KR20140066075A - Method for authenticating user based on information on his or her human relationships, and server thereof - Google Patents

Abstract

The present invention provides a method comprising: (a) if a server receives an authentication request signal from a personalized electronic terminal of a user, the server comparing a human relation information set, obtained from the personalized electronic terminal of the user, with a human relation information set for each user prestored at a database, wherein the obtained human relation information set includes at least a portion among identification information on acquaintances of the user, the identification information includes information to discriminate the acquaintances from other people, and the human relation information set for each user prestored at the database indicates information on at least a portion of what is grouped for each user in a state that the human relation information is grouped for each user; and (b) based on the comparison result, the server authenticating the user of the personalized electronic terminal. The present invention authenticates the user by using the human relation information of the user though not receiving authentication information, such as an ID and a secret number, from the user, thereby authenticating the user without taking a risk of the user forgetting the ID or the secret number and exposing the ID or the secret number to other people.

Description

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a method and a server for authenticating a user using human relationship information,

The present invention relates to a method and server for authenticating a user using human relation information. More particularly, the present invention relates to a method and a server for authenticating a user using human relation information of a user without separately inputting authentication information such as an ID and a password from the user.

Generally, as a method for authenticating a user in a personalized electronic terminal, a method of comparing an ID and a password is used. However, when the user is authenticated using the ID and the password, there is a problem that the user must remember the ID and the password, and there is a problem that the ID and the password are easily exposed by the person's carelessness or hacking. In order to solve such a problem, Korean Patent Laid-Open Publication No. 10-2002-0077838 describes a password system that makes it impossible to know what a password is, even if another person observes the password input process of the user. Specifically, referring to claim 1 of Korean Patent Laid-Open No. 10-2002-0077838, it is possible to show both a symbol board and a password board, or to show only a password board without showing an associable symbol board, It also introduces a user interface that shows only the password board because it also serves as a role. However, as long as an ID and a password are used for user authentication, it is impossible to completely eliminate the possibility that a user forgets an ID and a password or exposes an ID and a password to others. Therefore, the applicant of the present invention has developed a method for performing user authentication without inputting authentication information such as an ID and a password.

It is an object of the present invention to solve all the problems described above.

The present invention also provides a method and system for authenticating a user without the risk of forcing a user to forget his / her ID and password or exposing his / her ID and password to another user by performing user authentication using the user's human relationship information without receiving authentication information such as an ID and a password from the user. It is another purpose to make it certified.

In order to accomplish the above object, a representative structure of the present invention is as follows.

According to one aspect of the present invention, there is provided a method for managing personal information, comprising the steps of: (a) when a server receives an authentication request signal from a personalization electronic terminal of a user, Wherein the human relationship information set includes at least a part of the identification information about the acquaintance of the user, wherein the identification information includes information for distinguishing the acquaintance from another person, Wherein the human relationship information set previously stored in the database includes information on at least a part of the grouped information for each user while grouping human relationship information for each user, and (b) Causing the user of the personalized electronic terminal to be authenticated based on the result of the comparison Is provided.

In accordance with another aspect of the present invention, there is provided a method for managing personal information, comprising the steps of: upon receiving an authentication request signal from a user's personalization electronic terminal, An identification information acquiring unit acquiring at least a part of the information, the identification information including information enabling the acquaintance to be distinguished from the other person, A set of human relationship information for each user stored in a predetermined database, wherein the set of human relationship information for each user previously stored in the database represents at least a part of the grouped information for each user while grouping human relationship information for each user - < / RTI > Based on the result of the comparison group, the server containing the authentication determination unit that that the user is authenticated, the personalized electronic device is provided.

According to the present invention, there is an effect that user authentication can be performed using the user's human relationship information without receiving authentication information such as an ID and a password from the user.

Further, according to the present invention, there is an effect that the user need not memorize the ID and the password.

Further, according to the present invention, it is possible to achieve the effect that the user authentication can be performed without risk of exposing the ID and password to other persons.

1 is a view for explaining a user authentication method according to an embodiment of the present invention.
2 (a) to 2 (c) are diagrams for explaining a user authentication method using authentication success human relation information according to another embodiment of the present invention.
FIG. 3 includes a block diagram of a server for authenticating a user using human relationship information according to an embodiment of the present invention.

The following detailed description of the invention refers to the accompanying drawings, which illustrate, by way of illustration, specific embodiments in which the invention may be practiced. These embodiments are described in sufficient detail to enable those skilled in the art to practice the invention. It should be understood that the various embodiments of the present invention are different, but need not be mutually exclusive. For example, certain features, structures, and characteristics described herein may be implemented in other embodiments without departing from the spirit and scope of the invention in connection with an embodiment. It is also to be understood that the position or arrangement of the individual components within each disclosed embodiment may be varied without departing from the spirit and scope of the invention. The following detailed description is, therefore, not to be taken in a limiting sense, and the scope of the present invention is to be limited only by the appended claims, along with the full scope of equivalents to which such claims are entitled, if properly explained. In the drawings, like reference numerals refer to the same or similar functions throughout the several views.

Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings, so that those skilled in the art can easily carry out the present invention.

In the conventional method, only ID, password, fingerprint information, and iris information are used as the absolute authentication information of the user in identifying the user. This is an identification method that takes advantage of the fact that any individual or any object can be identified as the unique information or personality that it has in itself. However, as individuals who have social relations, individuals can define the personality and characteristics of a person as a social relationship, and thus an individual can only identify the individual as a characteristic of the person's social relationship You may. The fact that a large number of individuals know who they are can guarantee the uniqueness of fingerprints and furthermore when an attribute of the relationship is further included, Is more clear. If there is "father, mother, grandmother, sibling, brother, friend, colleague, veteran, junior and senior," among the personal acquaintances, it is not statistically possible that there is another individual completely matching the identification information of these acquaintances. This is because it is free. Based on this discussion, the present invention utilizes human relationship information as the relative authentication information of the user.

In the present specification, it is assumed that the above-mentioned human relationship information replaces both the ID and the password. However, the present invention is not necessarily limited to this, and the ID may be input separately or determined by the identification number of the smartphone, It may be assumed that the relationship information replaces only the password.

In this specification, in the process of transmitting the human relationship information from the personalized electronic terminal (for example, a smart phone) to the server for authentication, it is transmitted to the authentication terminal through short range communication (Bluetooth, infrared, sound wave communication, RFID, NFC, In the case where the authentication terminal communicates with the authentication server and authenticates (for example, performing a mobile payment with a smartphone or opening a door of a house using a smart phone, etc.), a detailed description It is omitted.

Examples of the personalized electronic terminal of the present invention include a mobile communication terminal, a smart phone, a mobile phone, a PDA, a wired / wireless PC, and the like, but the present invention is not limited thereto. Or if the information about the acquaintance from the user can be received and transmitted to the server, it can be said that it is a personalized electronic terminal in the present invention.

1 is a view for explaining a user authentication method according to an embodiment of the present invention.

1, when the server 150 receives an authentication request signal from a personalization electronic terminal 110 of a user (Hong Gil-Dong), the server 150 receives a user's personal relationship information set (HRIS_C). The relationship information set HRIS_C includes at least a part of identification information about at least one acquaintance (father, mother, brother) of the user. The identification information on the acquaintance includes information enabling the acquaintance to be distinguished from the other person. For example, the identification information on the acquaintance may include at least one of a phone number of the acquaintance, an email address of the acquaintance, an ID of the acquaintance, a nickname of the acquaintance, and minutia information included in the photograph related to the acquaintance. And may include relationship tags. 1 and the like, it is described that the human relationship information set HRIS_C includes a phone number and an e-mail address of an acquaintance among various identification information, but the present invention is not limited thereto. The human relationship information set HRIS_C may include at least One identification information may be included. 1 and the like, it is described that the human relationship information set (HRIS_C) includes identification information about three acquaintances among various acquaintances of the user, but this is merely an example, and the human relationship information set (HRIS_C) The number of acquaintances or the conditions of the acquaintances can be variously changed. Extremely familiar conditions may be conditions that include all acquaintances.

Next, the server 150 compares the user's human relationship information set (HRIS_C) acquired from the personalization electronic terminal 110 of the user with the user-specific human relationship information set (HRIS_D) stored in the database 170. The human-related information set HRIS_D previously stored in the database 170 represents at least a part of information grouped by users in a state of grouping human-related information for each user. Referring to FIG. 1, it is assumed that the human relationship information is grouped for each user named 'Hong Kil-Dong', and information about three acquaintances (father, mother, brother) is included in the human relationship information set (HRIS_D) Able to know.

Next, the server 150 searches the personalization electronic terminal 110 based on a result of comparing the human relationship information set (HRIS_C) of the personalization electronic terminal 110 with the human relationship information set (HRIS_D) (Hong Gil-dong) is authenticated. In FIG. 1, it is confirmed that the telephone number and e-mail address of the three acquaintances (father, mother, and younger sibling) coincide with each other so that the user of the personalization electronic terminal 110 (Hong Gil-dong) is authenticated.

On the other hand, in the case where not only the human relationship information sets HRIS_C and HRIS_D completely coincide with each other as in FIG. 1 but also there is a specific human relationship information set having a predetermined degree of similarity or more (here, And may be a predetermined number of real numbers less than 100%), the user of the personalization electronic terminal 110 may be authenticated by referring to the user information corresponding to the specific human relationship information set. For example, if the relationship information sets HRIS_C and HRIS_D include a telephone number and an e-mail address for five persons, and if the telephone number and the e-mail address of four or more persons are identical to each other, May be authenticated. This may occur if updated personal relationship information in the personalization electronic terminal 110 is not yet reflected in the database 170. [ In a similar vein, it may be possible to authenticate a user if four or more of five phone numbers and five email addresses match each other, and if the number of matches is eight or more (for example, (E.g., five phone numbers match and three email addresses match), and the user may be authenticated if one or more of the criteria is passed. It should be understood, however, that the numbers provided herein are merely illustrative and that various modifications may be made.

Meanwhile, according to an embodiment of the present invention, when there is no specific human relation information set having a predetermined degree of similarity or more as a result of the comparison, it is determined that the user is a new user and the user is registered in the database 170 as a human relationship information set have.

On the other hand, the server 150 may acquire the user's set of human relationship information used in the most recent authentication process for the user, or may acquire any one of the set of the highest n similarity sets having the highest similarity. In addition, the server 150 acquires identification information on the highest m persons who have made the most calls or transmitted and received the most messages for a predetermined period of time from the user's human relationship information set (HRIS_C) (HRIS_D) stored in the database 170 with the user-related information set for each user.

On the other hand, the server 150 or the personalized electronic terminal 110 may process part or all of the identification information about the acquaintance into the converted value. That is, in order to prevent the leakage of the user's personal information or the efficiency of the data processing, the server 150 or the personalized electronic terminal 110 may convert a part or all of the identification information about the acquaintance into a converted value . ≪ / RTI >

Such user authentication can be automatically performed based on the user's human relationship information set (HRIS_C) stored in the personalization electronic terminal 110 of the user. That is, the personalization electronic terminal 110 extracts a necessary human relationship information set (HRIS_C) from a contact list or an address book stored therein and transmits it to the server 150, Is to authenticate the user based on the human relationship information set (HRIS_C). As another example, the personalization electronic terminal 110 may transmit all the human relationship information stored therein to the server 150, and the server 150 may select a part of the received human relationship information, And authenticate the user. That is, in FIG. 1, all the identification information (phone number, email address, ID, nickname, minutia information included in the photograph) related to all the acquaintances (eight persons) stored in the personalization electronic terminal 110 is transmitted to the server 150 , The server 150 may authenticate the user based on the telephone number and e-mail address of the three acquaintances (father, mother, brother).

On the other hand, the user authentication may be performed based on a human relationship information set directly input by the user. That is, when the user directly inputs the human relationship information set (HRIS_C) to the personalization electronic terminal 110, the personalization electronic terminal 110 transmits it to the server 150, and the server 150 transmits the human relationship information And authenticates the user based on the information set (HRIS_C). Thus, by authenticating the user based on the human relationship information set (HRIS_C) directly input by the user, the user can be authenticated even when the human relationship information stored in the personalization electronic terminal 110 is lost or damaged. On the other hand, the user may be allowed to query some of the information stored in the database 170, and some information may be informed to the user with a hint, before the user is allowed to input the human relationship information set (HRIS_C).

According to another embodiment of the present invention, when authentication is attempted using the human relationship information set stored in the personalization electronic terminal 110 and authentication fails, authentication is attempted using the human relationship information input by the user It is possible.

According to another embodiment of the present invention, the user may select whether to authenticate using the human relationship information stored in the personalization electronic terminal 110 or using the human relationship information input by the user You may. After the selection of the user, the user authentication process is performed. Since the user authentication process has been described above, a description thereof will be omitted.

2 (a) to 2 (c) are diagrams for explaining a user authentication method using authentication success human relation information according to another embodiment of the present invention.

Referring to FIG. 2 (a), a user authentication method using authentication success human relation information according to another embodiment of the present invention is a method of authenticating a human relationship information set (HRIS_C) S_HRIS) in the personalization electronic terminal 110 of the user. If the most recently authenticated relationship information set (HRIS_C) includes the telephone numbers and e-mail addresses of the three acquaintances (father, mother, and siblings), information about this is included in the authentication success relationship information (S_HRIS) Will be.

Referring to FIG. 2B, in the next authentication, the authentication success human relationship information (S_HRIS, human relationship information set that has already been successfully authenticated) for the user of the personalization electronic terminal 110 of the user is stored in the personalization electronic terminal The server 150 acquires the authentication success human relation information S_HRIS from the personalization electronic terminal 110 of the user and selects among the human relationship information set HRIS_D previously stored in the database 170, The user authentication is proceeded by comparing whether there is a human relationship information set that matches the success human relation information S_HRIS. In this way, by authenticating the user using the authentication success human relation information (S_HRIS, a set of human relationship information that has already been authenticated), the human relationship information set stored in the personalization electronic terminal 110 (HRIS_C) is changed to another human relationship information set (HRIS_C2), the user authentication process is not affected. That is, even if the telephone number of the sister who is stored in the personalization electronic terminal 110 is changed from 020-333-3333 to 020-999-9999, the sister's telephone number 020-333-9999 included in the authentication success human relation information S_HRIS, 3333 and the sibling's telephone number 020-333-3333 included in the human relationship information set HRIS_D of the database 170, so that there is no problem in the user authentication process. Also, even if the previously stored human relationship information set HRIS_C is deleted from the personalization electronic terminal 110, the user authentication process can be effectively performed. Of course, the server 150 may manage the authentication success human relation information S_HRIS from the beginning, and if there is an authentication request from the personalization electronic terminal 110, the authentication success human relation information S_HRIS for the user (S_HRIS) for the user managed by the server 150 without directly receiving the personal information from the personalization electronic terminal 110. [

On the other hand, if the authentication success human relation information for the user does not exist in the personalization electronic terminal 110 of the user, the user authentication is performed according to the method described with reference to FIG.

Next, referring to FIG. 2 (c), based on the human relationship information set (HRIS_C2) stored in the personalization electronic terminal 110 of the user after successful user authentication, The relationship information set HRIS_D can be updated with the new human relationship information set HRIS_D2. In addition, based on the human relationship information set HRIS_C2, the existing authentication success human relation information S_HRIS can be updated to the new authentication success human relation information S_HRIS2. That is, after user authentication, the telephone number of the sister is updated from 020-333-3333 to 020-999-9999. Thereafter, in the next authentication, the user authentication can be performed based on the new authentication success human relation information S_HRIS2 of the personalization electronic terminal 110 and the new human relationship information set HRIS_D2 of the database 170. [

2 (a) to 2 (c), the case where the authentication success human relation information S_HRIS is stored in the personalization electronic terminal 110 or the server 150 of the user has been described. However, (S_HRIS) may be stored in the database 170. When the authentication success human relation information S_HRIS is stored in the database 170, when the server 150 receives the authentication request signal from the personalization electronic terminal 110 of the user, (S_HRIS) and the human relationship information set (HRIS_D). After the user authentication is successful, the database 170 can be updated based on the human relationship information set (HRIS_C2) stored in the personalization electronic terminal 110 of the user.

FIG. 3 includes a block diagram of a server for authenticating a user using human relationship information according to an embodiment of the present invention.

Referring to FIG. 3, a server 150 for authenticating a user using human relation information according to an embodiment of the present invention includes an identification information acquisition unit 310, an identification information comparison unit 320, an authentication determination unit 330, and a control unit 350. In addition, the server 150 according to an embodiment of the present invention may further include a database management unit 340.

According to an embodiment of the present invention, the identification information acquisition unit 310, the identification information comparison unit 320, the authentication determination unit 330, the database management unit 340, Lt; / RTI > Such program modules may be included in the server 150 in the form of an operating system, application program modules, and other program modules, and may be physically stored on various known memory devices. These program modules may also be stored in a remote storage device capable of communicating with the server 150. [ These program modules include, but are not limited to, routines, subroutines, programs, objects, components, data structures, etc. that perform particular tasks or implement particular abstract data types as described below in accordance with the present invention.

Upon receiving the authentication request signal from the personalization electronic terminal 110 of the user, the identification information acquisition unit 310 acquires the user's human relationship information set from the personalization electronic terminal 110 of the user. Here, the human relationship information set includes at least a part of the identification information on the acquaintance of the user, and the identification information includes information that enables the acquaintance to be distinguished from the other person.

The identification information comparison unit 320 may also support comparing the user's human relationship information set obtained from the user's personalization electronic terminal 110 with a user-specific human relationship information set previously stored in a predetermined database 170. [ Here, the set of per-user per-user information stored in the database 170 represents at least a part of the per-user grouping of the per-user per-user information. Specifically, if the above-mentioned human relationship information replaces both the ID and the password, the user who performs the search on the human relationship information set recorded separately for each user in the database, If the human relationship information replaces only the password, the ID may be input separately or may be determined by the identification number of the smartphone, and the human relationship information included in the specific user corresponding to the input ID, May be compared directly to the set of human relationship information obtained from the personalization electronic terminal 110.

Next, the authentication determination unit 330 may enable the user of the personalization electronic terminal 110 to be authenticated based on the comparison result. As an example, if the comparison result indicates that the specific human relationship information set having a predetermined degree of similarity or more exists in the database 170, the authentication determination unit 330 determines that the personalization electronic So that the user of the terminal 110 can be authenticated. If the user authentication is successful, the database management unit 340 updates the database 170 based on the human relationship information set stored in the personalization electronic terminal 110 of the user.

The control unit 350 according to an embodiment of the present invention includes a function of controlling the flow of data between the identification information acquisition unit 310, the identification information comparison unit 320, the authentication determination unit 330, and the database management unit 340 . That is, the control unit 350 controls the flow of data between the components of the server 150 or externally to control the identification information acquisition unit 310, the identification information comparison unit 320, the authentication determination unit 330, And the database management unit 340, respectively.

The embodiments of the present invention described above can be implemented in the form of program instructions that can be executed through various computer components and recorded on a computer-readable recording medium. The computer-readable recording medium may include program commands, data files, data structures, and the like, alone or in combination. The program instructions recorded on the computer-readable recording medium may be those specially designed and constructed for the present invention or may be those known and used by those skilled in the computer software arts. Examples of computer-readable recording media include magnetic media such as hard disks, floppy disks and magnetic tape, optical recording media such as CD-ROMs and DVDs, magneto-optical media such as floptical disks, media, and hardware devices specifically configured to store and execute program instructions such as ROM, RAM, flash memory, and the like. Examples of program instructions include machine language code such as those generated by a compiler, as well as high-level language code that can be executed by a computer using an interpreter or the like. The hardware device may be configured to operate as one or more software modules for performing the processing according to the present invention, and vice versa.

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it is to be understood that the invention is not limited to the disclosed exemplary embodiments, but, on the contrary, Those skilled in the art will appreciate that various modifications, additions and substitutions are possible, without departing from the scope and spirit of the invention as disclosed in the accompanying claims.

Therefore, the spirit of the present invention should not be construed as being limited to the above-described embodiments, and all of the equivalents or equivalents of the claims, as well as the following claims, I will say.

110: Personalized electronic terminal
150: Server
170: Database
310: Identification information acquisition unit
320: Identification information comparison unit
330: authentication determination unit
340:
350:

Claims (7)

(a) when a server receives an authentication request signal from a personalization electronic terminal of a user, the server sets a human relationship information set of the user acquired from the personalization electronic terminal of the user, Wherein the identification information includes information for distinguishing the acquaintance from the other person, a set of per-user human relationship information pre-stored in a predetermined database, Wherein the set of individual human relationship information includes at least a part of the grouped information for each user while grouping human relationship information for each user;
(b) authenticating a user of the personalized electronic terminal based on the comparison result
/ RTI >
In the step (a) or the step (b)
Wherein part or all of the identification information on the acquaintance is processed as a converted value using a hash function. (a) when a server receives an authentication request signal from a personalization electronic terminal of a user, the server sets a human relationship information set of the user acquired from the personalization electronic terminal of the user, Wherein the identification information includes information for distinguishing the acquaintance from the other person, a set of per-user human relationship information pre-stored in a predetermined database, Wherein the set of individual human relationship information comprises at least one of grouping human relationship information for each user and representing at least a part of the grouped information for each user,
(b) causing a user of the personalized electronic terminal to be authenticated based on the result of the comparison; and
(c) updating the database based on the human relationship information set stored in the personalization electronic terminal of the user when the user authentication is successful
/ RTI >
In the step (c)
Wherein the set of human relationship information stored in the personalization electronic terminal of the user is stored as authentication success human relationship information or is stored in the personalization electronic terminal of the user. (a) when a server receives an authentication request signal from a personalization electronic terminal of a user, the server sets a human relationship information set of the user acquired from the personalization electronic terminal of the user, Wherein the identification information includes information for distinguishing the acquaintance from the other person, a set of per-user human relationship information pre-stored in a predetermined database, Wherein the set of individual human relationship information includes at least a part of the grouped information for each user while grouping human relationship information for each user;
(b) authenticating a user of the personalized electronic terminal based on the comparison result
/ RTI >
In the step (a)
If the human relationship information that has already been authenticated in the personalization electronic terminal of the user is present as the authentication success human relation information for the user, the server acquires the authentication success human relation information, Wherein the authentication succeeding human relation information is compared with a human relationship information set that matches the authentication success human relation information. (a) when a server receives an authentication request signal from a personalization electronic terminal of a user, the server sets a human relationship information set of the user acquired from the personalization electronic terminal of the user, Wherein the identification information includes information for distinguishing the acquaintance from the other person, a set of per-user human relationship information pre-stored in a predetermined database, Wherein the set of individual human relationship information includes at least a part of the grouped information for each user while grouping human relationship information for each user;
(b) authenticating a user of the personalized electronic terminal based on the comparison result
/ RTI >
In the step (a)
Wherein the server obtains the user's human relationship information set used in the most recent authentication process for the user or obtains any one of the top n sets of human relationship information having the highest similarity. (a) when a server receives an authentication request signal from a personalization electronic terminal of a user, the server sets a human relationship information set of the user acquired from the personalization electronic terminal of the user, Wherein the identification information includes information for distinguishing the acquaintance from the other person, a set of per-user human relationship information pre-stored in a predetermined database, Wherein the set of individual human relationship information includes at least a part of the grouped information for each user while grouping human relationship information for each user;
(b) authenticating a user of the personalized electronic terminal based on the comparison result
/ RTI >
After the step (a)
(c) registering, as a result of the comparison, as a set of human relationship information of a new user in the database, when there is no specific human relation information set having a predetermined degree of similarity or more
≪ / RTI > Receiving a request for authentication from a user's personalization electronic terminal, the user's personal relationship information set from the personalization electronic terminal of the user, the set of human relationship information including at least a part of the identification information about the acquaintance of the user, Wherein the identification information includes information for distinguishing the acquaintance from another person,
A user-related human relationship information set pre-stored in a predetermined database of the user's set of human relationship information obtained from the user's personalization electronic terminal; An identification information comparison unit for comparing the identification information with information indicating at least a part of the grouped information for each user,
Based on the result of the comparison, authentication of the user of the personalized electronic terminal
/ RTI >
In the identification information acquisition unit,
Acquiring the authentication success human relation information if the human relationship information that has already been successfully authenticated in the personalization electronic terminal of the user is present as authentication success human relation information for the user, And compares the authentication success human relation information with a human relationship information set that matches the authentication success human relation information. Receiving a request for authentication from a user's personalization electronic terminal, the user's personal relationship information set from the personalization electronic terminal of the user, the set of human relationship information including at least a part of the identification information about the user's acquaintance, Wherein the identification information includes information for distinguishing the acquaintance from another person,
A user-related human relationship information set pre-stored in a predetermined database of the user's set of human relationship information obtained from the user's personalization electronic terminal; An identification information comparison unit for comparing the identification information with information indicating at least a part of the grouped information for each user,
Based on the result of the comparison, authentication of the user of the personalized electronic terminal
/ RTI >
In the identification information acquisition unit,
Obtaining a set of the user's human relationship information used in the most recent authentication process for the user or obtaining any one of the set of the highest n similarity sets having the highest similarity.

Images