JP6528582B2 - Information processing apparatus, password input method and password input program - Google Patents

Description

  The present invention relates to a password input user interface technology.

  User authentication using a personal identification number is widely used, for example, in application programs of portable terminals. However, in the operation of inputting the password, another person must not detect the password.

  For example, there is known a method of changing the ten key array each time a personal identification number is input. In this way, the code number can not be guessed based on the movement of the hand. However, even if the arrangement of the ten keys is different each time, the touched number is known when the user looks through the screen.

  Further, in a method of inputting a personal identification number by tracing the position of a button, a certain patent document discloses a technique for preventing a touched button from being displayed for a certain period of time.

  Even in this method, since the button is displayed until it is touched, it is easy to know which number has been touched when the user looks through the screen.

JP-A-6-83777 JP, 2014-203187, A

  An object of the present invention is, in one aspect, to make it difficult for another person to perceive the entered code number.

  The information processing apparatus according to one aspect, in the first aspect for displaying candidate numbers used for password input (A), a display processing unit that switches to a second aspect for not displaying candidate numbers when receiving a predetermined instruction from the user And (B) in the second aspect, a reception unit for receiving a first user operation for selecting a plurality of first positions displaying candidate numerals, and (C) displaying at a first position selected by the first user operation. And a specifying unit for specifying a sequence of candidate numbers that have been stored as a code number.

  In one aspect, it becomes difficult for another person to detect the entered password.

FIG. 1 is a diagram showing a transition example of a password input window. FIG. 2 is a diagram showing a transition example of the password input window. FIG. 3 is a diagram showing an example of transition of the password input window. FIG. 4 is a diagram showing an example of a module configuration of the mobile terminal device. FIG. 5 is a diagram showing a main process (A) flow. FIG. 6 is a diagram showing an example of candidate numeral data. FIG. 7 is a diagram showing a first change processing flow. FIG. 8 is a view showing a modification of candidate numeral data. FIG. 9 is a diagram showing a second change processing flow. FIG. 10 is a diagram showing a third change processing flow. FIG. 11 is a diagram showing a fourth change processing flow. FIG. 12 is a diagram showing a modification of candidate numeral data. FIG. 13 is a diagram showing a modification of candidate numeral data. FIG. 14 is a diagram showing an example of changing candidate numeral data. FIG. 15 is a diagram showing a specific processing flow. FIG. 16 is a diagram showing a subroutine processing flow. FIG. 17 is a diagram showing a specific example of the code number. FIG. 18 is a diagram showing a subroutine processing flow. FIG. 19 is a diagram showing an example of a password input window according to the second embodiment. FIG. 20 is a diagram showing a main process (B) flow. FIG. 21 is a diagram showing a fifth change processing flow. FIG. 22 is a diagram showing an example of the module configuration of the mobile terminal device. FIG. 23 is a diagram showing an example of a system configuration. FIG. 24 is a diagram showing an example of a system configuration. FIG. 25 is a diagram illustrating an example of the hardware configuration of the mobile terminal device.

  1 to 3 show transition examples of the personal identification number input window 101. FIG. The password input window 101 is a window for allowing the user to input a password. In the present embodiment, the user rearranges the randomly arranged numbers and arranges the number string corresponding to the password at any place in the matrix. Then, after the user erases the number on the button displayed in the password input window 101, the user slides the sequence of buttons having a number corresponding to the password so as to trace the password. input. The numbers used for the personal identification number are hereinafter referred to as candidate numbers.

  The personal identification number input windows 101a to 101f shown in FIG. 1 show the transition until the sequence of candidate numbers corresponding to the personal identification number is aligned. The message area 103 displays a message prompting the user to perform an operation each time. In the message area 103 in the password input windows 101a to 101f, a message "Please slide rows or columns to arrange the numbers of the password and touch the enter button" is displayed.

  As shown in the password input window 101a, initially, candidate numbers are randomly arranged. In this example, the password is "2807". Then, the user performs an operation of aligning the personal identification number “2807” in the direction from the bottom to the top in the range indicated by the broken line in the personal identification number input window 101 f.

  The numeral buttons selected by the user are included in the range of the third to seventh rows and the third to seventh columns. The 1st, 2nd, 8th and 9th rows of the number buttons and the 1st, 2nd, 8th, and 9th rows of numbered buttons make it possible to recognize that there are hidden candidate numbers It is a fake button that is displayed for In this example, the display of candidate numbers is omitted for the number buttons on the first and ninth lines and the number buttons on the first and ninth columns, but candidate numbers are displayed for these number buttons. May be

  The personal identification number input window 101b indicates that the user has touched the number button located in the third row and the fourth column with a finger, and the user has made an operation to slide it to the position of the second lower number button. This operation shifts the candidate numbers included in the fourth column downward by two each.

  As a result, it is displayed like a personal identification number input window 101c. Then, the candidate number “8” is placed at the assumed position.

  Furthermore, the password input window 101c indicates that the user has touched the number button located in the seventh row and fifth column with a finger and has performed an operation to slide it to the position of the two left number buttons. This operation shifts the candidate numbers included in the seventh line to the left by two each.

  As a result, it is displayed like a personal identification number input window 101d. Then, the candidate number “2” is placed at the assumed position.

  Further, the personal identification number input window 101d indicates that the user has touched the number button located in the fifth row and the seventh column with a finger and has performed an operation of sliding it to the position of the number button on the left side. This operation shifts the candidate numbers included in the fifth line to the left by one each.

  As a result, it is displayed like a personal identification number input window 101e. Then, the candidate number "0" is stored at the assumed position.

  Furthermore, the password input window 101e indicates that the user has touched the number button located in the fourth row and the fifth column with a finger, and has performed an operation of sliding it to the position of the number button two digits to the right. This operation shifts the candidate numbers included in the fourth line to the right by two each.

  As a result, it is displayed like a personal identification number input window 101 f. Then, the candidate number “7” is stored at the assumed position, and the code number “2807” is aligned.

  Even if another person peeks into the operation of the personal identification number input windows 101a to 101f, it can not be determined at which position in the matrix the personal identification number is lined up.

  At the stage where they are lined up as in the personal identification number input window 101f, numbers are not displayed. FIG. 2 shows the continuation of the transition shown in FIG. In the password input window 101f, when the user touches the determination button with a finger, that is, the tap operation is performed, as shown in the password input window 101g, the candidate numerals displayed on the number buttons disappear. That is, instead of the number button, a button in which the candidate number is hidden is displayed. Below, the button which hid the candidate number is called a mask button.

  In the message area 103 in the password input window 101g, a message "Please trace the location where the password was arranged with your finger" is displayed.

  According to this message, as shown in the personal identification number input window 101h, when the user moves the finger from the mask button located in the 7th row and 4th column to the mask button located in the 4th row and 4th column upward, that is, slide When operated, the candidate numbers displayed at the positions of these mask buttons are input as the password.

  Although an example in which the candidate numbers in the row are traced upward is shown here, the candidate numbers in the row may be traced downward. Also, the candidate numbers in the row may be traced to the right, or may be traced to the left as well.

  Furthermore, the candidate numbers may be traced in an oblique direction. FIG. 3 shows how candidate numbers are traced in an oblique direction. As shown in the password input window 101i, the password "2807" is arranged from the number button located in the seventh row and fourth column to the number button located in the fourth row and seventh column in the upper right direction. In this state, when a tap operation is performed on the determination button, as shown in the personal identification number input window 101j, the candidate numerals displayed on the numeral buttons disappear. Then, in the message area 103 in the password input window 101j, a message "Please trace the place where the password is arranged with a finger" is displayed.

  When the user slides from the mask button located in the seventh row and fourth column to the mask button located in the fourth row and seventh column in the upper right direction according to this message as shown in the personal identification number input window 101k, these masks are displayed. The candidate number displayed at the position of the button is input as a code number.

  In addition to the method of tracing in one direction, it may be in the form of a key or in the shape of a letter.

  The mode in which the candidate numbers are displayed, such as the password input window 101a to the password input window 101f and the password input window 101i, that is, the embodiment in which the number buttons are displayed is referred to as a first embodiment. In addition, an aspect in which the candidate numbers are disappearing, ie, an aspect in which the mask button is displayed, such as the password input window 101g, the password input window 101h, the password input window 101j, and the password input window 101k is referred to as a second embodiment. .

  When the number button is tapped in the first mode, the candidate number shown on the tapped number button is input according to the normal input method. This is the end of the description of the outline of the operation according to the present embodiment.

  Next, the operation of the apparatus will be described. FIG. 4 shows an exemplary module configuration of the portable terminal device 401. As shown in FIG. Here, although an embodiment using a portable terminal device 401 such as a portable telephone terminal or a tablet terminal is shown, the present embodiment may be applied to an information processing apparatus other than the portable terminal device 401. For example, the present embodiment may be applied to an installation type device such as an automatic teller machine.

  The portable terminal device 401 has a password input module 403 and an application program 405. In this example, the password input module 403 is called from the application program 405 and activated.

  The password input module 403 displays the password input window 101 and receives the password input by the user. The password input module 403 includes an initialization unit 411, a display processing unit 413, a reception unit 415, a change unit 417, a specification unit 419, a control unit 421, an interface unit 423, a candidate numeral storage unit 431, a window data storage unit 433 and numerals. It has a column buffer 435. The initialization unit 411 initializes candidate numeral data. The display processing unit 413 performs various displays. The reception unit 415 receives a user operation. The changing unit 417 changes the candidate numeral data. The identifying unit 419 identifies a password. The control unit 421 controls the process in the personal identification number input module 403. The interface unit 423 passes the password to the authentication unit 441. The candidate numeral storage unit 431 stores candidate numeral data. The window data storage unit 433 stores data of the password input window 101, numeric buttons, and mask buttons. The digit string buffer 435 stores the input candidate digit string.

  The application program 405 provides a predetermined service to the authenticated user. The application program 405 includes an authentication unit 441. The authentication unit 441 calls the personal identification number input module 403, and authenticates the user with the personal identification number passed from the personal identification number input module 403.

  The security code input module 403, the application program 405, the initialization unit 411, the display processing unit 413, the reception unit 415, the change unit 417, the specification unit 419, the control unit 421, the interface unit 423, and the authentication unit 441 are hardware resources. This is realized using (for example, FIG. 25) and a program that causes the processor to execute the processing described below.

  The candidate numeral storage unit 431, the window data storage unit 433 and the numeral string buffer 435 described above are realized using hardware resources (for example, FIG. 25).

  Subsequently, processing in the password input module 403 will be described. FIG. 5 shows the main processing (A) flow. The initialization unit 411 sets randomly generated candidate numbers in the candidate number data (S501). The candidate numbers assigned to each number button are treated as data in a two-dimensional array format. This data is called candidate numeral data.

  FIG. 6 shows an example of candidate numeral data. Assuming that the row number in the arrangement of the number buttons is i (1 to 9) and the column number is j (1 to 9), the candidate numbers assigned to the number buttons located in the N-th row and the M-th column are , And is represented by an element C [N] [M] of a two-dimensional array. In S501, the initialization unit 411 sets randomly generated candidate numbers for each element of the two-dimensional array data. The candidate numbers are integers from 0 to 9.

  It returns to the explanation of FIG. The display processing unit 413 displays the password input window 101 in the initial state, and further displays numeric buttons based on the candidate numeric data (S503). Specifically, the display processing unit 413 displays the candidate numerals set in the elements of the two-dimensional array data in the number buttons corresponding to the elements. In the example shown in FIG. 1, for the number buttons included in the first row, the number buttons included in the ninth row, the number buttons included in the first column, and the number buttons included in the ninth row, It is omitted.

  The receiving unit 415 receives a user operation on the touch panel (S505). Here, it is assumed that a slide operation on a row of numeric buttons, a slide operation on a row of numeric buttons, a tap operation on numeric buttons, or a tap operation on determination buttons is accepted.

  The receiving unit 415 determines whether the user operation received in S505 is a downward slide operation on the row of numeric buttons (S507).

  When it is determined that the user operation accepted in S505 is a slide operation in the downward direction with respect to the row of numeric buttons, the change unit 417 executes a first change process (S509). In the first change process, in the first mode, a process of moving the candidate numeral displayed on the numeral button in the row downward in accordance with the slide operation is performed.

  FIG. 7 shows a first change processing flow. The changing unit 417 specifies a row in which the candidate number is moved based on the slide start position (S701). Specifically, the changing unit 417 specifies a row to which the number button overlapping the slide start position belongs. For example, in the example of the personal identification number input window 101b shown in FIG. 1, the fourth column is specified as the column to which the candidate numbers are moved.

  The changing unit 417 calculates the number of movement of the candidate number in the downward direction based on the slide distance (S703). For example, the changing unit 417 divides the slide distance by the sum of the height of the numeral button and the numeral button interval in the vertical direction, and rounds off the first decimal place of the quotient to divide the sliding distance. Find the number of moves of For example, in the example of the personal identification number input window 101b shown in FIG. 1, the number of movements of the candidate number in the downward direction is two.

  The change unit 417 moves the candidate numbers in the row downward by the movement number (S705). Here, the direction is expressed so as to match the direction in the display. The downward direction here means the direction in which the row number increases in the same column of the two-dimensional array in terms of data structure. That is, the changing unit 417 transfers the candidate numbers set in the elements of the two-dimensional array to elements whose row numbers increase by the movement number in the same column.

  FIG. 8 shows an example of candidate numeral data changed by the slide operation shown in the personal identification number input window 101b. The value “0” of the element C [1] [4] in FIG. 6 moves to the element C [3] [4] in FIG. Similarly, the values of elements C [2] [4] to elements C [7] [4] in FIG. 6 shift from elements C [4] [4] to elements C [9] [4] in FIG. . Then, the value “0” of the element C [8] [4] in FIG. 6 is transferred to the element C [1] [4] in FIG. 8, and the element C [2] [4] in FIG. The value “2” of the element C [9] [4] in 6 moves. That is, each candidate digit is shifted so that the candidate digit circulates in the sequence. Also in the case of the slide operation in the row direction, each candidate numeral is transferred so that the candidate numerals circulate in the same manner.

  It returns to the explanation of FIG. The display processing unit 413 redisplays the number button corresponding to the column based on the changed candidate number data (S 707). When the first change process is completed, the process returns to the process shown in S505 of FIG. 5 to repeat the above process.

  It returns to the explanation of the processing shown in S507 of FIG. If it is determined that the user operation accepted in S505 is not a downward slide operation on the row of numeric buttons, the reception unit 415 determines that the user operation is an upward slide operation on the row of numeric buttons It is determined whether there is any (S511).

  If it is determined that the user operation accepted in S505 is a slide operation in the upward direction with respect to the row of numeric buttons, the change unit 417 executes a second change process (S513). In the second change processing, in the first aspect, processing is performed to move the number displayed on the number button in the row upward in accordance with the slide operation.

  FIG. 9 shows a second change processing flow. The changing unit 417 specifies a row in which the candidate number is moved based on the slide start position (S901). As in the case of the first change process, the change unit 417 specifies a row to which the number button overlapping the slide start position belongs.

  The changing unit 417 calculates the number of movements of the candidate number in the upward direction based on the slide distance (S903). As in the case of the first change process, the change unit 417 divides the slide distance by the sum of the height of the number button and the distance between the number buttons in the vertical direction, and rounds off the first decimal place of the quotient The movement number of the candidate number in the downward direction is obtained by.

  The changing unit 417 moves the candidate numbers in the row upward by the movement number (S905). The upward direction referred to here means the direction in which the row numbers decrease in the same column of the two-dimensional array in terms of data structure. That is, the changing unit 417 transfers the candidate numbers set in the elements of the two-dimensional array to the elements whose row numbers are reduced by the movement number in the same column.

  The display processing unit 413 redisplays the number button corresponding to the column based on the changed candidate number data (S 907). When the second change process is completed, the process returns to the process shown in S505 of FIG. 5 to repeat the above-described process.

  It returns to the explanation of the processing shown in S511 of FIG. If it is determined that the user operation accepted in S505 is not a slide operation in the upward direction with respect to the row of numeric buttons, the reception unit 415 indicates that the user operation is a slide operation in the rightward direction with respect to the row of numeric buttons. It is determined whether there is any (S515).

  If it is determined that the user operation accepted in S505 is a slide operation in the right direction with respect to the row of number buttons, the change unit 417 executes the third change process (S517). In the third change process, in the first mode, a process of moving the number displayed on the number button in the row in the right direction according to the slide operation is performed.

  FIG. 10 shows a third change processing flow. The changing unit 417 specifies a row to which the candidate number is moved based on the slide start position (S1001). Specifically, the changing unit 417 specifies a row to which the number button overlapping the slide start position belongs. For example, in the example of the personal identification number input window 101e shown in FIG. 1, the fourth line is specified as the line to which the candidate number is moved.

  The changing unit 417 calculates the number of movement of the candidate number in the right direction based on the slide distance (S1003). For example, the changing unit 417 divides the slide distance by the sum of the width of the number button and the number button interval in the horizontal direction, and rounds off the first decimal place of the quotient to divide the slide distance. Find the number of moves of For example, in the example of the personal identification number input window 101e shown in FIG. 1, the number of movements of the candidate number in the right direction is two.

  The changing unit 417 moves the candidate numbers in the row in the right direction by the movement number (S1005). The right direction as referred to herein means the direction in which the column numbers increase in the same row of the two-dimensional array in terms of data structure. That is, the changing unit 417 transfers the candidate numbers set in the elements of the two-dimensional array to elements whose column numbers increase by the movement number in the same row.

  The display processing unit 413 redisplays the number button corresponding to the line based on the changed candidate number data (S1007). When the third change process is completed, the process returns to the process shown in S505 of FIG. 5 to repeat the above-described process.

  It returns to the explanation of the processing shown in S515 of FIG. When it is determined that the user operation accepted in S505 is not a slide operation in the right direction with respect to the row of number buttons, the reception unit 415 is a slide operation in the left direction with respect to the row of number buttons. It is determined whether there is any (S519).

  If it is determined that the user operation accepted in S505 is a slide operation in the left direction with respect to the row of number buttons, the change unit 417 executes a fourth change process (S521). In the fourth change processing, in the first aspect, processing is performed to move the number displayed on the number button in the row in the left direction according to the slide operation.

  FIG. 11 shows a fourth change processing flow. The change unit 417 identifies a row based on the slide start position (S1101). As in the case of the third change process, the change unit 417 specifies a line to which a number button overlapping the slide start position belongs.

  The changing unit 417 calculates the number of movement of the candidate number in the left direction based on the slide distance (S1103). As in the case of the third change process, the change unit 417 divides the slide distance by the sum of the width of the number button and the distance between the number buttons in the horizontal direction, and rounds off the first decimal place of the quotient The movement number of the candidate number in the left direction is obtained by.

  The changing unit 417 moves the candidate numbers in the row in the left direction by the movement number (S1105). The left direction referred to here means the direction in which the column numbers decrease in the same row of the two-dimensional array in terms of data structure. That is, the changing unit 417 transfers the candidate numbers set in the elements of the two-dimensional array to the elements whose column numbers are reduced by the movement number in the same row.

  The display processing unit 413 redisplays the number button corresponding to the line based on the changed candidate number data (S1107). After the fourth change process, the process returns to the process shown in S505 of FIG. 5 to repeat the above-described process.

  Here, the change of the candidate numeral data in the transition example shown in FIG. 1 will be described. FIG. 12 shows an example of candidate numeral data changed by the slide operation shown in the personal identification number input window 101c. In this example, two candidate numbers on the seventh line are shifted to the left.

  FIG. 13 shows an example of the candidate numeral data changed by the slide operation shown in the password input window 101d. In this example, the candidate number on the fifth line is shifted to the left by one.

  FIG. 14 shows an example of candidate numeral data changed by the slide operation shown in the personal identification number input window 101e. In this example, two candidate numbers on the fourth line are shifted to the right.

  The description returns to the process shown in S519 of FIG. If it is determined that the user operation accepted in S505 is not a slide operation in the left direction with respect to the row of number buttons, the reception unit 415 determines whether the user operation is a tap operation on number buttons. It determines (S523).

  If it is determined that the user operation accepted in S505 is a tap operation on a numeric button, the identifying unit 419 executes an identifying process (S525). In the identification process, in the first aspect, the input of the password in the normal input method is performed.

  FIG. 15 shows a specific processing flow. The identifying unit 419 identifies a candidate numeral corresponding to the tapped numeral button based on the candidate numeral data (S1501). That is, the identifying unit 419 reads the value of the element corresponding to the position of the numeral button from the candidate numeral data.

  The identifying unit 419 adds the candidate number to the number string buffer 435 (S1503). In this example, the identifying unit 419 sets candidate numbers from the beginning of the number string buffer 435. After the identification process, the process returns to the process shown in S505 of FIG. 5 to repeat the above-described process.

  It returns to the explanation of the processing shown in S523 of FIG. If it is determined that the user operation accepted in S505 is not a tap operation on a number button, the receiving unit 415 determines whether the user operation is a tap operation on a determination button (S527) .

  If it is determined that the user operation accepted in S505 is a tap operation on the determination button, the control unit 421 executes a subroutine process (S529). In the subroutine processing, processing is performed when the decision button is tapped. When it is determined that the user operation is not a tap operation on the determination button, the process returns to the process shown in S505, and the above-described process is repeated.

  FIG. 16 shows a subroutine processing flow. The identifying unit 419 determines whether the number string buffer 435 is full (S1601). In this example, when four candidate numbers are set in the number string buffer 435, it is determined that the number string buffer 435 is full. On the other hand, when the number of candidate numbers set in the number string buffer 435 is three or less, it is determined that the number string buffer 435 is not full.

  If it is determined that the digit string buffer 435 is full, the specifying unit 419 sets the candidate digit string set in the digit string buffer 435 as the password (S1603). The interface unit 423 passes the password to the authentication unit 441 (S1605). Then, the control unit 421 sets “end” in the status (S1607). The status is a control parameter indicating the result of the subroutine processing. It is assumed that "continue" or "end" is set in the status. When the subroutine processing is completed, the processing proceeds to the processing shown in S531 of FIG.

  It returns to the explanation of the processing shown in S1601 of FIG. If it is determined that the number string buffer 435 is not full, the display processing unit 413 displays a mask button instead of the number button (S1609). The mask button is a button that does not show numbers. Therefore, the process of displaying the mask button corresponds to deleting the candidate number.

  The receiving unit 415 receives an event (S1611). In this example, it is assumed that an event corresponding to a touch on the mask button or a touch on an area other than the mask button is received.

  The receiving unit 415 determines whether the user's finger has touched the mask button (S1613). If it is determined that the user's finger has touched a button other than the mask button, the control unit 421 sets “continuation” in the status (S1615). The display processing unit 413 displays a number button based on the candidate number data (S1616). Then, the subroutine processing is finished, and the processing proceeds to the processing shown in S531 of FIG.

  On the other hand, if it is determined in this example that the user's finger has touched the mask button, the candidate digit string input halfway is discarded by the normal input method. Therefore, the identifying unit 419 clears the number string buffer 435 (S1617).

  The identifying unit 419 identifies candidate numbers corresponding to the mask button (S1619). That is, the identifying unit 419 reads the value of the element corresponding to the position of the mask button from the candidate numeral data.

  The identifying unit 419 adds the candidate number to the number string buffer 435 (S1621). In the process of S1621, the first candidate number is set. Then, the processing shifts to the processing shown in FIG. 18 through the terminal A.

  FIG. 17 shows the identification number specified when the fourth row of numeric buttons is traced from the bottom to the top, as shown in the identification number input window 101h of FIG. In the process shown in S1621 of FIG. 16, the value "2" set in the element of the seventh row and the fourth column is the first digit in the personal identification number. In the process shown in FIG. 18, the value “8” set in the element of the sixth row and the fourth column, the value “0” set in the element of the fifth row and the fourth column, and the fourth row and the fourth column The value "7" set in the element of is sequentially set.

  The description will now turn to the description of FIG. The receiving unit 415 receives an event (S1801). Here, it is assumed that an event corresponding to an operation of sliding a finger while being touched or an operation of releasing a finger is received.

  When the user slides the finger being touched as it is, the touch position moves. Then, when the finger follows the other mask button, the touch position is overlapped with the other mask button. Therefore, the receiving unit 415 determines whether the touch position overlaps another mask button (S1803).

  If it is determined that the touch position overlaps another mask button, the specifying unit 419 specifies a candidate number corresponding to the mask button (S1805). That is, the identifying unit 419 reads the value of the element corresponding to the position of the mask button from the candidate numeral data.

  The identifying unit 419 adds the candidate number to the number string buffer 435 (S1807). In the process of S1807, second and subsequent candidate numbers are set.

  The identifying unit 419 determines whether the number string buffer 435 is full (S1809). Specifically, when the fourth candidate digit is set, it is determined that the digit string buffer 435 is full. On the other hand, when the second or third candidate digit is set, it is determined that the digit string buffer 435 is not full.

  If it is determined that the number string buffer 435 is not full, the process returns to the process shown in S1801 and repeats the above process.

  On the other hand, when it is determined that the digit string buffer 435 is full, the specifying unit 419 sets the candidate digit string set in the digit string buffer 435 as the password (S1811). The interface unit 423 passes the password to the authentication unit 441 (S 1813). The control unit 421 sets “end” in the status (S1815). Then, the subroutine processing is finished, and the processing proceeds to the processing shown in S531 of FIG.

  The description returns to the processing shown in S1803 of FIG. If it is determined that the touch position does not overlap another mask button, the reception unit 415 determines whether the user's finger has been released (S1817).

  If it is determined that the user's finger is not separated, the process returns to the process shown in S1801 and the above-described process is repeated.

  On the other hand, when it is determined that the user's finger has been released, the specifying unit 419 clears the number string buffer 435 (S1819). The control unit 421 sets “continuation” in the status (S1821). The display processing unit 413 displays a number button based on the candidate number data (S1823). Then, the subroutine processing is finished, and the processing proceeds to the processing shown in S531 of FIG.

  It returns to the explanation of the main processing (A) flow shown in FIG. After returning from the subroutine processing, the control unit 421 determines whether the status is "end" (S531). If it is determined that the status is not "end", that is, if the status is "continue", the process returns to the process shown in S505 and repeats the above-described process.

  On the other hand, when it is determined that the status is "end", the personal identification number input window 101 is closed to complete the main processing (A). This is the end of the description of the process in the present embodiment.

  According to the present embodiment, it is difficult for another person to detect the input password.

  In addition, the candidate numbers can be rearranged so that the user can easily select the password.

  Further, since the operation is received in units of rows and columns of the matrix, the operation of changing the arrangement of the candidate numbers and the operation of selecting the mask button on which the candidate numbers have been displayed are easy.

  In addition, it is possible to save the trouble of switching to the normal input method of directly selecting the password.

Second Embodiment
In the embodiment described above, an example in which the arrangement of candidate numbers is changed by slide operation has been described, but in the present embodiment, an example in which the arrangement of candidate numbers is changed by button operation will be described.

  In the case of the first embodiment, when the user repeatedly performs the operation of touching and sliding the candidate numbers to be moved, the password numbers to be aligned are easily guessed by others. In the present embodiment, the candidate numbers are shifted by button operation. Therefore, others do not know which candidate numbers are to be moved.

  FIG. 19 shows an example of the password input window 101 according to the second embodiment. In this example, the numeral buttons in the first and ninth columns shown in the example of the first embodiment are omitted. Also, similarly, the number buttons on the first and ninth lines are omitted.

  Then, on the left side of the matrix, a left button is provided for giving an instruction to shift the number button in the same row to the left by one. Similarly, on the right side, a right button is provided for giving an instruction to shift the same numbered button one step to the right. Similarly, an upper button is provided on the upper side for instructing to shift the number button in the same row upward by one. Similarly, a lower button is provided on the lower side for giving an instruction to shift the number button in the same row downward by one. In the message area 103, “Please arrange the numbers of the PINs with the up, down, left, and right buttons, and touch the ENTER button.” Is displayed.

  In the present embodiment, a main processing (B) flow is executed instead of the main processing (A) flow shown in FIG. FIG. 20 shows a main process (B) flow. The processes shown in S501 to S505 are the same as in the case of FIG.

  The receiving unit 415 determines whether the user operation received in S505 is a tap operation on the lower button (S2001). If it is determined that the user operation is a tap operation on the lower button, the change unit 417 executes a fifth change process (S2003). In the fifth change process, in the first mode, a process of moving the candidate numeral displayed on the numeral button in the row corresponding to the lower button downward by one according to the tap operation on the lower button is performed.

  FIG. 21 shows a fifth change processing flow. The changing unit 417 identifies a row based on the tapped down button (S2101). The changing unit 417 moves the candidate numbers in the row downward by one (S2103). The method of transferring candidate numbers is the same as that of the first embodiment except that the number of movements is a fixed value 1. The display processing unit 413 redisplays the number button corresponding to the row (S2105). After the fifth change process, the process returns to the process shown in S505 and repeats the above-described process.

  It returns to the explanation of the processing shown in S2001 of FIG. If it is determined that the user operation accepted in S505 is not a tap operation on the lower button, the receiving unit 415 determines whether the user operation is a tap operation on the upper button (S2005) .

  If it is determined that the user operation is a tap operation on the upper button, the change unit 417 executes a sixth change process (S2007). In the sixth change process, in the first mode, a process of moving the candidate numeral displayed on the numeral button in the row corresponding to the upper button by one upward in accordance with the tap operation on the upper button is performed.

  The differences between the sixth change process and the fifth change process will be described based on the fifth change process flow shown in FIG.

  In a step corresponding to S 2101, a row is identified based on the tapped upper button. In the step corresponding to S2103, the candidate numbers in the row are moved upward by one. The steps corresponding to S2105 are the same as in the case of S2105.

  It returns to the explanation of the processing shown in S2005 of FIG. If it is determined that the user operation accepted in S505 is not a tap operation to the upper button, the receiving unit 415 determines whether the user operation is a tap operation to the right button (S2009) .

  If it is determined that the user operation is a tap operation to the right button, the change unit 417 executes a seventh change process (S2011). In the seventh change processing, in the first mode, processing is performed to move the candidate numerals displayed on the numeral buttons in the row corresponding to the right button by one according to the tap operation on the right button.

  The difference between the seventh change process and the fifth change process will be described based on the fifth change process flow shown in FIG.

  In a step corresponding to S2101, a row is specified based on the tapped right button. In the step corresponding to S2103, the candidate number in the row is moved rightward by one. In the step corresponding to S2105, the display processing unit 413 redisplays the number button corresponding to the row.

  It returns to the explanation of the processing shown in S2009 of FIG. If it is determined that the user operation accepted in S505 is not a tap operation to the right button, the receiving unit 415 determines whether the user operation is a tap operation to the left button (S2013) .

  If it is determined that the user operation is a tap operation on the left button, the change unit 417 executes an eighth change process (S2015). In the eighth change process, in the first mode, a process of moving the candidate numerals displayed on the numeral buttons in the row corresponding to the left button by one in the left direction is performed according to the tap operation on the left button.

  The differences between the eighth change process and the fifth change process will be described based on the fifth change process flow shown in FIG.

  In a step corresponding to S 2101, a row is specified based on the tapped left button. In the step corresponding to S2103, the candidate numerals in the row are moved leftward by one. In the step corresponding to S2105, the display processing unit 413 redisplays the number button corresponding to the row.

  It returns to the explanation of the processing shown in S2013 of FIG. When it is determined that the user operation accepted in S505 is not the tap operation to the left button, the receiving unit 415 determines whether the user operation is the tap operation to the number button (S523) . The processes shown in S523 to S531 are the same as in the case of FIG.

  According to the present embodiment, it is difficult for another person to guess the number to be input.

  In the example shown in FIG. 4, the password input module 403 is called from the authentication unit 441 and activated. In this example, the password input module 403 may be called from various programs. That is, the password input module 403 may be a common module.

  FIG. 22 shows another module configuration example of the portable terminal device 401. In this example, the password input module 403 is included in the application program 405. Also in this case, the password input module 403 is called from the authentication unit 441 and activated. Then, the password input module 403 passes the input password to the authentication unit 441. However, in this example, the password input module 403 is dedicated to the application program 405.

  Further, the personal identification number may be provided to the authentication unit 441 in the device to which the portable terminal device 401 connects via the network. FIG. 23 shows an example of the system configuration. In this example, the portable terminal device 401 connects to the server device 2301 via a network (for example, the Internet or a local area network), and uses the service provided by the service unit 2303. The service unit 2303 includes an authentication unit 2305 that performs user authentication.

  On the other hand, the application program 405 has a request unit 2307 that requests the service unit 2303 to perform user authentication. The password input module 403 is called by the request unit 2307 and activated. The password input module 403 then passes the password to the request unit 2307. The request unit 2307 transmits, for example, an account name and a password to the authentication unit 2305, and requests user authentication.

  When the user authentication by the authentication unit 2305 is successful, the application program 405 uses the service by the service unit 2303. In this case, as in the case of FIG. 4, the password input module 403 may be a common module.

  Further, in a mode in which external user authentication is required, as shown in FIG. 24, a password may be accepted by the password input module 403 dedicated to the application program 405. The operations of the personal identification number input module 403, the request unit 2307 and the authentication unit 2305 are the same as in the case of FIG.

  Finally, a hardware configuration example of the mobile terminal device 401 will be described. FIG. 25 shows an example of the hardware configuration of the portable terminal device 401. The portable terminal device 401 includes, for example, a CPU (Central Processing Unit) 2501, a memory circuit 2503, a wireless communication antenna 2511, a wireless communication control circuit 2513, an LCD (Liquid Crystal Display) control circuit 2523, an LCD 2525, a touch pad 2527, and a key group 2529. , GPS (Global Positioning System) device 2531 and timer circuit 2533.

  The CPU 2501 executes a program stored in the storage circuit 2503. The memory circuit 2503 includes, for example, a ROM (Read Only Memory) 2505, a RAM (Random Access Memory) 2507, and a flash memory 2509. The ROM 2505 stores, for example, basic programs and initial data. The RAM 2507 includes an area for developing a program. The RAM 2507 also includes an area for storing temporary data. The flash memory 2509 stores, for example, programs such as applications and user data.

  The LCD control circuit 2523 operates the clock circuit at a predetermined operating frequency to drive the LCD 2525. The LCD 2525 displays various screens. The touch pad 2527 is, for example, a panel-like sensor disposed on the display surface of the LCD 2525, and receives an instruction by touch operation. Specifically, it is used as a touch panel in which the LCD 2525 and the touch pad 2527 are integrated. Each hard key of the key group 2529 is provided in a part of the housing.

  The wireless communication antenna 2511 receives wireless radio waves according to, for example, a cellular system, a wireless LAN (Local Area Network) system, or a short distance communication system. The wireless communication control circuit 2513 controls wireless communication in accordance with the used frequency in each method. The timer circuit 2533 measures time.

  The portable terminal device 401 is an aspect of a computer.

  Although the embodiment of the present invention has been described above, the present invention is not limited to this. For example, the functional block configuration described above may not match the program module configuration.

  Further, the configuration of each storage area described above is an example, and the configuration is not necessarily as described above. Furthermore, in the processing flow, as long as the processing result does not change, the order of the processing may be changed or a plurality of processing may be executed in parallel.

  It will be as follows if the embodiment described above is put together.

  The information processing apparatus according to one aspect, in the first aspect for displaying candidate numbers used for password input (A), a display processing unit that switches to a second aspect for not displaying candidate numbers when receiving a predetermined instruction from the user And (B) in the second aspect, a reception unit for receiving a first user operation for selecting a plurality of first positions displaying candidate numerals, and (C) displaying at a first position selected by the first user operation. And a specifying unit for specifying a sequence of candidate numbers that have been stored as a code number.

  In this way, it becomes difficult for others to detect the entered PIN.

  Furthermore, in the first aspect, a changing unit may be provided to change the arrangement of candidate numbers in response to a second user operation.

  In this way, it is possible to rearrange the candidate numbers so that the user can easily select the password.

  Furthermore, in the first aspect, the display processing unit may display the candidate numerals in a matrix having rows equal to or more than the number of digits of the personal identification number and columns equal to or more than the number of digits. In the first aspect, the changing unit may change the arrangement of candidate numbers in units of rows or columns according to a second user operation. Further, the first user operation may be an operation of selecting a plurality of first positions in succession.

  In this way, the first user operation and the second user operation become easy.

  Furthermore, in the first aspect, the receiving unit may repeatedly receive the third user operation of selecting the second position displaying the candidate number. The identification unit may identify a string of candidate numbers displayed at the second position selected by the third user operation as a password.

  In this way, it is possible to save the trouble of switching to the method of directly selecting the PIN.

  Furthermore, the second user operation may be an operation on a button corresponding to a row or a column.

  In this way, it becomes difficult for others to guess the number to be entered.

  It is possible to create a program for causing a computer to perform the processing of the information processing apparatus described above, and the program is, for example, a computer read such as a flexible disk, a CD-ROM, a magneto-optical disk, a semiconductor memory, a hard disk, etc. It may be stored on a possible storage medium or storage device. The intermediate processing results are generally temporarily stored in a storage device such as a main memory.

  Further, the following appendices will be disclosed regarding the embodiment including the above-described example.

(Supplementary Note 1)
In the first mode for displaying candidate numbers used for password input, a display processing unit for switching to a second mode in which the candidate numbers are not displayed when a predetermined instruction from a user is received;
In the second aspect, a reception unit that receives a first user operation for selecting a plurality of first positions displaying the candidate numbers;
An identification unit that identifies, as a password, the string of candidate numbers displayed at the first position selected by the first user operation.

(Supplementary Note 2)
The information processing apparatus according to claim 1, further comprising: a changing unit configured to change an arrangement of the candidate numbers according to a second user operation in the first aspect.

(Supplementary Note 3)
In the first aspect, the display processing unit displays the candidate numerals in a matrix having rows equal to or more than the number of digits of the password and columns equal to or more than the number of digits.
In the first aspect, the changing unit changes the arrangement of the candidate numbers in units of the row or the column according to the second user operation.
The information processing apparatus according to claim 1 or 2, wherein the first user operation is an operation of selecting a plurality of the first positions in succession.

(Supplementary Note 4)
The receiving unit repeatedly receives, in the first mode, a third user operation for selecting a second position displaying the candidate number,
The information processing apparatus according to any one of appendices 1 to 3, wherein the identification unit identifies, as the password, the string of candidate numbers displayed at the second position selected by the third user operation.

(Supplementary Note 5)
The information processing apparatus according to claim 3, wherein the second user operation is an operation on a button corresponding to the row or the column.

(Supplementary Note 6)
In the first mode for displaying candidate numbers used for password input, switching to a second mode in which the candidate numbers are not displayed when a predetermined instruction from the user is received,
In the second aspect, the first user operation for selecting a plurality of first positions displaying the candidate numbers is accepted.
A code number input method executed by a processor or a computer, including a process of specifying the string of candidate numbers displayed at the first position selected by the first user operation as a code number.

(Appendix 7)
In the first mode for displaying candidate numbers used for password input, switching to a second mode in which the candidate numbers are not displayed when a predetermined instruction from the user is received,
In the second aspect, the first user operation for selecting a plurality of first positions displaying the candidate numbers is accepted.
A personal identification number input program that causes a processor or a computer to execute a process of specifying the string of candidate numbers displayed at the first position selected by the first user operation as a personal identification number.

DESCRIPTION OF SYMBOLS 101 PIN code input window 103 Message area 401 Portable terminal device 403 PIN code input module 405 Application program 411 Initialization part 413 Display processing part 415 Reception part 417 Change part 419 Identification part 421 Control part 423 Interface part 431 Candidate numeral storage part 433 Window Data storage unit 435 Numeric string buffer 441 Authentication unit 2301 Server device 2303 Service unit 2305 Authentication unit 2307 Request unit

Claims (5)

In the first mode, in which candidate numbers used for entering the password are displayed in a matrix having rows and columns exceeding the number of digits of the password, the row or the column is displayed in response to a second user operation. A change unit that changes the arrangement of the candidate numbers in units;
In the first aspect, a display processing unit that switches to the second aspect not displaying the candidate number when receiving a predetermined instruction from the user;
In the second aspect, a reception unit that receives a first user operation for continuously selecting a plurality of first positions displaying the candidate number;
An identification unit that identifies, as a password, the string of candidate numbers displayed at the plurality of first positions selected by the first user operation. The receiving unit repeatedly receives, in the first mode, a third user operation for selecting a second position displaying the candidate number,
The specifying unit, the third claim 1 Symbol placement of the information processing apparatus to identify the sequence of the candidate number displayed in the selected second position as said security code by a user operation. The second user operation is an operation on a button corresponding to the row or the column
An information processing apparatus according to claim 1 . In the first mode, in which candidate numbers used for entering the password are displayed in a matrix having rows and columns exceeding the number of digits of the password, the row or the column is displayed in response to a second user operation. Change the arrangement of the candidate numbers in units,
In the first aspect, switching to the second aspect in which the candidate number is not displayed when receiving a predetermined instruction from the user,
In the second aspect, a first user operation of successively selecting a plurality of first positions displaying the candidate numbers is received;
A personal identification number input method executed by a processor or a computer, including a process of specifying the string of candidate numbers displayed at the plurality of first positions selected by the first user operation as a personal identification number. In the first mode, in which candidate numbers used for entering the password are displayed in a matrix having rows and columns exceeding the number of digits of the password, the row or the column is displayed in response to a second user operation. Change the arrangement of the candidate numbers in units,
In the first aspect, switching to the second aspect in which the candidate number is not displayed when receiving a predetermined instruction from the user,
In the second aspect, a first user operation of successively selecting a plurality of first positions displaying the candidate numbers is received;
A personal identification number input program that causes a processor or a computer to execute a process of specifying, as a personal identification number, the string of candidate numbers displayed at the plurality of first positions selected by the first user operation.

Images