JP6672073B2 - Authentication device, authentication method, and program - Google Patents

Description

  The present invention relates to an authentication technology, and more particularly, to an authentication technology using behavioral characteristics of a living body.

  An authentication method using behavioral characteristics of a living body (hereinafter, “conventional method”) has been proposed (for example, Non-Patent Document 1). In the conventional method, it is determined whether the authenticated user is a pre-registered user by using the behavior characteristic amount based on the behavior of the user to be authenticated and the behavior characteristic amount based on the behavior of the user registered in advance. I do.

Aditi Roy, Tzipora Halevi, Nasir Memon, “An HMM-based multi-sensor approach for continuous mobile authentication,” Military Communications Conference, MILCOM 2015-2015 IEEE, 26-28 Oct. 2015, pp. 1311-1316.

  The conventional method has a problem that authentication accuracy is low. That is, even if the action is performed by the user registered in advance, the variation of the action feature amount based on the action is large. Therefore, if the strictness of the determination is increased in the conventional method, the personal exclusion rate is increased. In addition, in the conventional method, the personal exclusion rate and the other party acceptance rate have a trade-off relationship. Therefore, if the degree of strictness of the determination is reduced, the personal exclusion rate decreases but the other party acceptance rate increases.

  An object of the present invention is to improve the authentication accuracy of an authentication method using behavioral characteristics of a living body.

  When the first action feature based on the first action performed by the user corresponds to the first registered feature, the second action corresponding to the second registered feature associated with the first registered feature. Present information that represents the model. In addition, it is determined whether or not the second behavior feature based on the second behavior performed by the user corresponds to the second registered feature.

  Thereby, the authentication accuracy of the authentication method using the behavioral characteristics of the living body can be improved.

FIG. 1 is a block diagram illustrating a functional configuration of the authentication device 1 according to the embodiment. 2A and 2B are conceptual diagrams for illustrating a display screen of the authentication device 1 according to the embodiment. FIG. 3 is a conceptual diagram for illustrating the behavior feature amount based on the behavior in the embodiment. FIG. 4 is a conceptual diagram for illustrating the behavior feature amount based on the behavior of the embodiment. 5A and 5B are conceptual diagrams for illustrating a display screen of the authentication device 1 according to the embodiment. FIG. 6 is a flowchart for explaining the registration processing of the embodiment. FIG. 7 is a flowchart for explaining the authentication processing of the embodiment. FIG. 8 is a flowchart for explaining the authentication processing of the embodiment.

Hereinafter, embodiments of the present invention will be described.
[Overview]
First, an outline of the embodiment will be described. In the present embodiment, when the “first action feature value” based on the “first action” performed by the “authenticatee” corresponds to the “first registered feature value”, the “first registered feature value” corresponds to the “first registered feature value”. Information representing an example of the “second action” corresponding to the attached “second registered feature amount” is presented. On the other hand, if the “first action feature value” based on the “first action” performed by the “authenticatee” does not correspond to the “first registered feature value”, the information representing the model of the “second action” is Not presented. Further, it is determined whether the “second action feature value” based on the “second action” performed by the “authenticatee” corresponds to the “second registered feature value”. When it is determined that the “second behavior feature” corresponds to the “second registered feature”, the authentication of the “authenticatee” is successful, and otherwise, the authentication of the “authenticatee” fails. .

  If the "first behavior feature value" based on the "first action" performed by the "certified person" corresponds to the "first registered feature value", there is a high possibility that the "certified person" is legitimate. In such a case, information representing an example of the “second action” is presented. Since the “certified person” can perform the “second action” by imitating this information, the variation of the “second action feature amount” in this case indicates information representing a model of the “second action”. Smaller than not. Therefore, even if the other party allowable rate is lowered by increasing the degree of strictness of determining whether the “second behavior feature quantity” corresponds to the “second registered feature quantity”, the individual exclusion rate does not decrease so much. On the other hand, when the “first action feature value” based on the “first action” performed by the “authenticatee” does not correspond to the “first registered feature value”, it is highly likely that the “authenticatee” is not valid. In such a case, information indicating the model of the “second action” is not presented. In this case, the variation of the “second behavior feature amount” is larger than that in the case where information representing the model of the “second behavior” is presented. Therefore, the other party acceptance ratio can be reduced. As described above, the authentication accuracy of the authentication method using the behavioral characteristics of the living body can be improved.

  The “second action” is preferably an action performed in a state where the “first action” has been performed. Thus, the authentication can be performed based on the behavioral characteristics of the "first behavior" and the "second behavior" by the "subject" organically combined, and the authentication accuracy can be further improved. . A plurality of “first registered feature values” and “second registered feature values” may be associated with the same “registered user”. That is, for each of the plurality of “first actions” performed by the same “registered user”, the “first registered feature amount” based on the “first action” and the “first action” are performed. A “second registered feature amount” based on the “second action” performed in the state may be associated with the state. Accordingly, authentication can be performed based on the behavioral characteristics of the “second behavior” according to various “first behaviors” of the “authenticatee”, and the convenience of the “authenticatee” can be improved.

  An example of “first action” is an action involving grasping of an electronic device including a touch panel, an example of “second action” is an input operation on a touch panel, and an example of information representing a model of “second action” is , Information indicating an input operation to the touch panel. Examples of the electronic device including the touch panel include a smartphone terminal device, a tablet terminal device, a notebook personal computer device, and an electronic book terminal device. Examples of the “action involving grasping of the electronic device” include a behavior of maintaining the state in which the electronic device is grasped, a behavior of grasping and lifting the electronic device, and a behavior of moving the electronic device while grasping it. Examples of “input operation on touch panel” include “swipe”, “tap”, “double tap”, “long press”, “drag”, “flick”, “pinch in”, “pinch out” on the touch panel, or a combination thereof. Examples of “information representing input operation to touch panel” include image information indicating a start position, an end position, a locus, or a part of “swipe”, “flick”, “pinch-in”, “pinch-out”, “tap” The information includes the position of “double tap” and “long press”, and image information indicating the time of “long press”. However, these are only examples and do not limit the present invention. For example, the “first action” is an action involving gripping a member such as a steering wheel of a car or a golf club, the “second action” is an operation or use of the member, and information representing an example of the “second action”. May be information indicating how to move the member. In addition, the “first action” is an action involving attachment of a member such as clothing, the “second action” is a movement of a living body wearing the member, and information indicating a model of the “second action” is the member. It may be information indicating how to move the living body wearing the. The presentation of the information representing the model of the “second action” may be the display of an image or a video, the emission of a laser beam or other visible light, or the output of a sound, It may be presentation of force or acceleration.

  The “first action feature value” is a feature value based on the “first action” performed by the “authenticatee” during the authentication process, and the “second action feature value” is “ This is a feature amount based on the “second action” performed by the “authenticatee”. The “first registered feature value” is a feature value based on the “first action” performed by the “registered user” during the registration process, and the “second registered feature value” is “ This is a feature amount based on the “second action” performed by the “registered user”. Note that the authentication process is a process performed before the registration process. The feature amount based on the “first action” means a feature amount according to a change in the physical quantity associated with the “first action”. For example, when the “first action” is “an action involving grasping of an electronic device”, an example of the feature amount based on the “first action” is a feature amount corresponding to the inclination of the electronic device with respect to a reference coordinate. The feature amount corresponds to a change in the coordinates of the device, and the feature amount corresponds to a change in the speed or acceleration of the electronic device. The feature quantity based on the “second action” means a feature quantity according to a change in the physical quantity associated with the “second action”. For example, when the “second action” is an input operation on the touch panel, examples of the feature amount based on the “second action” include a start position, an end position, a trajectory of the “swipe”, and a feature based on the position of the “tap”. The amount is a feature amount based on the speed and acceleration of “swipe”, the feature amount based on the range and strength of “tap”, and the like. The “variation” is a statistical variation, and the “variation scale” is a measure of a statistical variation such as a variance or a standard deviation.

Preferably, when the index indicating the degree of the difference between the “first registered feature value” and the “first registered feature value” is equal to or smaller than the “first allowable value”, the “first registered feature value” is set to the “first registered feature value”. , And when the index indicating the degree of difference between the “second registered feature value” and the “second behavior feature value” is equal to or smaller than the “second allowable value”, the “second behavior feature value” is set to “second”. It is determined that it corresponds to “2 registered feature amounts”. The “index indicating the degree of the difference between β and α” is a scale indicating how much β differs from α. Examples of the “index indicating the degree of the difference between β and α” include the distance between α and β (for example, the difference, the Euclidean distance, the Manhattan distance, etc.) and the magnitude of α (for example, the absolute value, norm, etc.). The ratio E of the distance between β and β, the vector _E = (α ₁ ,..., Α _N ) and β = (β ₁ ,..., Β _N ), the number E (α) of elements β _n satisfying α _n ≠ β _n Here, N is an integer of 2 or more, n∈ ｛1,..., N｝), and the ratio (ratio) of the number E of elements β _n satisfying α _n ≠ β _n to the number N of elements of vectors α and β. It is. At least one of the “first allowable value” and the “second allowable value” may be zero. When the “first allowable value” is zero, the “first behavior feature” corresponds to the “first registered feature” only when the “first behavior feature” matches the “first registered feature”. Is determined. When the “second allowable value” is zero, the “second behavior feature” corresponds to the “second registered feature” only when the “second behavior feature” matches the “second registered feature”. Is determined. The “first allowable value” may be larger than the “second allowable value”, the “first allowable value” may be equal to the “second allowable value”, or the “first allowable value” may be “second”. It may be smaller than “2 allowable value”. Thus, there is no limitation on the “first allowable value” and the “second allowable value”. However, in order to improve the authentication accuracy, it is desirable that the “first allowable value” is larger than the “second allowable value”. The reason will be described below.

  The larger the "first allowable value", the more the "first action feature value" based on the "first action" performed by the "authenticatee" other than the "registered user" corresponds to the "first registered feature value". Then, the other party acceptance ratio (hereinafter, “first other party acceptance ratio”) determined to be higher. In addition, as the “first allowable value” is larger, the “first behavior feature value” based on the “first behavior” performed by the “registered user” who is the “registered user” becomes the “first registered feature value”. The personal exclusion rate determined to be incompatible (hereinafter, “first personal exclusion rate”) is low. Similarly, as the “second allowable value” is larger, the “second action feature value” based on the “second action” performed by the “authenticatee” other than the “registered user” is the “second registered feature value”. ”, The other party acceptance rate (hereinafter,“ second other party acceptance rate ”) is determined to be higher. In addition, as the “second allowable value” is larger, the “second behavior feature value” based on the “second behavior” performed by the “registered user” who is the “registered user” becomes the “second registered feature value”. The personal exclusion rate determined to be incompatible (hereinafter, “second personal exclusion rate”) decreases.

  As described above, the larger the “first allowable value” is, the higher the “first other person allowable rate” is, and not only the “registered user” who is the “registered user” but also the “authenticated” other than the “registered user” The frequency at which information indicating the model of the “second action” is also presented to the “person”. However, by presenting the information indicating the model of the “second action”, the variation of the “second action feature amount” based on the “second action” performed by the “registered user” as the “registered user” is small. Become. Therefore, even if the "second allowable value" is reduced, the "second personal exclusion rate" and the "second others allowable rate" do not increase so much, and high authentication accuracy can be realized. That is, the effect of increasing the “first allowable value” on the final decrease in authentication accuracy is small. Also, the smaller the "first allowable value", the higher the "first individual exclusion rate". Therefore, it is not preferable to set the "first allowable value" too small. On the other hand, even if the information representing the model of the “second action” can be reduced by reducing the variation in the “second action feature quantity”, the larger the “second allowable value”, the higher the “second third party allowable rate”. ”Increases, and authentication accuracy decreases. Further, since the variation of the “second behavior feature quantity” can be reduced, the “second personal exclusion rate” does not decrease so much even if the “second allowable value” is reduced, and high authentication accuracy can be realized. Therefore, it is desirable that the “second allowable value” is smaller. As described above, it is desirable that the “first allowable value” is somewhat large and the “second allowable value” is small. Preferably, the “first allowable value” is larger than the “second allowable value”. For example, the “index indicating the degree of the difference between the first behavior feature amount with respect to the first registered feature amount” and the “index indicating the degree of the difference between the second behavior feature amount with respect to the second registration feature amount” are the same type, It is desirable that the “first allowable value” is larger than the “second allowable value”.

  Also preferably, the variation of the “first behavior feature quantity” based on the “first behavior” performed by the same living body is performed by the same living body without presenting information indicating an example of the “second behavior”. It is smaller than the variation of the “second behavior feature quantity” based on the “second behavior”. If the variation of the "first behavior feature amount" is small, both the "first others allowable rate" and the "first individual exclusion rate" can be reduced, and the authentication accuracy can be improved. For this reason, it is preferable that the variation of the “first behavior feature quantity” is small. For example, it is desirable that the variation of the “first behavior feature value” be small even if information indicating the model of the “first behavior” is not presented. On the other hand, if the variation of the “second behavior feature amount” based on the “second behavior” performed by the same living body is small without presenting information indicating the model of the “second behavior”, the “second behavior” The difference in the variation of the “second behavior feature value” depending on the presence or absence of the information indicating the model is reduced. When the variation of the “second behavior feature quantity” changes largely depending on whether or not information representing the model of the “second behavior” is presented, the “second other person acceptance rate” and the “second individual exclusion rate” can be reduced. Therefore, it is preferable that the variation of the “second behavior feature amount” based on the “second behavior” performed by the same living body is large without presenting information indicating the model of the “second behavior”. For example, the variation of the “first behavior feature value” based on the “first behavior” performed by the same living body is the same as the “first behavior feature amount” performed by the same living body without presenting information indicating the model of the “second behavior”. It is desirable that the variation is smaller than the variation of the “second behavior feature quantity” based on the “second behavior”. Further, it is preferable that the variation of the “second behavior feature value” based on the “second behavior” performed by the living body presented with the information representing the model of the “second behavior” is as small as possible. At least the variation of the “second behavior feature quantity” based on the “second behavior” performed by the living body presented with the information representing the example of the “second behavior” is based on the information representing the model of the “second behavior”. It is smaller than the variation of the “second behavior feature quantity” based on the “second behavior” performed by the living body that is not presented. For example, the variation of the “second behavior feature value” based on the “second behavior” performed by the same living body presented with the information representing the model of the “second behavior” is the “first behavior” performed by the same living body. It is smaller than the variation of the “first behavior feature quantity” based on the “action”.

  If it is not determined that the “second behavior feature value” corresponds to the “second registered feature value”, “password authentication” is performed, and if it is successful, the authentication of the “authenticatee” is determined to be successful. Is also good. Further, when the “password authentication” is successful, the feature amount based on the “first action” performed by the “authenticatee” is set as the “first registered feature amount” with the “authenticatee” as the “registered user”. And a registration process may be performed in which the feature amount based on the “second action” performed by the “authenticatee” is “second registered feature amount”.

  Note that the “person exclusion rate” means the probability that authentication fails when the “registered user” who is the “registered user” performs the authentication process. The “other party acceptance rate” means the probability of successful authentication when a “subject” other than the “registered user” performs the authentication process.

[First Embodiment]
Next, an embodiment will be described with reference to the drawings. In the present embodiment, the “first action” is an action involving grasping of an electronic device including a touch panel, the “second action” is an input operation on the touch panel, and information representing a model of the “second action” is transmitted to the touch panel. An example will be described in which the information represents the input operation of the user. However, this does not limit the present invention.

<Structure>
As illustrated in FIG. 1, the authentication device 1 of the present embodiment includes a man-machine unit 101, a sensor unit 102, a feature amount extraction unit 103, a registration unit 104, a storage unit 105, a calculation unit 106, authentication units 107 and 108, communication It has a unit 109 and a control unit 110, and performs registration and authentication of the user 11 and transmission of the authentication result to the server device 12 (such as a Web server device performing a Web service). The authentication device 1 includes, for example, a processor (hardware processor) such as a CPU (central processing unit) and a memory such as a random-access memory (RAM) and a read-only memory (ROM), an input device such as a touch panel, and a mobile phone. This is a device configured by a general-purpose or dedicated computer having a communication device capable of communicating with a communication line, a wireless LAN, or the like, executing a predetermined program. This computer may include one processor or memory, or may include a plurality of processors or memories. This program may be installed in a computer, or may be recorded in a ROM or the like in advance. Some or all of the processing units are configured using an electronic circuit that realizes a processing function without using a program, instead of an electronic circuit (circuitry) that realizes a functional configuration by reading a program like a CPU. You may. Further, an electronic circuit constituting one device may include a plurality of CPUs. The authentication device 1 of the present embodiment is an electronic device including a touch panel, and an example thereof is a smartphone terminal device.

≪Man machine part 101≫
The man-machine section 101 is a man-machine interface that receives an input from the user 11 and displays (presents) information to the user 11. The man-machine unit 101 of the present embodiment includes a touch panel having a touch sensor, and sends input information to the touch panel to the sensor unit 102, the authentication unit 108, or the registration unit 104. Details of the processing will be described later (the same applies hereinafter).

<< Sensor section 102 >>
The sensor unit 102 measures the inclination of the authentication device 1 during or immediately after the user 11 performs the input to the man-machine unit 101, and information indicating the obtained inclination, and the man-machine unit The input information to the touch panel sent from 101 is sent to the feature amount extraction unit 103.

<< Feature extraction unit 103 >>
The feature amount extraction unit 103 converts the information sent from the sensor unit 102 into a feature amount, and sends the obtained feature amount to the registration unit 104, the calculation unit 106, or the authentication unit 107.

{Registration unit 104}
The registration unit 104 causes the man-machine unit 101 to present a screen for the registration process, and performs the registration process based on the information sent from the man-machine unit 101 and the feature amount extraction unit 103.

{Storage unit 105}
The storage unit 105 stores at least a database (DB) described later, and returns a search result in response to a search request from the calculation unit 106.

{Operation part 106}
The calculation unit 106 searches the DB of the storage unit 105 based on the feature amount sent from the feature amount extraction unit 103, and performs a determination according to the search result and outputs information according to the determination result. The information output from the arithmetic unit 106 is sent to the man-machine unit 101 or the authentication unit 107.

{Authentication unit 107}
The authentication unit 107 performs an authentication process using the feature amount sent from the feature amount extraction unit 103 and the information sent from the calculation unit 106. The authentication result is sent to the communication unit 109.

≪Authentication unit 108≫
The authentication unit 108 performs password authentication. The authentication result is sent to the communication unit 109.

≪Communication unit 109≫
The communication unit 109 transmits the authentication result to the server device 12.

{Control unit 110}
The control unit 110 controls the above-described units.

<Registration process>
A registration process for registering the user 11 as a “registered user” will be described with reference to FIG. Note that the registration process is performed while the user 11 is holding the authentication device 1. When starting the registration process, the control unit 110 sends an instruction to that effect to the registration unit 104. Upon receiving the instruction, the registration unit 104 sends the image information of the initial screen of the registration process to the man-machine unit 101. The man-machine unit 101 presents an initial screen based on this (step S101). A registration button is displayed on the initial screen of the registration process. When the user 11 taps the registration button, the detection information is sent to the registration unit 104. The registration unit 104 determines whether the registration button has been tapped, and if not, continues to present the initial screen (step S102).

  When the registration button is tapped, the registration unit 104 sends the image information of the ID / password input screen 1011 for inputting the ID (identifier) and the password to the man-machine unit 101. The man-machine unit 101 presents an ID / password input screen 1011 (FIG. 2A) based on this. As illustrated in FIG. 2A, the ID / password input screen 1011 includes a message part 1011a for displaying "Please enter an ID and a password", an ID input field 1011b, a password input field 1011c, and a confirmation button 1011d. (Step S103). When the user 11 inputs an arbitrary ID (for example, an arbitrary alphanumeric character) in the ID input column 1011b, inputs an arbitrary password (for example, an arbitrary alphanumeric character) in the password input column 1011c, and taps the confirmation button 1011d. , And the detection information is sent to the registration unit 104. The registration unit 104 determines whether the input of the ID and the password and the tap of the confirmation button 1011d have been performed, and if these have not been performed, the presentation of the ID / password input screen 1011 is continued (step S104).

  When the input of the ID and the password and the tap of the confirmation button 1011d are performed, the registration unit 104 stores the input ID and the password in the DB of the storage unit 105 (Step S105). Using this as a trigger, the registration unit 104 sends image information of the swipe input screen 1012 (FIG. 2B) for swipe input to the man-machine unit 101. The man-machine section 101 presents a swipe input screen 1012 based on the screen. As illustrated in FIG. 2B, the swipe input screen 1012 includes a message section 1011a for displaying "Please swipe input" and a swipe input field 1012b (step S106). When the user 11 swipes the swipe input field 1012b in an arbitrary direction, the detection information is sent to the registration unit 104. The registration unit 104 determines whether the swipe input field 1012b has been swiped, and if the swipe has not been performed, continues to present the swipe input screen 1012 (step S107).

  When the swipe input field 1012b is swiped, information for specifying the input content of the swipe (second action) is sent to the sensor unit 102. Examples of the information for specifying the input content of the swipe are the start position, the end position, and the coordinates of the trajectory of the swipe. FIG. 3 illustrates a swipe start position 1010a, an end position 1010c, and a locus 1010b from the start position 1010a to the end position 1010c. FIG. 3 shows the xy coordinates of the swipe input field 1012b. FIG. 3 shows a swipe in which the finger of the user 11 first contacts the start position 1010a of the swipe input field 1012b and slides the finger as it is to draw a trajectory 1010b, and the finger is separated from the swipe input field 1012b at the end position 1010c. This is an example of what was done. In this case, the x-coordinate and y-coordinate of the start position 1010a (start-point coordinate), the x-coordinate and y-coordinate of the end position 1010c (end-point coordinate), the x-coordinate and y-coordinate of the locus 1010b (trajectory coordinates), etc. May be used as "information for specifying". The trajectory coordinates may be the coordinates of all the trajectories 1010b, or some of the coordinates (for example, the coordinates at which the speed is maximum, the coordinates at which the acceleration is maximum, and the like). In addition, the time (swipe time) elapsed from when the finger of the user 11 touches the start position 1010a until the finger is released at the end position 1010c, the time at each coordinate of the locus 1010b (swipe time), and the finger at the locus 1010b Speed (swipe speed), acceleration (swipe acceleration), and the like may be used as “information for specifying swipe input content”. The man-machine unit 101 may sequentially send “information for specifying the input content of the swipe” to the sensor unit 102 immediately after the start of the swipe, or “specify the input content of the swipe” after the swipe is completed. May be sent to the sensor unit 102 collectively.

  The sensor unit 102 uses the above-described swipe input as a trigger, measures the tilt of the authentication device 1 held by the user 11 (the first action is performed), and acquires “tilt information” representing the tilt. . The trigger may be that the swipe has started, that a predetermined time has elapsed since the start of the swipe, or that the swipe has ended. For example, the sensor unit 102 includes an acceleration sensor, a geomagnetic sensor, a gyro sensor, and the like. At least a part of the sensor unit 102 is used to measure the inclination of the authentication device 1 with respect to the reference x-axis, y-axis, and z-axis, and determine “tilt”. Information ". The “tilt information” may be, for example, an angle (an angle θx with respect to the x-axis, an angle θy with respect to the y-axis, an angle θz with respect to the z-axis) representing the tilt of the authentication device 1 with respect to each of the axis, the y-axis, and the z-axis. However, information representing a change in these angles (for example, angular velocity, angular acceleration, or the like) may be used, or both may be used. The sensor unit 102 sends “information for specifying the input content of the swipe” and “tilt information” to the feature amount extraction unit 103 (step S108).

  The feature amount extraction unit 103 extracts a feature amount based on the sent “tilt information” (a feature amount based on “first action” performed by the “registered user”) as a “first registered feature amount”. Output. The “first registered feature amount” is, for example, information representing a change in the angles θx, θy, θz and angles θx, θy, θz representing the inclination of the authentication device 1 with respect to each of the x-axis, y-axis, and z-axis (for example, A vector including at least a part of angular velocity or angular acceleration) as an element, a function value of at least a part of the element, or a vector including the function value in an element. (Step S109). Further, the feature value extraction unit 103 converts the feature value (the feature value based on the “second action” performed by the “registered user”) based on the transmitted “information for specifying the input content of the swipe” into the “ It is extracted and output as “2 registered feature amounts”. The “second registered feature amount” may be, for example, a vector including at least a part of a start point coordinate, an end point coordinate, a locus coordinate, a swipe time, a swipe time, a swipe speed, and a swipe acceleration as an element, or at least one of these. Some function values may be used, or a vector including the function value in an element may be used. The function value is, for example, the time elapsed from the start of the swipe until the swipe speed becomes maximum (maximum speed time), the time elapsed from the start of the swipe until the swipe acceleration becomes maximum (maximum acceleration). Time), coordinates where swipe speed is maximum (maximum speed coordinates), coordinates where swipe acceleration is maximum (maximum acceleration coordinates), distance between start point coordinates and end point coordinates, travel distance from start point coordinates to end point coordinates (track Along the path), the movement width from the start point coordinates to the end point coordinates (movement width in the x-axis direction, movement width in the y-axis direction), the angle formed by a straight line passing through the start point coordinates and the end point coordinates with the x-axis or y-axis, etc. There is (step S110).

The “first registered feature value” and the “second registered feature value” are sent to the registration unit 104. The registration unit 104 stores the transmitted “first registered feature value” and “second registered feature value” in the DB in association with the ID and password stored in the DB of the storage unit 105 in step S105. For example, a DB having the following data table is stored for each set of ID and password.

In addition, the second registration feature value stored in the DB is information (for example, start point coordinates, end point coordinates, and end point coordinates) for specifying the input content of the swipe (second action) performed by the user 11 on the swipe input field 1012b. In the case where the information includes at least a part of the trajectory coordinates, at least a part of this information may be “information representing a model of a swipe (second action)” in the authentication process. Alternatively, separately from the “second registered feature amount”, “information representing a model of swipe” may be stored in the DB in association with the ID and the password. For example, a DB having the following data table may be stored for each set of ID and password.

Alternatively, separately from the “second registered feature amount”, “additional information” which is at least a part of “information for specifying input content of swipe (second action)” is associated with an ID and a password and stored in the DB. At least a part of the “second registered feature amount” and the “additional information” may be stored as “information representing a model of swipe”. For example, a DB having the following data table may be stored for each set of ID and password.

  In addition, a plurality of (first feature amounts, second feature amounts), a plurality of (first feature amounts, second feature amounts, information representing a model of swipe), or a plurality of ( The first feature amount, the second feature amount, and additional information) may be associated (step S111).

  After that, the registration unit 104 sends image information of a registration completion screen indicating that registration has been completed to the man-machine unit 101. The man-machine unit 101 presents a registration completion screen based on this (step S112). This completes the registration process.

<Authentication process>
An authentication process in which the user 11 is set as the “authenticatee” will be described with reference to FIGS. 7 and 8. Note that the authentication process is performed while the user 11 is holding the authentication device 1. When starting the authentication process, the control unit 110 sends an instruction to that effect to the calculation unit 106. The operation unit 106 that has received the instruction sends the image information of the initial screen of the authentication process to the man-machine unit 101. The man-machine unit 101 presents an initial screen based on this (Step S121). An authentication button is displayed on the initial screen of the authentication process. When the user 11 taps the authentication button, the detection information is sent to the calculation unit 106. The calculation unit 106 determines whether the authentication button has been tapped, and if not, continues to present the initial screen (step S122).

  When the authentication button is tapped, the sensor unit 102 measures the inclination of the authentication device 1 in a state of being held by the user 11 (a state in which the “first action” involving holding the electronic device including the touch panel is performed), “Slope information” representing the slope is obtained. The type of the “inclination information” acquired here is the same as the type of the “inclination information” acquired in step S108 of the registration process, for example. However, more types of information than the type of “tilt information” obtained in step S108 may be obtained. The sensor unit 102 sends the “tilt information” to the feature amount extraction unit 103 (Step S123).

  The feature amount extraction unit 103 extracts a feature amount based on the sent “tilt information” (a feature amount based on the “first action” performed by the “authenticatee”) as a “first action feature amount”. Output. The type of the “first behavior feature amount” is the same as the type of the “first registered feature amount” extracted in step S109 of the registration process. For example, if the “first registered feature value” is a vector (θx, θy, θ) having angles θx, θy, and θz representing the inclination of the authentication device 1, the “first action feature value” is determined in step S123. Is a vector (θx, θy, θ) having the angles θx, θy, θz specified by the “tilt information” acquired in step (1) as elements. The feature amount extraction unit 103 sends the “first behavior feature amount” to the calculation unit 106 (Step S124).

  The operation unit 106 searches the DB stored in the storage unit 105 using the transmitted “first behavior feature amount” (step S125), and “the first registered feature amount” corresponding to the “first behavior feature amount”. Is determined (step S126). When the index indicating the degree of difference between the “first registered feature value” and the “first registered feature value” is equal to or less than the “first allowable value”, the calculation unit 106 sets the “first registered feature value” to “first registered feature value”. It is determined that it corresponds to the "feature value", and otherwise, it is determined that the "first behavior feature value" does not correspond to the "first registered feature value". For example, when the “first allowable value” is zero, the calculation unit 106 determines that the “first behavior feature” is “first registered” only when the “first behavior feature” matches the “first registered feature”. It is determined that it corresponds to the “feature amount”. For example, the “index indicating the degree of difference” is the ratio ERR of the distance between the “first registered feature value” and the “first action feature value” to the size of the “first registered feature value”, and the “first allowable feature value” If the “value” is 0.1, the calculation unit 106 determines that the “first behavior feature value” corresponds to the “first registered feature value” when ERR ≦ 0.1, and otherwise determines “the first registered feature value”. It is determined that “1 action feature value” does not correspond to “first registered feature value”.

  If it is determined in step S126 that the “first registered feature value” corresponding to the “first behavior feature value” exists (OK), the calculation unit 106 determines the “first registered feature value” corresponding to the “first behavior feature value”. “Information representing a model of swipe (second action)” corresponding to “second registered feature amount” associated with “registered feature amount” is extracted from the DB (step S127). The calculation unit 106 presents (displays) “information representing a model of swipe”, and sends image information of a swipe input screen 1013 for accepting a swipe input to the man-machine unit 101. The man-machine unit 101 (information presenting unit) presents the swipe input screen 1013 (FIG. 5A) based on this (step S128). A swipe input screen 1013 illustrated in FIG. 5A includes a message portion 1013a for displaying “Please swipe input”, a swipe image 1013b as “information representing a model of swipe” (information representing an input operation on the touch panel). (Guideline)), and a swipe input field 1013c for receiving a swipe input. An example of the swipe image 1013b is an image representing a swipe start point (Start), a swipe end point (End) specified by “information representing a swipe model”, and a swipe trajectory connecting them. However, this is only an example, and only the start point (Start) and the end point (End) specified by “information representing a model of swipe” may be displayed as swipe image 1013b.

  On the other hand, when it is determined in step S126 that the “first registered feature value” corresponding to the “first behavior feature value” does not exist (NG), the arithmetic unit 106 presents “information representing a model of swipe”. Instead, the image information of the swipe input screen 1014 for accepting the swipe input is sent to the man-machine unit 101. The man-machine unit 101 presents the swipe input screen 1014 (FIG. 5B) based on this (Step S128). The swipe input screen 1014 illustrated in FIG. 5B includes a message unit 1013a for displaying "Please swipe input" and a swipe input field 1013c for receiving swipe input. The swipe image 1013b (information indicating an input operation on the touch panel) that is “information indicating a model of swipe” is not displayed.

  Arithmetic unit 106 determines whether or not a swipe input has been made in swipe input field 1013c of swipe input screen 1013 or 1014 (step S129). If swipe input has not been performed, presentation of swipe input screen 1013 or 1014 is continued. . On the other hand, when a swipe input is performed in the swipe input field 1013c of the swipe input screen 1013 or 1014, information for specifying the input content of the swipe (“second action” which is an input operation on the touch panel) is transmitted to the sensor unit 102. Sent. This swipe (second action) is an action performed in a state where the authentication device 1 is held by the user 11 (a state in which the first action is performed). The type of the “information for specifying the input content of the swipe” is, for example, the same as that of the registration process. The sensor unit 102 sends “information for specifying the input content of the swipe” to the feature amount extraction unit 103.

  The feature amount extraction unit 103 converts the feature amount based on the sent “information for specifying the input content of the swipe” (the feature amount based on the “second action” performed by the “authenticatee”) into the “second It is extracted and output as "action feature quantity". The type of the feature value extracted here is the same as the feature value extracted in step S110 of the registration process. For example, if a vector having swipe time, start point coordinates, end point coordinates, maximum acceleration coordinates, maximum acceleration time, and movement width as elements is set as the “second registered feature amount” in step S110, “second action feature amount” Is a vector having these as elements. The “second behavior feature” is sent to the authentication unit 107 (step S130).

  The authentication unit 107 sends the “second behavior feature amount” to the calculation unit 106, and determines whether the “second registered feature amount” corresponding to the “second behavior feature amount” exists in the DB stored in the storage unit 105. To search. However, if the result is OK in step S126, the calculation unit 106 stores the “second registered feature value” associated with the “first registered feature value” determined to correspond to the “first behavior feature value” from the DB. It is extracted, and it is determined whether this corresponds to the “second behavior feature amount”. On the other hand, if the result is NG in step S126, the calculation unit 106 determines whether the “second behavior feature value” corresponds to any of the “second registered feature values” in the DB. Alternatively, if the result is NG in step S126, the calculation unit 106 reads the “second registered feature value” associated with the “first registered feature value” closest to the “first behavior feature value” from the DB. It is extracted and it is determined whether this corresponds to the “second behavior feature amount” (step S131). Thereby, the authentication unit 107 determines whether the “second behavior feature value” corresponds to the “second registered feature value” (Step S132). Note that the authentication unit 107 sets the “second behavior feature value” to “second” when the index indicating the degree of difference between the “second registered feature value” and the “second behavior feature value” is equal to or smaller than the “second allowable value”. It is determined that it corresponds to “2 registered feature values”, and otherwise, it is determined that “second action feature value” does not correspond to “second registered feature value”. For example, when the “second allowable value” is zero, the authentication unit 107 sets the “second behavior feature” to “second registration” only when the “second behavior feature” matches the “second registered feature”. It is determined that it corresponds to the “feature amount”. For example, the “index indicating the degree of difference” is the ratio ERR of the distance between the “second registered feature value” and the “second behavior feature value” to the size of the “second registered feature value”, and the “second allowable feature value”. If the “value” is 0.05, the authentication unit 107 determines that the “second behavior feature value” corresponds to the “second registered feature value” when ERR ≦ 0.05, It is determined that the “2 behavior feature values” do not correspond to the “second registered feature value”. As described above, it is desirable that the “first allowable value” is larger than the “second allowable value”.

  When it is determined in step S132 that the “second behavior feature value” corresponds to the “second registered feature value” (OK), the authentication unit 107 sends information indicating that the authentication is successful to the communication unit 109. The communication unit 109 transmits information indicating that the authentication is successful to the server device 12 (Step S139). Thus, the authentication process is completed, and the user 11 logs in to the server device 12.

  On the other hand, if it is not determined in step S132 that the “second behavior feature” corresponds to the “second registered feature” (NG), the authentication unit 108 performs password authentication. First, the authentication unit 108 sends image information of the ID / password input screen 1011 for inputting an ID and a password to the man-machine unit 101. The man-machine unit 101 presents the ID / password input screen 1011 (FIG. 2A) based on this (step S133). The authentication unit 108 determines whether the input of the ID in the ID input field 1011b, the input of the password in the password input field 1011c, and the tap of the confirmation button 1011d are performed. The presentation of the ID / password input screen 1011 is continued (step S134).

  When the input of the ID and the password and the tap of the confirmation button 1011d are performed, the authentication unit 108 searches the DB stored in the storage unit 105 (step S135), and matches the input set of the ID and the password. It is determined whether a set of ID and password exists (step S136). Here, when the set of ID and password that matches the set of input ID and password does not exist in the DB (when the password authentication fails), the authentication unit 108 ends the processing as authentication failure. In this case, the authentication result is not transmitted to the server device 12 (step S137).

  On the other hand, when the set of ID and password that matches the set of input ID and password exists in the DB (when the password authentication is successful), the authentication unit 108 sends information indicating that the authentication is successful to the communication unit 109. . The communication unit 109 transmits information indicating that the authentication is successful to the server device 12. As a result, the user 11 logs in to the server device 12. (Step S140). In this case, the “first behavior feature amount” extracted in step S124, the “information for specifying the input content of the swipe” input in step S129, and the “second behavior feature amount” extracted in step S130. The “amount” and the ID and password input in step S134 are sent to registration section 104. The registration unit 104 sets the user 11 who is the “authenticatee” to be a “registered user”, sets the “first behavior feature” to “first registered feature”, and sets the “second behavior feature” to “second As “registered feature amount”, “information representing a model of swipe” is obtained from “information for specifying input content of swipe”. Further, the registration unit 104 associates the ID and password input in step S134 with the “first registered feature amount”, the “second registered feature amount”, and the “information representing a model of swipe”, and stores them in the storage unit 105. Is stored in the DB. When the “second registered feature value” includes “information representing a swipe model,” it is not necessary to store “information representing a swipe model” in the DB other than the “second registered feature value” ( Step S141).

<Features of this embodiment>
In the present embodiment, only when it is determined that the “first registered feature value” corresponding to the “first behavior feature value” exists (step S126), “information representing a model of swipe” is presented. This gives effective swipe (second action) control only to the user 11 presumed to be a registered user. Thereby, the variation of the swipe by the user 11 presumed to be the registered user is reduced, and the personal exclusion rate is reduced.

  In the case of the user 11 other than the registered user, since the registered user and the authentication device 1 are held differently, it is determined in step S126 that the “first registered feature amount” corresponding to the “first behavior feature amount” does not exist. It is determined (NG), and “information representing a model of swipe” is not presented. Therefore, the others acceptance rate does not increase. Further, even if the user 11 who is not a registered user is erroneously estimated to be a registered user (OK in step S126) and “information representing a model of swipe” is presented, the musculoskeletal system of the fingers is different. It is difficult to perform the same swipe operation as the person himself / herself. That is, even if another person imitates the behavioral characteristics of the registered user (here, how to hold the authentication device 1) and performs a swipe operation based on “information representing an exemplary swipe,” other pressures and speeds may be used. Since identification is possible based on behavioral characteristics, security does not decrease. Therefore, even in this case, the other party acceptance rate does not decrease.

  As described above, the authentication accuracy can be improved by lowering the personal exclusion rate without increasing the others' allowable rate.

  Further, even when the password is successfully authenticated even if the result is NG in step S132, the “first behavior feature amount”, the “second behavior feature amount” and the like input during the authentication process are newly registered (step S132). S141). As a result, user convenience is improved.

[Other modified examples]
Note that the present invention is not limited to the above embodiment. For example, in the first embodiment, a DB is stored in the storage unit 105 of the authentication device 1. However, the DB may be stored in a device external to the authentication device 1 (for example, a Web server device). Similarly, at least a part of the registration unit 104, the calculation unit 106, and the authentication units 107 and 108 of the authentication device 1 are provided in a device external to the authentication device 1, and the authentication device 1 communicates with the external device and Registration processing or authentication processing may be performed. Further, information (raw data) indicating the inclination of the authentication device 1 measured by the sensor unit 102 may be used as it is as the feature amount (first behavior feature amount, first registered feature amount), or may be sent from the man-machine unit 101. The input information (raw data) to the touch panel may be directly used as the feature amount (second behavior feature amount, second registered feature amount). In this case, the feature amount extraction unit 103 can be omitted.

  The various processes described above may be executed not only in chronological order as described, but also in parallel or individually according to the processing capability of the device that executes the process or as necessary. In addition, it goes without saying that changes can be made as appropriate without departing from the spirit of the present invention.

  When the above configuration is implemented by a computer, the processing contents of the functions that each device should have are described by a program. By executing this program on a computer, the processing functions described above are realized on the computer. A program describing this processing content can be recorded on a computer-readable recording medium. An example of a computer-readable recording medium is a non-transitory recording medium. Examples of such a recording medium are a magnetic recording device, an optical disk, a magneto-optical recording medium, a semiconductor memory, and the like.

  The distribution of this program is carried out, for example, by selling, transferring, lending, or the like, a portable recording medium such as a DVD or a CD-ROM on which the program is recorded. Further, the program may be stored in a storage device of a server computer, and the program may be distributed by transferring the program from the server computer to another computer via a network.

  A computer that executes such a program first stores, for example, a program recorded on a portable recording medium or a program transferred from a server computer in its own storage device. When executing the process, the computer reads a program stored in its own storage device and executes a process according to the read program. As another execution form of the program, the computer may read the program directly from the portable recording medium and execute processing according to the program, and further, each time the program is transferred from the server computer to the computer. The processing may be sequentially performed according to the received program. A configuration in which the above-described processing is executed by a so-called ASP (Application Service Provider) type service which realizes a processing function only by executing the program and acquiring the result without transferring the program from the server computer to the computer is performed. Good.

  In the above embodiment, the processing functions of the apparatus are realized by executing a predetermined program on a computer, but at least a part of these processing functions may be realized by hardware.

1 Authentication device

Claims (9)

A storage unit for storing a plurality of data in which a first registered feature amount based on a first behavior of the registrant and a second registered feature amount based on the second behavior of the registrant are associated;
When it is determined that the first action feature based on the first action performed by the authenticated person corresponds to any of the first registered feature, the first action feature determined to correspond to the first action feature is determined. An information presenting unit that presents information representing an example of a second action corresponding to the second registered feature amount associated with the one registered feature amount;
When it is determined that the first behavior feature value corresponds to any of the first registered feature values, the second behavior feature value based on the second behavior performed by the authenticated person is the first behavior feature value. It is determined whether it corresponds to the second registered feature value associated with the first registered feature value determined to correspond to the feature value, and the first behavior feature value is assigned to any of the first registered feature values. If it is determined that they do not correspond, the second behavior feature based on the second behavior performed by the person to be authenticated corresponds to the first registered feature that is closest to the first behavior feature. An authentication unit for determining whether or not it corresponds to the attached second registration feature amount;
An authentication device having: The authentication device according to claim 1,
The second registered feature quantity includes a plurality of pieces of information for specifying the input content of the second action,
The information representing the model of the second action represents a part of a plurality of pieces of information for specifying the input content of the second action, which is less than a plurality of pieces of information for specifying the input content of the second action. , Authentication device. The authentication device according to claim 1 or 2,
It is determined that the first behavior feature value corresponds to the first registration feature value when an index indicating a degree of a difference between the first behavior feature value and the first registered feature value is equal to or less than a first allowable value;
It is determined that the second behavior feature value corresponds to the second registration feature value when an index indicating a degree of difference between the second behavior feature value and the second registered feature value is equal to or less than a second allowable value.
The authentication device, wherein the first allowable value is larger than the second allowable value. The authentication device according to claim 2 or 3, wherein
The second action is a swipe to motor touch panel, the authentication device. The authentication device according to claim 1 or 4,
The authentication device, wherein the second action is an action performed in a state where the first action is performed. The authentication device according to any one of claims 1 to 5,
A third authentication unit that performs password authentication when it is not determined that the second behavior feature amount corresponds to the second registration feature amount;
When the password authentication is successful, the authenticated person is set as a registered user, a feature amount based on the first action performed by the authenticated person is defined as the first registered feature amount, and the feature is performed by the authenticated person. A registration unit that uses the feature amount based on the second action as the second registered feature amount,
An authentication device further comprising: The authentication device according to any one of claims 1 to 3 , wherein
The first action is an action involving grasping of an electronic device including a touch panel,
The second action is a swipe on the touch panel,
The authentication device, wherein the information indicating the model of the second action is information indicating an input operation on the touch panel. A plurality of data in which a first registered feature based on a first behavior of the registrant and a second registered feature based on a second behavior of the registrant are stored in a storage unit,
When it is determined that the first action feature based on the first action performed by the authenticated person corresponds to any one of the first registered feature, the information presenting unit corresponds to the first action feature. An information presenting step of presenting information representing an example of a second action corresponding to the second registered feature amount associated with the first registered feature amount determined to be;
When it is determined that the first behavior feature value corresponds to any of the first registered feature values, the authentication unit determines that the second behavior feature value based on the second behavior performed by the authenticated person is the It is determined whether it corresponds to the second registered feature, and when it is determined that the first behavior feature does not correspond to any of the first registered feature, the authentication unit performs a process by the authenticated person in the authentication unit. It is determined whether the second behavior feature based on the obtained second behavior corresponds to a second registered feature associated with the first registered feature that is closest to the first behavior feature. An authentication step;
Authentication method having   A program for causing a computer to function as the authentication device according to any one of claims 1 to 7.

Images